Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/y6NX4O4-xI8a0_UCq3Et8Cdi2Go.roa
File: y6NX4O4-xI8a0_UCq3Et8Cdi2Go.roa (raw, json)
Hash identifier: 5K3EmTT4oChiEdsgvk+qjGRZ/fY5sTVE9WNyUF8bR2s=
Subject key identifier: CB:A3:57:E0:EE:3E:C4:8F:1A:D3:F5:02:AB:71:2D:F0:27:62:D8:6A
Certificate issuer: /CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Certificate serial: 018CC8010D930644AD827D9C84698068919F
Authority key identifier: A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/y6NX4O4-xI8a0_UCq3Et8Cdi2Go.roa
Signing time: Tue 02 Jan 2024 02:29:21 +0000
ROA not before: Tue 02 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59778
IP address blocks: 95.215.224.0/24 maxlen: 24
95.215.225.0/24 maxlen: 24
95.215.226.0/24 maxlen: 24
95.215.227.0/24 maxlen: 24
91.232.124.0/24 maxlen: 24
91.232.125.0/24 maxlen: 24
178.216.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:0d:93:06:44:ad:82:7d:9c:84:69:80:68:91:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a87c673f35a7b705a6b424d33914fa392d3b962e
Validity
Not Before: Jan 2 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cba357e0ee3ec48f1ad3f502ab712df02762d86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2b:e6:13:73:0c:5c:ae:03:55:c2:de:45:37:
3d:4d:6b:3b:26:c8:e7:7b:7b:52:ca:a9:3b:47:da:
a6:70:6a:0e:28:81:5e:4a:24:83:2f:15:bc:cc:44:
39:04:65:d3:a4:d4:4f:e7:14:af:03:1b:25:d4:7f:
9a:72:b3:3f:eb:35:7f:1e:be:d2:d5:1f:8f:a6:bc:
cc:16:2b:e2:53:85:fa:d9:62:0b:65:71:06:ed:80:
3a:f5:d5:8c:3d:c5:ea:62:1d:d7:e4:f3:84:e6:bf:
16:81:4c:d9:d8:23:fd:2d:35:27:16:ea:5e:ba:84:
b9:46:30:5e:de:b6:34:a6:e3:40:1e:1c:10:85:cd:
8a:4c:32:32:37:84:08:43:95:79:b9:d7:99:f2:cd:
8b:a7:4d:07:55:de:0e:22:cc:4c:28:7b:79:d8:f3:
76:a8:fc:ef:df:f6:9c:0d:a7:66:ff:77:87:74:27:
71:a3:a1:8f:16:f6:b1:24:a0:4a:2f:d5:66:56:99:
10:4e:4b:58:43:e8:1f:39:2a:22:de:78:2f:72:28:
ba:fa:e3:d1:ab:06:54:01:09:19:f0:d6:bc:28:6a:
c4:30:be:0f:20:a9:4b:ce:1b:ed:c1:98:e5:ee:bf:
33:5d:f0:76:6d:b0:ad:80:04:97:41:fd:a7:19:d3:
1b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A3:57:E0:EE:3E:C4:8F:1A:D3:F5:02:AB:71:2D:F0:27:62:D8:6A
X509v3 Authority Key Identifier:
keyid:A8:7C:67:3F:35:A7:B7:05:A6:B4:24:D3:39:14:FA:39:2D:3B:96:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qHxnPzWntwWmtCTTORT6OS07li4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/y6NX4O4-xI8a0_UCq3Et8Cdi2Go.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/aa1af4-9256-46c8-ab02-94e647262160/1/qHxnPzWntwWmtCTTORT6OS07li4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.124.0/23
95.215.224.0/22
178.216.247.0/24
Signature Algorithm: sha256WithRSAEncryption
26:3a:bf:09:cb:12:9b:98:dd:99:d2:12:33:5b:dd:22:30:4d:
a9:73:b3:c2:c5:ff:6f:97:84:7c:03:4c:74:05:d9:c8:48:a2:
f6:a3:74:6e:2a:bf:42:3b:1d:1a:04:1a:1b:6a:84:08:86:4e:
d6:82:12:ca:5e:a9:17:61:38:db:92:c2:7f:5d:a4:b5:49:f9:
ab:2e:6a:69:84:29:94:e8:f2:4d:83:cd:61:f4:de:b8:1d:63:
dd:ef:47:33:d7:64:95:c3:5e:f9:09:a3:e1:a9:e9:f0:58:e0:
2c:c1:4e:38:8e:73:a5:f2:da:f8:8b:fd:fa:c6:33:9f:ef:07:
f7:54:42:5d:47:48:0c:20:22:5d:87:97:21:d8:de:1c:a9:3b:
b2:b9:fc:41:22:77:df:74:27:8e:9e:7b:38:5d:d5:51:b8:96:
50:54:41:2e:a3:e7:4c:ac:6b:79:f7:f4:7b:89:a5:d7:72:e9:
ea:5c:5a:78:6f:87:39:50:fb:9e:97:6e:8a:cf:cd:81:d6:2c:
f2:7e:34:6e:a5:0d:be:90:b6:59:9b:6e:db:23:39:cd:73:0c:
c5:23:57:69:79:f8:f0:2e:69:58:85:e7:5a:8e:a6:26:1a:19:
6b:b6:99:39:67:1e:9c:88:c8:10:2e:80:76:b1:63:bb:15:fe:
55:86:c5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 12:20:27 2024 by rpki-client on console-ams.rpki-client.org