Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YJXawN8-Wkx65gyoZ0MvQfkBs0A.roa
File: YJXawN8-Wkx65gyoZ0MvQfkBs0A.roa (raw, json)
Hash identifier: LIqkJwzTSb9eux3U3zM1AGwWnymIaeiUi1HArWWOyGc=
Subject key identifier: 60:95:DA:C0:DF:3E:5A:4C:7A:E6:0C:A8:67:43:2F:41:F9:01:B3:40
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649F0EA45AF7CDDD1F07BDBE6476863
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YJXawN8-Wkx65gyoZ0MvQfkBs0A.roa
Signing time: Mon 01 Jan 2024 18:29:43 +0000
ROA not before: Mon 01 Jan 2024 18:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209736
IP address blocks: 78.83.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:f0:ea:45:af:7c:dd:d1:f0:7b:db:e6:47:68:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6095dac0df3e5a4c7ae60ca867432f41f901b340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:8a:63:66:86:25:21:0a:48:2b:e5:8c:ff:59:
ef:86:ae:e8:da:5b:64:01:5a:38:fd:55:88:4a:b6:
97:5d:0e:a8:25:61:37:c3:97:74:df:30:a0:8d:8d:
12:5d:d8:20:a3:b3:6c:5d:07:f6:24:5b:8d:5c:8b:
a2:6a:88:e5:52:ff:88:e4:7e:ae:2d:f3:cc:c6:a1:
3a:8d:3d:3d:ad:12:fd:11:b3:aa:3f:bb:47:de:08:
37:90:ab:4f:a0:3f:fe:7b:5d:54:99:82:32:25:03:
15:ec:24:dd:86:6b:65:51:9e:80:b4:c6:ba:16:54:
a9:b6:ea:7e:4e:e4:c1:d6:26:15:63:04:b5:8e:ab:
84:f9:2e:5d:0a:a1:dc:26:e9:92:69:bf:7f:fe:09:
a6:38:f8:e3:a7:46:6f:28:18:f4:92:d9:ee:4e:f0:
21:f2:a4:45:e4:6a:06:e4:d5:6e:c5:c1:10:54:9b:
8c:56:45:c5:b5:63:b0:ac:2c:3f:80:ea:62:5a:85:
6b:f9:cb:59:fc:ce:00:b7:b3:55:dc:a7:a7:af:a1:
b0:f2:a0:69:bf:fa:24:0f:3e:31:32:d2:96:c0:65:
ee:46:dd:5f:bc:ac:bf:20:be:dc:ab:26:1e:4d:eb:
f2:61:0b:11:89:c6:13:7d:de:a1:a1:69:ae:43:8d:
c6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:DA:C0:DF:3E:5A:4C:7A:E6:0C:A8:67:43:2F:41:F9:01:B3:40
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/YJXawN8-Wkx65gyoZ0MvQfkBs0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.83.140.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:6a:9c:0a:d6:77:ec:b3:92:02:db:9a:ee:85:fe:1a:91:f6:
18:1f:26:66:f8:db:ab:33:e0:6e:21:fe:19:04:89:23:48:0c:
38:d2:60:67:db:3d:ec:ae:e4:e6:97:6d:e8:8a:1f:79:83:27:
db:b3:ce:81:fa:48:a5:a5:28:20:35:6d:94:55:d2:4b:5d:bc:
6b:7e:52:44:53:da:4e:24:3e:d8:49:6e:ba:5f:95:34:71:6f:
c6:0e:bf:02:ab:79:93:20:ec:b6:bf:18:08:99:10:23:61:7b:
db:7a:42:80:c7:b9:72:22:89:d0:a0:62:df:2d:67:ad:2a:76:
06:2f:8d:8b:fc:6f:a8:ad:a0:45:2d:71:a8:0a:61:e8:68:73:
f6:58:2b:73:e5:cc:f7:f8:45:8d:80:79:b5:99:a5:84:a1:75:
66:fe:4c:84:8a:4d:15:ee:9f:05:39:40:bd:57:72:7b:9c:82:
c9:9a:7c:31:19:31:58:c1:c1:32:d5:bf:b6:f5:78:85:98:c8:
1d:c7:3e:86:ca:7a:88:15:c2:52:3d:42:38:da:79:46:83:16:
75:7d:45:3b:dd:0b:2c:ad:39:ad:45:9a:e4:b9:65:92:e2:30:
bb:cd:43:43:58:b2:21:26:c0:43:51:e9:4d:05:76:8d:06:72:
45:f5:46:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:16:45 2024 by rpki-client on console-fra.rpki-client.org