Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/rYCUqNavSCplGVZUIEeSN5JOv4w.roa
File: rYCUqNavSCplGVZUIEeSN5JOv4w.roa (raw, json)
Hash identifier: TCfG91WtHnb2hVtEjD8MgtDBWOWxWV9/hL6i76tVj8g=
Subject key identifier: AD:80:94:A8:D6:AF:48:2A:65:19:56:54:20:47:92:37:92:4E:BF:8C
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 018CC492C537FC5530FD7E689BA9F144B20E
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/rYCUqNavSCplGVZUIEeSN5JOv4w.roa
Signing time: Mon 01 Jan 2024 10:30:02 +0000
ROA not before: Mon 01 Jan 2024 10:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205937
IP address blocks: 93.94.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:c5:37:fc:55:30:fd:7e:68:9b:a9:f1:44:b2:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Jan 1 10:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ad8094a8d6af482a6519565420479237924ebf8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:bc:76:26:a2:f8:f5:60:1c:74:7b:d1:26:df:
cd:53:b1:53:e9:09:5f:71:22:df:18:eb:7b:f1:8d:
cc:b8:d8:4c:7a:c5:c1:73:5d:24:c3:0e:d6:51:04:
0c:e4:cc:1a:10:d8:0d:76:42:2c:64:87:c8:9f:3e:
01:93:70:4b:bf:d4:b0:c2:ec:b7:8d:a6:97:c2:3c:
7b:80:de:9d:79:c9:16:1f:e2:16:60:90:5e:1d:0a:
e4:f2:06:d4:c2:1f:e4:49:ef:8f:81:2d:64:c9:cc:
f9:39:f5:a0:9f:2e:29:8e:37:66:bd:75:17:f5:33:
ce:55:21:6b:fe:0b:e0:5b:c0:c4:c6:0c:fc:56:f4:
7e:77:fc:f9:1f:17:4d:59:9e:4b:c1:f9:5c:51:d6:
36:db:bb:e5:4f:25:ca:0b:f0:4d:9b:63:02:70:47:
85:bd:90:5d:3c:bd:c8:ef:56:48:95:f8:d2:ea:fe:
22:02:51:83:1a:46:68:be:90:52:5e:29:71:76:a1:
61:c3:f7:9a:95:42:ed:f0:a9:65:38:b6:d2:d0:6b:
2f:9b:47:70:ba:58:34:f7:94:08:79:8a:f8:13:d0:
1a:c6:7d:99:b6:9a:7e:cd:ff:99:26:bd:ca:4a:8a:
a2:18:38:8c:b2:69:70:56:fa:60:97:af:aa:37:46:
5b:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:80:94:A8:D6:AF:48:2A:65:19:56:54:20:47:92:37:92:4E:BF:8C
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/rYCUqNavSCplGVZUIEeSN5JOv4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.94.139.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:64:43:b8:c6:05:b6:c8:3c:2f:fd:86:8a:21:b7:69:e7:67:
fd:5d:8c:fc:36:85:25:58:06:fa:43:ef:aa:c8:52:09:fe:66:
ac:b2:2c:16:86:14:23:c1:6f:57:9f:b3:0a:9f:3b:fa:b6:b7:
c2:27:09:2b:24:a2:22:18:08:0a:7e:7a:4e:f0:88:ba:aa:f6:
b4:cd:eb:49:30:90:99:c2:37:d6:12:0d:15:7f:fe:63:62:1d:
d0:50:26:0a:cd:f8:bf:1a:d6:4b:77:84:e6:e6:8b:b6:eb:4c:
53:a4:07:46:49:aa:af:ce:82:c9:70:0d:08:4c:6d:49:fe:2a:
95:f7:c5:4d:9d:ee:3e:5b:6c:36:41:5e:69:2e:89:05:b5:91:
b6:c8:cc:59:31:26:b2:cc:14:5c:fe:65:dd:27:92:75:db:67:
73:fe:f2:cd:81:3a:72:d0:0e:9b:9c:83:5d:18:ee:4e:ef:ef:
da:86:dd:19:0a:51:75:30:0f:b2:32:5b:ce:3c:a2:83:08:bd:
1b:9b:88:bd:5c:cc:e7:6e:07:10:e1:77:e7:fb:b5:f0:02:6e:
9c:99:d4:cc:82:57:cb:64:86:b7:ef:0d:4e:6a:28:4c:59:63:
10:2e:3f:cc:a7:b2:d4:81:cf:75:60:e8:85:b4:1b:b4:f3:5c:
80:ff:38:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:55:52 2024 by rpki-client on console-fra.rpki-client.org