Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/yYta0WxbFK3S6hfKYTggO5WduXQ.roa
File: yYta0WxbFK3S6hfKYTggO5WduXQ.roa (raw, json)
Hash identifier: Pm3q3S/rrhqmoTcroyAYx4mVknZdBKSqPw847nzjpAw=
Subject key identifier: C9:8B:5A:D1:6C:5B:14:AD:D2:EA:17:CA:61:38:20:3B:95:9D:B9:74
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 018CC8DEE3282C5786DE45FC18B32710D4F3
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/yYta0WxbFK3S6hfKYTggO5WduXQ.roa
Signing time: Tue 02 Jan 2024 06:31:39 +0000
ROA not before: Tue 02 Jan 2024 06:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43067
IP address blocks: 91.196.82.0/24 maxlen: 32
91.196.80.0/22 maxlen: 32
91.196.80.0/24 maxlen: 32
91.196.83.0/24 maxlen: 32
91.196.81.0/24 maxlen: 32
91.234.72.0/22 maxlen: 32
91.234.72.0/24 maxlen: 32
91.234.75.0/24 maxlen: 32
91.234.73.0/24 maxlen: 32
91.234.74.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:e3:28:2c:57:86:de:45:fc:18:b3:27:10:d4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Jan 2 06:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c98b5ad16c5b14add2ea17ca6138203b959db974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:f5:27:68:3c:1b:82:8e:2b:3d:00:43:88:
50:c8:9d:b1:c3:b6:d4:fd:43:99:c1:ba:a4:1c:51:
43:89:a3:83:11:aa:86:15:b6:3f:c4:7b:df:bd:ae:
46:c2:7f:35:53:9c:0d:fe:77:86:94:78:7d:21:ae:
4e:de:47:eb:2a:35:62:8d:18:56:e1:22:04:40:27:
5e:5b:da:f1:bd:46:24:71:6c:c0:a3:a9:37:05:27:
0c:88:15:32:65:3c:5a:2d:ef:94:ee:df:59:db:86:
d1:71:0a:c3:19:50:cb:b3:df:f1:3b:d9:aa:b3:e3:
74:af:9d:90:c3:cd:0b:ce:11:9b:a4:df:d6:dc:d4:
83:5b:77:31:85:36:6f:4b:5e:f7:05:7f:93:0f:75:
7d:d5:62:9a:d9:20:09:9a:85:9c:a8:4b:98:e3:a0:
e9:9a:80:68:5a:37:f0:60:0a:69:bc:fe:ce:2f:23:
2e:6d:47:ed:fd:e4:bc:d8:b3:46:ed:0e:31:64:9b:
bd:48:19:f2:d3:b5:af:aa:27:dc:ed:22:1b:d1:fb:
2d:12:e2:6d:49:7a:82:f1:1d:fd:21:33:b9:60:30:
1e:b8:da:af:fb:9e:65:ac:00:df:53:c0:a2:af:55:
45:e7:7a:50:3f:82:c0:5b:7a:29:97:5d:53:cb:44:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8B:5A:D1:6C:5B:14:AD:D2:EA:17:CA:61:38:20:3B:95:9D:B9:74
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/yYta0WxbFK3S6hfKYTggO5WduXQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.80.0/22
91.234.72.0/22
Signature Algorithm: sha256WithRSAEncryption
02:3f:c8:ad:7f:26:f0:4c:b9:72:33:5d:fb:37:30:cc:8e:d4:
c1:50:13:28:93:61:7f:4e:48:54:3b:a3:a6:58:2e:46:57:7a:
d6:28:d6:fb:2e:b8:7c:ba:de:1e:8e:2c:49:25:ad:09:f8:f0:
13:1b:14:f7:67:28:7f:ef:84:66:de:9b:f1:a8:a1:36:3c:2d:
f9:c2:9a:e9:9e:61:2d:4c:14:bb:cc:ff:07:fe:5a:1e:ca:53:
f3:e6:f1:db:22:ee:73:37:3a:a0:be:92:ac:cc:fc:38:2f:3e:
fd:f3:8d:54:ce:08:0d:d9:1c:ce:77:59:cd:37:70:f0:6a:4c:
a7:8b:38:0b:65:55:75:49:2f:24:6e:81:85:42:80:de:9a:4f:
08:ce:cb:70:46:36:c6:64:89:bd:cb:6c:29:e6:da:79:24:cb:
2b:60:08:92:2f:b0:a1:ef:57:c3:07:20:0f:c1:08:09:86:a9:
da:ca:8d:e9:0a:b8:6a:31:3d:09:7f:8e:4d:dd:44:e0:db:41:
45:51:99:3c:6c:10:93:eb:da:7e:d7:d7:99:00:fa:8f:b2:e0:
e9:08:ab:42:ad:6a:c9:39:e6:e2:8d:1b:17:3c:d5:32:e2:fd:
c4:05:33:63:35:7b:50:27:3a:8b:c6:db:32:77:de:19:bd:c3:
f3:14:67:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:42:00 2024 by rpki-client on console-ams.rpki-client.org