Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/yyA4SEGCEngBOBrLBB9zix-j7kM.roa
File: yyA4SEGCEngBOBrLBB9zix-j7kM.roa (raw, json)
Hash identifier: 4cG4MoDKHXZHpxBC275ZgBWP8XPFI9pMEn7PFJ/8Tgs=
Subject key identifier: CB:20:38:48:41:82:12:78:01:38:1A:CB:04:1F:73:8B:1F:A3:EE:43
Certificate issuer: /CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Certificate serial: 018CC2DABA19BE920B67A5E2B2B3B32EFDEB
Authority key identifier: F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/yyA4SEGCEngBOBrLBB9zix-j7kM.roa
Signing time: Mon 01 Jan 2024 02:29:23 +0000
ROA not before: Mon 01 Jan 2024 02:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17804
IP address blocks: 185.109.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ba:19:be:92:0b:67:a5:e2:b2:b3:b3:2e:fd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f60846f21c56a8513d31c155dd199197a3ffc7c0
Validity
Not Before: Jan 1 02:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb2038484182127801381acb041f738b1fa3ee43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:cd:d7:be:fb:ab:4d:28:4c:77:3d:04:c7:
dc:60:71:3d:20:0a:bd:93:5b:2c:93:08:1b:25:ee:
db:1f:0c:9a:04:c3:50:bd:aa:63:da:ca:ce:86:01:
c0:68:06:4c:38:14:e6:47:be:db:92:d7:ce:48:9c:
c0:40:f4:92:bd:ad:20:7e:0a:86:c5:61:1d:b9:6f:
f1:63:fd:86:79:d3:fb:f2:2a:b9:a8:e7:08:f5:d2:
48:90:83:04:a6:b6:b5:c6:13:c2:df:01:3e:fe:44:
d2:24:a1:7e:ae:85:1b:b0:03:a2:49:d5:8a:6b:68:
c3:9c:53:59:70:2a:d9:c0:9d:1d:d0:50:d2:92:4b:
ca:0b:e7:da:f7:45:10:15:1e:d6:72:e1:93:69:5f:
98:30:3c:9f:4d:a7:5e:52:7d:61:72:fc:1f:98:8e:
c6:8a:cc:2b:96:3d:95:94:30:88:5e:7d:ba:eb:f4:
9d:55:c1:f7:1f:19:ba:50:f0:58:8a:91:7b:5f:cc:
d4:98:31:1a:c2:5a:0a:eb:7f:5b:69:34:5d:e0:43:
63:66:dd:5a:3c:4c:73:ff:fc:56:45:04:50:21:de:
df:de:a5:f8:73:50:98:d9:21:a4:12:4d:43:9d:8d:
66:08:6f:6b:d3:0a:d7:cf:ad:8a:8e:96:bc:57:05:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:38:48:41:82:12:78:01:38:1A:CB:04:1F:73:8B:1F:A3:EE:43
X509v3 Authority Key Identifier:
keyid:F6:08:46:F2:1C:56:A8:51:3D:31:C1:55:DD:19:91:97:A3:FF:C7:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9ghG8hxWqFE9McFV3RmRl6P_x8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/yyA4SEGCEngBOBrLBB9zix-j7kM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/a0f4be-4c0d-4df5-90c6-a6d45ef7d227/1/9ghG8hxWqFE9McFV3RmRl6P_x8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.109.87.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d0:94:d2:b9:ec:dc:01:56:17:ec:55:2c:13:e6:ea:35:5f:
32:c6:37:fb:b5:9e:c6:0a:3a:5d:15:fc:2c:78:95:8b:a0:26:
7b:f3:d5:62:7f:51:57:27:54:16:f5:f7:1b:b8:cd:8a:9b:de:
b8:b3:78:ef:86:f3:4a:6c:f9:4c:87:bd:70:3c:ac:e3:ab:39:
39:f9:32:fd:61:d0:5b:d7:4d:e3:c6:69:8c:f9:08:4f:94:1f:
5f:84:01:92:9b:35:e4:04:f8:4c:71:63:54:da:9c:07:b3:9e:
28:0b:6c:1d:80:52:1e:35:de:02:2b:05:c6:7e:62:a9:68:2c:
90:f1:0c:75:0d:1a:f5:0b:7c:0f:ee:36:72:82:23:bc:61:04:
49:72:15:45:b4:55:97:48:2d:c6:00:e8:98:75:57:0d:ec:d0:
73:30:5e:9d:11:71:70:fe:af:c3:3e:61:76:c4:8d:6b:db:26:
82:b2:7f:37:e4:f8:07:35:05:a6:54:9a:c8:f1:43:c7:64:da:
c3:75:f5:80:18:c0:71:e8:42:21:9d:da:cd:3f:3b:ca:5e:79:
d5:b7:1a:00:35:6d:f5:cd:d7:10:1b:70:71:d3:6d:1c:8d:a6:
a7:3c:b6:4a:37:15:7c:d2:b8:7f:39:8e:1c:97:ae:26:22:3e:
e6:0d:73:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 15:39:09 2024 by rpki-client on console-fra.rpki-client.org