Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/yDzxRDVDLfA4d6q4RWibqaKop1U.roa
File: yDzxRDVDLfA4d6q4RWibqaKop1U.roa (raw, json)
Hash identifier: 3N8xRr8cjYZasUdpSTTtsCCDo/WTXLeLwTWluuViv90=
Subject key identifier: C8:3C:F1:44:35:43:2D:F0:38:77:AA:B8:45:68:9B:A9:A2:A8:A7:55
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 018CC726EF62FDFBA4A2A3888421481EBB1D
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/yDzxRDVDLfA4d6q4RWibqaKop1U.roa
Signing time: Mon 01 Jan 2024 22:31:06 +0000
ROA not before: Mon 01 Jan 2024 22:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211660
IP address blocks: 185.1.201.0/24 maxlen: 24
2001:7f8:10d::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:ef:62:fd:fb:a4:a2:a3:88:84:21:48:1e:bb:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: Jan 1 22:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c83cf14435432df03877aab845689ba9a2a8a755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5a:79:a4:83:7a:25:12:59:d6:0c:a3:28:ee:
6b:94:b9:da:67:47:5e:31:f9:d6:23:62:86:5a:95:
0f:be:7f:44:6b:c6:02:51:a2:9e:04:08:2a:e8:b6:
dc:9b:b8:74:2e:af:2e:bd:d2:f3:b9:c2:f0:6f:78:
5f:5e:77:0c:0e:79:c7:0c:28:29:e5:a1:86:d6:48:
0b:fa:87:e8:5a:d1:a7:05:55:3b:b2:55:18:fc:10:
d5:60:6a:a4:c2:14:98:c3:91:9d:09:75:f2:5c:58:
59:6b:6a:ec:ac:47:3f:dc:96:28:de:fb:f0:27:a8:
c3:4a:2f:5d:83:42:1a:de:25:b0:4c:7c:60:6d:3b:
35:89:47:f4:f0:f8:a5:89:1e:56:11:24:36:1d:26:
fe:04:56:ab:71:8f:1e:67:c2:fb:b3:12:cf:3e:01:
66:a4:56:93:fb:83:46:23:2c:62:e5:d4:a9:f6:0b:
79:20:de:35:31:0b:d2:7e:5a:3b:c5:69:cc:ea:8f:
1a:1b:b7:15:53:95:7d:93:91:eb:89:e2:b1:4c:47:
cb:1b:eb:50:f8:52:df:54:00:75:a5:02:86:c8:90:
6e:28:cc:f7:12:15:8e:96:a9:97:c8:8f:51:55:61:
e6:de:ff:37:ce:4f:5b:e7:7d:7e:ff:a0:01:14:b2:
46:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3C:F1:44:35:43:2D:F0:38:77:AA:B8:45:68:9B:A9:A2:A8:A7:55
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/yDzxRDVDLfA4d6q4RWibqaKop1U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.201.0/24
IPv6:
2001:7f8:10d::/48
Signature Algorithm: sha256WithRSAEncryption
78:c0:27:8c:4f:97:47:f6:c3:63:0c:f7:30:77:54:5a:d3:6a:
dd:13:fe:0d:c4:c5:59:b2:ac:a0:a6:6d:02:41:f1:69:9a:c4:
e1:c1:ed:66:66:2e:a0:66:85:f2:16:03:bd:dc:9a:23:88:f8:
cc:31:cd:40:8c:74:d8:32:b9:dd:df:06:8f:9f:26:ec:21:6b:
47:d7:56:0c:e7:57:79:5a:b3:3b:dc:58:4c:67:3b:dc:33:e2:
c5:2a:67:dd:ac:bb:51:ff:b8:50:79:b5:7e:a6:30:28:b2:5f:
43:62:12:db:22:86:e7:17:35:c3:47:82:b6:98:ae:c7:15:1b:
60:67:d4:c1:ea:98:0b:55:2b:46:d6:42:24:11:91:8c:41:5f:
52:9a:b7:2a:8a:d9:d5:29:9e:ab:5f:b6:90:34:6d:42:0f:7c:
ed:75:cd:84:af:72:18:e0:2f:61:2b:0d:b9:b0:1d:a0:ad:eb:
27:8d:75:53:56:9b:76:4a:c0:3c:e3:ab:58:8a:9c:38:af:5a:
13:03:cf:23:7b:ae:41:cb:19:6c:d1:e6:00:2a:de:73:31:0d:
3c:7b:c8:7f:be:71:5e:ad:a1:55:be:ac:57:72:cb:63:47:8c:
5f:51:df:1e:52:1d:83:aa:db:79:10:93:06:53:14:ba:5f:c3:
28:48:e9:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:25:33 2024 by rpki-client on console-fra.rpki-client.org