Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/2YyvojmuJnam6QTpQX1Y_OG7mC0.roa
File: 2YyvojmuJnam6QTpQX1Y_OG7mC0.roa (raw, json)
Hash identifier: vMc0VjWXz2Kb9jefGsJLuZODjpFFpwtZUej2jlpx64Q=
Subject key identifier: D9:8C:AF:A2:39:AE:26:76:A6:E9:04:E9:41:7D:58:FC:E1:BB:98:2D
Certificate issuer: /CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Certificate serial: 018CCA2A27475B4B21EF4917D05FCEAA91D8
Authority key identifier: 99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/2YyvojmuJnam6QTpQX1Y_OG7mC0.roa
Signing time: Tue 02 Jan 2024 12:33:29 +0000
ROA not before: Tue 02 Jan 2024 12:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39062
IP address blocks: 195.66.158.0/24 maxlen: 24
195.66.158.0/23 maxlen: 23
195.66.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:27:47:5b:4b:21:ef:49:17:d0:5f:ce:aa:91:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=992c6e09c192c5580a4a1d294150d6237ab8925d
Validity
Not Before: Jan 2 12:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d98cafa239ae2676a6e904e9417d58fce1bb982d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:78:55:50:60:92:b1:cc:e4:40:69:bc:f8:90:
51:e9:17:5b:ef:f5:10:79:a2:32:f9:56:5e:71:84:
4c:5b:7b:f0:72:e9:ad:4a:62:f4:42:5a:04:a6:d9:
77:6e:c0:ca:36:7c:72:11:f0:23:30:7c:e5:56:d3:
cb:55:e6:bf:30:59:a3:8d:e0:b8:35:a1:06:d1:9e:
39:d0:5d:3a:16:1c:75:ef:1e:b7:d1:f8:a5:e7:44:
ea:29:77:1b:f9:49:8e:cd:28:a2:85:d1:b8:84:e0:
27:e8:23:21:cc:4e:06:11:7f:5e:87:d8:27:ed:86:
0d:8e:79:a2:82:1b:ff:6e:57:3e:1c:6c:5f:eb:a9:
01:89:d1:f1:9c:d3:ef:08:19:27:b9:37:c1:8b:ba:
d4:2c:02:5a:38:35:6e:dd:fd:0d:67:79:c3:8f:b9:
70:c3:58:3f:7b:0f:60:5c:79:b2:d5:ac:8f:44:b9:
d6:61:a2:bd:a3:72:70:69:1a:e5:87:70:9d:43:15:
83:51:56:32:75:f0:7c:06:1c:d4:3b:78:cd:0c:98:
9b:2b:a0:80:f1:43:9a:ad:f7:ff:b3:09:e7:cf:bd:
04:ff:97:cd:2e:12:83:af:85:d0:e6:58:a2:d8:88:
48:5d:40:65:1d:36:bf:3b:f3:fd:c6:fb:45:8d:dd:
37:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8C:AF:A2:39:AE:26:76:A6:E9:04:E9:41:7D:58:FC:E1:BB:98:2D
X509v3 Authority Key Identifier:
keyid:99:2C:6E:09:C1:92:C5:58:0A:4A:1D:29:41:50:D6:23:7A:B8:92:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSxuCcGSxVgKSh0pQVDWI3q4kl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/2YyvojmuJnam6QTpQX1Y_OG7mC0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/93dd43-9933-42ca-afc2-2c1891cacac7/1/mSxuCcGSxVgKSh0pQVDWI3q4kl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.158.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:de:bf:64:ed:bc:94:1d:36:eb:ee:98:d6:fe:fa:ea:3d:da:
f4:27:8b:6a:97:cc:9c:b8:68:83:67:83:bd:57:07:37:cc:17:
10:32:f1:cb:3e:f8:99:75:c6:3e:4e:cd:9e:5a:b4:88:9c:3e:
51:4a:09:78:44:72:17:88:e7:b3:3b:34:f5:06:8e:fd:e8:e8:
bb:e4:70:c5:a2:be:5a:83:e5:02:0d:b1:8e:06:a7:9c:a1:d8:
f6:f6:25:05:b7:2d:80:eb:85:ee:1d:0b:bd:9a:84:36:60:47:
81:53:7a:3e:c2:ef:fc:cd:79:d4:38:a5:4c:ac:2d:db:c7:2e:
6e:1d:4e:35:a5:28:7d:14:95:87:cd:a9:f2:04:3e:48:44:66:
c8:39:89:a9:0d:11:7c:d0:00:e9:13:c5:35:68:1b:c1:78:f8:
2d:a0:56:08:55:f5:22:3c:3b:3a:9a:2a:50:43:c9:dd:b6:66:
8e:1b:4b:52:b5:94:19:d9:22:cb:de:a7:cd:95:a8:b0:29:4d:
1d:6c:65:19:80:5c:c1:0d:bb:b5:a2:c2:28:24:01:cc:66:68:
49:b8:a0:f8:2a:78:15:50:17:64:2e:b1:13:8a:3b:55:b8:22:
a6:d7:d4:96:99:4d:30:19:75:fa:84:9a:a9:6f:4e:7f:b1:1f:
8d:17:84:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:20:52 2024 by rpki-client on console-ams.rpki-client.org