Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/yhdk6Jf3Xgzw7WseCHpbnLCZ_IY.roa
File: yhdk6Jf3Xgzw7WseCHpbnLCZ_IY.roa (raw, json)
Hash identifier: raPqjdR767gLSyUpVzNm6r8SbmoenG039bn/JlVzsMY=
Subject key identifier: CA:17:64:E8:97:F7:5E:0C:F0:ED:6B:1E:08:7A:5B:9C:B0:99:FC:86
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 018E6138A1C3EA93F612E0389652D9D8D088
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/yhdk6Jf3Xgzw7WseCHpbnLCZ_IY.roa
Signing time: Thu 21 Mar 2024 13:34:45 +0000
ROA not before: Thu 21 Mar 2024 13:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21641
IP address blocks: 194.147.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:61:38:a1:c3:ea:93:f6:12:e0:38:96:52:d9:d8:d0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Mar 21 13:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca1764e897f75e0cf0ed6b1e087a5b9cb099fc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fe:30:ec:05:66:ba:ed:7a:1f:04:05:dc:dd:
ff:d3:c1:45:a9:1c:4b:09:e6:10:79:72:2e:15:35:
2c:8a:72:9a:49:94:7d:98:e5:19:46:cc:e9:b7:15:
65:90:c4:f4:95:12:a5:ec:bd:66:48:1a:5c:aa:f3:
e6:3d:a1:76:d6:31:e9:b7:66:83:a0:1a:9d:ec:b8:
1d:d8:f2:8e:29:fe:6c:7b:29:c8:fc:28:15:97:dd:
17:fc:e7:75:c7:1d:28:99:47:a1:17:69:cd:21:9c:
31:5c:19:23:87:fb:bf:4b:f9:19:93:15:f8:44:29:
13:6f:ec:1f:7e:5e:d2:1c:ad:0f:1d:c3:d2:3f:15:
9b:68:1e:15:99:09:da:81:94:f6:b7:96:2e:47:7f:
22:65:c9:63:89:0a:5b:61:c4:4b:da:c9:eb:60:63:
9e:ec:f6:22:31:55:e9:79:22:24:84:e9:5d:7c:2c:
0b:89:40:ad:c5:f2:44:e4:34:1f:51:a4:9a:6b:dc:
0b:1d:05:8a:1e:6e:21:0f:08:48:79:58:d9:43:1f:
4e:81:76:55:87:78:b8:e7:96:40:b7:e7:0c:af:28:
dd:6e:0d:8a:84:e5:19:b4:58:0b:45:5d:ae:82:3a:
78:e9:ad:04:e9:2e:99:52:91:f3:00:22:18:a1:2b:
2f:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:17:64:E8:97:F7:5E:0C:F0:ED:6B:1E:08:7A:5B:9C:B0:99:FC:86
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/yhdk6Jf3Xgzw7WseCHpbnLCZ_IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.71.0/24
Signature Algorithm: sha256WithRSAEncryption
16:c7:6b:f9:d5:47:9c:92:0f:14:5f:f3:8c:5b:fa:1e:b4:33:
c8:b5:3c:f0:dc:a0:eb:f5:01:1f:63:06:b9:33:50:16:83:af:
26:8a:c1:43:65:95:6a:e9:53:dd:99:3b:d6:35:b9:20:08:aa:
e9:6a:d1:98:eb:4f:47:20:2b:a2:3b:8f:24:06:e9:d9:29:68:
62:cc:c4:b1:b1:e2:fe:be:80:a4:bd:88:c3:d8:b7:3d:01:74:
6b:a8:2a:6b:af:cb:31:66:1f:c2:d1:e9:44:6d:46:55:67:f7:
94:bb:60:72:66:ad:9a:66:69:d8:52:b1:ed:af:0b:68:42:a4:
10:08:e0:bd:2a:97:cc:05:94:91:9c:7c:d0:41:29:9e:00:9e:
dc:3c:ac:08:d1:cd:6f:d9:7c:0f:81:f4:a1:59:97:12:06:ab:
bb:d1:e1:1d:f9:d1:e7:a8:8d:10:84:08:bd:e2:a2:ea:af:7b:
28:b1:97:49:cd:a0:6e:ec:f0:93:79:30:af:6b:94:79:25:eb:
12:8b:80:2e:c4:c4:97:c3:29:06:ce:06:10:da:3f:be:73:78:
93:af:68:00:80:b5:36:85:af:77:15:6b:c0:e6:98:32:ec:60:
53:1c:f0:bd:b9:78:31:6e:98:a5:b8:b9:d9:5b:79:7d:04:a1:
19:e2:a6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 17:56:39 2024 by rpki-client on console-fra.rpki-client.org