Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/lYkHqxvvYRqYwNhfIAskx0rmAIw.roa
File: lYkHqxvvYRqYwNhfIAskx0rmAIw.roa (raw, json)
Hash identifier: K7farSGTJotR6szvQr6nC1FOlqqpYrKcpUxEK+0MqwU=
Subject key identifier: 95:89:07:AB:1B:EF:61:1A:98:C0:D8:5F:20:0B:24:C7:4A:E6:00:8C
Certificate issuer: /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial: 018CC2DB551BBC7A401AE628DFE338241303
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/lYkHqxvvYRqYwNhfIAskx0rmAIw.roa
Signing time: Mon 01 Jan 2024 02:30:03 +0000
ROA not before: Mon 01 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199139
IP address blocks: 5.172.216.0/21 maxlen: 21
185.64.192.0/22 maxlen: 22
185.122.152.0/22 maxlen: 22
2a02:f600::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:55:1b:bc:7a:40:1a:e6:28:df:e3:38:24:13:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=958907ab1bef611a98c0d85f200b24c74ae6008c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:c7:fe:48:86:f9:e3:37:e9:16:92:87:94:
da:67:81:c8:67:39:88:1a:cc:30:22:a1:46:21:d8:
28:28:3a:90:45:10:6e:fa:c7:e7:a2:9f:bb:83:af:
0b:c2:67:31:c4:1a:d5:2e:af:0b:82:ef:03:a6:3b:
21:79:a5:d8:6e:2e:59:81:83:7f:8e:6c:7c:56:ba:
a0:c8:7e:6f:32:64:0d:0b:3d:40:ff:53:bd:6d:f7:
3b:31:b9:2d:33:d2:2c:4f:d9:e1:33:fd:8a:3d:e1:
e4:39:70:f1:a2:8a:95:8f:6d:f0:6a:af:8f:50:06:
39:63:08:13:cf:57:9b:eb:e9:59:c5:5f:57:db:05:
48:4c:8e:80:0f:6c:73:d4:b6:19:c6:fb:98:3b:94:
00:12:94:33:18:f3:37:c9:9c:48:7e:21:04:90:38:
99:b7:45:60:76:b8:05:59:43:36:bf:b7:09:9e:10:
7e:64:4b:e4:0f:ed:7e:a0:80:d3:ae:28:f7:d5:85:
8f:9e:9a:96:e0:86:26:e4:b5:ed:70:62:f3:84:05:
e4:a6:07:46:22:53:dd:2f:73:d4:5d:3c:04:f2:06:
40:38:02:84:a3:f2:aa:ed:28:db:38:cf:94:bb:00:
4b:d6:f1:9f:d3:88:9e:5b:95:7b:9e:e8:c9:e0:93:
20:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:89:07:AB:1B:EF:61:1A:98:C0:D8:5F:20:0B:24:C7:4A:E6:00:8C
X509v3 Authority Key Identifier:
keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/lYkHqxvvYRqYwNhfIAskx0rmAIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.216.0/21
185.64.192.0/22
185.122.152.0/22
IPv6:
2a02:f600::/29
Signature Algorithm: sha256WithRSAEncryption
09:82:d2:b2:79:7c:f3:ee:a8:3a:84:58:94:d3:0f:6a:f6:de:
f9:bc:b1:ae:f7:61:1d:79:a3:74:31:bc:12:08:ec:d5:ab:63:
6d:51:ad:31:d0:3f:2e:18:20:e9:eb:d2:7b:19:0b:41:23:f8:
94:bc:f2:32:4e:49:05:5b:12:eb:10:80:a9:2c:5d:57:cf:06:
92:84:f0:d5:d9:ff:4c:95:02:bb:19:f6:04:ed:d6:c2:1f:b8:
d6:1a:cb:86:be:2f:da:f0:37:d5:68:2c:52:97:29:0e:13:f8:
61:83:a8:c6:a5:8c:c9:46:49:c8:9a:4f:2f:02:88:9a:51:61:
19:31:76:c8:fa:1a:65:5b:f6:10:11:d6:3a:f0:f7:93:e1:92:
c5:ab:9b:7f:2c:de:c9:db:a6:d7:54:a1:4d:10:6e:b9:ad:93:
2a:bd:ed:ce:29:52:a5:6c:72:a4:9d:b4:76:5e:61:f8:60:e6:
d5:56:45:b7:bb:91:75:2d:7a:81:42:8d:21:7d:44:9d:d5:18:
62:51:37:55:c2:84:8b:d6:68:35:f4:68:08:4f:49:6e:5b:fd:
f2:6d:83:61:d3:06:0a:7c:47:32:84:cc:d4:15:9c:14:ad:cc:
5b:c7:28:ed:61:6d:ab:a5:97:75:b3:7f:6c:a0:f8:c7:d3:b7:
9d:a4:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:28 2024 by rpki-client on console-fra.rpki-client.org