Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/yBJ7aWOtkiAzrQ63oTE9xVpaEL0.roa
File: yBJ7aWOtkiAzrQ63oTE9xVpaEL0.roa (raw, json)
Hash identifier: 3kqHSwst7AD+245Ow4MtVEsb0VKgzIt5qwfEI5tqP6E=
Subject key identifier: C8:12:7B:69:63:AD:92:20:33:AD:0E:B7:A1:31:3D:C5:5A:5A:10:BD
Certificate issuer: /CN=d4f92129df7aaa7157e15973c24753e118c9057d
Certificate serial: 018CC801D39C725BFDFD8BF25B9E73D312DA
Authority key identifier: D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/yBJ7aWOtkiAzrQ63oTE9xVpaEL0.roa
Signing time: Tue 02 Jan 2024 02:30:12 +0000
ROA not before: Tue 02 Jan 2024 02:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204631
IP address blocks: 185.136.120.0/22 maxlen: 22
193.27.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 01:03:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d3:9c:72:5b:fd:fd:8b:f2:5b:9e:73:d3:12:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4f92129df7aaa7157e15973c24753e118c9057d
Validity
Not Before: Jan 2 02:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8127b6963ad922033ad0eb7a1313dc55a5a10bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b3:59:80:e0:25:01:8c:6b:03:19:ad:fa:89:
bb:9d:99:0a:0a:ac:dd:f6:07:7e:ea:ea:9e:da:69:
3a:2e:fe:30:9c:bd:e0:46:9d:7d:e2:ad:4f:6e:cd:
c0:8f:00:c6:e0:12:27:a3:a5:5f:59:e2:62:fd:2e:
69:33:ba:25:2d:7f:a2:fc:e4:30:75:b3:81:8f:43:
4b:6c:f9:59:11:b3:26:1e:d1:39:22:70:a5:5c:37:
d6:4b:01:83:3f:c4:5d:28:66:1b:2a:c7:8a:77:89:
70:fe:87:60:5b:56:0e:6f:1f:eb:f3:84:47:5d:25:
2b:83:c0:8a:de:2b:06:c8:bc:af:ee:43:05:40:f7:
e5:24:f3:13:e5:04:de:52:03:d1:91:14:3e:b2:cd:
51:d3:9f:73:f0:f3:ff:ad:9e:64:03:04:bd:db:5c:
13:2f:bd:27:15:b3:70:08:0e:39:14:96:62:83:98:
32:b9:7e:40:6d:f8:14:b7:43:e0:d6:89:6f:36:36:
07:05:1b:5a:cc:eb:0b:4b:af:2a:37:5f:25:7d:06:
21:e0:3a:c0:cc:cb:c8:46:4d:b6:38:3e:d3:68:40:
0a:21:c4:57:d6:db:67:1c:d8:01:6c:0e:01:3c:53:
4b:6a:4e:33:00:d9:88:d0:f8:52:4d:29:79:a0:83:
6d:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:12:7B:69:63:AD:92:20:33:AD:0E:B7:A1:31:3D:C5:5A:5A:10:BD
X509v3 Authority Key Identifier:
keyid:D4:F9:21:29:DF:7A:AA:71:57:E1:59:73:C2:47:53:E1:18:C9:05:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1PkhKd96qnFX4VlzwkdT4RjJBX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/yBJ7aWOtkiAzrQ63oTE9xVpaEL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/9cfe5d-5770-4b5d-8935-9f38c8b8a928/1/1PkhKd96qnFX4VlzwkdT4RjJBX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.136.120.0/22
193.27.218.0/23
Signature Algorithm: sha256WithRSAEncryption
74:e9:8a:90:8b:98:ed:2e:bb:14:b0:31:76:a1:01:14:9e:43:
8e:5a:7f:f8:d8:f9:c7:97:24:b9:79:37:ee:7b:79:28:5f:f1:
46:79:6a:c2:46:b8:a6:77:07:ff:d2:3a:6e:1c:fc:b0:2a:ff:
6c:52:32:9b:5a:25:ac:77:94:e4:31:5e:1d:05:83:4f:b6:95:
71:c7:54:df:90:ec:00:25:4e:30:da:e2:63:79:11:ff:d9:7b:
1b:4c:5c:14:e0:cf:7b:a2:6e:09:ac:9a:d6:a1:2e:ec:46:7a:
e6:67:83:54:ed:e3:08:df:7e:78:6d:c9:31:85:9e:49:cf:22:
97:50:88:cd:66:0e:48:a3:f8:15:5a:d6:f6:81:81:5c:3c:69:
78:79:9c:96:c9:2e:d2:18:49:eb:e4:fe:b4:42:39:37:9b:a3:
74:55:16:82:52:17:06:47:d2:33:62:90:83:92:d8:18:b3:1a:
38:99:62:a1:c1:0f:fe:3d:b8:35:28:77:e7:ac:3b:fa:e8:19:
e6:70:c5:e3:ab:b9:05:ab:47:fb:e1:cc:ed:e2:b5:2e:ed:c6:
9d:20:70:b4:71:9f:33:09:bc:03:d5:97:33:c1:b7:4c:7b:b4:
f7:3f:ba:71:d2:d4:2e:43:f1:de:3c:c7:75:73:90:0f:5e:f8:
62:e8:04:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 08:21:43 2024 by rpki-client on console-fra.rpki-client.org