Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/y2Audqac0fyzFlaoBxU2CiAKjYs.roa
File: y2Audqac0fyzFlaoBxU2CiAKjYs.roa (raw, json)
Hash identifier: gr3RYMVsf0D1tg6cW1pPLJ6nmr5uRi8oOEXVpmxa6so=
Subject key identifier: CB:60:2E:76:A6:9C:D1:FC:B3:16:56:A8:07:15:36:0A:20:0A:8D:8B
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018CC6B93A902FC9B73D7EA1AD74B397FFFA
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/y2Audqac0fyzFlaoBxU2CiAKjYs.roa
Signing time: Mon 01 Jan 2024 20:31:17 +0000
ROA not before: Mon 01 Jan 2024 20:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202557
IP address blocks: 31.145.140.0/24 maxlen: 24
212.98.242.0/24 maxlen: 24
84.44.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3a:90:2f:c9:b7:3d:7e:a1:ad:74:b3:97:ff:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 1 20:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb602e76a69cd1fcb31656a80715360a200a8d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d3:69:5b:39:63:e6:88:a0:31:1f:bd:a3:eb:
23:33:97:cc:e8:79:6d:99:35:67:6c:48:76:e6:76:
0b:5f:ca:12:e7:46:10:6b:f1:28:3f:11:a1:1c:70:
b8:0d:b2:1a:43:52:5a:10:5d:c0:fd:4b:fc:1f:29:
02:d0:18:37:d0:97:91:b4:52:3a:f5:ae:b0:97:b1:
69:e0:37:e5:11:78:7c:c9:58:cd:af:dd:e4:6d:cf:
08:f4:6e:2b:29:d3:ce:ab:19:82:3b:aa:c5:d2:be:
3e:4e:fc:a2:ec:3a:8a:a2:3a:d4:55:d6:cf:48:24:
69:e8:62:03:21:da:43:5b:50:76:1e:cf:95:06:e4:
38:0b:0e:21:b9:71:d1:0c:ae:44:25:0f:26:b2:97:
ec:25:eb:f0:32:bb:ae:ad:30:4a:c4:5f:ce:d2:90:
f2:22:39:a3:7a:53:0b:39:f0:fe:0e:09:b4:61:ab:
9d:9f:56:93:55:20:f3:cf:da:f4:10:b8:3c:39:cd:
e0:b4:18:2c:2f:c4:a5:73:6d:07:8e:00:db:df:f2:
a8:d8:28:03:a0:d8:bb:8d:cb:92:18:e7:6b:b0:fd:
b6:ca:d3:5c:9f:77:04:f3:c6:b0:01:d2:72:ab:1c:
b3:be:54:85:21:40:cc:d0:51:0d:47:ab:18:36:bf:
bc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:60:2E:76:A6:9C:D1:FC:B3:16:56:A8:07:15:36:0A:20:0A:8D:8B
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/y2Audqac0fyzFlaoBxU2CiAKjYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.145.140.0/24
84.44.70.0/24
212.98.242.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:ff:05:aa:41:17:40:3a:04:3a:58:90:2c:76:e1:bb:eb:81:
a1:d6:1e:41:1f:cb:19:56:8f:ad:36:06:eb:5f:61:37:15:b2:
f5:13:ae:e0:37:dd:b6:71:12:8d:76:ca:83:3e:4e:7c:37:9b:
c3:29:58:0a:6b:bd:86:42:5b:b1:e5:ee:57:25:92:0a:0c:1f:
af:ff:5b:31:11:80:d1:1a:68:9c:69:89:4b:86:da:15:e4:7a:
39:d5:e7:e5:8f:03:f9:78:5b:10:d3:93:e0:1f:3d:59:d3:bd:
e5:90:64:b9:5d:2c:ba:fc:17:a2:af:b3:f3:d0:ee:c9:7e:fe:
a7:2b:02:89:9b:e7:99:6d:26:2f:03:02:9d:32:1f:7e:6f:b9:
97:8a:b8:7e:1c:c1:94:24:d0:50:36:59:70:f0:f5:29:ed:8a:
c5:c5:50:33:c5:1e:c8:9b:88:9c:f0:70:8c:1b:90:cd:ce:7a:
ee:8f:94:0d:ad:04:ea:70:fa:48:a6:01:20:6a:4b:9b:3f:5e:
c6:8f:e6:6b:6f:08:b8:94:f0:e0:6b:17:52:fa:fe:80:dc:08:
43:65:2a:4a:48:a2:73:7b:9c:38:6b:96:97:6f:aa:00:5e:7a:
3c:88:83:d9:4f:d4:d4:14:bf:ea:d7:bf:0b:3b:f3:1f:57:bb:
87:44:fd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:47:04 2024 by rpki-client on console-fra.rpki-client.org