Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/yov8mfRMcDkzDQV5fc4AzSQ5_FU.roa
File: yov8mfRMcDkzDQV5fc4AzSQ5_FU.roa (raw, json)
Hash identifier: coSFxOgNW4wdRRgyYW7mMVqA6SAmpH07en3EVw9+z00=
Subject key identifier: CA:8B:FC:99:F4:4C:70:39:33:0D:05:79:7D:CE:00:CD:24:39:FC:55
Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial: 018CC64AF473E9F41C1B205A71C28F6924D6
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/yov8mfRMcDkzDQV5fc4AzSQ5_FU.roa
Signing time: Mon 01 Jan 2024 18:30:50 +0000
ROA not before: Mon 01 Jan 2024 18:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12565
IP address blocks: 91.211.164.0/24 maxlen: 24
91.211.164.0/22 maxlen: 22
91.211.166.0/24 maxlen: 24
91.211.165.0/24 maxlen: 24
91.211.167.0/24 maxlen: 24
185.76.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f4:73:e9:f4:1c:1b:20:5a:71:c2:8f:69:24:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Validity
Not Before: Jan 1 18:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca8bfc99f44c7039330d05797dce00cd2439fc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8c:4b:50:eb:cc:db:34:d7:a0:10:37:41:99:
df:33:3e:a2:72:f4:1f:25:6f:e7:5c:13:26:08:d2:
72:2d:41:d1:57:96:72:48:dc:a4:b3:2f:dc:5c:4f:
b2:17:ec:c6:b6:91:e3:7e:37:1f:b0:d6:b4:d3:d3:
27:59:9e:25:4a:d9:75:7f:14:77:40:70:8d:44:8d:
60:82:36:bf:e1:46:b7:d4:9d:c2:14:97:86:b6:a0:
f7:42:1d:84:d4:bd:85:0f:51:e5:79:1e:9d:85:66:
90:cb:26:50:c7:e8:5e:8f:fc:3f:7e:f0:23:44:c6:
f5:4e:2c:f7:ca:9c:4e:91:85:ce:62:68:9b:43:b9:
09:f4:e8:78:e5:d8:2f:6a:b1:16:43:9b:40:ba:7d:
cb:e4:25:d8:e4:73:47:0b:30:e7:2c:0d:05:f6:e4:
65:50:73:04:c9:4c:16:32:f0:31:98:31:1f:5e:4f:
6b:8f:c4:0c:b3:a0:b0:06:6b:8a:81:f5:48:e9:d3:
b5:7b:b5:6b:a1:0e:b9:d6:4e:8a:74:d7:e6:33:94:
94:4a:b9:96:b4:e5:f9:4f:5f:68:99:e8:b5:dd:df:
8f:8a:9b:17:61:28:73:c3:35:40:2d:0a:db:d4:66:
17:62:a8:7b:10:11:f1:f1:1e:7e:4e:d9:94:f9:f2:
72:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8B:FC:99:F4:4C:70:39:33:0D:05:79:7D:CE:00:CD:24:39:FC:55
X509v3 Authority Key Identifier:
keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/yov8mfRMcDkzDQV5fc4AzSQ5_FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.164.0/22
185.76.24.0/24
Signature Algorithm: sha256WithRSAEncryption
43:17:57:ff:72:b3:42:0e:cc:a0:76:52:ff:3b:ef:10:c7:3a:
a2:a4:16:43:39:8b:8c:50:3f:c8:c0:12:52:37:f7:3a:29:4d:
f0:c1:32:c9:09:18:29:f4:81:4d:79:cf:5f:cb:32:3a:77:0e:
88:02:d7:38:e4:fc:92:78:67:30:c1:c1:82:22:f9:c4:04:98:
76:5d:30:56:4e:0b:9c:19:2f:1f:1f:a8:fb:4e:08:e5:84:ef:
03:66:21:4a:9f:71:e3:f2:a6:3c:5f:f8:fb:63:5f:21:0c:62:
ef:86:ad:55:7a:15:f2:5c:43:16:62:52:3c:bd:06:c7:78:25:
84:86:40:85:84:d1:58:5e:5c:e8:fd:f8:d7:48:12:5d:26:08:
4d:c7:35:82:64:0d:94:6e:43:78:9e:5e:f1:fe:2d:c7:21:99:
82:66:6d:ad:f1:37:c9:85:b2:6b:16:a7:17:79:87:9d:2e:1d:
2b:dc:08:35:07:84:46:b5:b1:da:b5:e1:3d:7f:5c:ce:cf:e5:
8c:24:ab:9e:de:d6:fe:1b:3b:61:4d:92:0c:36:62:9d:b7:8b:
f7:20:ad:51:f0:66:76:40:00:14:5b:8c:80:e1:4e:8b:c0:de:
fa:2d:b7:4f:3a:62:b3:d2:25:c2:97:e8:ea:72:e0:ae:78:e6:
c1:ff:62:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:34:38 2024 by rpki-client on console-fra.rpki-client.org