Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/R-Yyk1OU76vHDeB77jI3OMNNcy8.roa
File: R-Yyk1OU76vHDeB77jI3OMNNcy8.roa (raw, json)
Hash identifier: 7PPA5CdDlBNdpP9/wtj2o0d70TlTHcLmM/BDgHYtZw4=
Subject key identifier: 47:E6:32:93:53:94:EF:AB:C7:0D:E0:7B:EE:32:37:38:C3:4D:73:2F
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 018CC7275376F4A35C6376823F1EAE5DDB91
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/R-Yyk1OU76vHDeB77jI3OMNNcy8.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210122
IP address blocks: 185.229.240.0/24 maxlen: 24
185.229.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:02:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:53:76:f4:a3:5c:63:76:82:3f:1e:ae:5d:db:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=47e632935394efabc70de07bee323738c34d732f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2e:e7:c6:c5:51:a8:ce:b7:a2:d6:ba:ce:5f:
96:fd:7f:99:90:5b:f2:98:58:63:b5:3f:f3:79:ae:
af:9c:15:6c:21:c9:2b:ee:a1:93:db:98:22:88:b5:
53:d4:22:a9:18:da:cc:9c:3c:a3:3b:5a:6f:2f:8b:
6d:f8:31:6f:a3:08:52:08:c7:8b:41:db:19:2b:4b:
5d:a1:91:bb:22:59:6f:49:81:c7:3d:ce:66:8e:48:
7e:88:3c:5b:f0:22:fd:30:b2:01:48:63:09:ad:19:
7e:4e:42:b1:0a:5a:03:70:9a:dc:23:2a:7e:07:99:
0d:bb:4e:1a:58:c2:00:e8:02:5d:4c:e8:99:93:b7:
9c:3f:84:97:d9:36:6a:11:8e:bb:3b:a5:16:65:d0:
52:24:3b:68:e2:82:78:9f:72:7f:40:a1:32:8f:ec:
eb:a0:10:81:68:87:9c:89:f7:bd:a8:75:1c:32:9d:
65:45:71:cb:1e:62:60:12:41:c5:6f:d0:3a:15:9b:
fd:34:28:cf:92:49:02:a1:a5:63:08:83:d8:2c:62:
86:0b:43:29:38:d0:02:d8:c0:9e:91:5b:2c:8c:ff:
d8:72:21:f4:01:f7:a6:65:a8:bf:c7:87:d0:8b:21:
1c:6d:18:e0:dc:46:81:de:8d:72:34:b0:54:8f:9e:
0e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E6:32:93:53:94:EF:AB:C7:0D:E0:7B:EE:32:37:38:C3:4D:73:2F
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/R-Yyk1OU76vHDeB77jI3OMNNcy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.240.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:3a:dc:22:a9:55:5d:09:68:1a:98:7a:5b:dc:52:fa:ab:8e:
79:02:0a:f5:32:fc:e0:59:b8:95:c7:9d:53:7c:a9:ba:6d:59:
0c:82:6e:fe:d8:6a:47:9b:7b:98:39:bd:67:1d:7c:94:6a:0b:
47:bd:b5:af:ad:05:94:dc:d5:ed:50:89:b5:cc:0d:d9:41:43:
71:01:03:97:28:30:e6:d1:3d:fd:3b:c7:27:c4:bd:31:e4:a8:
55:a3:92:df:46:17:4a:16:b5:fb:26:92:ac:57:c3:7c:3d:30:
42:20:41:8b:23:33:25:50:75:2e:52:60:68:cd:f8:c8:25:de:
44:97:b0:e4:66:59:87:f5:b3:86:0b:cd:e8:b7:19:b3:c2:ca:
d9:0a:1a:ba:1d:a5:ae:71:ec:7b:1e:cc:b6:04:a0:8e:b0:90:
ff:bb:5f:4d:bc:30:99:19:8e:7b:d1:09:10:cc:10:eb:d6:e4:
f3:cb:22:83:97:46:2d:74:bf:15:c8:fb:bd:71:00:8d:de:65:
3d:f3:bf:9b:e9:74:bd:df:dd:09:79:49:fb:4b:32:21:eb:01:
b2:01:00:33:3b:11:da:33:53:09:ed:cf:75:bd:11:78:71:c6:
09:93:7e:b4:bf:2d:b8:e6:12:fd:5c:df:74:7e:61:39:4a:ee:
bf:9c:f0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 15:33:13 2024 by rpki-client on console-ams.rpki-client.org