Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YcCW876YmXfgH-1GycjtdqOJ_b4.roa
File: YcCW876YmXfgH-1GycjtdqOJ_b4.roa (raw, json)
Hash identifier: zMZqbS+0WyT/z70Ncc5Qe4Nqa59JGSIyXC5jZJ141Os=
Subject key identifier: 61:C0:96:F3:BE:98:99:77:E0:1F:ED:46:C9:C8:ED:76:A3:89:FD:BE
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192DF122B124205524D20ADAC02F20B3694
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YcCW876YmXfgH-1GycjtdqOJ_b4.roa
Signing time: Wed 30 Oct 2024 20:16:02 +0000
ROA not before: Wed 30 Oct 2024 20:16:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214438
IP address blocks: 83.143.115.0/24 maxlen: 24
94.156.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:df:12:2b:12:42:05:52:4d:20:ad:ac:02:f2:0b:36:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Oct 30 20:16:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61c096f3be989977e01fed46c9c8ed76a389fdbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:dd:05:87:46:50:a2:b8:7c:a9:72:83:50:86:
55:c4:36:c3:68:8e:dd:72:a8:df:8b:70:07:c6:53:
ec:48:91:20:22:3b:9b:e9:af:78:a5:e1:5e:75:31:
f6:a5:c0:ca:f0:df:0e:96:00:ca:5b:65:b1:a4:b3:
20:39:a7:1c:00:f3:3a:1c:c4:68:a3:1f:aa:18:cb:
d9:d2:d8:a3:fe:29:f2:2b:ff:6f:3d:3f:36:22:2f:
4a:c4:14:53:c1:59:60:6f:19:84:f7:92:c0:45:98:
5b:8c:51:a7:34:b4:92:27:8d:2e:25:4b:38:cb:a9:
09:0f:af:7a:ca:40:a1:2c:c0:0a:03:2f:71:ba:42:
9e:84:d8:90:a0:49:fa:6b:9d:7d:cc:4a:05:46:87:
c5:c1:e5:ce:99:0d:7c:61:2e:47:02:81:55:e1:a9:
c8:80:7c:09:98:b1:3b:2e:4c:ed:1d:b8:6e:d8:e6:
17:59:a5:7c:79:f1:fd:5c:37:dd:d6:2e:5c:e8:bc:
59:89:60:75:af:3d:c7:61:a1:ce:8f:1b:11:a5:7d:
5d:e4:60:de:d1:05:98:a8:9b:ee:73:fb:c7:fe:06:
94:0a:c6:a2:40:0f:e1:a1:21:7c:80:e0:5a:d4:fa:
de:9d:f4:ac:74:a0:46:04:30:76:f9:5d:46:39:6a:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C0:96:F3:BE:98:99:77:E0:1F:ED:46:C9:C8:ED:76:A3:89:FD:BE
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/YcCW876YmXfgH-1GycjtdqOJ_b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.115.0/24
94.156.8.0/24
Signature Algorithm: sha256WithRSAEncryption
56:fc:bb:7d:70:24:84:91:32:3a:63:87:33:34:95:7c:9f:b7:
98:60:3e:63:33:42:80:e1:c7:cb:40:f2:99:a3:83:a7:14:f7:
2b:a3:07:12:bf:c6:e2:f7:48:5c:09:c0:71:32:0b:7f:a7:d8:
95:7e:0e:79:be:5b:05:17:bc:83:1e:8b:62:02:0a:77:fb:66:
83:44:23:d3:d2:53:5e:75:35:e9:13:76:5f:1b:05:86:cb:4b:
07:90:e1:28:bd:89:6e:dd:3a:37:73:93:6c:06:99:68:4f:cd:
fd:29:92:6d:8b:48:21:6d:a0:ab:fc:ce:fa:c6:45:af:51:1d:
eb:c6:44:f6:bb:80:99:59:f5:d1:5d:83:ab:99:0b:eb:c6:ed:
80:ec:e7:86:e4:84:1b:21:91:99:54:0a:1b:77:54:c8:c4:f8:
53:f6:04:3b:b6:d9:7d:88:da:c8:0c:64:2b:6a:78:40:1a:ba:
c4:88:08:bc:45:da:c7:19:42:28:1a:84:b7:51:b4:75:df:51:
a0:74:cb:30:76:82:c8:10:9d:82:4a:44:59:e3:73:95:a2:5c:
da:0f:da:79:be:f3:c5:91:b7:ba:7a:f7:68:cb:5c:6d:0c:4a:
a5:ed:92:48:6f:4b:7c:9e:c9:d4:88:88:aa:7b:ba:8d:08:64:
c0:98:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:44:06 2024 by rpki-client on console-fra.rpki-client.org