Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/pYqsk_kckly73VouGYpgNq3us2Q.roa
File: pYqsk_kckly73VouGYpgNq3us2Q.roa (raw, json)
Hash identifier: SM7inAvXt5CqUMaNI3YuNWCBf2HnzWWZbAzC5NMBifI=
Subject key identifier: A5:8A:AC:93:F9:1C:92:5C:BB:DD:5A:2E:19:8A:60:36:AD:EE:B3:64
Certificate issuer: /CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Certificate serial: 018CCA294AD5293861FDBBC749C24DFA1D67
Authority key identifier: AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/pYqsk_kckly73VouGYpgNq3us2Q.roa
Signing time: Tue 02 Jan 2024 12:32:32 +0000
ROA not before: Tue 02 Jan 2024 12:32:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48894
IP address blocks: 193.9.21.0/24 maxlen: 24
91.226.99.0/24 maxlen: 24
91.240.216.0/24 maxlen: 24
193.104.240.0/24 maxlen: 24
91.223.182.0/24 maxlen: 24
195.206.228.0/24 maxlen: 24
195.206.229.0/24 maxlen: 24
2001:67c:2468:8000::/49 maxlen: 49
2001:67c:2468::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:02:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:4a:d5:29:38:61:fd:bb:c7:49:c2:4d:fa:1d:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad883a86e82d0d910fcf59f8ff9f7bf1a6714870
Validity
Not Before: Jan 2 12:32:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a58aac93f91c925cbbdd5a2e198a6036adeeb364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:dc:f4:8d:82:81:66:48:98:df:7c:84:97:f8:
3f:b0:a9:77:6e:b2:cb:db:98:32:00:7d:96:85:29:
5a:a4:ca:c4:a6:c0:46:b8:4b:a0:72:2a:7b:2e:75:
20:51:43:6b:5e:fb:0b:5e:03:4e:14:ff:2e:23:22:
f8:b7:1a:56:a1:a8:b9:99:78:6d:eb:d9:a7:e3:0b:
7f:76:77:16:6c:f0:9c:01:3d:e7:b8:c7:d2:7c:f8:
d7:3b:f5:7d:11:66:86:3e:40:40:ba:5a:60:60:2f:
03:bc:a0:d1:4b:5c:cb:cc:64:c0:35:24:98:08:7a:
44:72:f8:d3:da:88:db:62:92:c4:76:d7:1d:96:97:
e6:fe:59:53:32:23:cf:de:c6:1f:54:a9:47:7f:37:
9e:17:db:4a:28:e3:75:41:bc:a6:94:55:15:20:07:
d3:70:13:23:77:01:5a:21:db:0d:3a:83:a7:7b:98:
ca:a5:23:94:c1:1f:f3:ed:ea:3d:fd:e2:f6:23:32:
d7:9a:fc:bb:dc:e1:bd:2f:6e:07:b7:ad:26:d3:a8:
41:b2:dc:ac:82:25:2c:ba:70:35:e4:8b:26:2e:ae:
42:2b:73:20:30:96:3b:95:68:4c:6b:a1:9c:81:9e:
f8:c9:8e:a1:93:3a:c6:24:ee:b3:53:b2:14:b0:b9:
41:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:8A:AC:93:F9:1C:92:5C:BB:DD:5A:2E:19:8A:60:36:AD:EE:B3:64
X509v3 Authority Key Identifier:
keyid:AD:88:3A:86:E8:2D:0D:91:0F:CF:59:F8:FF:9F:7B:F1:A6:71:48:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rYg6hugtDZEPz1n4_5978aZxSHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/pYqsk_kckly73VouGYpgNq3us2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7b056d-09f7-4f12-b1a2-a56bf0cf4cbe/1/rYg6hugtDZEPz1n4_5978aZxSHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.182.0/24
91.226.99.0/24
91.240.216.0/24
193.9.21.0/24
193.104.240.0/24
195.206.228.0/23
IPv6:
2001:67c:2468::/48
Signature Algorithm: sha256WithRSAEncryption
ac:94:9c:31:e6:fd:7c:91:7c:09:b3:78:38:8d:9b:3d:fd:ee:
f2:c2:0f:3c:dc:be:a8:ff:94:8a:0b:ca:d0:7d:e1:9a:b7:2e:
7a:1a:ef:64:fc:56:8b:db:57:e6:d5:d9:14:a1:e7:b0:a2:00:
3b:28:10:3e:3e:40:f7:0a:cc:0c:95:fc:dc:58:d5:98:ec:90:
eb:c3:56:23:63:90:b0:8d:9a:dd:c6:65:48:11:ca:ed:30:c4:
3b:6b:a7:c4:5c:ae:09:b0:d7:1d:c2:8d:28:ed:31:30:d0:52:
01:9e:9c:ca:45:8c:78:e0:d9:6a:f7:f3:13:8e:23:1f:e7:42:
2b:82:f2:2a:64:f6:88:16:ad:29:60:0b:cb:72:f8:f7:3b:e6:
88:ec:9f:cf:02:28:4b:ab:fb:27:ca:4b:f7:d6:4a:2e:b6:28:
52:0e:01:f7:70:83:fc:0b:2c:70:dd:99:b8:0b:06:dc:cf:9a:
1e:9f:bd:bc:5c:fb:e6:46:32:d2:5f:bb:c0:3f:18:27:bd:26:
62:d3:a5:b4:36:0b:b2:71:e0:5c:ed:e7:5b:10:61:24:2e:ab:
5b:d6:b2:f0:4b:6c:41:09:b5:52:62:83:0b:40:be:63:a3:e9:
68:14:b3:4c:8b:fa:3e:26:39:ca:07:dc:41:4c:7f:b2:7b:fe:
5a:3d:e1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:33:57 2024 by rpki-client on console-fra.rpki-client.org