Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/yMjH_QOfr6tNUBoPMxmBeUOAOFc.roa
File: yMjH_QOfr6tNUBoPMxmBeUOAOFc.roa (raw, json)
Hash identifier: a5ax7WYN2ubiqCVcM+z9hVFnACJ11XeevU2yYkixyrs=
Subject key identifier: C8:C8:C7:FD:03:9F:AF:AB:4D:50:1A:0F:33:19:81:79:43:80:38:57
Certificate issuer: /CN=fe72124b6d321463e9f10be1fb422b892462e89f
Certificate serial: 01906F5AC77C0007ED037BA2723E28E50A43
Authority key identifier: FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/yMjH_QOfr6tNUBoPMxmBeUOAOFc.roa
Signing time: Mon 01 Jul 2024 17:32:18 +0000
ROA not before: Mon 01 Jul 2024 17:32:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20660
IP address blocks: 194.125.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6f:5a:c7:7c:00:07:ed:03:7b:a2:72:3e:28:e5:0a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe72124b6d321463e9f10be1fb422b892462e89f
Validity
Not Before: Jul 1 17:32:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8c8c7fd039fafab4d501a0f3319817943803857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c2:6e:9e:a8:c7:75:98:a0:c9:3d:e3:56:dd:
36:47:45:f4:4c:4e:a4:31:98:d5:39:06:4b:e4:30:
c8:ac:02:24:f3:db:1b:bb:f7:63:18:4c:36:3f:ab:
22:c1:8b:83:0a:23:8d:15:d4:7d:3e:84:04:fc:00:
61:f1:08:15:7c:45:b9:2b:67:d9:a2:f0:e7:cd:1e:
64:a0:d2:12:f8:47:03:da:98:8c:bd:be:a4:4a:25:
01:8e:a5:c5:e7:e3:28:d5:29:20:a1:e0:e8:33:e8:
4e:d2:ab:f8:1a:f5:e2:32:75:88:12:69:da:86:34:
b7:04:5a:22:b8:32:65:e5:02:c1:9a:3b:91:3c:ea:
68:c4:d1:03:24:72:47:40:5e:df:5c:7b:42:09:6f:
38:29:3a:f8:8b:5c:a7:cb:f4:9f:6d:eb:c6:e2:59:
87:f0:9a:e1:f1:05:31:17:81:d8:54:c9:b1:97:83:
4d:27:75:4f:00:52:14:08:a5:5c:b9:2b:4a:dc:ca:
19:41:b9:5e:f4:b2:9b:f3:bc:16:f3:f1:2d:29:c0:
be:ef:20:14:87:71:81:6b:bd:2f:70:aa:e2:1d:40:
b3:ed:a0:07:0f:8c:ea:c2:85:4c:65:c6:cb:c9:90:
b8:00:5c:0c:92:bc:a5:8a:af:29:3b:47:4b:c7:5d:
b2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:C8:C7:FD:03:9F:AF:AB:4D:50:1A:0F:33:19:81:79:43:80:38:57
X509v3 Authority Key Identifier:
keyid:FE:72:12:4B:6D:32:14:63:E9:F1:0B:E1:FB:42:2B:89:24:62:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nISS20yFGPp8Qvh-0IriSRi6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/yMjH_QOfr6tNUBoPMxmBeUOAOFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dc9904-0a5c-416b-80ef-7bb82040e5ee/1/_nISS20yFGPp8Qvh-0IriSRi6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.125.244.0/23
Signature Algorithm: sha256WithRSAEncryption
12:01:89:df:9d:57:b2:3d:3c:1d:d5:98:b5:4b:fc:88:76:d8:
30:aa:a6:c9:3c:ca:bd:d5:8b:09:fe:d6:7c:8e:2a:29:3c:f1:
e1:93:cb:07:7d:13:f8:4f:1c:60:b0:16:71:99:d2:bd:43:bc:
59:76:3c:87:fe:e1:a1:da:90:f1:a9:f5:8f:da:72:1d:af:92:
dd:ca:fa:f8:79:43:19:16:73:26:ad:87:4e:ef:77:1d:e1:dc:
99:69:d3:3c:e7:40:25:70:a8:ff:6a:b5:60:b4:b6:29:e6:6b:
66:06:e6:51:ca:8b:32:af:47:9c:26:bc:93:5a:75:34:1c:54:
25:1b:45:96:8f:1a:b0:3e:9b:e5:22:b6:ca:93:59:54:2c:0f:
f0:44:20:af:18:69:f2:62:35:09:31:1d:0f:58:ac:9b:27:59:
cd:55:e3:ec:8b:73:6c:df:cd:0b:bf:ce:3e:63:1c:70:bd:aa:
06:2c:5f:94:d5:97:28:42:73:d0:8b:af:6b:bc:81:36:16:ac:
72:6e:aa:c0:b4:6e:8b:05:11:69:88:a7:5c:ca:82:15:65:ee:
8e:59:9f:88:50:bd:19:ff:cf:87:5d:f7:19:41:f8:17:78:46:
a6:28:87:35:71:ad:1f:fe:3a:56:44:02:65:38:c7:7f:8b:f5:
b6:85:f9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:46:32 2024 by rpki-client on console-fra.rpki-client.org