Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/yR-Ewv4KdUXlvlSY65soLkdnXYk.roa
File: yR-Ewv4KdUXlvlSY65soLkdnXYk.roa (raw, json)
Hash identifier: 17ezswmkiF7BkxztCtSFMJMRWYanpU+MyEuRAILxoME=
Subject key identifier: C9:1F:84:C2:FE:0A:75:45:E5:BE:54:98:EB:9B:28:2E:47:67:5D:89
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 018CCA294E7F37B522E80DBE8ED7291851F6
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/yR-Ewv4KdUXlvlSY65soLkdnXYk.roa
Signing time: Tue 02 Jan 2024 12:32:33 +0000
ROA not before: Tue 02 Jan 2024 12:32:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 272470
IP address blocks: 185.155.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 May 2024 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:4e:7f:37:b5:22:e8:0d:be:8e:d7:29:18:51:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Jan 2 12:32:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c91f84c2fe0a7545e5be5498eb9b282e47675d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:7f:a1:9d:26:f3:24:d0:8c:a0:d8:f8:52:
16:a2:24:be:b8:51:5c:3f:5c:81:55:3c:d5:d4:e7:
1f:fc:1c:86:2e:54:d0:0c:8e:02:64:42:35:52:4f:
69:bf:1f:84:1f:1d:4c:92:1c:8c:28:cc:e3:f1:fd:
75:4e:f8:ea:b8:48:91:1c:8b:ed:a1:03:3e:e5:22:
eb:b2:72:ed:ab:cc:a1:1c:07:76:8a:07:7a:db:36:
91:de:36:8a:db:bd:a4:c4:2c:15:84:10:97:dc:08:
9a:71:73:a4:a3:cd:f2:63:7d:3a:cd:e3:1a:16:33:
17:a5:84:3e:dc:0e:2f:50:31:c7:47:6b:52:e2:aa:
fc:e7:09:01:71:e7:47:16:b9:1b:c9:a0:6a:e0:ac:
af:61:a9:5e:60:7a:f8:bb:bc:a4:50:34:e3:5d:75:
3a:03:e6:2f:d1:fc:cc:94:53:16:21:35:ea:1c:9c:
7b:84:9e:6f:a9:ce:28:90:7e:2d:4e:3f:66:cf:1e:
c4:9c:f8:b9:d7:f9:4d:c4:ed:d3:d1:76:25:62:ba:
f7:35:70:e8:e0:b6:fe:7c:d6:ea:6a:f9:6a:83:d4:
06:f2:5a:2d:6e:41:f6:0b:dc:1b:b3:0a:e2:d9:9c:
63:ff:fd:83:9d:9c:eb:21:77:3e:c4:e7:98:3b:88:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:1F:84:C2:FE:0A:75:45:E5:BE:54:98:EB:9B:28:2E:47:67:5D:89
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/yR-Ewv4KdUXlvlSY65soLkdnXYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.53.0/24
Signature Algorithm: sha256WithRSAEncryption
89:d6:0d:ff:86:e6:8e:86:3c:9c:c9:b2:ee:cc:94:82:70:1d:
ea:de:0b:58:f5:f1:35:76:3c:6d:2d:b9:ab:77:06:08:cd:03:
88:7b:b5:11:0a:83:db:73:e1:47:3a:a0:20:f2:a5:e7:a3:6c:
79:d7:08:b7:62:25:3a:01:33:a3:95:0e:fb:c6:12:9a:e5:8e:
12:d9:6b:c2:93:8f:44:2a:e4:36:91:3f:88:49:7f:40:94:15:
16:26:f7:67:fd:40:eb:bc:fd:27:97:8f:c1:a9:f8:c5:95:78:
40:12:f1:51:10:c5:8a:d0:07:87:7f:16:eb:e2:20:9f:30:7d:
5f:be:89:c5:dd:e0:5a:91:6a:99:92:08:bb:d3:31:7d:68:3d:
7d:2d:de:33:46:b6:cd:fc:06:54:ae:5a:69:df:cf:4a:28:26:
65:cc:ff:87:af:a7:93:c5:c4:5b:60:3a:02:ae:15:e4:b4:c8:
d7:92:0b:ea:b2:6d:11:86:bd:22:c5:24:db:39:0b:17:3b:6a:
05:83:d5:6d:51:9a:a5:4e:1e:17:a5:a6:d3:bb:f5:7f:cd:95:
1b:b9:02:41:70:97:0a:47:93:0b:8a:97:1e:9c:ca:18:79:87:
c7:d7:37:e0:e9:05:ef:d8:ce:d2:f1:a0:44:5a:5c:e5:7e:68:
60:0c:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 07:31:28 2024 by rpki-client on console-fra.rpki-client.org