Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/_5B6d_yZdN-_ALE9ZSvMRTRcNno.roa
File: _5B6d_yZdN-_ALE9ZSvMRTRcNno.roa (raw, json)
Hash identifier: 9eO9/hcdmLG01idNTP7ypkKbJVaOTK+wRRZs/fJ31mU=
Subject key identifier: FF:90:7A:77:FC:99:74:DF:BF:00:B1:3D:65:2B:CC:45:34:5C:36:7A
Certificate issuer: /CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Certificate serial: 018CC649EFCC3AFC41104B8BD03F6B8F89C1
Authority key identifier: 62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/_5B6d_yZdN-_ALE9ZSvMRTRcNno.roa
Signing time: Mon 01 Jan 2024 18:29:43 +0000
ROA not before: Mon 01 Jan 2024 18:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211583
IP address blocks: 188.94.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ef:cc:3a:fc:41:10:4b:8b:d0:3f:6b:8f:89:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62e93f08a45d2b7c74bf5de01b252201602aeee8
Validity
Not Before: Jan 1 18:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff907a77fc9974dfbf00b13d652bcc45345c367a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:7a:8c:cc:51:4f:0d:51:9d:12:03:79:33:
67:5e:27:06:49:6a:e7:06:16:2b:6f:3c:0e:ba:4a:
e3:99:12:34:2d:a4:37:b6:45:24:1b:c2:89:3b:c2:
7e:8c:a6:b9:b1:e3:0e:26:19:ee:55:75:a2:a5:11:
d7:ad:37:6c:d0:a3:3a:96:7c:0d:11:2a:5d:7a:80:
25:6d:9a:2b:41:94:03:61:3d:a3:10:8e:69:ff:e8:
a9:c4:e4:15:4d:22:96:a4:2f:ff:ee:66:85:fe:50:
d2:b3:85:d7:a9:c2:c3:43:82:ff:8f:5f:91:8a:20:
d2:ef:38:c4:08:35:ea:2f:94:0f:d6:25:58:e9:1c:
6c:08:71:1d:59:16:ac:59:17:c9:56:86:7c:09:7e:
b0:8b:6a:3b:5d:4e:7d:dd:5d:b1:e3:8a:d4:0b:df:
c4:b5:6e:72:4d:3a:70:dc:be:5d:5a:b3:d3:e1:e8:
b8:ac:b8:53:2f:5f:a5:d6:87:af:fa:17:65:bf:e1:
ca:ab:f4:96:b6:1e:31:a1:b3:a7:6a:7c:84:53:5f:
8f:18:15:97:1b:ba:7c:dd:0a:36:17:49:62:54:2f:
8b:38:82:4f:e8:1a:42:5e:38:1e:4a:57:b3:f7:70:
f0:fd:95:7e:0a:0c:2c:da:28:0e:02:92:d9:33:f5:
34:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:90:7A:77:FC:99:74:DF:BF:00:B1:3D:65:2B:CC:45:34:5C:36:7A
X509v3 Authority Key Identifier:
keyid:62:E9:3F:08:A4:5D:2B:7C:74:BF:5D:E0:1B:25:22:01:60:2A:EE:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yuk_CKRdK3x0v13gGyUiAWAq7ug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/_5B6d_yZdN-_ALE9ZSvMRTRcNno.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/231349-7f0e-4975-bc63-7ea65c12e8ec/1/Yuk_CKRdK3x0v13gGyUiAWAq7ug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.94.188.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:2a:3e:c0:9a:9f:51:82:82:fd:44:25:49:2c:7e:fa:49:b4:
cf:41:f1:84:d1:5f:a2:26:57:a3:69:99:da:95:7e:36:83:0c:
00:56:89:e5:2a:f6:b5:4f:e8:13:19:8c:fd:6d:de:f2:7f:80:
9e:1c:59:d8:8b:37:4a:f2:0c:a1:63:73:d7:3b:8e:2a:fe:c6:
07:9a:4b:3d:7e:95:28:03:df:01:71:a2:0a:37:b6:45:d1:a0:
de:b3:5a:ce:01:cb:9c:b2:e3:7e:9a:6c:24:4d:c4:fc:02:a2:
91:6b:fb:ec:52:fd:21:5d:ed:77:91:b3:9f:c7:b1:97:6c:aa:
a1:5c:62:84:f2:e6:fc:91:2a:a4:67:df:9c:9d:a3:71:22:cf:
e2:ca:1a:80:cf:7c:e1:31:4a:2f:a0:df:e3:23:fd:c7:50:79:
62:3a:ab:39:51:79:2b:d7:42:5b:64:35:78:02:b1:63:94:9c:
6a:52:1c:4d:57:bd:60:4e:a7:77:79:99:a4:15:87:97:88:e6:
6e:f3:2a:2c:b6:fd:d0:3a:cb:cd:59:2d:b1:4c:61:23:1f:8a:
3a:fe:63:ed:6f:2c:69:b3:23:b4:82:a4:06:67:72:f5:da:8f:
72:f6:44:cd:eb:2e:1b:0a:7b:a2:e5:20:35:06:c8:2f:cb:70:
f7:0f:e3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:28:53 2024 by rpki-client on console-fra.rpki-client.org