Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/yu65muM6_RCGPbPbBynXvNsGbso.roa
File: yu65muM6_RCGPbPbBynXvNsGbso.roa (raw, json)
Hash identifier: 3JV4xhR0i3kpjRpwlinTmGLxakH0U0DdMDoYqGVT4qc=
Subject key identifier: CA:EE:B9:9A:E3:3A:FD:10:86:3D:B3:DB:07:29:D7:BC:DB:06:6E:CA
Certificate issuer: /CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Certificate serial: 018CC79426F91A54DB945EF2B836C71F8F31
Authority key identifier: E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/yu65muM6_RCGPbPbBynXvNsGbso.roa
Signing time: Tue 02 Jan 2024 00:30:24 +0000
ROA not before: Tue 02 Jan 2024 00:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20836
IP address blocks: 185.112.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 21:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:26:f9:1a:54:db:94:5e:f2:b8:36:c7:1f:8f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e55b1a4f1942e4b1d894cbc8cf09073d02890170
Validity
Not Before: Jan 2 00:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=caeeb99ae33afd10863db3db0729d7bcdb066eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:52:72:cb:19:97:90:7e:06:22:5a:5f:c9:
cd:79:ae:de:5b:c7:81:a5:c5:f4:10:8c:39:b0:af:
6e:22:0f:8e:6a:c3:6e:df:10:7d:0f:43:20:92:ae:
e4:47:88:8f:18:e7:78:c2:ce:29:2f:2f:5d:2c:49:
fa:f1:ba:df:f0:75:02:00:a2:e8:49:75:c8:36:5f:
6a:0c:24:57:6f:ae:19:c3:ac:3d:45:4d:70:33:46:
59:88:db:96:83:26:81:20:3f:e6:ca:d7:66:e6:f3:
ba:21:4f:1d:ae:cf:06:03:3d:a2:5d:3a:e7:8e:84:
47:37:51:93:14:94:e4:71:a3:04:c0:1f:c5:54:47:
5b:1a:9f:bc:c5:1c:42:2e:a0:5f:bd:a4:0c:38:e5:
83:0a:53:11:12:ef:6e:75:9f:25:1b:2b:45:35:d8:
0a:88:9b:31:d3:73:2b:7a:21:d9:6a:f8:00:52:0e:
ce:e0:e9:6f:6a:cb:bd:95:7a:e6:66:67:c7:90:cf:
8e:5e:57:6f:29:c1:3f:08:28:91:3c:e0:a2:e4:bd:
0f:cc:5d:32:e1:d9:71:1c:5f:71:f3:1e:c0:ea:a3:
ee:46:3f:a6:16:8b:ee:46:27:78:73:de:01:66:c1:
c0:d1:8e:f4:b9:73:78:db:8c:b0:95:d1:09:68:71:
d5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:EE:B9:9A:E3:3A:FD:10:86:3D:B3:DB:07:29:D7:BC:DB:06:6E:CA
X509v3 Authority Key Identifier:
keyid:E5:5B:1A:4F:19:42:E4:B1:D8:94:CB:C8:CF:09:07:3D:02:89:01:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5VsaTxlC5LHYlMvIzwkHPQKJAXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/yu65muM6_RCGPbPbBynXvNsGbso.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/c66a1f-7707-4f8d-a274-4df65aba6a62/1/5VsaTxlC5LHYlMvIzwkHPQKJAXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.90.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:90:4c:ad:1b:d9:b0:24:40:ec:68:27:2c:53:ef:39:ab:6e:
2e:7a:9a:58:96:eb:cc:bf:b5:8e:bf:e3:40:05:86:6f:d9:e5:
a6:d3:d6:a8:13:ed:20:89:26:68:9e:2a:84:2d:f7:40:0d:1d:
ac:f3:fe:7b:b3:f4:c8:db:2c:76:e8:dc:31:f3:97:92:5b:85:
a2:7f:bd:20:fd:be:72:1d:f5:fe:18:5c:83:76:af:fa:b2:f5:
63:a9:d9:2c:73:6a:92:86:f5:48:ad:5a:25:c4:53:f1:6d:1a:
9c:43:05:9d:d7:ac:50:af:41:40:e4:2d:be:0a:1d:09:43:78:
66:9a:3c:ba:85:ac:8b:b5:c6:56:31:64:73:ce:73:2d:6f:ca:
f6:74:6c:28:63:bb:e8:03:62:18:40:ae:9f:5f:58:58:f1:be:
cd:57:33:4a:87:3b:4d:01:f4:cb:58:37:dd:b4:36:44:99:03:
63:95:8e:8e:f1:91:74:32:ef:06:a6:40:ac:b6:dc:66:69:67:
fc:be:45:64:5e:c5:c2:a9:c5:f3:81:84:f2:4f:97:d9:23:99:
f3:e7:92:c9:2b:d3:e8:07:32:a8:73:16:2e:98:7b:2a:04:60:
a6:5a:c6:db:17:47:51:2c:6d:8d:df:e4:c5:20:cc:d8:56:48:
46:2a:07:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 05:49:44 2024 by rpki-client on console-fra.rpki-client.org