Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ywHDiBr_EOjRHlB0U915tdVst6M.roa
File: ywHDiBr_EOjRHlB0U915tdVst6M.roa (raw, json)
Hash identifier: CzjvV1Dp/edBg7zyLaNxFj8XS4sTRXLF8XnMs+hCpSY=
Subject key identifier: CB:01:C3:88:1A:FF:10:E8:D1:1E:50:74:53:DD:79:B5:D5:6C:B7:A3
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B72A24A7A31400CDE5E63D7DB37796
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ywHDiBr_EOjRHlB0U915tdVst6M.roa
Signing time: Mon 01 Jan 2024 06:30:10 +0000
ROA not before: Mon 01 Jan 2024 06:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4755
IP address blocks: 194.2.86.0/24 maxlen: 24
194.250.98.0/24 maxlen: 24
90.115.209.0/24 maxlen: 24
90.115.208.0/24 maxlen: 24
194.3.4.0/24 maxlen: 24
81.255.178.0/24 maxlen: 24
194.2.56.0/24 maxlen: 24
194.2.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2a:24:a7:a3:14:00:cd:e5:e6:3d:7d:b3:77:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb01c3881aff10e8d11e507453dd79b5d56cb7a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:32:2c:0f:9c:24:dc:b3:cb:37:e5:f4:cb:d9:
79:38:c7:e0:26:58:1a:e2:7d:74:3f:28:f7:d4:9f:
a1:9a:7f:64:82:91:76:f1:d6:ba:fc:8c:41:07:c1:
f3:70:24:82:00:03:74:33:16:42:40:0b:4b:8a:88:
f1:76:39:d2:32:e0:c5:81:01:27:5c:42:65:30:3a:
48:3c:3f:10:99:5a:53:f0:0a:ec:f4:09:e7:3e:6d:
1f:c7:51:0f:9d:8e:f2:57:e4:fa:63:56:cd:af:ee:
98:5a:de:de:97:62:2b:f2:00:09:c7:82:4d:7a:18:
29:0d:6b:7f:9b:ae:ce:12:36:9a:b5:2a:f2:73:9d:
98:3b:cf:82:6f:94:e5:b6:57:25:24:25:75:41:61:
6c:d9:88:86:80:81:43:fe:b0:9a:07:52:3b:dd:85:
ec:0a:69:ff:02:41:ff:34:31:6f:5d:2a:0a:9f:7b:
2d:71:37:1e:7f:5e:79:a5:c9:ef:90:49:77:bf:4e:
ef:03:6f:1f:07:9d:81:fe:56:a6:54:85:b7:5b:c0:
24:23:55:9d:a4:4a:a8:09:8b:78:5d:13:45:96:29:
6c:0d:46:81:a8:2f:bc:6e:17:21:0f:e6:2a:ae:9c:
10:cf:5c:4d:53:5c:ea:a6:75:ed:0e:39:c4:d0:7b:
4b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:01:C3:88:1A:FF:10:E8:D1:1E:50:74:53:DD:79:B5:D5:6C:B7:A3
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/ywHDiBr_EOjRHlB0U915tdVst6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.255.178.0/24
90.115.208.0/23
194.2.56.0/23
194.2.86.0/24
194.3.4.0/24
194.250.98.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:5f:04:ee:91:c2:33:2b:c8:eb:4d:70:6b:33:c2:8d:fd:21:
9b:da:b0:e0:35:83:1d:ba:dd:a9:3e:12:ff:9e:19:98:55:6a:
7c:74:64:c2:a0:a5:bd:8c:f9:89:ed:5c:c6:f1:b2:f7:68:a8:
7e:7d:e2:07:71:c5:fb:1c:f7:b7:cf:89:76:89:4f:73:7b:ca:
94:f2:a5:e9:1c:d4:df:b0:bc:42:34:b9:15:f5:1b:4f:3d:2a:
54:6f:f9:de:1f:ea:c7:bc:a3:1d:85:75:c9:0a:a4:04:06:fd:
3c:e2:3a:3d:b5:93:e0:75:dc:0f:07:ba:17:b5:0b:66:d0:1b:
08:62:ec:94:53:f7:78:02:89:38:75:90:17:6a:87:5f:6b:b6:
f8:a4:e9:39:5a:cd:71:74:a6:49:a3:d7:1d:9e:b6:5b:5e:0c:
3d:19:97:67:a3:8f:48:27:2a:92:f3:b7:de:ca:a8:0b:3a:84:
b0:1b:bf:57:32:19:20:01:fd:f0:a2:92:e7:3c:d1:8c:4d:c1:
54:a0:63:ef:b6:59:6b:db:50:b1:f5:62:8d:11:76:1b:b5:0b:
06:7c:ee:7b:fe:cb:ac:6e:6f:03:5d:a5:60:f4:23:dd:60:68:
74:56:38:f1:38:16:48:9d:4c:aa:22:72:03:35:63:fa:00:51:
5c:6a:f2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 20:40:49 2024 by rpki-client on console-fra.rpki-client.org