Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Yc_rvXZq_MC24-lxjx_UylSsRcA.roa
File: Yc_rvXZq_MC24-lxjx_UylSsRcA.roa (raw, json)
Hash identifier: pFn/E9S45RVRvYsbmpGQzp2Flq4Gkt7tfr3hiIoUpho=
Subject key identifier: 61:CF:EB:BD:76:6A:FC:C0:B6:E3:E9:71:8F:1F:D4:CA:54:AC:45:C0
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AE78E334479B1E095FDDFBC838FBA
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Yc_rvXZq_MC24-lxjx_UylSsRcA.roa
Signing time: Mon 01 Jan 2024 18:30:46 +0000
ROA not before: Mon 01 Jan 2024 18:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43315
IP address blocks: 85.121.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:e7:8e:33:44:79:b1:e0:95:fd:df:bc:83:8f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61cfebbd766afcc0b6e3e9718f1fd4ca54ac45c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4e:27:fd:d4:d3:99:f0:9a:28:3a:d8:c6:48:
c2:ab:75:e9:13:97:11:58:c2:59:ec:8d:56:ad:ed:
47:4c:23:ec:70:a9:c0:b6:03:ac:3e:2c:5a:f6:4a:
65:c7:07:00:e3:ef:6b:29:cc:54:12:d3:7a:a1:79:
46:d9:fb:08:7a:49:7b:2d:c6:dd:49:9e:10:9b:1e:
c5:72:d9:e5:c1:e1:36:8d:2d:e5:f8:71:11:dd:25:
72:89:5c:7a:12:f5:63:e7:3f:c5:58:ef:6d:f4:aa:
75:d4:b1:e2:60:ec:8c:c6:ef:82:ca:a4:65:06:dc:
13:61:87:46:a3:20:0c:c3:e2:6e:f1:5b:13:57:bb:
9e:86:8b:8f:c7:84:a9:46:3e:b2:f2:8d:8f:ed:f3:
9f:88:e5:86:ad:73:0f:5e:74:a9:2e:ea:ca:43:8b:
6a:4c:0e:d9:f3:95:26:80:cc:06:2c:3d:c5:69:8c:
9b:83:44:df:33:29:51:da:b4:ab:6a:92:be:17:5d:
ca:7c:55:5f:68:2a:3b:40:73:3c:3a:53:21:a0:2e:
ea:e0:25:06:95:7c:7d:19:e3:50:12:cd:87:8e:91:
4a:01:81:81:fe:83:ff:2f:95:2f:6d:35:84:17:8b:
bb:3a:5a:d2:f5:43:c1:b2:08:bb:bc:b7:5a:da:88:
7b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CF:EB:BD:76:6A:FC:C0:B6:E3:E9:71:8F:1F:D4:CA:54:AC:45:C0
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Yc_rvXZq_MC24-lxjx_UylSsRcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.121.138.0/24
Signature Algorithm: sha256WithRSAEncryption
62:38:f3:79:ac:5e:fa:85:6e:42:f9:0e:1e:f8:7f:bb:5b:86:
61:ac:c0:82:13:3b:4a:05:3f:66:39:4b:82:5a:56:4c:1a:5b:
f6:5f:0b:be:0f:57:25:8b:83:42:84:fd:0f:6d:a3:b9:54:a2:
05:93:fd:81:93:11:32:ef:a4:6f:f0:ba:c4:1e:22:66:d6:56:
de:df:98:e5:0f:bd:c9:3b:08:b6:c5:0c:88:79:8a:a6:21:94:
77:ab:93:62:7b:8c:17:3e:5e:9a:bc:32:b6:fa:27:ee:d4:4d:
18:30:f0:20:ab:21:5b:fd:6e:eb:0b:fa:6b:2a:cc:ea:c6:77:
f3:63:c8:f9:57:91:da:df:01:35:f4:ed:cb:0d:c0:2c:44:0e:
13:6d:6e:7e:60:3f:db:bb:57:7c:04:2b:62:d0:f3:63:25:68:
98:38:6c:50:3c:db:43:52:62:1e:fc:df:7c:a9:ea:24:73:49:
d9:93:b0:72:25:dc:d1:6b:05:49:6b:dc:ae:79:15:c8:3a:d4:
ea:44:54:c9:91:3d:81:68:7e:63:9b:4e:de:6e:32:f6:18:58:
98:d3:8c:af:3e:7b:15:78:3d:13:ec:e8:c7:e6:a1:5b:9f:ad:
a4:6b:4f:27:f1:77:b1:17:c6:83:bf:9e:39:87:28:21:28:d8:
dc:79:8b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 10:13:10 2024 by rpki-client on console-ams.rpki-client.org