Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/yI9PfUcBojSb4DBTqMqbyOjur10.roa
File: yI9PfUcBojSb4DBTqMqbyOjur10.roa (raw, json)
Hash identifier: 0zoOnUx0ttRVVKFTuGAeXtoVJVoyA2SskCvCVdgMLYY=
Subject key identifier: C8:8F:4F:7D:47:01:A2:34:9B:E0:30:53:A8:CA:9B:C8:E8:EE:AF:5D
Certificate issuer: /CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Certificate serial: 018CC5002690BF7AB321F5501AB7B11065ED
Authority key identifier: DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/yI9PfUcBojSb4DBTqMqbyOjur10.roa
Signing time: Mon 01 Jan 2024 12:29:30 +0000
ROA not before: Mon 01 Jan 2024 12:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60068
IP address blocks: 159.242.232.0/23 maxlen: 23
159.242.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:26:90:bf:7a:b3:21:f5:50:1a:b7:b1:10:65:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de0d9d6b697ca1c86570c256862e6858b4799c85
Validity
Not Before: Jan 1 12:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c88f4f7d4701a2349be03053a8ca9bc8e8eeaf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:a6:4e:14:d0:94:46:58:5c:cd:5b:2c:8f:
4e:c8:60:83:32:b2:7a:cc:aa:9c:e2:2e:ac:86:ef:
85:c5:1a:34:7a:7a:6e:f1:77:ba:4a:ce:a8:27:b5:
aa:e4:a3:92:54:46:5d:62:a4:17:1d:00:b2:84:55:
55:3c:8b:52:8c:6b:17:9f:b4:9a:fe:07:ec:28:fc:
c9:68:bc:ff:77:20:9a:25:e2:b0:df:08:7b:11:a6:
b1:1e:89:0f:68:a7:1f:3a:d2:74:69:9d:1c:08:9d:
60:22:0b:b9:e5:2b:56:d8:a6:92:46:32:c7:fd:24:
fb:98:c6:99:6a:a9:aa:35:3e:74:1d:7e:a5:26:32:
8d:ff:49:39:5d:fc:35:22:24:07:d6:18:86:6a:f8:
90:99:e8:2b:d6:44:f2:84:e8:a7:c9:4d:fd:b7:ad:
f0:e1:cf:02:bb:fe:a3:d2:72:b5:d8:74:83:6f:e6:
85:04:45:9d:7e:e5:4d:26:d4:9d:4e:ca:06:06:b2:
18:49:17:9b:2a:ab:52:48:8f:0e:6c:13:d6:f4:a8:
97:e8:1c:35:64:78:16:f9:e4:c5:26:19:0e:43:49:
85:ae:02:8d:f7:d3:25:a0:68:81:76:35:f6:ef:f3:
d1:df:c0:8e:66:ce:df:a0:e2:d8:61:34:a3:af:2b:
51:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8F:4F:7D:47:01:A2:34:9B:E0:30:53:A8:CA:9B:C8:E8:EE:AF:5D
X509v3 Authority Key Identifier:
keyid:DE:0D:9D:6B:69:7C:A1:C8:65:70:C2:56:86:2E:68:58:B4:79:9C:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3g2da2l8ochlcMJWhi5oWLR5nIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/yI9PfUcBojSb4DBTqMqbyOjur10.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/68dc3c-df2e-4461-b7a6-01cbfc0e94e7/1/3g2da2l8ochlcMJWhi5oWLR5nIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.242.228.0/24
159.242.232.0/23
Signature Algorithm: sha256WithRSAEncryption
79:86:ad:b1:7a:4a:90:ea:e0:36:89:b0:bd:ac:69:5c:0d:7e:
50:07:0a:4a:25:89:f1:1d:48:7e:ce:10:6c:08:3a:c5:b4:ee:
81:70:41:98:e1:60:9b:b2:3a:38:47:d0:d5:5b:9d:6b:e8:2d:
3d:2c:cc:69:49:1e:14:c8:b6:26:27:2a:f3:9e:4a:1e:7d:bf:
2a:11:47:2c:b3:60:dd:fb:17:82:d6:96:58:04:f4:01:7b:a6:
d5:09:70:5f:81:90:bf:f3:a6:15:1a:56:21:ca:e3:9c:11:88:
33:34:0a:b1:5a:03:15:cd:c0:26:df:16:64:f1:1d:bd:2b:48:
9c:46:a6:c6:6e:f9:d4:d2:8a:8b:2c:b2:7c:66:18:6d:a2:8e:
10:ed:68:05:f1:4d:9d:30:29:7b:5f:1b:b6:0a:b9:76:22:2a:
02:48:c5:25:52:65:c4:bb:64:e4:2a:83:16:eb:6e:d6:97:f3:
98:f4:5c:dd:2e:21:a7:83:14:ea:72:52:14:1a:f7:43:07:f4:
ad:c3:f3:82:a3:02:0d:55:a8:d2:42:54:6f:c5:f3:c1:64:98:
10:49:d4:bf:c9:4d:3c:10:68:46:23:f8:e0:c4:dd:7c:d3:c2:
bb:90:c1:77:3d:6c:dc:22:09:8f:f0:54:12:22:5d:9d:a3:8a:
b6:79:1b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:31:57 2024 by rpki-client on console-ams.rpki-client.org