Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/yen54E27Bzw8O9ZKSItrusXtwRk.roa
File: yen54E27Bzw8O9ZKSItrusXtwRk.roa (raw, json)
Hash identifier: yHequXJVojWHTHV8NciFqsKZxOhUQSLh7ySbo3dFWsA=
Subject key identifier: C9:E9:F9:E0:4D:BB:07:3C:3C:3B:D6:4A:48:8B:6B:BA:C5:ED:C1:19
Certificate issuer: /CN=c5f2203bc0286702345ac465500b4488c031c6b5
Certificate serial: 01927080F4741C781A09A62DA4C9BAF188D6
Authority key identifier: C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/yen54E27Bzw8O9ZKSItrusXtwRk.roa
Signing time: Wed 09 Oct 2024 08:59:12 +0000
ROA not before: Wed 09 Oct 2024 08:59:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207047
IP address blocks: 185.205.168.0/22 maxlen: 22
185.205.168.0/24 maxlen: 24
185.205.169.0/24 maxlen: 24
185.205.170.0/24 maxlen: 24
185.205.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:70:80:f4:74:1c:78:1a:09:a6:2d:a4:c9:ba:f1:88:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5f2203bc0286702345ac465500b4488c031c6b5
Validity
Not Before: Oct 9 08:59:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9e9f9e04dbb073c3c3bd64a488b6bbac5edc119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cb:fe:8b:63:94:73:6f:97:6e:da:ac:05:48:
3d:c3:2b:4b:95:ca:1b:6e:12:f2:a6:9a:5b:72:de:
78:e6:9c:70:5a:db:e7:ab:ef:16:72:87:d5:c8:d5:
dc:a9:f7:1e:26:14:72:83:39:64:0c:d5:73:5f:bb:
34:56:cb:08:57:de:16:d5:2d:9c:f2:9f:af:58:39:
87:82:e6:90:aa:2c:fc:d1:5f:d9:96:5e:6a:3d:16:
28:32:8b:4a:96:fd:3d:09:67:bc:44:04:c3:f1:70:
c7:fc:9a:27:a8:a2:68:22:5b:d7:e4:88:dc:60:90:
e5:2c:f7:7b:9d:f9:29:a5:aa:49:62:04:21:28:25:
f8:68:82:56:0e:33:95:9e:a7:1b:d9:b3:89:fe:1f:
92:43:83:0b:98:92:9f:dc:67:16:be:d5:5d:4c:df:
15:f1:a8:50:da:28:04:68:3a:33:78:79:ad:05:66:
e3:d8:2b:a2:89:67:ac:e9:c3:df:41:a9:86:2f:eb:
ba:62:e5:2f:3f:9a:99:cf:58:81:fd:18:be:c8:60:
90:34:a3:e9:50:bf:b2:f6:71:23:b6:f0:3d:60:0e:
fd:28:d1:29:6b:71:f2:84:18:14:88:17:d4:bb:9f:
24:e8:b0:21:11:9a:8d:c3:9f:53:68:3c:10:9d:a5:
3c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E9:F9:E0:4D:BB:07:3C:3C:3B:D6:4A:48:8B:6B:BA:C5:ED:C1:19
X509v3 Authority Key Identifier:
keyid:C5:F2:20:3B:C0:28:67:02:34:5A:C4:65:50:0B:44:88:C0:31:C6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfIgO8AoZwI0WsRlUAtEiMAxxrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/yen54E27Bzw8O9ZKSItrusXtwRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/411234-df12-4d3f-a706-2445f634e928/1/xfIgO8AoZwI0WsRlUAtEiMAxxrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.168.0/22
Signature Algorithm: sha256WithRSAEncryption
04:d4:af:2b:ea:f8:8b:6c:27:35:1a:2b:ee:08:a4:ba:b9:b1:
4f:47:d6:82:a2:c8:4b:6a:a4:41:e6:ae:1b:16:e5:4f:f3:07:
19:c7:c0:a7:23:c2:d8:c3:71:e8:72:97:58:ed:7a:16:99:af:
ad:07:af:20:ca:5e:2f:c6:98:c0:ad:65:bb:4f:db:5e:51:70:
4e:e1:66:68:6f:e7:5d:da:87:68:25:76:12:2f:28:8d:2e:39:
57:bc:b8:3c:c6:da:43:b6:ae:6b:84:8c:95:9c:1e:c0:fc:43:
24:d4:65:83:a3:36:ca:cf:1c:d7:79:48:7a:0b:47:73:2c:b9:
b9:90:4e:1a:c4:18:c6:f5:56:ac:e1:0a:65:5a:8d:b2:44:cf:
0a:a9:aa:8a:8b:a3:61:5b:b8:16:2e:f1:5a:d9:8c:86:4d:ee:
7a:51:6c:71:26:92:36:04:10:ea:33:7a:ee:69:9c:85:60:ec:
d8:6b:30:78:ab:18:35:70:59:20:5b:a3:dd:a1:77:30:fa:46:
aa:8b:f0:a0:86:b6:bc:16:0e:a5:f4:1f:57:df:04:8b:52:9e:
fb:50:f9:6a:75:66:fe:1c:61:63:ae:45:93:d9:f3:5b:a2:d6:
3a:7d:e1:3d:a9:3e:23:a6:2b:00:05:2f:79:34:b7:f0:ce:fe:
4f:66:fe:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:37:04 2024 by rpki-client on console-fra.rpki-client.org