Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/YcZyx_Ih31WH0LoBqV9MJJo7M_E.roa
File: YcZyx_Ih31WH0LoBqV9MJJo7M_E.roa (raw, json)
Hash identifier: y3XEkJOa1u1yIccnHqqqITz60G1tqTov9f/vsLn0+38=
Subject key identifier: 61:C6:72:C7:F2:21:DF:55:87:D0:BA:01:A9:5F:4C:24:9A:3B:33:F1
Certificate issuer: /CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Certificate serial: 0190C2C3DD6CDDEC6D0C5BE7BACF73F9F78B
Authority key identifier: C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/YcZyx_Ih31WH0LoBqV9MJJo7M_E.roa
Signing time: Wed 17 Jul 2024 22:15:34 +0000
ROA not before: Wed 17 Jul 2024 22:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 401104
IP address blocks: 185.193.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.mft
rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c2:c3:dd:6c:dd:ec:6d:0c:5b:e7:ba:cf:73:f9:f7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d6b59a93e324083fbca4237e47e9f5ebf371ab
Validity
Not Before: Jul 17 22:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61c672c7f221df5587d0ba01a95f4c249a3b33f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:22:70:42:90:ab:f9:48:8e:be:6f:26:f9:2f:
7e:73:57:46:a6:cb:a8:3f:9d:1a:99:58:1b:7e:ae:
db:c9:84:9c:7d:0c:7b:60:8e:ef:5e:3f:4a:2c:8a:
b4:84:b7:ed:9a:fd:6e:39:ed:63:a2:bd:0a:44:09:
7a:77:34:9d:88:c5:7c:31:78:6f:29:05:2e:06:7b:
73:33:de:ae:42:06:4c:48:c0:5c:19:78:2f:f0:75:
56:31:d6:2a:c5:8c:63:61:5c:37:23:5c:8d:e7:83:
fb:2a:2b:af:0e:41:a9:f7:2a:5a:f3:6d:06:a7:31:
b2:b3:16:cb:af:0d:d9:76:c1:32:64:94:25:01:ac:
6e:7d:64:f4:e0:7a:b1:ac:d2:b3:de:90:c4:c8:83:
5f:55:cb:2a:79:40:05:08:df:99:41:e1:1b:d9:ec:
f8:6a:7c:ec:37:9d:b1:e6:41:c8:a8:35:43:2a:3e:
13:cb:79:2a:0b:03:be:c8:8a:3c:45:12:c1:01:dc:
a8:69:72:d1:01:8f:82:97:5c:b4:fe:e4:93:cc:1b:
45:a3:99:f5:bf:51:39:00:72:f2:5a:5b:10:84:6c:
70:c9:82:9c:ec:38:96:5d:5a:c4:6b:16:f5:e6:73:
74:30:cc:82:6d:2a:4b:61:17:21:0b:06:92:44:79:
1f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C6:72:C7:F2:21:DF:55:87:D0:BA:01:A9:5F:4C:24:9A:3B:33:F1
X509v3 Authority Key Identifier:
keyid:C9:D6:B5:9A:93:E3:24:08:3F:BC:A4:23:7E:47:E9:F5:EB:F3:71:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yda1mpPjJAg_vKQjfkfp9evzcas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/YcZyx_Ih31WH0LoBqV9MJJo7M_E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/682b07-773f-46fd-82e2-b9211e1fc1ac/1/yda1mpPjJAg_vKQjfkfp9evzcas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.166.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:99:58:8c:bb:30:c1:9f:ae:6c:a1:f4:ec:b8:db:19:af:d4:
17:85:8e:43:4d:0c:89:1f:d1:d2:53:07:a2:41:a5:4f:17:2b:
7b:fd:0f:13:29:8e:76:60:8a:07:d3:1d:37:11:60:cd:53:3c:
a0:eb:ee:38:87:ea:e8:6e:ee:24:4c:00:bf:1e:17:2d:b2:61:
63:21:55:fc:f8:9f:a6:07:64:a9:f9:ce:f3:c0:36:fe:a9:a4:
03:1d:93:ce:20:db:25:45:32:f2:1d:21:db:e9:63:74:9b:21:
1a:e1:4e:a7:75:1b:d7:fd:1f:37:cd:cc:50:60:63:e8:70:09:
b2:a3:33:1e:68:09:27:77:42:15:1a:1f:56:b7:ac:e6:53:ac:
50:8d:e5:21:b1:61:98:9e:1c:2c:f9:16:b2:cb:36:09:82:88:
34:05:79:f7:f3:53:db:35:b0:66:3a:c0:f5:38:46:a4:9b:69:
cd:d5:bd:56:2d:fd:2e:c2:12:87:45:41:16:d7:68:dc:da:12:
44:54:ff:b4:f9:57:f5:4c:a8:bd:4e:f5:81:fb:df:6d:3b:7a:
df:5a:ed:84:61:25:d2:02:ca:a8:d7:eb:1f:41:b2:6b:23:33:
1e:cc:e0:86:fb:8b:f2:70:2b:8c:3f:81:52:6c:b3:5f:ca:d1:
7d:cc:8b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:41:53 2024 by rpki-client on console-fra.rpki-client.org