Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YJXS_ecVnjzffS9uDGNJGWAAviQ.roa
File: YJXS_ecVnjzffS9uDGNJGWAAviQ.roa (raw, json)
Hash identifier: OLMv2nETyCTF6mO9rlgh9jULRk5sbF19Zl1UVuE5zsI=
Subject key identifier: 60:95:D2:FD:E7:15:9E:3C:DF:7D:2F:6E:0C:63:49:19:60:00:BE:24
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019185C939A7B18C54DFC00598A5467F4DD1
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YJXS_ecVnjzffS9uDGNJGWAAviQ.roa
Signing time: Sat 24 Aug 2024 19:07:22 +0000
ROA not before: Sat 24 Aug 2024 19:07:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134176
IP address blocks: 109.121.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:85:c9:39:a7:b1:8c:54:df:c0:05:98:a5:46:7f:4d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 24 19:07:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6095d2fde7159e3cdf7d2f6e0c6349196000be24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:84:4c:e5:db:bc:bd:4b:86:8a:3d:f4:e5:33:
ef:c3:7c:e3:bc:b7:55:20:0c:62:43:b6:e5:0e:2e:
8b:b2:c8:d7:ca:33:d9:47:2d:48:5d:16:24:1c:fd:
1a:04:1d:94:73:15:55:e3:b5:10:a8:b1:f5:be:21:
df:5e:09:a1:2d:3b:d6:72:3d:47:fb:20:7e:ff:b0:
26:83:37:cc:a7:4e:08:34:09:7b:49:b4:2a:bc:e6:
eb:45:81:8e:90:09:d1:83:4d:57:60:c1:41:94:a5:
83:3f:15:3b:13:9c:dd:06:bb:35:fa:76:92:61:2a:
35:54:7f:c6:36:f0:67:d5:6b:6b:c1:a8:04:49:e7:
29:eb:0f:5b:3f:aa:04:44:55:3d:bb:b4:6d:47:82:
9a:be:5c:d4:26:eb:c5:4a:70:64:de:42:b2:c7:c3:
78:2a:1a:6d:9b:4e:a3:7f:ac:61:d2:d7:e8:99:bc:
9a:d2:f4:19:1e:31:53:70:30:96:93:c9:e2:2c:42:
9a:fb:81:d4:37:0d:19:53:c3:e0:43:b1:a2:ea:4c:
5c:5d:06:d6:eb:f3:5a:7b:c7:c0:ab:b2:c1:7c:63:
94:87:3d:fb:a4:1d:27:7b:f9:f8:f4:0b:5e:ec:06:
b1:98:61:52:0d:c3:fe:2e:32:b5:b1:f5:49:c8:3a:
7e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:95:D2:FD:E7:15:9E:3C:DF:7D:2F:6E:0C:63:49:19:60:00:BE:24
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/YJXS_ecVnjzffS9uDGNJGWAAviQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.34.0/24
Signature Algorithm: sha256WithRSAEncryption
91:7c:1b:4a:cc:3c:70:42:61:b3:8c:ad:04:24:3c:00:4e:93:
0e:bc:05:9e:f2:52:d8:b6:25:ab:f4:11:d8:2d:c9:f7:e1:0a:
61:40:30:ce:16:6d:d9:8f:59:d6:55:47:50:8f:8c:53:3f:7b:
81:c1:5f:52:33:94:55:e1:80:af:2c:63:36:0d:4e:25:bd:3c:
14:de:bd:5b:7b:03:4b:7d:1f:59:04:3d:c5:fe:37:c4:2b:1e:
5d:05:ad:a2:a4:89:14:17:89:77:3e:17:09:0d:15:b5:df:5e:
a5:fb:0a:03:fb:2f:ce:0e:b3:74:cb:f1:27:da:2c:cf:67:67:
cd:d8:a5:1c:e2:1b:38:88:59:1c:c9:ee:77:8a:eb:f4:a9:4a:
30:fb:f2:5e:c8:e9:96:52:aa:f3:8a:19:ee:c1:3e:b5:37:33:
7e:1b:02:26:8a:83:4c:50:ba:2d:32:16:81:3f:43:5d:94:09:
36:dc:2b:29:61:0f:1a:fa:a4:6c:35:84:b6:33:99:fa:4b:8e:
64:1b:7b:07:64:06:5d:40:1b:bf:bd:53:d3:29:30:ac:2d:e2:
c8:50:13:96:dc:81:97:4b:50:1b:a4:91:28:31:eb:39:2f:89:
04:3f:79:b7:b8:27:c7:d0:d2:ac:a1:be:fd:c0:9c:f6:9f:60:
7b:9a:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:43:19 2024 by rpki-client on console-fra.rpki-client.org