Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/YvK_MxxqQVbF0ub_9nCBJ3LAvRM.roa
File: YvK_MxxqQVbF0ub_9nCBJ3LAvRM.roa (raw, json)
Hash identifier: o582rJISCAYd1C0ig4prVwQ1mDebmIoUZ4BKTq+131M=
Subject key identifier: 62:F2:BF:33:1C:6A:41:56:C5:D2:E6:FF:F6:70:81:27:72:C0:BD:13
Certificate issuer: /CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Certificate serial: 018CC6B7ECEB36544DA75CF5DEF0919C6E29
Authority key identifier: 8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/YvK_MxxqQVbF0ub_9nCBJ3LAvRM.roa
Signing time: Mon 01 Jan 2024 20:29:51 +0000
ROA not before: Mon 01 Jan 2024 20:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48172
IP address blocks: 194.33.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:ec:eb:36:54:4d:a7:5c:f5:de:f0:91:9c:6e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e895f1e270c635ec61df9a97fc0f668c0a8f548
Validity
Not Before: Jan 1 20:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62f2bf331c6a4156c5d2e6fff670812772c0bd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:eb:41:0f:50:c4:69:67:d4:0b:af:f2:fb:b8:
8c:6d:a8:27:42:40:ee:e3:05:3b:d2:fa:51:70:e2:
19:fd:8c:13:5c:0e:1e:9d:f1:df:8e:7d:c2:e2:04:
f0:94:e4:6a:a6:7b:75:87:ce:ab:d0:b2:b9:19:f2:
60:6f:68:ed:4a:94:32:7b:b0:59:14:40:10:5a:33:
ca:2a:a4:44:6e:66:15:70:e3:f9:fb:01:ef:0b:5b:
c0:58:50:32:38:82:16:07:bd:10:07:5f:12:5d:03:
d4:f5:19:4e:ad:79:76:02:91:e9:6b:ea:fa:8e:ae:
62:fe:14:aa:5e:8a:97:9b:f6:af:57:b3:f5:12:5f:
a2:29:1e:a2:23:31:20:71:62:97:e2:d2:4c:19:8f:
d0:d9:38:c9:0d:e3:aa:3d:9f:a0:1f:ff:97:27:59:
32:cb:73:19:b5:62:8c:fa:1b:c4:2f:6c:6f:51:1f:
37:01:70:3b:f7:2d:04:2f:4d:b2:ba:18:36:c1:8b:
a1:cc:95:db:c6:28:33:77:93:37:13:3e:b3:e5:0b:
ba:b6:14:9f:69:5d:e0:fe:33:21:7c:4a:a8:cb:17:
29:4b:de:74:35:c2:59:2a:61:02:ab:07:14:67:a3:
e6:78:54:18:a9:3e:e1:f4:9e:f1:57:75:ec:46:32:
a2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F2:BF:33:1C:6A:41:56:C5:D2:E6:FF:F6:70:81:27:72:C0:BD:13
X509v3 Authority Key Identifier:
keyid:8E:89:5F:1E:27:0C:63:5E:C6:1D:F9:A9:7F:C0:F6:68:C0:A8:F5:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jolfHicMY17GHfmpf8D2aMCo9Ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/YvK_MxxqQVbF0ub_9nCBJ3LAvRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/bc53d2-9137-4799-9e41-e69a017485fb/1/jolfHicMY17GHfmpf8D2aMCo9Ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.114.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:6f:38:8f:8f:d4:56:e3:2a:ce:bb:24:85:f5:71:2a:0f:00:
7f:bb:13:2d:82:1b:48:e1:73:a3:91:de:7b:3f:d4:05:9d:17:
b4:0b:78:73:3f:63:4b:1a:73:57:73:ca:d0:7f:5e:d6:ac:9c:
3d:9c:9b:46:b0:99:98:5c:07:0c:21:70:6f:bb:02:ec:21:ad:
63:45:5c:1f:93:75:c0:31:b4:74:cf:eb:e4:1e:38:60:8e:d3:
ed:d7:db:58:bf:1a:5d:a2:58:7a:01:ec:ae:e3:22:07:f8:78:
da:67:33:de:d5:a4:8c:e7:65:4c:6e:e5:4e:29:ba:43:b6:cc:
99:e4:da:56:c7:86:c2:c5:ac:2c:4e:22:16:33:72:8a:d4:a7:
6d:0e:c7:44:c6:84:64:fe:b1:10:a6:73:cc:16:4e:62:88:42:
89:54:c8:63:43:fb:aa:a0:00:5e:6f:64:6e:41:79:90:51:9e:
8d:3e:b5:29:69:9e:5c:ec:89:95:1a:20:6f:30:89:00:a4:9d:
3e:93:43:f8:01:3c:6d:bf:b5:41:b9:ab:71:08:7b:f7:50:51:
cf:a3:01:c9:ec:53:05:35:61:c4:be:ac:e3:07:de:72:70:28:
ba:c6:a3:3a:c7:0b:f1:6a:e6:26:fc:15:24:e8:70:ff:3c:b8:
f0:4d:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:23:03 2024 by rpki-client on console-ams.rpki-client.org