Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/yCnMCG5P4msH5GLPJ8t4wpr93h4.roa
File: yCnMCG5P4msH5GLPJ8t4wpr93h4.roa (raw, json)
Hash identifier: as8IgG+deHiRQbcFTyb2vHXwwemmh1F/lhhZAajoAzo=
Subject key identifier: C8:29:CC:08:6E:4F:E2:6B:07:E4:62:CF:27:CB:78:C2:9A:FD:DE:1E
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018CC64AD513DF4244F48AC87988AB357AA6
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/yCnMCG5P4msH5GLPJ8t4wpr93h4.roa
Signing time: Mon 01 Jan 2024 18:30:42 +0000
ROA not before: Mon 01 Jan 2024 18:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43624
IP address blocks: 94.131.97.0/24 maxlen: 24
94.131.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:d5:13:df:42:44:f4:8a:c8:79:88:ab:35:7a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 18:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c829cc086e4fe26b07e462cf27cb78c29afdde1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1c:72:30:4e:87:9d:6c:85:eb:5e:2d:22:60:
62:64:8c:db:9d:61:46:6d:ae:37:f0:de:47:0a:24:
67:7c:84:6e:6c:a4:8e:e8:93:c7:59:0f:5a:26:6a:
60:13:d6:d5:1d:2c:2f:0a:63:33:fa:f4:72:5a:e8:
dd:bf:86:fe:27:76:2e:5d:bc:17:e0:db:11:fe:0b:
65:14:8f:4b:5e:05:55:27:b3:40:d4:65:14:85:77:
b3:cb:32:41:63:85:cc:a1:76:de:36:dc:96:4c:bc:
5c:90:16:c8:7f:7d:61:ba:59:47:c0:b5:18:b2:78:
84:63:19:e2:7f:6b:f1:a0:1b:dc:90:b3:8c:a4:a3:
7e:cd:0d:2e:46:7a:83:be:fe:8a:b7:44:33:07:29:
b4:9d:a3:fd:5d:d5:0b:c8:ee:42:fc:22:b3:3d:08:
91:89:93:3b:00:8a:82:8c:19:e6:23:29:a4:72:8f:
e1:f6:cd:f8:f4:08:fa:7c:60:fa:67:7b:a1:ef:77:
fc:6a:67:7b:36:c2:bd:d9:8e:37:77:50:cd:7b:3c:
f2:64:64:49:ec:3f:26:6f:1c:c7:1a:0c:73:30:33:
4f:87:79:d2:94:2e:a4:4c:71:e0:f0:4a:b6:8b:45:
31:31:75:ff:a2:f2:f6:41:54:58:25:01:2c:b2:a8:
06:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:29:CC:08:6E:4F:E2:6B:07:E4:62:CF:27:CB:78:C2:9A:FD:DE:1E
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/yCnMCG5P4msH5GLPJ8t4wpr93h4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.96.0/23
Signature Algorithm: sha256WithRSAEncryption
96:db:24:b1:31:18:66:79:94:25:96:ba:7f:92:ee:f1:90:77:
77:87:33:65:58:19:ba:f8:78:c6:57:f8:30:0c:11:d5:21:1f:
b1:56:75:e7:be:3a:87:2c:d1:28:0c:e7:e4:b8:e7:c8:6e:5f:
54:82:54:7d:fc:6f:08:c7:36:11:21:57:0a:0f:f8:16:55:39:
af:e7:6a:42:f4:65:90:24:00:3e:2e:f2:a9:4b:19:e8:a9:d9:
00:63:50:78:be:52:f2:8b:6d:04:49:f9:3e:7a:8d:98:a7:1c:
35:65:ea:dd:b8:4f:de:f8:60:dc:f2:bb:74:8a:1f:c6:e3:0e:
55:84:e0:09:02:85:c2:5f:0c:92:2c:61:9b:61:7b:5b:ba:63:
ac:af:26:20:45:b0:f8:3b:1f:e5:57:e1:ac:a7:61:87:e1:b1:
e3:d4:03:f5:97:66:c0:c4:0a:6c:fa:31:0c:44:e9:cd:57:aa:
43:aa:42:af:96:ae:42:0c:ac:d3:b3:72:f8:2a:15:fc:bd:1f:
62:10:06:e4:5e:8c:d3:2c:92:3b:13:09:c0:ca:e8:d5:b1:b9:
42:54:cb:b5:49:5f:23:8b:5e:cd:cf:7c:26:5e:50:10:00:5a:
f0:37:18:8a:de:a5:65:f8:3d:57:be:2b:ce:0c:b7:80:4c:85:
e2:33:d2:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:49:25 2024 by rpki-client on console-fra.rpki-client.org