Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/y53LCrbgOMChJ36WqlbjNE7PFdA.roa
File: y53LCrbgOMChJ36WqlbjNE7PFdA.roa (raw, json)
Hash identifier: rsLPYmR6sei3gVPRHl3c66WhsGjFMylBen1pqjLSk1s=
Subject key identifier: CB:9D:CB:0A:B6:E0:38:C0:A1:27:7E:96:AA:56:E3:34:4E:CF:15:D0
Certificate issuer: /CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Certificate serial: 018CC94DBF2EEE74BC9F51AF68CCA5B83499
Authority key identifier: 9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/y53LCrbgOMChJ36WqlbjNE7PFdA.roa
Signing time: Tue 02 Jan 2024 08:32:44 +0000
ROA not before: Tue 02 Jan 2024 08:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15830
IP address blocks: 185.97.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:bf:2e:ee:74:bc:9f:51:af:68:cc:a5:b8:34:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e0374d71bc57db96dc393e91febb9e9d59fef9a
Validity
Not Before: Jan 2 08:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb9dcb0ab6e038c0a1277e96aa56e3344ecf15d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:66:d5:5f:12:17:12:9d:c1:b9:b7:2b:a5:b3:
f3:52:e6:f7:25:1d:49:54:a9:76:a7:d2:cc:01:80:
1c:a6:7e:e1:10:1f:16:4c:a2:e9:2a:25:d1:46:91:
98:b3:ae:3e:44:e2:38:90:41:97:b6:0a:55:07:3c:
65:c1:b9:cc:24:08:0f:20:8b:b3:34:61:1f:b1:ef:
d9:b7:e2:c5:16:9d:ee:f2:19:45:1b:f0:0d:17:1c:
6e:0d:e3:b5:6e:24:5c:be:21:66:8c:5b:39:4e:fd:
9a:24:10:6e:b2:77:bc:2f:ff:56:d7:57:54:1d:25:
31:d7:0d:ce:a5:4f:93:d1:c9:52:99:a4:88:5e:74:
15:2e:ac:1a:77:3c:21:fd:42:33:6e:18:2f:d3:2e:
d2:d5:6b:3b:e3:1d:8f:e0:2a:0b:70:df:26:9d:82:
3d:e5:83:0d:8b:39:2d:49:2a:b9:2f:84:e2:34:27:
dd:ea:ea:27:8e:77:9f:4b:ce:20:a7:6b:95:5e:ee:
a1:0a:38:cf:aa:13:4e:d1:9f:4c:63:18:ad:60:7f:
99:e2:a7:ef:da:33:8e:11:33:a4:71:fd:bf:0f:ff:
8a:a7:3b:83:d8:bd:f2:da:7f:d8:bf:37:e8:50:0a:
3f:4f:d0:8a:84:bb:ab:02:cc:83:d8:f2:27:cd:8e:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9D:CB:0A:B6:E0:38:C0:A1:27:7E:96:AA:56:E3:34:4E:CF:15:D0
X509v3 Authority Key Identifier:
keyid:9E:03:74:D7:1B:C5:7D:B9:6D:C3:93:E9:1F:EB:B9:E9:D5:9F:EF:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ngN01xvFfbltw5PpH-u56dWf75o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/y53LCrbgOMChJ36WqlbjNE7PFdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c43a75-a326-4c6d-87ca-817d84e53d53/1/ngN01xvFfbltw5PpH-u56dWf75o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.97.11.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:71:ef:bd:67:3e:0d:87:68:ec:6d:d2:25:4b:1b:99:83:08:
18:42:0f:10:d6:57:cd:52:4c:07:e5:42:96:52:b0:e3:f5:78:
44:3f:43:22:47:a0:5e:3b:bb:d9:b1:5c:ee:e0:5c:68:80:89:
cd:d6:30:dd:2a:19:a5:5c:92:1c:d6:7d:2b:5e:04:12:43:d2:
75:c2:13:1b:5d:5c:2f:bc:de:05:9d:00:f3:69:fc:09:49:44:
aa:3c:d7:7a:ba:c4:e6:fa:80:a1:16:16:11:2a:ff:9a:20:f1:
c9:78:74:b9:e0:80:9c:48:7b:19:01:30:f2:c3:9c:20:02:02:
0d:72:98:ea:55:0e:83:09:41:b2:4a:19:29:78:59:4d:6b:a4:
77:8d:ff:16:d5:6e:18:8e:ee:ef:38:f0:88:0a:67:06:38:bf:
5f:26:95:53:41:60:25:2b:2d:c7:93:56:68:31:e6:50:94:35:
31:d6:ff:85:f9:23:ce:3b:dd:77:45:c3:1a:e5:d9:44:96:d7:
86:45:54:33:99:38:4b:4b:90:af:b6:34:9c:5c:3b:57:ee:01:
53:51:7c:51:f8:db:37:aa:e2:4e:09:fe:b4:ab:f5:2f:a5:0c:
70:d7:d9:ed:3b:c1:09:43:dd:ec:1f:03:0a:50:08:60:13:c1:
84:99:2d:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 02:58:20 2024 by rpki-client on console-fra.rpki-client.org