Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/YUeVGQg9zbtLcZSix_CNd8mmxAQ.roa
File: YUeVGQg9zbtLcZSix_CNd8mmxAQ.roa (raw, json)
Hash identifier: fUpZ00P8qZo8da628wZz8OQf1+KOfmSGNGUOURiMIew=
Subject key identifier: 61:47:95:19:08:3D:CD:BB:4B:71:94:A2:C7:F0:8D:77:C9:A6:C4:04
Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46
Certificate serial: 019197EA0823350F5173FCBD58C4633C09C8
Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/YUeVGQg9zbtLcZSix_CNd8mmxAQ.roa
Signing time: Wed 28 Aug 2024 07:36:22 +0000
ROA not before: Wed 28 Aug 2024 07:36:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1732
IP address blocks: 192.58.44.0/24 maxlen: 24
192.83.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:97:ea:08:23:35:0f:51:73:fc:bd:58:c4:63:3c:09:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46
Validity
Not Before: Aug 28 07:36:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61479519083dcdbb4b7194a2c7f08d77c9a6c404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:74:5f:3a:e5:ea:1c:d7:24:6f:bc:60:e3:20:
a8:df:e8:47:85:ab:e0:de:90:bf:e8:e6:9a:8c:80:
79:49:27:0c:8f:eb:cd:55:49:14:2a:fa:c9:e2:b1:
86:ec:3c:38:ff:df:c9:01:73:05:95:54:de:c5:58:
72:b2:f6:a0:11:57:da:9e:a0:6d:41:da:4d:7f:42:
f7:09:c6:69:34:9d:8c:ad:e6:b3:71:a4:5f:97:75:
74:d1:4a:40:a3:4d:77:4e:c9:3d:a3:03:c9:cd:68:
7a:f7:9e:e9:0a:19:1b:6b:cd:53:e4:1a:c9:6c:3d:
b5:44:55:79:53:98:7f:9e:02:99:ac:6c:94:16:81:
23:b6:61:ef:33:3a:cf:06:8c:80:61:2c:70:d4:5c:
bf:a7:b9:fe:08:6b:8b:0e:f0:4c:d4:2c:c9:cb:fb:
96:ce:d4:a5:28:fc:40:55:da:31:72:11:56:e2:4a:
16:d7:f1:e2:79:03:7b:1a:1d:d5:46:7b:24:cd:89:
a0:cf:9e:ec:15:b0:09:4e:a9:42:b4:8f:f1:87:e4:
48:b2:30:1b:32:f3:eb:a1:28:ec:6e:29:ab:a5:02:
bd:30:46:0a:94:b3:3d:9c:69:f8:5d:f1:20:ac:d7:
b5:d0:b3:99:8e:28:e8:db:b3:55:84:d6:2e:1b:03:
d4:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:47:95:19:08:3D:CD:BB:4B:71:94:A2:C7:F0:8D:77:C9:A6:C4:04
X509v3 Authority Key Identifier:
keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/YUeVGQg9zbtLcZSix_CNd8mmxAQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.58.44.0/24
192.83.68.0/24
Signature Algorithm: sha256WithRSAEncryption
59:56:f1:eb:98:23:66:aa:af:b7:76:6e:cb:e2:30:b5:08:f1:
59:14:f0:92:4e:ed:a2:33:ba:61:48:5e:e4:b5:73:d6:05:c2:
4b:ce:85:0d:0e:16:f4:56:b0:05:62:c2:36:b3:9b:fc:c4:2c:
f7:36:84:5b:d1:f2:86:7a:0b:f2:ed:7a:62:fc:63:dd:bd:19:
f2:9d:d8:60:90:d2:2e:5d:b5:59:fb:f5:7c:41:d5:9e:75:94:
fa:2c:8a:5d:3d:8c:2f:e0:e6:29:3c:78:00:e8:e0:bc:f6:62:
24:bc:c1:40:3a:7b:11:3a:b4:d7:57:88:88:2a:88:a1:b9:cc:
ab:21:af:6a:01:ee:a2:ee:60:c5:be:54:02:02:60:20:7d:99:
29:fb:02:57:08:6c:7c:79:98:74:88:b0:a9:65:8c:9a:c0:0b:
9c:14:36:89:ad:52:46:47:e4:ae:b4:23:2e:b6:23:f8:85:16:
f4:21:1d:bd:d8:23:b0:05:67:ad:0c:97:4a:7c:3f:fe:3f:a3:
3d:9c:90:6b:84:a9:62:b5:ef:85:f3:26:00:91:78:0f:fb:55:
00:00:30:60:17:44:06:06:07:c0:0e:ac:26:c3:aa:15:50:77:
10:17:5b:ea:8c:fb:8d:2d:96:6c:f0:2a:66:19:5b:7b:5b:3d:
41:05:32:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:25:41 2024 by rpki-client on console-fra.rpki-client.org