Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/YVCRytk2AUxqDnHvNVxzxqfYHBg.roa
File: YVCRytk2AUxqDnHvNVxzxqfYHBg.roa (raw, json)
Hash identifier: EEfgAplJwfq5diIaRjZKjJZN5+k/VFbryJADLSPLXlI=
Subject key identifier: 61:50:91:CA:D9:36:01:4C:6A:0E:71:EF:35:5C:73:C6:A7:D8:1C:18
Certificate issuer: /CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Certificate serial: 018EA801AAE197778FD3D5938B7DD84A34BA
Authority key identifier: D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/YVCRytk2AUxqDnHvNVxzxqfYHBg.roa
Signing time: Thu 04 Apr 2024 07:27:45 +0000
ROA not before: Thu 04 Apr 2024 07:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212150
IP address blocks: 176.117.93.0/24 maxlen: 24
176.117.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.mft
rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a8:01:aa:e1:97:77:8f:d3:d5:93:8b:7d:d8:4a:34:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0299cf12b38ff12d95ffc0d13ac12c69fe2c1ca
Validity
Not Before: Apr 4 07:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=615091cad936014c6a0e71ef355c73c6a7d81c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d4:47:bc:38:dc:be:42:76:43:11:ae:c4:28:
fa:eb:ee:89:f8:d6:3c:bf:db:84:0b:3e:d1:2e:0b:
4e:30:b6:80:cc:29:f0:3a:20:31:b2:26:36:3d:ab:
cd:90:bf:2a:fd:b0:ae:bd:fa:45:87:fa:57:cd:22:
3d:62:f3:43:0d:45:f0:3a:9b:9e:51:69:3e:a2:1b:
31:7b:1f:c6:7a:e7:a1:ec:ce:d2:97:ea:6f:7b:fa:
73:05:d0:5b:f9:c3:db:f0:73:69:9c:a2:d9:51:2b:
80:42:a8:8c:67:50:5b:32:7d:5e:99:4d:ff:d1:e7:
6a:9c:99:14:69:4e:a2:11:45:fe:ff:8f:37:23:03:
27:23:72:42:46:10:41:db:51:c0:d3:c2:94:64:fd:
08:87:6a:ff:47:f7:6a:ae:d5:e5:df:88:06:79:4b:
7e:0e:71:de:93:89:7a:ac:00:20:4c:21:2f:61:f6:
40:2b:f7:6b:39:40:b3:a5:2a:95:70:f4:34:eb:4e:
c2:ba:13:8a:1b:d4:f4:69:d9:57:db:6e:bd:91:08:
d0:8e:ba:15:21:10:18:d5:81:05:58:cf:4d:69:df:
41:be:be:74:4d:82:24:83:67:f4:2f:d1:a4:57:e8:
b0:ca:3a:fc:30:b3:8e:64:a0:8a:96:14:6b:8e:6a:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:50:91:CA:D9:36:01:4C:6A:0E:71:EF:35:5C:73:C6:A7:D8:1C:18
X509v3 Authority Key Identifier:
keyid:D0:29:9C:F1:2B:38:FF:12:D9:5F:FC:0D:13:AC:12:C6:9F:E2:C1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/YVCRytk2AUxqDnHvNVxzxqfYHBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d582c4-36e3-4a57-8752-e641e713d1fa/1/0Cmc8Ss4_xLZX_wNE6wSxp_iwco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.117.93.0/24
176.117.95.0/24
Signature Algorithm: sha256WithRSAEncryption
64:3d:b6:34:12:fe:22:37:f8:1c:f4:36:c5:f9:5c:31:a2:d7:
89:87:5d:d0:b8:b0:66:5e:29:7c:9a:19:75:6c:3a:3a:0e:38:
85:cb:44:2e:be:d7:34:b8:fe:d1:31:ee:ae:87:ad:63:b8:92:
5f:8d:14:17:1c:ce:c5:b0:4d:35:88:47:f6:b6:74:c2:38:63:
dc:83:ef:1d:8e:c6:24:7b:a1:73:f5:d2:9a:da:bf:58:0f:3b:
50:78:14:8d:bb:19:dc:1e:19:31:ab:fe:7e:0e:3d:ca:a5:04:
37:04:3b:0a:17:d7:c6:e5:6f:8a:84:a8:63:df:b2:9b:26:c8:
c3:4b:14:47:ac:d1:b6:ac:bf:9e:dc:80:55:cd:d9:9f:d4:58:
a2:79:df:fe:96:3c:8a:fc:a6:35:77:98:88:f4:47:ae:6b:ca:
b8:5d:46:03:aa:35:8a:f3:1d:ba:7c:a1:8d:f0:93:1d:7f:2d:
c9:27:9e:c1:33:9c:36:3d:fc:35:9e:7a:40:fc:3d:f4:d4:ae:
42:32:0e:f1:9d:af:a1:fd:f6:c3:6b:51:88:36:a4:36:c8:80:
4d:fd:f3:74:21:c6:56:a7:ad:44:2a:a5:7d:39:9f:88:81:28:
55:73:d7:c3:30:9c:72:8f:4e:f4:93:5e:0f:dd:d1:06:f6:72:
15:55:90:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 06:52:39 2024 by rpki-client on console-ams.rpki-client.org