Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/yLlXvuKqIlEAiOPTf2fIbsmWI_k.roa
File: yLlXvuKqIlEAiOPTf2fIbsmWI_k.roa (raw, json)
Hash identifier: yKyhbtJoUZSzndL/jHwT/mLm+yp9U0eynuIZ6ES8Xpw=
Subject key identifier: C8:B9:57:BE:E2:AA:22:51:00:88:E3:D3:7F:67:C8:6E:C9:96:23:F9
Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Certificate serial: 018CC56E33E58324364BA15D582E44DE26C6
Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/yLlXvuKqIlEAiOPTf2fIbsmWI_k.roa
Signing time: Mon 01 Jan 2024 14:29:42 +0000
ROA not before: Mon 01 Jan 2024 14:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216248
IP address blocks: 89.188.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:33:e5:83:24:36:4b:a1:5d:58:2e:44:de:26:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47
Validity
Not Before: Jan 1 14:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8b957bee2aa22510088e3d37f67c86ec99623f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c7:26:ae:54:01:9e:0b:20:e2:df:a2:f6:11:
35:b2:a9:c0:82:a1:9c:63:ad:14:80:09:c4:9c:74:
35:0f:d2:aa:4b:51:b2:03:fc:9d:44:14:ba:31:f1:
98:ea:16:fd:5c:c4:eb:6b:22:f8:3b:2b:f5:ca:99:
6c:d2:ad:0c:e2:55:8e:58:18:20:48:7c:66:0c:5f:
6d:7f:c0:5a:ba:ab:d9:19:80:42:e0:dc:38:c9:fa:
43:0a:dc:70:5b:fe:64:04:f4:0e:71:c9:55:7e:b8:
0e:24:5b:36:69:df:44:dc:e9:38:1a:27:2e:7c:98:
b9:64:28:99:c7:c4:2c:10:cc:be:e5:7c:dd:61:b7:
bf:13:c4:bb:2e:7a:41:c7:33:7f:4b:32:ba:98:2a:
ff:27:1e:8a:f3:44:68:37:b5:29:6c:ed:16:49:61:
4a:e6:fa:7b:a1:81:79:55:f0:fb:ea:86:ac:5d:cd:
29:b5:29:5a:0f:b5:55:80:e1:d1:bb:40:22:9d:cb:
88:fd:f1:2c:ec:4e:a3:1f:a0:2e:29:e6:0f:80:b3:
a4:30:99:c6:fd:e7:89:15:7d:cc:96:16:d1:de:fc:
8a:fd:1f:71:2e:02:70:63:c9:34:85:f7:13:aa:24:
8f:80:78:15:1a:7b:81:81:1d:e8:f0:d7:1d:3b:47:
2f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B9:57:BE:E2:AA:22:51:00:88:E3:D3:7F:67:C8:6E:C9:96:23:F9
X509v3 Authority Key Identifier:
keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/yLlXvuKqIlEAiOPTf2fIbsmWI_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.188.164.0/23
Signature Algorithm: sha256WithRSAEncryption
90:e4:bc:20:96:3b:fa:38:61:1d:ff:f1:e2:df:d7:d0:6f:e6:
a5:b6:f5:a3:5d:1c:26:87:ef:50:9e:2b:0e:ba:e9:20:b8:5d:
5f:ff:03:61:0c:69:30:6f:79:be:81:7c:a3:48:7e:4b:dd:7e:
00:ee:fe:0e:72:fc:9e:94:5f:24:e9:84:ec:05:06:4f:1c:31:
85:48:03:31:55:a9:ad:07:fe:98:7b:fc:05:1c:52:b3:87:1c:
7d:72:f3:a6:64:4d:06:00:a7:2e:b9:1e:c5:e1:58:f6:4d:49:
f5:3e:8e:84:47:04:18:9e:e9:76:11:9f:cf:88:92:99:5e:d6:
20:85:26:90:7f:40:76:bf:e4:c0:cd:bd:56:68:a4:b5:f8:4d:
7f:87:12:4c:e9:bf:37:ff:2e:de:0e:da:30:e3:92:69:9d:38:
8a:af:23:00:e5:d9:0c:a5:21:55:80:35:71:27:fa:e5:14:17:
ac:ab:a7:24:e0:50:63:c4:a3:73:87:a2:0a:af:b6:03:42:3b:
71:26:3e:cd:46:82:03:73:65:1b:3c:92:79:bb:3d:c8:25:a5:
bd:95:51:e6:08:d0:03:b0:f5:b5:20:35:1a:bd:b1:59:6b:a6:
aa:49:4f:23:a1:43:b1:d3:c0:59:e7:fa:0b:5a:20:e6:ba:77:
07:0d:49:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 04:33:48 2024 by rpki-client on console-fra.rpki-client.org