Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/YoZ9T-SJOJgxyPRRhiQ_Y2PxyZE.roa
File: YoZ9T-SJOJgxyPRRhiQ_Y2PxyZE.roa (raw, json)
Hash identifier: 4Z5/tVWdO7ij/bCgQ8McJaui+LnOYDvVUYWjRI7JZZw=
Subject key identifier: 62:86:7D:4F:E4:89:38:98:31:C8:F4:51:86:24:3F:63:63:F1:C9:91
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 018CC72733768EFE7F031570C76376321DCD
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/YoZ9T-SJOJgxyPRRhiQ_Y2PxyZE.roa
Signing time: Mon 01 Jan 2024 22:31:24 +0000
ROA not before: Mon 01 Jan 2024 22:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49026
IP address blocks: 95.131.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:33:76:8e:fe:7f:03:15:70:c7:63:76:32:1d:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62867d4fe489389831c8f45186243f6363f1c991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:40:99:cd:2f:a8:16:26:25:dd:f4:98:c6:
ee:f4:3c:92:33:81:09:60:0b:27:49:ba:76:b0:de:
c5:69:93:dc:7d:63:f4:46:e1:dd:9c:2f:52:fc:64:
4e:4f:13:61:0b:69:e3:41:e8:60:38:f9:d3:c0:77:
e8:13:76:c2:2c:56:1d:a9:32:bc:f8:3f:7f:91:19:
51:d5:4d:67:3e:39:52:4a:f8:8c:2e:57:7f:79:df:
9a:ab:4b:0e:a2:60:21:cf:cc:84:98:57:09:96:cd:
8c:14:02:07:73:d2:c2:17:cd:e5:6b:94:5c:54:a2:
f3:83:a7:f9:14:31:8a:d9:90:85:67:14:b7:d6:f2:
e4:02:d5:3a:b6:14:34:c6:f1:69:a2:65:59:95:0b:
04:7f:9c:3d:ad:3e:f7:41:a5:49:ed:65:39:8d:06:
fc:3c:3f:01:39:77:97:c8:9a:78:bc:05:de:c0:cc:
8e:ef:d1:00:3a:e1:d8:72:5b:7b:d7:65:f3:93:42:
07:68:38:f0:1a:ac:29:6a:c8:5d:2d:51:73:90:8b:
0f:69:74:d7:8f:37:d3:39:d0:1c:eb:fa:5a:d2:6a:
c0:67:3a:1d:01:2c:45:cb:f2:6a:01:f1:12:67:75:
67:ad:93:72:d9:a2:43:f3:96:df:7b:99:b8:60:f1:
03:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:86:7D:4F:E4:89:38:98:31:C8:F4:51:86:24:3F:63:63:F1:C9:91
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/YoZ9T-SJOJgxyPRRhiQ_Y2PxyZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.131.80.0/24
Signature Algorithm: sha256WithRSAEncryption
35:31:28:01:0c:45:c0:41:7d:1e:cf:06:4e:c3:72:df:88:30:
af:3e:41:78:1c:fa:e6:28:72:f4:5f:76:63:4f:d5:3a:5c:68:
91:7d:51:98:6f:a2:50:c7:9e:e2:c3:ff:47:84:37:3d:fa:72:
ba:d0:b6:75:b0:73:24:8a:44:b7:bb:40:4a:25:b7:dd:8c:c1:
e4:2c:4b:89:18:1e:38:65:a7:8b:bd:89:69:73:e5:0e:40:60:
19:64:0c:e6:a7:52:26:99:88:e2:14:48:82:e1:62:88:2d:c2:
16:f7:74:f7:c4:00:ff:9a:86:5e:e9:71:f0:60:de:d2:bf:42:
31:8c:96:f3:66:35:ee:f5:b1:21:11:bf:4f:76:fe:b4:82:35:
34:10:92:71:cf:64:6c:84:60:fe:86:61:8b:d4:57:1a:fc:2a:
1d:61:3b:32:85:8c:bc:47:e9:cf:bd:7c:c6:f2:5f:d5:b3:9f:
3e:91:83:d2:b3:56:fc:28:67:c9:07:24:c7:be:e4:1d:0d:61:
c7:d4:da:37:65:a3:53:2a:fc:2b:f2:4b:2a:ad:76:ca:28:98:
9d:28:c6:6d:83:4b:b8:93:e0:83:0e:bb:2a:ac:fb:dc:c5:ec:
c7:6c:ca:5a:0c:9a:87:23:83:09:df:b1:19:d7:19:12:ba:50:
c8:17:e8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:51:56 2024 by rpki-client on console-fra.rpki-client.org