Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/yGYpRzK4bjb3lqaMTswmA1MN6vc.roa
File: yGYpRzK4bjb3lqaMTswmA1MN6vc.roa (raw, json)
Hash identifier: pLZyJySQuWYGNKH2jXy903Jbh50On652OkuHle48+6s=
Subject key identifier: C8:66:29:47:32:B8:6E:36:F7:96:A6:8C:4E:CC:26:03:53:0D:EA:F7
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 018CC26D478408C038C661F3F7083E543E4A
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/yGYpRzK4bjb3lqaMTswmA1MN6vc.roa
Signing time: Mon 01 Jan 2024 00:29:50 +0000
ROA not before: Mon 01 Jan 2024 00:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198949
IP address blocks: 91.231.192.0/22 maxlen: 22
91.231.192.0/24 maxlen: 24
91.231.194.0/24 maxlen: 24
91.231.193.0/24 maxlen: 24
91.231.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:47:84:08:c0:38:c6:61:f3:f7:08:3e:54:3e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Jan 1 00:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c866294732b86e36f796a68c4ecc2603530deaf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:22:c0:fd:f8:d5:6b:37:36:87:ed:e7:ee:
6c:9d:c1:ac:b9:6a:e4:93:c2:e2:8c:0f:c0:19:48:
cf:87:0d:f1:65:1d:3d:45:29:29:eb:3c:63:92:5d:
68:89:8c:bd:58:17:ef:eb:e1:20:77:6b:5e:37:58:
d7:c1:47:a2:c5:c3:5b:cb:a3:3e:43:e1:d2:86:59:
22:df:23:60:fa:3c:c5:d6:30:3e:53:c5:03:cd:aa:
95:51:60:eb:f3:9c:e3:c6:82:6b:3a:45:94:b0:04:
39:bb:b1:44:6a:42:a4:92:3f:64:47:18:85:f4:28:
f9:ca:ea:d4:eb:b1:53:9d:a9:97:35:8f:a6:98:31:
05:73:ba:4d:31:0c:52:01:48:24:c1:18:af:6c:fb:
8a:da:1d:fa:9f:90:f4:86:84:d7:49:35:e0:51:8a:
cc:76:dd:77:44:4f:e5:b1:f5:32:b7:c6:8b:35:8a:
8d:f5:cc:5b:0a:7f:29:ea:8b:2d:d2:f3:a9:6b:90:
0c:0a:90:9e:44:c7:ca:9d:e7:0c:9c:3f:27:d5:fd:
14:c4:11:59:3d:01:ae:27:1f:6b:d5:0b:04:0c:ff:
f3:67:dc:d6:0d:3e:9c:93:02:a1:78:30:d2:4d:4a:
40:b6:f7:f7:67:04:d9:29:a9:eb:9f:7a:33:c0:4a:
77:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:66:29:47:32:B8:6E:36:F7:96:A6:8C:4E:CC:26:03:53:0D:EA:F7
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/yGYpRzK4bjb3lqaMTswmA1MN6vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:58:b5:1a:20:48:ae:33:58:ef:88:e8:28:11:dc:71:49:a2:
0f:8f:76:fc:be:65:9f:cb:ae:32:42:17:53:68:d4:59:6f:1a:
12:0f:0c:6c:41:f5:9e:a2:d3:98:a0:b0:9d:e7:ba:ed:28:da:
37:69:78:b5:05:9e:3a:fc:d2:c8:c3:b2:f6:72:b3:01:ce:1e:
b3:5f:b3:cc:54:ed:7c:24:62:7a:85:e1:0a:df:1e:e3:1c:d2:
4e:85:57:e3:4f:7d:29:55:db:8f:09:a5:f6:c6:0f:85:da:36:
a7:c1:3c:ec:29:03:82:a8:d8:5a:cb:5c:56:1a:8a:f6:39:c9:
2d:d3:8b:bb:04:13:75:f7:1d:61:a0:91:a7:af:e4:17:15:94:
5e:c5:b9:43:ed:01:1e:ed:17:b5:43:c4:27:06:6c:de:f9:fe:
a7:08:eb:b6:98:3f:ad:e4:05:c9:e2:1b:11:5a:0b:8d:f8:78:
ed:a2:46:2c:20:b9:12:88:ba:92:44:8d:48:9a:d0:12:07:0e:
b9:ff:5c:5a:2b:1a:e6:7c:4d:a1:8f:25:21:cd:e3:ff:0b:4a:
b0:1f:5a:57:8c:25:e0:d1:a0:60:73:31:70:51:67:2f:c5:90:
a8:2f:ef:cf:37:b8:f9:04:9f:a6:52:44:a4:11:78:c3:2a:5a:
f8:a2:20:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 19:05:06 2024 by rpki-client on console-fra.rpki-client.org