Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/y4SyQdqFhJ812FqUrPrdPiTBHmM.roa
File: y4SyQdqFhJ812FqUrPrdPiTBHmM.roa (raw, json)
Hash identifier: Rbse77pAajQLy6aJy88P4ZVEHj+MSe1wS+Rf3/6pD4s=
Subject key identifier: CB:84:B2:41:DA:85:84:9F:35:D8:5A:94:AC:FA:DD:3E:24:C1:1E:63
Certificate issuer: /CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Certificate serial: 018CC7951A66D96C6BA82506A6601866A483
Authority key identifier: 94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/y4SyQdqFhJ812FqUrPrdPiTBHmM.roa
Signing time: Tue 02 Jan 2024 00:31:26 +0000
ROA not before: Tue 02 Jan 2024 00:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212637
IP address blocks: 185.190.90.0/24 maxlen: 24
2a13:500::/32 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1a:66:d9:6c:6b:a8:25:06:a6:60:18:66:a4:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94ca595385505455b8cb1d90e946ef7b0b6f5d3f
Validity
Not Before: Jan 2 00:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb84b241da85849f35d85a94acfadd3e24c11e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c7:8e:86:21:16:f8:81:22:1f:72:ad:89:90:
af:84:16:89:24:28:b6:e8:42:49:03:9e:d2:af:16:
fa:2f:e1:36:9d:ba:cb:61:b3:61:6e:ac:e1:8c:4c:
37:3a:f7:a1:44:11:df:c8:82:85:46:ce:8c:ec:9e:
87:d5:bd:c8:3a:44:7a:27:64:b8:83:3c:1e:d9:95:
72:13:0b:58:fc:7d:73:c6:ba:55:f4:cd:83:59:07:
07:d1:bd:e6:cb:d5:7b:77:b1:94:4c:e0:87:34:ba:
d1:66:2d:0f:53:fc:3b:ad:d0:81:b3:b5:b3:38:e1:
45:58:45:f8:c2:f8:11:98:4d:ef:62:1b:43:a5:1f:
2c:55:14:a2:26:f2:2e:52:c4:56:84:18:88:58:15:
4d:f2:54:66:97:7f:a6:99:c2:13:ca:1a:cf:d2:1a:
69:ec:8e:bd:6d:81:ba:89:b1:85:a5:a3:56:f5:13:
fb:fb:9b:a5:78:5d:99:99:88:54:30:63:84:0d:8f:
e8:f0:77:45:d2:bd:78:da:2c:d8:6e:d4:2a:08:53:
fc:01:fe:6e:eb:3b:18:20:c4:36:fd:e3:f8:9b:62:
01:46:83:a6:1e:4f:dc:95:eb:2e:6f:de:02:e0:fd:
cb:07:69:01:f3:6f:87:e0:7a:72:03:f2:9a:33:c6:
64:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:84:B2:41:DA:85:84:9F:35:D8:5A:94:AC:FA:DD:3E:24:C1:1E:63
X509v3 Authority Key Identifier:
keyid:94:CA:59:53:85:50:54:55:B8:CB:1D:90:E9:46:EF:7B:0B:6F:5D:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lMpZU4VQVFW4yx2Q6UbvewtvXT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/y4SyQdqFhJ812FqUrPrdPiTBHmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/5892d1-6f51-4cb3-93e2-0f0494ca6d2c/1/lMpZU4VQVFW4yx2Q6UbvewtvXT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.190.90.0/24
IPv6:
2a13:500::/32
Signature Algorithm: sha256WithRSAEncryption
77:73:1d:72:a9:bc:b5:8d:5e:e9:01:d5:96:c2:5b:19:4a:e9:
4d:7d:d8:f0:c9:d9:46:16:5d:a9:b5:74:33:07:8e:a3:b0:88:
2e:05:45:d6:99:c5:48:42:40:7a:0a:f6:b1:bc:38:ae:6d:00:
eb:e7:d0:44:a8:52:31:09:e4:23:10:10:51:b0:12:64:91:d2:
59:a1:c8:5e:7f:07:66:83:d2:49:80:7f:5e:78:06:26:20:1e:
98:cd:22:bc:c2:63:fa:9a:44:2b:01:c3:51:48:db:dd:ca:e0:
8b:a6:3f:94:50:e0:16:e4:93:74:c9:49:ad:6a:58:33:aa:86:
25:fb:a9:69:0f:77:a3:c9:37:f8:46:39:29:3e:53:a8:5a:80:
bf:f6:44:97:12:59:9d:38:9f:f4:11:32:1c:1c:6b:c1:ff:1d:
a3:b1:40:d5:3b:68:e3:74:5b:dd:2d:f7:8e:01:0d:01:db:2c:
8e:af:39:67:93:3c:da:d5:6d:d3:0a:f9:a7:9e:b7:d0:aa:a2:
f2:07:25:9d:b3:15:0c:0a:60:00:e9:2f:cb:10:90:67:ab:18:
5d:f2:86:5b:1b:d0:11:5e:84:e2:bb:26:84:05:c1:4f:b3:84:
f7:94:35:b3:fc:16:f4:3c:f9:bd:ac:ed:ce:e1:52:2c:89:23:
fb:e0:7c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:53:28 2024 by rpki-client on console-ams.rpki-client.org