Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/Y7J5ZMIXaWR4QFgGZgzYz6sViPY.roa
File: Y7J5ZMIXaWR4QFgGZgzYz6sViPY.roa (raw, json)
Hash identifier: P4s6GLevOrx2CJ0bVX/4CvCtHDVfb2x8hCs8zG8YwEg=
Subject key identifier: 63:B2:79:64:C2:17:69:64:78:40:58:06:66:0C:D8:CF:AB:15:88:F6
Certificate issuer: /CN=92c71c2078a91e76c0e5a6d30096872c922c9cdc
Certificate serial: 018F80CE78922AC5DD6D5AF0B8A90097CDF7
Authority key identifier: 92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/Y7J5ZMIXaWR4QFgGZgzYz6sViPY.roa
Signing time: Thu 16 May 2024 09:49:25 +0000
ROA not before: Thu 16 May 2024 09:49:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201746
IP address blocks: 94.158.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:ce:78:92:2a:c5:dd:6d:5a:f0:b8:a9:00:97:cd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c71c2078a91e76c0e5a6d30096872c922c9cdc
Validity
Not Before: May 16 09:49:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63b27964c217696478405806660cd8cfab1588f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:20:63:d3:22:19:1c:58:89:de:e8:c1:b5:
4f:82:99:93:74:57:28:93:5b:14:64:2a:6f:f6:64:
a8:b9:2a:96:77:03:39:fa:f6:77:9b:d7:06:67:fa:
5a:41:9f:c8:f8:09:10:31:52:63:98:59:bf:bd:e9:
f1:5e:48:65:a4:48:01:c4:37:59:3d:7f:67:6e:cb:
55:0d:cb:37:7b:06:f6:e9:45:d7:02:50:70:27:db:
c8:40:d4:72:32:35:ad:93:50:8e:8d:64:5f:d4:92:
9d:2c:94:49:4a:c2:4f:bb:4d:b9:5b:ac:db:cd:1b:
76:18:ba:8d:5a:b7:59:cd:ff:82:a6:87:45:2c:c3:
5c:06:0f:9c:a9:50:ec:f0:7f:1e:06:dd:a3:88:2a:
a3:b6:e8:43:31:ae:8f:23:e4:33:8f:95:29:7a:35:
73:44:62:55:36:6e:65:59:eb:d7:5e:4a:cd:f1:95:
bd:6f:3a:f3:4c:26:e9:c7:96:74:d6:10:d6:51:d9:
d4:f2:b1:88:fe:59:87:5f:4d:57:7e:70:ae:56:67:
c2:b7:04:fd:e3:c4:ad:27:ae:41:70:13:28:0b:bc:
a7:58:9e:b8:c3:a0:a6:93:11:f5:40:0a:68:e8:60:
41:12:8f:43:6d:30:a4:fa:05:73:13:18:6f:48:5c:
4d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B2:79:64:C2:17:69:64:78:40:58:06:66:0C:D8:CF:AB:15:88:F6
X509v3 Authority Key Identifier:
keyid:92:C7:1C:20:78:A9:1E:76:C0:E5:A6:D3:00:96:87:2C:92:2C:9C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksccIHipHnbA5abTAJaHLJIsnNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/Y7J5ZMIXaWR4QFgGZgzYz6sViPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c17237-a134-4b11-ab12-9fb6b60bd69a/1/ksccIHipHnbA5abTAJaHLJIsnNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.158.254.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:c1:67:34:15:f6:b7:7d:9d:90:5f:c8:53:f0:df:5a:91:2b:
76:3b:d8:25:45:82:9e:3d:f4:4e:ac:a5:e7:d8:cb:b6:2d:98:
58:6d:1f:92:7f:7c:7e:f4:5c:94:93:8b:d2:63:92:0f:4c:ee:
87:da:4f:bc:5f:a4:bf:f6:e0:0c:34:33:24:da:01:b0:61:5b:
19:fe:39:fc:9b:06:86:e8:fb:ea:81:47:91:69:67:2d:d9:9c:
99:04:b4:64:49:8e:91:4f:09:ab:f0:e2:b3:45:67:1a:2a:14:
0c:16:4e:c6:af:cb:76:1b:d9:c2:c6:f5:ef:ba:ef:f4:33:2e:
1d:c7:20:d1:13:4d:39:76:af:8c:fa:a2:ea:f1:d9:dc:9f:e9:
4d:4f:cd:af:12:56:6b:53:07:2f:66:dd:ec:02:a8:3c:dc:bb:
57:ea:ff:41:9c:7b:7c:b6:e9:57:3d:89:34:18:5f:3b:5d:4c:
b9:28:92:3b:18:4e:a8:71:5a:21:9f:48:d4:8d:01:bc:18:51:
e1:f3:50:9f:6b:eb:18:10:43:99:67:2b:96:97:70:11:09:fb:
d5:7f:41:77:ae:25:bd:0c:e6:60:d5:5b:51:ba:73:5f:ca:01:
9b:2d:d5:e1:64:b0:17:77:23:9b:3d:49:ec:d7:c5:0f:ce:10:
d3:64:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:54:44 2024 by rpki-client on console-fra.rpki-client.org