Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/yFR6LxSKV4H9oIeJTKHzQH2W6EE.roa
File: yFR6LxSKV4H9oIeJTKHzQH2W6EE.roa (raw, json)
Hash identifier: dWDpd/t39C3FR12Wo01/sd11uq2c4Vz0Lf6w2v3Y+0k=
Subject key identifier: C8:54:7A:2F:14:8A:57:81:FD:A0:87:89:4C:A1:F3:40:7D:96:E8:41
Certificate issuer: /CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Certificate serial: 018CC5DC7FA72F90B772A3964BA115B1A230
Authority key identifier: 92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/yFR6LxSKV4H9oIeJTKHzQH2W6EE.roa
Signing time: Mon 01 Jan 2024 16:30:11 +0000
ROA not before: Mon 01 Jan 2024 16:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204169
IP address blocks: 213.59.184.0/24 maxlen: 24
2a03:aa00:1001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:7f:a7:2f:90:b7:72:a3:96:4b:a1:15:b1:a2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92f4b1c0bfbad46b811eee568a18fbaa14a9d687
Validity
Not Before: Jan 1 16:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8547a2f148a5781fda087894ca1f3407d96e841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:11:54:c9:ee:c8:47:93:0a:32:90:9e:4c:21:
37:39:2e:24:4f:4c:88:3e:37:38:ca:35:6c:e0:22:
0d:c5:85:ef:c6:85:cd:1b:f3:54:13:45:30:63:bb:
87:4b:d8:7f:84:bc:d7:e0:fe:22:ef:fe:a0:51:b5:
39:e3:a1:7f:60:18:5b:65:7c:96:d0:ba:df:da:50:
4a:e8:af:29:62:a1:01:b9:31:37:de:19:9d:ea:ff:
bc:ca:f3:21:f6:2f:54:b8:77:c9:6d:11:e7:90:e6:
54:12:28:71:a3:0b:c2:02:18:03:a9:7a:4f:fd:a2:
5f:67:f9:50:2b:e0:26:ed:1d:f3:c2:49:d7:1c:f6:
b4:5b:e7:00:8a:5f:56:32:73:d0:51:26:cf:75:27:
32:b0:8a:8d:7e:19:77:b6:29:88:82:b9:3b:de:64:
c1:3b:36:9e:e6:5d:e3:82:43:82:92:92:08:1b:03:
a2:71:cd:36:2d:05:f4:e7:de:0e:ba:4a:15:1a:87:
2c:9a:b9:f8:a2:59:95:98:12:9b:75:63:3c:d6:cf:
7d:41:2d:17:91:90:93:8a:aa:2c:4d:2d:0f:f3:21:
00:fe:66:b9:27:70:47:ab:8b:72:41:43:27:a4:cb:
7b:4d:36:63:05:98:9e:f9:7c:11:83:7d:1a:4e:3e:
39:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:54:7A:2F:14:8A:57:81:FD:A0:87:89:4C:A1:F3:40:7D:96:E8:41
X509v3 Authority Key Identifier:
keyid:92:F4:B1:C0:BF:BA:D4:6B:81:1E:EE:56:8A:18:FB:AA:14:A9:D6:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kvSxwL-61GuBHu5Wihj7qhSp1oc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/yFR6LxSKV4H9oIeJTKHzQH2W6EE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/4f8514-2e20-4935-995c-a084f76c8e2b/1/kvSxwL-61GuBHu5Wihj7qhSp1oc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.59.184.0/24
IPv6:
2a03:aa00:1001::/48
Signature Algorithm: sha256WithRSAEncryption
5b:06:02:0f:9e:ba:1a:35:be:8e:a4:28:39:1b:e6:37:13:1b:
18:75:ce:23:91:27:46:61:a7:3a:f8:b5:dc:97:f3:d4:c7:4e:
03:95:50:95:be:97:c2:a1:2a:98:08:55:b2:cd:e2:6c:b2:75:
b4:fb:9a:12:d3:4f:53:7d:ad:42:10:6e:c9:8b:93:ba:84:8c:
29:5d:48:ff:7a:c0:d8:2e:15:71:27:70:01:b9:84:c6:bc:c0:
8d:74:9c:8f:9c:c2:99:2f:d8:80:42:45:6c:51:d7:8e:0f:f2:
e6:43:11:ac:6f:fb:10:8f:4c:95:a4:57:f9:f6:ef:f4:12:ae:
ef:66:ca:7f:a2:30:63:5b:64:5d:d6:f7:49:2d:8d:ea:1b:20:
7a:d3:fe:a2:e2:4f:10:59:c7:ad:3d:ee:56:44:25:70:9c:cd:
37:ff:f6:7a:1f:19:dd:1d:10:74:bf:6c:67:17:26:16:aa:f8:
f4:36:e3:94:89:cb:ca:49:f2:f5:68:9c:08:ce:ba:9a:a2:d9:
8f:c1:5e:1f:67:71:c2:f6:b1:b9:52:2c:88:3c:96:98:b0:9d:
29:a0:46:5e:0f:b0:c5:78:21:2e:0e:22:27:63:77:d0:9f:2b:
c6:9d:4a:fc:20:ff:2a:87:aa:58:50:de:49:95:68:30:a4:09:
20:84:ab:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:39 2024 by rpki-client on console-fra.rpki-client.org