Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/yVvrh4pl0ynBVhIt0glMCY2KdHg.roa
File: yVvrh4pl0ynBVhIt0glMCY2KdHg.roa (raw, json)
Hash identifier: VeLMooeXnO5mYAvemTl5kXdHhLrNGLU1kCfWjox592U=
Subject key identifier: C9:5B:EB:87:8A:65:D3:29:C1:56:12:2D:D2:09:4C:09:8D:8A:74:78
Certificate issuer: /CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Certificate serial: 018CC50060C5E61AB767E17EA13BF56FF187
Authority key identifier: CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/yVvrh4pl0ynBVhIt0glMCY2KdHg.roa
Signing time: Mon 01 Jan 2024 12:29:45 +0000
ROA not before: Mon 01 Jan 2024 12:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57004
IP address blocks: 185.191.201.0/24 maxlen: 32
185.191.202.0/24 maxlen: 32
185.191.203.0/24 maxlen: 32
185.191.200.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:60:c5:e6:1a:b7:67:e1:7e:a1:3b:f5:6f:f1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd919eb5c2108360155de7fb4f216a055ae31f09
Validity
Not Before: Jan 1 12:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c95beb878a65d329c156122dd2094c098d8a7478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:91:8e:ef:b8:3a:f6:2c:67:74:f6:99:6e:
00:2a:27:44:22:ce:1f:7b:23:a1:9e:c7:db:47:a2:
dc:27:52:cc:e2:44:76:41:a3:16:19:cd:21:8a:3e:
fc:e9:ef:70:20:8f:48:4a:9f:73:88:9c:5f:ca:02:
a7:24:6c:bd:6b:1c:3b:fa:9d:3c:eb:bd:9d:d9:d9:
78:3b:de:b6:d5:50:86:60:1b:52:2c:91:27:6c:25:
5a:58:1e:bd:37:66:22:10:1a:6b:1c:bf:5f:08:08:
6f:34:1b:4b:d3:3e:3d:ea:c0:93:c4:2e:41:2d:2f:
ec:0d:3e:00:8e:6b:0a:37:ad:41:18:8d:7f:68:d4:
4c:e3:40:48:95:cd:da:3e:32:59:7d:03:d8:8f:41:
11:e2:55:95:69:2a:02:2b:1d:46:9d:eb:fd:e5:0f:
c3:7c:d4:a5:40:30:41:24:c3:f2:2f:80:6a:1f:64:
94:44:d8:6b:1e:7f:7d:4b:c4:02:b1:72:b9:1d:e2:
54:d1:13:e3:96:fd:af:a0:68:af:b1:8e:16:ed:8c:
dc:8d:76:8f:88:f3:f3:44:f6:d6:11:47:12:d7:98:
8e:57:78:73:d3:ac:d7:cb:6c:18:38:9d:03:b3:b5:
2a:da:a8:43:cb:fc:47:e7:9a:64:e9:e9:01:79:71:
b9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5B:EB:87:8A:65:D3:29:C1:56:12:2D:D2:09:4C:09:8D:8A:74:78
X509v3 Authority Key Identifier:
keyid:CD:91:9E:B5:C2:10:83:60:15:5D:E7:FB:4F:21:6A:05:5A:E3:1F:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZGetcIQg2AVXef7TyFqBVrjHwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/yVvrh4pl0ynBVhIt0glMCY2KdHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/4fc780-b296-40b7-9508-9f8e6a184374/1/zZGetcIQg2AVXef7TyFqBVrjHwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.200.0/22
Signature Algorithm: sha256WithRSAEncryption
66:79:f5:8b:bc:c3:09:15:f7:da:1d:19:ea:e3:ec:5d:43:3b:
da:ce:c8:e1:bd:a1:a0:bf:f6:f1:69:89:fa:6d:1d:2c:5a:2c:
90:89:4c:df:03:25:78:de:fc:29:28:14:6c:a6:0d:d2:b5:2e:
42:5e:8d:78:21:cb:3c:6b:a6:5d:27:7d:34:4b:35:ee:f8:1e:
f9:b1:49:ca:c0:1c:58:4d:c5:8c:7a:f0:29:38:cf:f7:93:de:
34:bb:54:be:92:98:a8:aa:1f:5b:13:94:c9:65:d0:34:99:e7:
6e:86:4d:49:01:16:3b:6f:07:25:9b:85:ca:fe:6f:ef:c8:01:
2a:e4:ab:f1:d7:ee:01:a8:66:f6:ed:f1:41:d4:f1:50:58:c0:
53:87:1a:06:88:35:b0:9f:b9:2a:d3:5b:53:f9:fd:08:ff:8e:
64:47:0a:a8:5f:4f:c4:e5:5a:27:22:85:ec:ed:34:f2:3d:74:
71:21:97:45:43:77:7d:57:d0:9d:29:c7:3e:39:4e:ed:4a:c7:
ed:f6:8b:9e:ae:d1:ae:fe:ae:74:7b:3c:da:6d:bb:21:0c:d7:
22:0a:66:2a:69:f2:2e:41:0d:fe:cc:9b:e7:87:b6:4a:36:c0:
ce:cd:72:c6:cc:eb:c2:52:80:c0:a4:6d:bf:9d:fb:5c:00:a8:
8f:ab:2c:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 08:10:28 2024 by rpki-client on console-fra.rpki-client.org