Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/cyI0rvF-ExGYocN9q1HkP5hwucY.roa
File: cyI0rvF-ExGYocN9q1HkP5hwucY.roa (raw, json)
Hash identifier: 2yMXYpJBZHeHXcGEq0gBJa2LVNW/Ifup+xGmwNDtbpI=
Subject key identifier: 73:22:34:AE:F1:7E:13:11:98:A1:C3:7D:AB:51:E4:3F:98:70:B9:C6
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 018CC4938577DB97327EF916DFF86BA5A540
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/cyI0rvF-ExGYocN9q1HkP5hwucY.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46562
IP address blocks: 188.74.180.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 03:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:85:77:db:97:32:7e:f9:16:df:f8:6b:a5:a5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=732234aef17e131198a1c37dab51e43f9870b9c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:52:b2:d9:16:52:65:dd:b5:11:96:2d:a7:df:
c4:bc:09:14:fd:03:f1:14:38:c8:e7:da:15:8d:10:
cb:df:eb:93:88:d8:ba:b6:38:6a:25:3a:ad:53:f4:
2a:d9:e0:cc:91:6b:83:90:81:3b:e5:6c:3f:06:1b:
bf:0c:e4:68:24:d3:d9:22:b2:81:18:83:47:9d:3f:
0d:0f:93:0d:98:a7:8f:ee:1d:84:c2:01:da:d6:f8:
e5:0a:65:55:37:30:b6:c3:76:e8:6f:8a:3d:a0:20:
59:23:b9:bc:e0:8d:ca:cb:9f:01:c1:f3:45:fa:6a:
32:8b:1c:b4:ee:99:1b:2c:47:a2:b6:74:e6:be:92:
f7:c9:c1:a8:f9:df:ac:e7:e4:4b:35:6e:21:35:0f:
a6:b2:bb:0d:fc:f3:a8:52:fe:2d:43:89:20:79:88:
23:26:7d:ad:3f:49:75:d6:8b:69:47:33:d1:a7:2f:
49:e2:eb:57:ae:5e:fe:9c:64:d4:4b:97:2a:4c:71:
14:57:b8:70:80:20:6e:05:05:c9:28:54:ff:e1:f3:
f0:5e:60:77:e2:25:f0:02:04:f8:2d:9a:30:4e:f3:
35:58:56:52:77:db:68:2b:03:39:0d:73:e4:53:fe:
98:53:24:cf:a6:26:63:89:18:ea:92:18:e1:77:5c:
99:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:22:34:AE:F1:7E:13:11:98:A1:C3:7D:AB:51:E4:3F:98:70:B9:C6
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/cyI0rvF-ExGYocN9q1HkP5hwucY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.180.0/24
Signature Algorithm: sha256WithRSAEncryption
12:7b:26:d9:1e:c1:e3:9f:8b:d7:37:42:6a:3c:d6:bd:46:67:
ec:c7:a0:d3:fe:ce:cc:f0:f8:ef:75:28:35:b9:1c:c7:dd:22:
e5:4c:3d:53:90:12:2c:a7:fb:1d:66:a2:e9:9a:06:42:48:98:
ed:d3:89:97:fb:b9:23:c2:e5:89:5f:46:36:e1:7a:ff:be:fe:
84:47:81:2d:0c:bb:72:d1:89:69:a4:c6:ec:f4:1a:eb:28:00:
9f:f0:5f:53:20:49:e9:39:ea:c2:0e:ad:19:81:6f:62:35:b6:
64:41:1b:3c:58:28:6b:5b:42:2a:b0:9f:06:17:fa:e3:f4:bd:
7c:7f:09:79:23:fd:b3:d0:13:84:c6:c1:5d:92:c2:d5:e2:f9:
66:7a:21:29:d3:33:49:22:c9:5e:40:d9:2f:42:08:75:c2:92:
ad:4b:f6:a4:b9:fd:14:20:09:f4:d9:e9:0c:42:9c:d9:01:d8:
37:fa:0d:53:60:6d:f9:d4:82:dd:74:d4:39:73:7e:5f:a2:ea:
fc:21:0b:03:b0:8f:0f:55:ff:5a:23:fe:1d:2a:bf:c4:dd:2b:
a2:d0:7c:48:12:48:91:71:62:c9:21:59:b7:66:8d:9d:c8:f4:
66:be:b5:f5:77:6c:e4:11:d0:15:5d:e4:e8:14:49:62:da:ea:
6d:af:5e:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:33:14 2024 by rpki-client on console-ams.rpki-client.org