Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/yI6dLYvD6ScmS3ufiFIKpitslks.roa
File: yI6dLYvD6ScmS3ufiFIKpitslks.roa (raw, json)
Hash identifier: LypzGhC3807/gmkYul4W1VzfM94ppqFAUoTBSf5cZpc=
Subject key identifier: C8:8E:9D:2D:8B:C3:E9:27:26:4B:7B:9F:88:52:0A:A6:2B:6C:96:4B
Certificate issuer: /CN=ccbece03837767ab590c24750b5607203cfa1959
Certificate serial: 018CC726FE196791A89D7E4DC21FDC1591C0
Authority key identifier: CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/yI6dLYvD6ScmS3ufiFIKpitslks.roa
Signing time: Mon 01 Jan 2024 22:31:10 +0000
ROA not before: Mon 01 Jan 2024 22:31:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205015
IP address blocks: 185.189.89.0/24 maxlen: 24
185.189.88.0/24 maxlen: 24
185.189.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:fe:19:67:91:a8:9d:7e:4d:c2:1f:dc:15:91:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccbece03837767ab590c24750b5607203cfa1959
Validity
Not Before: Jan 1 22:31:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c88e9d2d8bc3e927264b7b9f88520aa62b6c964b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:41:db:d3:1d:71:7e:f9:74:ba:51:28:ae:89:
0d:b3:6f:0c:bb:01:20:ee:7a:73:95:f0:07:3c:bd:
06:a7:38:66:c7:9d:b3:80:6d:12:a6:c3:94:c9:12:
dc:96:fd:02:f5:4c:57:41:23:ab:a3:68:38:ff:a7:
01:c7:ae:1e:76:e0:7e:23:c4:1d:25:c8:b8:6a:93:
de:59:7c:f8:ec:3a:cc:dd:94:95:46:60:62:88:eb:
44:b2:22:b9:9d:68:f2:af:62:69:86:22:37:f2:9c:
96:f9:39:2b:1b:02:e0:65:7b:e0:9f:4d:1b:fd:30:
c9:89:f0:f7:5e:d9:88:31:60:2b:22:69:cf:e5:8c:
2d:f4:77:e7:6d:99:f0:5d:2b:6c:5c:73:c7:65:1c:
4e:81:05:5e:7a:9a:cf:3c:8b:80:d5:86:69:fe:2d:
1e:b6:55:89:95:70:d5:24:d7:5f:37:3b:f5:4f:0e:
fc:bf:57:0b:14:f4:06:51:4d:66:14:fd:e1:62:8a:
74:ff:52:34:51:93:1d:4d:0c:01:b2:71:8b:48:60:
27:78:b4:61:8a:12:69:c8:94:d9:23:85:3a:46:95:
8a:00:93:3a:a3:25:69:f1:41:39:57:b1:49:ef:1a:
a0:48:97:ce:1b:66:65:71:1f:73:e7:e0:13:b0:94:
e5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:8E:9D:2D:8B:C3:E9:27:26:4B:7B:9F:88:52:0A:A6:2B:6C:96:4B
X509v3 Authority Key Identifier:
keyid:CC:BE:CE:03:83:77:67:AB:59:0C:24:75:0B:56:07:20:3C:FA:19:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/yI6dLYvD6ScmS3ufiFIKpitslks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cb15d9-0433-4bd0-9ead-644d9830f0e2/1/zL7OA4N3Z6tZDCR1C1YHIDz6GVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.189.88.0/23
185.189.91.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:4c:2e:68:ff:c1:58:7b:35:9a:eb:82:65:3f:27:a0:a4:d3:
de:b9:e8:0c:52:58:27:9c:f2:14:7f:ab:b9:d3:bb:6e:84:1a:
6e:28:b0:ca:24:15:0b:4f:27:c8:ff:e2:24:5c:b2:12:fa:23:
f3:0b:5c:62:7a:e9:8e:80:7e:0d:00:bb:bd:7a:39:89:ad:32:
8e:1a:b4:03:78:45:bd:cf:a2:0a:05:bb:cc:ee:de:84:13:6b:
27:44:37:9a:bc:57:88:84:2f:6f:b8:6c:71:20:3a:1d:46:52:
8b:fa:27:a5:ea:1e:e6:f5:0c:ba:c2:ef:54:69:a8:a9:45:e2:
72:43:6a:fb:b4:55:ef:85:b4:89:17:8d:fc:1a:73:f8:d0:01:
39:07:f8:b9:93:80:c8:3f:a1:fc:61:9a:9d:cf:58:7e:02:d2:
80:5d:77:ea:27:c5:c2:fc:43:91:a2:00:58:01:da:4e:5f:b4:
d7:c4:47:ff:9a:43:da:a6:2e:1b:1b:81:8e:46:d6:59:d3:c9:
1e:b0:e0:31:d3:f3:e5:5b:a3:e9:ef:23:9f:1d:4c:7e:71:8b:
31:55:08:97:e1:53:2c:2d:36:40:0e:6d:47:06:ec:cb:de:cf:
65:4a:45:99:cf:2e:27:c2:15:45:98:ba:da:31:d9:0a:cc:e4:
5a:aa:e2:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:08:45 2024 by rpki-client on console-fra.rpki-client.org