Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/yVqw27HNE8RV8t8Kj8T-RYfPlCQ.roa
File: yVqw27HNE8RV8t8Kj8T-RYfPlCQ.roa (raw, json)
Hash identifier: mCkgHA6+2rF6iMrPKGstW3jhad0YFUB1J/ulGOqmC68=
Subject key identifier: C9:5A:B0:DB:B1:CD:13:C4:55:F2:DF:0A:8F:C4:FE:45:87:CF:94:24
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF8F76E60370AF7FA6E7351F4CB07B
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/yVqw27HNE8RV8t8Kj8T-RYfPlCQ.roa
Signing time: Tue 02 Jan 2024 06:32:23 +0000
ROA not before: Tue 02 Jan 2024 06:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213083
IP address blocks: 78.135.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:8f:76:e6:03:70:af:7f:a6:e7:35:1f:4c:b0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c95ab0dbb1cd13c455f2df0a8fc4fe4587cf9424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:13:d0:08:6f:34:db:dd:e3:f1:e3:e7:65:
60:f8:65:b0:4a:07:21:b3:dd:e7:56:5d:fc:bc:ce:
c2:e0:dd:d8:4f:fc:ab:ec:0a:dc:12:e9:6f:13:be:
0d:11:63:a2:f5:19:d3:f0:3c:f8:cc:96:05:b2:41:
ca:82:a2:12:23:11:24:ab:66:a5:02:72:b1:12:e7:
36:6e:0a:15:3c:d9:8f:7c:1b:1d:34:60:6d:47:12:
bf:02:93:a0:78:7a:83:4e:92:e2:9a:c2:e8:91:df:
4b:97:68:91:a3:03:5f:2a:1a:4f:ff:cb:89:43:ae:
9e:28:85:c4:97:74:7e:e0:f3:95:d3:df:8d:bd:8c:
aa:ac:85:cc:e9:83:b5:fd:f1:7b:c5:94:eb:23:36:
38:0a:a4:57:6c:18:84:30:d5:82:34:bb:9b:c1:5f:
48:94:40:81:a1:61:a9:7a:e3:fd:57:d9:7a:6e:65:
e1:27:17:c7:2b:ef:bd:b3:02:f1:bb:d6:76:73:bd:
d8:da:b4:69:70:9d:dc:f7:c9:db:ea:71:8b:bb:09:
92:b8:fd:b6:5d:0e:6a:24:c4:5a:19:0d:c3:39:5d:
71:15:57:9d:cb:12:4e:e1:4b:6a:53:b6:2b:7d:f1:
76:cf:1a:b1:ce:54:ce:ac:1b:8c:06:3e:17:59:e9:
66:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5A:B0:DB:B1:CD:13:C4:55:F2:DF:0A:8F:C4:FE:45:87:CF:94:24
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/yVqw27HNE8RV8t8Kj8T-RYfPlCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.101.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:d5:bf:8f:d3:43:e1:f0:f6:2a:cc:c6:96:d0:bc:63:a8:79:
39:0e:b7:ef:27:b6:38:74:2c:2f:27:59:28:14:4d:bf:af:08:
bc:da:98:60:fd:ed:10:69:1f:83:c3:08:02:0e:60:ae:dc:89:
ca:82:da:20:1e:43:7d:4c:b5:08:4c:3a:8a:f2:c0:1f:2c:c2:
15:98:b5:e9:a7:c2:a9:e5:d9:d0:90:da:ad:8f:3e:f4:ff:55:
d9:54:93:5e:d8:64:2c:64:2c:fe:ec:60:5c:cf:ba:12:e8:03:
af:38:db:3f:bf:b6:54:98:f1:4a:8f:23:f7:ef:18:09:85:23:
77:82:96:ca:34:c7:5b:f1:c5:87:e9:f1:41:b2:ed:04:21:6d:
11:4d:e5:d6:0b:68:ca:fd:9f:7d:bf:8b:1c:34:b0:9b:20:46:
7c:27:b0:f9:b1:d5:b4:86:c0:7d:a9:d0:df:78:3a:3a:74:d0:
27:31:60:6d:a5:f7:70:fd:27:2c:28:bb:08:8a:f3:ba:f6:a4:
4b:45:fe:95:f2:43:23:45:17:2f:9a:0c:45:95:16:00:71:52:
78:94:37:68:f9:27:c4:cd:82:21:58:1f:27:b7:81:be:72:08:
92:30:ce:8e:c0:b2:33:36:71:0d:4c:90:e6:4e:83:3d:76:09:
e2:c7:09:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 13:44:25 2024 by rpki-client on console-fra.rpki-client.org