Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/yuWYmozkx1wv-d6rHUVXUk5JNSg.roa
File: yuWYmozkx1wv-d6rHUVXUk5JNSg.roa (raw, json)
Hash identifier: jRYFllQB+S07a1fBdnliSUMtzIiAfHKqb80rZCEm9P4=
Subject key identifier: CA:E5:98:9A:8C:E4:C7:5C:2F:F9:DE:AB:1D:45:57:52:4E:49:35:28
Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial: 018CC80182406AA1E733A39B8387A58D3832
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/yuWYmozkx1wv-d6rHUVXUk5JNSg.roa
Signing time: Tue 02 Jan 2024 02:29:51 +0000
ROA not before: Tue 02 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205774
IP address blocks: 91.233.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:82:40:6a:a1:e7:33:a3:9b:83:87:a5:8d:38:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Validity
Not Before: Jan 2 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cae5989a8ce4c75c2ff9deab1d4557524e493528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:26:4c:2b:52:d2:3a:51:0f:75:61:c7:7b:a6:
b0:37:52:62:2d:ab:5b:3d:85:10:67:94:27:96:c3:
2c:6f:e1:38:a8:78:73:e7:32:85:b9:0d:fe:22:22:
ec:97:de:12:45:78:b9:95:3f:e7:97:bf:70:17:fd:
d2:d6:eb:20:fa:8a:95:04:6d:d1:c9:78:a1:4d:07:
7b:0c:69:66:db:50:c0:0e:ea:07:d8:f4:4e:27:11:
11:ee:2e:2f:08:1b:3b:c3:e9:b5:ca:1d:1e:37:21:
e8:09:06:c3:81:e5:09:5f:f6:cb:0a:75:29:95:22:
1c:cf:bf:2a:48:59:e4:71:cc:b6:45:16:c3:52:46:
bd:c1:f8:7d:00:67:e9:b7:5d:77:8e:c9:36:4d:fe:
95:10:3a:62:d1:4a:6c:8f:a1:56:69:7e:49:df:17:
af:b3:f5:2d:08:53:f2:a0:4b:96:2f:8c:9a:26:51:
ac:5c:a0:73:72:b1:34:13:bf:0f:6f:e6:d1:5f:08:
fe:2a:17:c6:c9:13:97:03:23:53:ef:dd:9a:bc:bb:
c7:e7:ab:24:8e:9d:40:39:ea:7a:71:88:8c:78:b5:
a7:ce:13:9a:b0:a3:a0:24:93:18:f6:48:11:eb:29:
13:45:36:5f:b3:bc:1b:b7:11:46:e1:55:58:6b:c7:
2e:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E5:98:9A:8C:E4:C7:5C:2F:F9:DE:AB:1D:45:57:52:4E:49:35:28
X509v3 Authority Key Identifier:
keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/yuWYmozkx1wv-d6rHUVXUk5JNSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.36.0/23
Signature Algorithm: sha256WithRSAEncryption
95:66:8b:b7:b8:f6:c5:c8:29:3b:f6:f2:0f:6b:74:a5:13:24:
60:b4:a1:83:ce:bf:5f:3a:f1:b3:a4:f1:23:01:c4:c0:16:f8:
08:9a:03:8d:c5:4c:a0:d5:81:03:4e:db:f0:4d:e4:ae:99:7b:
90:c4:85:37:05:cd:7c:b5:26:dd:5b:38:ed:47:49:1b:4c:5f:
72:20:c9:c3:e8:13:4d:83:f9:45:35:45:1e:56:ec:4a:06:9a:
0e:91:ee:ec:71:f4:38:86:d5:d8:ae:ac:1f:7a:22:e0:18:c2:
0d:c1:e2:c3:11:42:4e:eb:43:d8:6d:b5:49:36:01:df:2e:b1:
3c:ae:36:dd:4a:13:41:ec:a3:9c:b7:89:b0:47:39:68:e4:f7:
7c:72:15:24:09:0a:b4:f7:0d:7c:78:b7:fb:c6:6b:ea:8c:ed:
27:fd:01:cd:b1:35:a4:09:1b:bf:21:03:1a:29:db:96:44:59:
7b:22:bf:44:cd:a7:87:f1:16:0e:47:68:82:5f:e5:2f:c5:7b:
1c:51:9e:29:00:d5:14:95:6a:cc:ff:ac:b0:2f:5e:e8:61:5c:
e6:3d:18:a2:cc:06:6f:15:8c:3b:0f:47:1e:af:f1:fb:e8:4d:
df:7d:a8:e4:a2:ca:6d:14:b0:a0:2e:f7:65:eb:e8:67:fd:2d:
f1:f2:9e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:30:08 2024 by rpki-client on console-fra.rpki-client.org