Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/yXtKL8By05pfjEwJOaYsggM88Is.roa
File: yXtKL8By05pfjEwJOaYsggM88Is.roa (raw, json)
Hash identifier: 9cHcqXAZeVbEuzeg+RpOpYyBQ88Nwm5SbeOaic/6QEo=
Subject key identifier: C9:7B:4A:2F:C0:72:D3:9A:5F:8C:4C:09:39:A6:2C:82:03:3C:F0:8B
Certificate issuer: /CN=24d470214c69e430f8b385e0936ad960166acdf0
Certificate serial: 018CC3493F0BFA75422F90C7CE3106DBDD2E
Authority key identifier: 24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/yXtKL8By05pfjEwJOaYsggM88Is.roa
Signing time: Mon 01 Jan 2024 04:30:06 +0000
ROA not before: Mon 01 Jan 2024 04:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 213.255.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:3f:0b:fa:75:42:2f:90:c7:ce:31:06:db:dd:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d470214c69e430f8b385e0936ad960166acdf0
Validity
Not Before: Jan 1 04:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c97b4a2fc072d39a5f8c4c0939a62c82033cf08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:14:ae:33:dc:a8:8a:90:60:32:8c:63:3b:61:
39:8d:86:08:ab:06:ea:d2:0a:06:f8:be:1e:42:13:
69:4c:a5:4b:ad:3a:6a:70:2f:52:9a:f4:6e:bc:76:
1c:84:7c:f0:06:c7:0f:cf:7c:2c:7b:20:c6:75:f7:
c7:b9:6c:1e:0e:fb:91:7c:cc:36:44:38:11:7e:35:
4c:9c:06:8f:05:a3:c1:71:2b:54:7e:cc:4f:76:5d:
e5:5d:dc:5f:be:1d:c2:ac:62:3a:b1:fd:85:07:6d:
c8:27:1a:31:65:d8:3b:27:7f:05:67:bd:11:10:ed:
9f:0c:b0:dc:bf:4a:c7:84:06:fd:95:83:fd:6b:28:
85:1f:74:92:f8:6a:a5:fe:39:90:13:9f:3c:ff:3a:
97:25:43:c2:fa:8d:93:82:12:af:9d:14:5b:bc:84:
90:46:83:b6:e3:29:dc:d5:05:41:eb:04:d8:01:01:
32:b1:9b:d3:ba:ec:cc:97:29:c8:dd:29:96:4d:1b:
78:a8:15:1f:db:17:69:20:ca:9d:6e:c7:a5:ee:0d:
f0:9e:35:b5:a7:bf:6e:d2:cf:04:bd:54:0a:c8:6f:
6c:70:1c:29:5a:40:7e:18:59:80:72:ba:d7:9a:46:
22:1b:47:e8:96:4a:5b:b3:96:67:87:ad:35:ee:68:
7c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:7B:4A:2F:C0:72:D3:9A:5F:8C:4C:09:39:A6:2C:82:03:3C:F0:8B
X509v3 Authority Key Identifier:
keyid:24:D4:70:21:4C:69:E4:30:F8:B3:85:E0:93:6A:D9:60:16:6A:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/yXtKL8By05pfjEwJOaYsggM88Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1b9637-2795-4e7c-b33f-e28295e54c3c/1/JNRwIUxp5DD4s4Xgk2rZYBZqzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.255.206.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:eb:05:0e:c5:ea:bc:c4:74:4f:bd:b0:d8:b0:f7:ea:b8:75:
37:39:26:31:46:5b:8c:c1:8b:99:eb:05:bc:79:7e:e0:5d:bd:
b8:dd:ce:69:dc:54:61:60:67:d4:02:ec:86:46:24:eb:2f:2e:
ff:ff:55:54:c4:d7:fe:cf:9c:b5:c4:7d:a5:3e:e5:d0:24:b6:
21:ad:87:f0:ae:98:ff:10:af:04:d2:b3:e4:ce:4c:f0:2e:54:
46:26:9e:4e:00:52:9b:9b:77:68:d3:81:7f:7f:dc:74:5f:58:
b1:97:d1:e6:38:05:a7:ad:ef:b6:d2:0d:c3:36:18:21:7a:43:
d8:34:1b:5b:3f:22:47:e3:c3:a8:a5:22:b5:2e:3e:f7:73:82:
d6:5d:c1:5a:db:36:8d:13:26:4d:28:48:d7:02:b9:0c:c7:d5:
87:a5:a6:67:aa:39:18:fb:18:34:29:5d:8a:0c:dc:ae:a5:f2:
6e:3c:49:20:b8:72:ad:00:5c:49:01:ef:a3:3d:92:b6:b0:27:
7d:b2:db:ff:ea:3f:40:fd:be:bc:62:45:3b:c7:8e:fe:43:d9:
1f:ed:a4:76:d1:b9:06:fe:49:21:32:b4:9e:b5:6c:eb:1d:4a:
7c:5f:2a:93:4c:91:3f:c1:1b:32:1d:10:c2:ca:3e:8f:31:fe:
24:34:e6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:27:02 2024 by rpki-client on console-fra.rpki-client.org