Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/YBpOxQVrdrIWGjTQMdeR0s2OHS8.roa
File: YBpOxQVrdrIWGjTQMdeR0s2OHS8.roa (raw, json)
Hash identifier: /0LxzTzyDzk5AvMBi9YnlReHZdCH3wLNIyWCejE2CCA=
Subject key identifier: 60:1A:4E:C5:05:6B:76:B2:16:1A:34:D0:31:D7:91:D2:CD:8E:1D:2F
Certificate issuer: /CN=059f516802c261309a61048772e6eafd5867a990
Certificate serial: 018CC793604292ED936ADF172DF907C6F8E8
Authority key identifier: 05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/YBpOxQVrdrIWGjTQMdeR0s2OHS8.roa
Signing time: Tue 02 Jan 2024 00:29:33 +0000
ROA not before: Tue 02 Jan 2024 00:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209865
IP address blocks: 213.184.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 00:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:60:42:92:ed:93:6a:df:17:2d:f9:07:c6:f8:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=059f516802c261309a61048772e6eafd5867a990
Validity
Not Before: Jan 2 00:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=601a4ec5056b76b2161a34d031d791d2cd8e1d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ce:88:e9:e7:d3:33:94:c9:be:e9:57:1c:a5:
96:f2:17:60:e7:63:24:4a:70:61:0c:32:ab:1f:bf:
93:86:5d:f2:94:e0:09:8f:81:65:62:1d:bc:a0:a8:
6e:92:14:cc:eb:fb:1e:b4:12:f0:f8:be:58:2d:19:
7d:51:fa:a4:90:9e:b8:c3:21:0b:fd:2c:14:d6:7c:
10:de:59:06:a6:c1:a8:d5:47:b2:08:a0:fd:bf:95:
a7:93:af:af:95:aa:95:f0:30:de:2e:0b:52:19:93:
b4:e3:7b:4e:da:d8:b9:24:d0:7d:5f:cb:82:a5:d3:
f1:73:cd:3a:ab:b0:78:90:2a:c2:70:aa:8f:3b:d1:
bd:61:cd:85:9b:7e:72:5d:12:7f:2e:31:de:28:e5:
58:5b:ab:46:14:f5:95:32:23:88:4f:30:04:2b:43:
d5:f5:ea:29:d3:98:44:d1:11:cb:55:a8:b0:67:80:
c9:19:0e:02:37:4a:78:0d:50:41:5c:09:07:17:06:
10:e2:54:26:68:bf:94:d1:35:c9:0a:88:0a:fd:33:
cf:55:34:c4:46:43:43:d3:cd:0f:14:c6:d1:ea:95:
21:02:ff:32:08:8c:ba:0d:1e:c2:50:26:a6:0d:e4:
42:3f:7c:6c:0b:15:b3:d2:b6:2d:29:2b:76:8c:4d:
06:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1A:4E:C5:05:6B:76:B2:16:1A:34:D0:31:D7:91:D2:CD:8E:1D:2F
X509v3 Authority Key Identifier:
keyid:05:9F:51:68:02:C2:61:30:9A:61:04:87:72:E6:EA:FD:58:67:A9:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BZ9RaALCYTCaYQSHcubq_VhnqZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/YBpOxQVrdrIWGjTQMdeR0s2OHS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/4087cf-71e9-42ca-8c35-951b1985671c/1/BZ9RaALCYTCaYQSHcubq_VhnqZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.184.76.0/22
Signature Algorithm: sha256WithRSAEncryption
11:a3:5f:b6:23:77:50:17:7e:92:9d:b4:69:c2:89:9f:c3:a4:
a2:8d:52:47:56:9a:01:81:d8:95:5b:08:77:7c:dc:7b:04:f6:
02:d6:8f:79:a3:67:c2:ce:6c:fb:14:01:36:12:6b:23:3b:f0:
06:e7:16:7b:f7:4a:41:96:be:0f:d0:5d:34:7d:a6:39:cc:bb:
bc:fc:01:e9:43:32:5d:6c:94:18:fc:28:e0:06:67:81:4f:05:
ef:51:87:0d:39:1c:e8:2c:a2:f4:eb:a3:a2:d2:95:66:fc:30:
c9:35:3b:bf:7f:a5:23:c5:0f:e9:66:62:a7:91:d0:77:f3:a2:
95:50:3a:25:12:bc:cf:f2:a9:77:9f:c8:97:07:af:6a:59:28:
8d:5e:4b:83:4e:ff:1b:85:4e:0f:c6:e7:52:30:9e:56:c7:df:
da:91:34:9b:48:e2:54:7b:16:58:d4:47:c7:89:9b:cd:5c:85:
9a:de:aa:28:bc:f3:fc:bb:77:6a:9f:ab:9d:f0:0b:a4:cd:19:
d9:73:8b:54:97:08:2c:58:4e:43:89:38:ed:93:62:8e:a2:ee:
7f:67:19:70:ee:0f:07:25:b2:a7:7b:95:26:d7:3b:e8:d0:5b:
0a:69:af:5d:09:6a:04:41:a6:df:0c:c1:d3:02:d7:ac:bf:f4:
6b:d8:56:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 08:14:48 2024 by rpki-client on console-fra.rpki-client.org