Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/YpYXSsHz-IOhLpwBw1zNhPLvKsg.roa
File: YpYXSsHz-IOhLpwBw1zNhPLvKsg.roa (raw, json)
Hash identifier: C1YW5NMW3MT2ttA3epFcu6MtwH402XpVWDeJnPuMAJQ=
Subject key identifier: 62:96:17:4A:C1:F3:F8:83:A1:2E:9C:01:C3:5C:CD:84:F2:EF:2A:C8
Certificate issuer: /CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Certificate serial: 018EADD7F15B7C03C8DF177B47FD91CE1323
Authority key identifier: 81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/YpYXSsHz-IOhLpwBw1zNhPLvKsg.roa
Signing time: Fri 05 Apr 2024 10:39:54 +0000
ROA not before: Fri 05 Apr 2024 10:39:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16238
IP address blocks: 217.73.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.mft
rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ad:d7:f1:5b:7c:03:c8:df:17:7b:47:fd:91:ce:13:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8110149fd12130b3cdcf35862b0dcdb98a9471c9
Validity
Not Before: Apr 5 10:39:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6296174ac1f3f883a12e9c01c35ccd84f2ef2ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f6:79:e1:d9:74:11:24:12:09:f3:f5:5e:5e:
b1:1d:92:b4:26:e4:77:f2:a3:be:00:2b:db:50:75:
29:e4:22:f9:53:6b:4b:78:12:05:02:c6:8f:4d:64:
88:e1:be:e6:7c:2e:43:e9:61:d9:c2:c8:a2:be:89:
9a:54:4c:2d:80:c3:f7:63:b0:3b:02:07:81:b2:96:
dd:48:2c:51:4a:6a:31:a2:b6:e2:e2:ee:2c:f9:c3:
a1:e7:aa:0d:2e:d5:b4:db:45:92:97:6b:03:79:52:
0e:4a:5f:2f:71:18:6d:6c:1e:18:da:34:5d:04:b9:
3f:67:cf:b1:b9:34:70:93:7d:88:c0:78:29:9b:2a:
d2:70:b9:1a:2e:c0:1e:60:c8:1e:fe:33:e8:c9:4f:
8b:a1:16:1e:8a:f5:a4:8f:76:6f:5b:e2:f9:9a:76:
c9:c2:58:fd:6a:e4:95:16:a3:52:2a:01:04:ce:93:
ab:75:24:fe:a7:25:7a:97:93:af:a7:e5:fa:8e:c7:
85:7c:f3:3e:79:ef:d3:c7:82:c3:53:84:7b:90:5b:
b2:d2:e3:88:7a:cd:33:3c:85:13:c1:bb:40:99:42:
df:2e:96:08:88:fa:e8:c1:59:35:f8:bc:f1:fe:5c:
7d:02:69:62:4a:17:50:d5:70:1b:9f:4f:4c:63:bb:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:96:17:4A:C1:F3:F8:83:A1:2E:9C:01:C3:5C:CD:84:F2:EF:2A:C8
X509v3 Authority Key Identifier:
keyid:81:10:14:9F:D1:21:30:B3:CD:CF:35:86:2B:0D:CD:B9:8A:94:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gRAUn9EhMLPNzzWGKw3NuYqUcck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/YpYXSsHz-IOhLpwBw1zNhPLvKsg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/48db10-3ba8-4e80-b3dc-ab31eacbffca/1/gRAUn9EhMLPNzzWGKw3NuYqUcck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.73.79.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:ab:e2:a3:a7:93:f6:ab:1a:8b:ee:5f:82:4e:e4:79:39:62:
b5:7b:f1:34:d7:20:89:9a:a6:35:25:6d:cc:10:a5:f5:d4:4e:
8d:71:87:7e:fb:88:22:31:20:29:d4:69:33:b8:c8:7d:d2:86:
db:4e:20:5d:ae:0b:89:8a:d6:45:3b:fc:d0:27:20:41:ac:3d:
4f:bf:4a:47:f6:fe:e6:80:55:ac:fe:ac:37:0a:07:60:2a:37:
fa:b2:47:b0:e8:ea:06:8d:46:35:33:06:da:14:2e:4f:ce:f5:
aa:e7:1e:89:d7:6f:40:10:63:9d:c1:4d:8d:c3:b7:a5:02:14:
75:31:fb:9a:43:06:26:80:ee:d6:80:e6:ab:37:4e:7f:fd:b1:
d4:a3:c2:53:dc:62:8e:3c:94:15:62:ab:95:53:78:79:01:fe:
a6:c8:ee:c8:3a:25:4f:76:1b:73:6b:ef:71:85:e4:30:90:77:
04:69:8a:d2:91:4a:11:15:20:f3:e8:4d:c7:49:2d:87:9a:dd:
d8:0d:6b:e2:cc:b4:19:02:d1:70:d3:a4:52:41:75:24:79:43:
89:88:30:f3:75:66:4b:78:57:43:1a:03:63:6c:2c:11:25:fb:
7b:93:31:20:7b:98:de:ee:ba:37:c8:96:ca:99:7b:12:3c:14:
19:cc:0b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:36:32 2024 by rpki-client on console-fra.rpki-client.org