Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/YIC5MN71Y9Waov2_kJpy-cMuXfM.roa
File: YIC5MN71Y9Waov2_kJpy-cMuXfM.roa (raw, json)
Hash identifier: lGaZQ2wA4/XSMhN0S+4TR7oyVoPqTkup6QbhL8OT8rM=
Subject key identifier: 60:80:B9:30:DE:F5:63:D5:9A:A2:FD:BF:90:9A:72:F9:C3:2E:5D:F3
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF7CAA4759B2850C9E3205A1F7561F
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/YIC5MN71Y9Waov2_kJpy-cMuXfM.roa
Signing time: Tue 02 Jan 2024 06:32:18 +0000
ROA not before: Tue 02 Jan 2024 06:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47721
IP address blocks: 188.132.174.0/24 maxlen: 24
78.135.77.0/24 maxlen: 24
78.135.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:7c:aa:47:59:b2:85:0c:9e:32:05:a1:f7:56:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6080b930def563d59aa2fdbf909a72f9c32e5df3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:42:de:44:ca:54:ef:77:ee:5b:9c:e9:41:
6c:af:3f:88:65:a6:01:8f:32:11:e7:91:3e:ba:36:
46:f0:e0:e8:16:71:26:d0:50:41:2b:4d:39:43:5b:
46:f7:0b:81:e1:9a:77:3c:b6:4b:42:6c:0e:65:46:
80:2f:cc:01:39:dc:87:b1:e8:8d:e9:ce:8d:de:47:
47:09:de:f2:ee:63:61:ba:9e:dd:4e:47:16:62:12:
91:f7:7a:eb:32:d9:49:5d:ce:1f:fb:23:da:01:c2:
32:e7:b1:c7:b9:2c:f7:32:42:c1:34:9c:8c:a5:c1:
70:c6:42:8c:cf:7a:7c:80:46:8f:08:a7:57:01:db:
87:17:a1:82:b5:af:4f:be:bf:ca:e9:f0:c8:7b:59:
e4:15:69:ce:ac:34:db:f5:8a:d9:a9:a8:a0:3a:96:
e4:9c:ad:d3:e7:78:15:ed:a2:8f:d1:2f:fe:91:24:
8d:96:33:37:90:3f:2c:af:e3:d9:29:2d:49:dd:0e:
a7:d9:e6:b5:a0:2e:11:26:b0:1f:49:b6:b5:e2:0a:
3e:38:b9:d5:f4:43:09:2e:a2:60:d5:e5:f5:12:31:
4b:a6:09:46:ad:24:8c:bc:24:e1:d5:0e:9b:c2:c6:
67:c4:04:cc:40:83:ba:ed:b7:ac:01:63:23:74:3b:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:80:B9:30:DE:F5:63:D5:9A:A2:FD:BF:90:9A:72:F9:C3:2E:5D:F3
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/YIC5MN71Y9Waov2_kJpy-cMuXfM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.77.0/24
78.135.90.0/24
188.132.174.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:6c:17:62:8f:54:d0:f1:69:9b:0c:62:02:08:c3:e3:5b:5d:
b8:ba:22:2d:af:bb:70:57:0d:69:81:d7:2a:d4:f0:b4:d9:6c:
e3:f0:92:f9:b9:c2:d9:ae:19:8a:4b:81:d0:bd:d2:ef:ec:28:
72:9d:fb:e9:66:c5:f6:d5:39:80:d0:62:30:92:45:92:73:54:
73:c4:63:cd:71:07:cf:f6:01:15:45:ab:b1:d2:b3:49:b7:32:
a7:48:8a:ae:18:fa:2c:1f:d4:76:b8:7b:b6:81:c4:cc:b8:fe:
69:e4:07:0a:7e:a4:73:76:21:bc:ab:04:b4:6e:2b:c0:41:60:
17:6c:19:97:f2:d2:08:4b:7a:81:2c:a8:1f:80:af:88:a9:c9:
c1:cc:b5:a3:92:f8:c8:6f:c8:ad:5c:5d:75:52:23:bf:53:ca:
37:c3:ba:48:8c:03:3c:be:cb:94:fa:41:7e:31:22:2c:f4:a2:
86:ca:e4:8b:9c:3f:68:16:e5:51:73:2d:1e:e3:f8:f4:1f:b5:
53:90:b6:18:cb:86:95:71:4b:e4:2d:1f:6f:fb:33:ab:e1:ac:
4b:f2:5a:eb:1a:0d:ed:e7:fb:5a:c3:b2:65:ca:fb:ec:e5:f8:
f4:cf:ed:ab:2a:13:e8:ad:fa:61:5c:ce:d3:1d:06:17:c0:8e:
6d:cd:a7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:44:25 2024 by rpki-client on console-fra.rpki-client.org