Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/YAmy0iqh1Ek1zMHipotgF_eX_5c.roa
File: YAmy0iqh1Ek1zMHipotgF_eX_5c.roa (raw, json)
Hash identifier: MffuGg8Ug5wBarMpA0XZVpCMLkICZSpVd4IIW9uem/g=
Subject key identifier: 60:09:B2:D2:2A:A1:D4:49:35:CC:C1:E2:A6:8B:60:17:F7:97:FF:97
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 018CCA29DAC146CFC5BE6A7891B89B1D1C42
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/YAmy0iqh1Ek1zMHipotgF_eX_5c.roa
Signing time: Tue 02 Jan 2024 12:33:09 +0000
ROA not before: Tue 02 Jan 2024 12:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201826
IP address blocks: 5.42.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:da:c1:46:cf:c5:be:6a:78:91:b8:9b:1d:1c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Jan 2 12:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6009b2d22aa1d44935ccc1e2a68b6017f797ff97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:13:ac:0c:e3:6b:5e:6e:c5:0c:8e:bb:80:a7:
4f:12:af:80:e7:fe:88:b3:25:66:39:fd:08:1a:98:
60:99:80:a0:93:f0:5c:16:07:60:61:38:36:e3:4f:
3a:6f:92:63:ec:53:52:6a:4b:17:af:b5:3d:c9:f9:
c7:16:6a:3a:ef:0e:56:35:61:59:68:0f:dc:64:5d:
85:14:c8:4f:b1:bb:fa:e5:06:89:1b:30:1a:3d:61:
35:90:48:3b:ad:49:41:f8:85:9f:90:86:4b:88:d7:
94:c8:da:64:c1:a9:32:39:9f:5a:f4:00:e9:55:2c:
e0:9b:ef:5d:d3:d8:ce:bf:cb:00:db:cb:b8:e9:1d:
6b:9e:be:da:e6:4d:ae:94:d0:ed:09:85:a2:3d:6c:
89:f2:98:63:28:d9:33:d0:cd:d0:e1:64:8f:98:cb:
ff:38:5c:c4:72:f9:72:01:b8:3c:37:6f:db:29:9e:
b6:e8:c4:1c:e2:fd:1a:78:62:d8:47:8a:1e:66:1e:
f7:44:c8:66:82:81:67:9c:6e:66:23:e4:98:e4:83:
ae:7d:0a:5a:6b:0a:e7:15:3d:0e:e1:fc:7a:81:17:
dc:a3:51:51:8e:40:75:6d:34:55:20:17:cd:5e:12:
4a:e1:89:99:fa:d4:9f:5e:b1:64:ea:dc:23:f1:ab:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:09:B2:D2:2A:A1:D4:49:35:CC:C1:E2:A6:8B:60:17:F7:97:FF:97
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/YAmy0iqh1Ek1zMHipotgF_eX_5c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.88.0/24
Signature Algorithm: sha256WithRSAEncryption
54:59:17:a4:dc:4a:89:63:8f:7a:f2:46:f5:c3:bc:5e:87:59:
80:6a:a7:ff:f4:65:eb:f8:2e:ee:6c:0c:ab:b2:41:37:9e:4c:
17:c4:76:0e:53:b7:49:a9:02:d2:77:62:bf:92:2d:8a:94:dd:
0b:52:12:23:80:0b:2c:14:9e:51:d9:50:48:ea:38:2e:9d:86:
f2:f1:ce:8c:22:66:6a:69:89:9b:ec:f8:37:00:ed:2b:ad:d4:
25:91:ae:e0:e3:8e:e0:77:a9:67:47:65:c9:43:3f:75:c8:e4:
7a:d7:aa:4a:77:a3:fa:8e:b8:08:2e:3c:c6:98:f0:15:ab:81:
74:8a:f2:29:35:e2:89:98:28:aa:5b:cc:73:dd:e4:97:2e:f4:
87:18:82:48:35:17:0e:90:9b:3c:ec:e0:f2:fe:76:c0:15:c7:
f1:41:7d:a8:c9:25:66:b3:6a:2a:43:42:d7:4a:4b:13:11:24:
0f:27:b1:9e:0c:16:60:f5:3c:87:38:b7:31:60:cc:de:72:13:
ef:a2:e6:e6:c4:91:1f:e0:b3:d9:cf:5b:73:75:51:d1:6d:70:
c0:4b:1f:6c:70:63:21:59:23:0c:c6:93:26:f4:a9:bc:2c:06:
04:e3:73:f0:e1:e5:70:d9:be:72:36:e6:ff:2b:18:20:01:9e:
18:22:4d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:11:06 2024 by rpki-client on console-fra.rpki-client.org