Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/YKAd8DF5Myu8DbTFM8my_npcPOg.roa
File: YKAd8DF5Myu8DbTFM8my_npcPOg.roa (raw, json)
Hash identifier: ViKONY4yrFChFyZRIO36ebiEyfh7fteACkN0j22FQKo=
Subject key identifier: 60:A0:1D:F0:31:79:33:2B:BC:0D:B4:C5:33:C9:B2:FE:7A:5C:3C:E8
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 018CC56E1BBE9C1627DDDE721DF668AAEB6C
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/YKAd8DF5Myu8DbTFM8my_npcPOg.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197648
IP address blocks: 213.169.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1b:be:9c:16:27:dd:de:72:1d:f6:68:aa:eb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60a01df03179332bbc0db4c533c9b2fe7a5c3ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a4:35:53:b2:ad:22:c8:0b:2d:76:c6:9d:e8:
6e:eb:31:e2:1a:df:a4:9f:28:ee:a7:81:4f:f6:0a:
b6:e7:f2:ef:bd:0a:5a:2a:32:b1:00:5b:28:80:d5:
8e:90:68:bf:2a:3c:d1:eb:64:b2:74:62:d6:1e:1b:
d0:16:77:9c:cd:e1:d2:4c:61:78:9f:bd:ab:82:12:
ce:97:01:06:c0:48:af:41:66:b3:45:91:2f:bb:c4:
67:08:47:d2:33:12:d0:88:da:c7:47:ef:72:1e:b6:
e1:ae:20:5e:89:d9:a4:88:a6:4f:84:34:0a:a8:cc:
4b:c8:ca:74:c5:2a:69:37:d7:2f:8f:ca:11:af:8b:
d4:c9:07:8c:c9:67:b4:f1:98:f7:aa:eb:f2:a7:e6:
5d:00:7f:ae:33:e1:7c:d8:b0:6f:87:19:55:ae:03:
23:af:36:2d:5e:e8:e1:91:c7:f5:b1:70:92:61:e3:
87:e5:f1:b4:82:b6:20:d2:38:85:4c:6f:43:fa:a9:
31:1f:fd:ae:04:d9:d4:d1:52:f7:02:13:12:57:67:
20:dd:93:dd:cc:7f:da:2a:d8:69:db:08:8d:b9:ae:
5e:8d:d2:ad:07:91:f7:bf:78:9e:47:4d:3d:93:a7:
98:eb:a2:b3:32:25:ac:d2:61:26:28:12:34:69:b2:
30:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:1D:F0:31:79:33:2B:BC:0D:B4:C5:33:C9:B2:FE:7A:5C:3C:E8
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/YKAd8DF5Myu8DbTFM8my_npcPOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.148.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:98:dd:ff:f0:cc:eb:ed:42:10:42:b0:2c:aa:90:af:55:31:
7e:69:a4:43:07:c7:4d:47:66:64:b0:6a:5e:da:d0:8f:a4:0b:
85:77:05:7b:7e:ec:35:d8:cb:5a:4b:bf:35:6c:7e:ca:08:7f:
7c:bf:71:b3:97:4a:1d:23:49:eb:12:66:0b:46:bf:db:70:55:
8b:6a:44:15:58:a0:ee:ee:a1:7c:7f:89:4c:d6:51:a4:1f:95:
0a:4d:e5:eb:3e:22:49:51:c6:b4:2c:c7:5d:1d:9b:aa:97:f6:
d1:71:fd:47:4d:96:6f:81:00:b5:a7:16:d6:13:f1:eb:8d:dc:
f8:16:64:f5:a4:d1:19:08:0f:9d:cc:46:e5:46:56:76:4a:f7:
be:59:70:7e:f1:0e:82:c7:0f:64:36:c1:ff:f1:1c:f1:71:e9:
1e:b7:2c:34:2b:0c:6e:93:bf:f3:9f:ac:1f:62:b4:43:11:5b:
d9:8b:b9:f5:c8:79:a6:81:98:36:5b:94:a9:90:bd:67:f4:f1:
48:58:ea:60:18:6e:f1:6d:75:c2:db:3b:e8:3e:75:71:0c:0b:
a6:a9:ea:12:6e:5c:9e:fe:9d:61:2b:2c:91:11:11:e5:e7:60:
84:f8:cb:a4:b2:9d:83:db:82:a2:a1:ec:39:78:e4:92:0b:87:
b9:6d:96:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:31:00 2024 by rpki-client on console-ams.rpki-client.org