Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yc9jc7P6jF1qssCwN-e-9pChMfI.roa
File: yc9jc7P6jF1qssCwN-e-9pChMfI.roa (raw, json)
Hash identifier: jhXh8bK6sP/AZkQZszI8sG3KwSen4hjkjpl1ANcCmmk=
Subject key identifier: C9:CF:63:73:B3:FA:8C:5D:6A:B2:C0:B0:37:E7:BE:F6:90:A1:31:F2
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01930156BAF7E94CE054BFDBF5DF282E7F7D
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yc9jc7P6jF1qssCwN-e-9pChMfI.roa
Signing time: Wed 06 Nov 2024 11:58:01 +0000
ROA not before: Wed 06 Nov 2024 11:58:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203493
IP address blocks: 89.37.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:01:56:ba:f7:e9:4c:e0:54:bf:db:f5:df:28:2e:7f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 6 11:58:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9cf6373b3fa8c5d6ab2c0b037e7bef690a131f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:ff:46:9d:b2:58:92:17:4c:c0:85:a1:a0:
a6:1b:ce:8a:91:a6:58:74:72:65:95:70:dc:79:cc:
32:a6:4e:38:42:5e:ee:1f:fb:c7:e0:68:28:0d:d8:
d4:d0:cc:9c:a4:cb:47:58:87:5b:5a:26:55:69:88:
25:2e:9f:73:ee:62:1d:05:12:c1:1d:2d:a3:34:68:
9d:a2:c2:21:14:6e:0d:c0:a2:8b:35:80:df:cf:60:
6c:94:8a:c6:b7:60:d1:20:10:a3:20:c1:97:87:a4:
46:4a:86:ad:55:12:43:b6:04:21:32:33:7f:e6:32:
4e:b0:97:e5:3a:ad:65:4a:c7:60:5b:3c:d3:b7:7b:
be:1d:b9:52:3e:94:dd:d9:a0:79:bf:1f:a5:93:17:
02:26:49:53:f0:c4:cc:0e:f1:a0:ae:91:4c:f9:64:
1e:39:80:25:30:b0:fa:97:ad:2e:d4:e0:37:9a:d3:
0b:56:5d:70:b6:8c:40:f4:d2:76:86:1a:e2:22:df:
a6:a1:81:bc:9f:cb:c3:7d:02:fb:79:76:38:8c:30:
25:23:b4:7c:3b:ca:af:d8:73:a2:16:9e:62:ce:97:
55:27:41:ae:d6:f6:2a:6c:93:bf:23:8d:20:d2:8b:
04:87:4c:a1:63:14:5b:d0:51:ab:73:97:35:38:d8:
53:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:CF:63:73:B3:FA:8C:5D:6A:B2:C0:B0:37:E7:BE:F6:90:A1:31:F2
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/yc9jc7P6jF1qssCwN-e-9pChMfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.193.0/24
Signature Algorithm: sha256WithRSAEncryption
62:c5:c8:03:f5:4a:c9:ab:89:15:14:65:e9:d0:2e:c6:c8:83:
ac:b6:0e:15:46:13:4f:4e:c5:ae:32:06:ae:61:10:2d:e2:e8:
c2:ad:7a:95:7d:e0:8c:3d:9e:13:25:7b:9f:54:b7:0b:00:df:
43:01:23:19:c9:28:39:4e:e0:dc:92:76:63:bc:d6:b5:a4:db:
be:39:d6:ca:fa:60:8a:69:ef:13:9a:62:86:66:10:07:9c:dc:
67:3d:b1:ad:7e:3a:2c:78:84:ee:5c:bb:77:2a:47:ba:64:d6:
4b:09:c6:1b:bf:0f:fa:46:a5:74:f9:c6:9d:8c:85:eb:5c:fb:
a8:1d:b7:fa:aa:2b:75:ea:ab:96:34:2b:c8:f8:6b:61:7a:19:
7c:39:5f:1e:a0:d1:db:d1:3f:62:45:de:0a:e9:11:d4:e4:f3:
fa:b5:c0:95:c2:c5:d5:6c:4e:4d:8c:6b:11:a0:c0:9d:05:99:
e7:6b:a1:0e:85:11:c3:39:7a:4c:02:63:a9:e8:02:c7:6a:17:
2a:49:9a:d7:ce:05:5e:b1:e3:73:f7:b8:73:54:86:78:14:c5:
25:8b:d9:fd:02:1a:e3:0e:5b:4f:db:db:07:af:6f:97:fd:7b:
a6:58:37:be:51:b0:0f:b6:f1:c9:14:e7:d7:68:58:b0:10:d2:
74:16:ed:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:10 2024 by rpki-client on console-fra.rpki-client.org