Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1-YoGYVOkwK5aIk6qZ-BX2uzjv24.roa
File: 1-YoGYVOkwK5aIk6qZ-BX2uzjv24.roa (raw, json)
Hash identifier: SjDP618gwg+PxPm4b+062lJHGVQ6KNOi1EvTnH8D8Fs=
Subject key identifier: F9:8A:06:61:53:A4:C0:AE:5A:22:4E:AA:67:E0:57:DA:EC:E3:BF:6E
Certificate issuer: /CN=2663f3db152e055ac145bdbb429e018654204c8d
Certificate serial: 01900CC6837576FA71AA3C07FBEAA3732E54
Authority key identifier: 26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1-YoGYVOkwK5aIk6qZ-BX2uzjv24.roa
Signing time: Wed 12 Jun 2024 14:07:34 +0000
ROA not before: Wed 12 Jun 2024 14:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214756
IP address blocks: 194.209.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:0c:c6:83:75:76:fa:71:aa:3c:07:fb:ea:a3:73:2e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2663f3db152e055ac145bdbb429e018654204c8d
Validity
Not Before: Jun 12 14:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f98a066153a4c0ae5a224eaa67e057daece3bf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:eb:8e:26:8e:af:54:97:42:41:4c:39:01:
a7:ca:b6:31:07:fb:e0:55:c9:ea:32:fd:65:03:a1:
f3:80:5b:d8:ec:f9:23:3d:43:45:ff:16:65:7c:90:
e9:b5:95:7d:85:9c:7b:9e:5b:4a:28:08:49:5c:a7:
6d:4e:89:b9:79:45:c8:d9:8a:4c:ff:27:6e:fa:a2:
45:7e:5e:d9:2a:85:6a:cc:bc:b8:c0:c0:c0:bb:fd:
dd:2a:ee:71:cc:66:16:b3:56:9e:9a:b1:f6:f5:0b:
2a:fd:38:20:a8:db:9a:e3:50:c5:98:5a:83:48:d1:
15:e3:d0:e4:b4:72:21:64:ae:06:f3:0c:ed:61:e7:
df:d2:67:6d:6d:76:91:3b:9c:84:c2:33:a6:8a:ec:
2a:83:b0:33:79:9b:f8:e9:16:c4:81:a5:2d:3b:a5:
c7:be:1f:18:5d:13:d4:6c:ab:8c:b7:78:f8:66:18:
8f:df:0a:0a:06:91:00:b4:97:41:56:19:5c:9f:6d:
17:53:78:9e:f8:93:15:42:46:0c:3a:bb:5f:f5:fc:
ed:f4:9b:ca:97:8e:2a:8b:dd:07:d3:cc:6d:6e:d2:
9d:76:95:f6:c6:26:48:9a:59:ce:1f:00:1a:a7:b8:
ac:4b:d9:1f:a5:39:35:33:aa:e8:91:71:92:b7:3c:
3f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8A:06:61:53:A4:C0:AE:5A:22:4E:AA:67:E0:57:DA:EC:E3:BF:6E
X509v3 Authority Key Identifier:
keyid:26:63:F3:DB:15:2E:05:5A:C1:45:BD:BB:42:9E:01:86:54:20:4C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JmPz2xUuBVrBRb27Qp4BhlQgTI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/1-YoGYVOkwK5aIk6qZ-BX2uzjv24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/JmPz2xUuBVrBRb27Qp4BhlQgTI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.209.40.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:89:89:2d:62:cd:44:50:c5:f1:97:5b:f6:39:05:a4:c6:b9:
93:8d:e8:3a:8d:7a:02:79:db:46:38:2d:4c:78:36:e0:cd:3e:
d8:0c:05:ef:68:46:be:9c:c0:d1:0b:8a:0e:6e:44:61:03:e0:
d1:8f:8f:c0:a1:de:67:cc:56:75:d4:59:90:7e:4d:23:25:e7:
54:47:2b:d6:a9:a7:00:ae:89:a5:f0:9f:0e:2a:96:51:50:55:
a0:e0:c4:a9:07:c5:ed:28:d3:31:de:2d:2a:6a:62:66:96:e9:
2c:23:da:6f:d2:4b:8a:eb:48:c8:99:f1:f6:97:46:58:29:57:
bf:01:11:6f:bc:52:45:16:61:50:d3:4f:8f:34:b4:62:fe:03:
b1:3e:af:83:ee:15:bd:c1:9c:b0:a6:57:19:a1:92:9d:1c:e8:
25:d9:1c:9d:73:d5:71:13:af:07:ef:32:9f:d5:aa:2a:b4:b2:
ce:c1:19:25:9a:49:78:e9:a4:6c:c2:49:1d:85:d5:d7:28:32:
78:ca:e1:95:70:5b:ab:4a:21:e1:cf:5a:ac:81:95:17:b3:e0:
de:d5:d7:29:4e:5b:37:be:af:eb:52:e4:d1:18:84:6a:d0:1e:
2f:69:03:5e:51:c4:d9:df:da:a2:36:88:67:b3:d9:66:53:02:
68:17:b6:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:54 2024 by rpki-client on console-fra.rpki-client.org