Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/Yc-z1du30a7LGUDmqNdXVTLQFss.roa
File: Yc-z1du30a7LGUDmqNdXVTLQFss.roa (raw, json)
Hash identifier: uJPpfHC3BZ2bFmX5na9+3VjIJ0IT0JAr9P81pp/TN8U=
Subject key identifier: 61:CF:B3:D5:DB:B7:D1:AE:CB:19:40:E6:A8:D7:57:55:32:D0:16:CB
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 018F29968AA1FEC467B66D33B013E9AC1264
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/Yc-z1du30a7LGUDmqNdXVTLQFss.roa
Signing time: Mon 29 Apr 2024 11:21:22 +0000
ROA not before: Mon 29 Apr 2024 11:21:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50284
IP address blocks: 88.151.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:29:96:8a:a1:fe:c4:67:b6:6d:33:b0:13:e9:ac:12:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Apr 29 11:21:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61cfb3d5dbb7d1aecb1940e6a8d7575532d016cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:76:86:a3:86:90:a3:13:49:83:df:36:2e:fc:
e6:60:d7:1f:a5:4c:3f:d2:97:1d:b0:c5:e9:8d:5e:
f8:da:3e:09:db:f6:b8:14:d9:26:a4:74:62:00:07:
7f:e6:2a:b5:c4:ee:cf:48:ed:da:84:bb:54:9a:2a:
54:fb:f0:f6:f0:e8:00:a4:c1:e5:b9:af:7f:88:67:
00:59:88:db:87:a4:e4:3b:26:a5:16:c0:60:f7:05:
38:e7:23:f4:6e:e9:cc:e4:cc:1e:e2:2e:bb:85:b8:
9b:26:62:b0:1e:83:7a:8c:fc:6d:4b:df:11:0d:c9:
45:02:8d:21:7f:63:3f:8c:f8:66:fa:e1:27:55:b6:
4f:3f:fa:b3:3b:0b:fd:aa:ed:4c:4c:d5:b0:ec:21:
20:c3:32:a8:9c:ba:1a:c6:a2:1f:ed:20:29:f7:77:
6f:e3:b5:ab:1d:24:ae:c7:97:e8:1e:90:63:24:45:
1a:cd:9c:7b:3d:d7:00:fb:1b:e2:d8:e9:9b:80:d1:
26:15:68:2c:ab:e5:08:29:ae:fe:36:57:6c:c6:80:
b0:8c:3b:2f:2e:92:79:97:11:69:b3:b6:90:9a:44:
b6:d1:e7:7b:8c:f4:f2:5f:a6:54:8d:2d:ab:34:53:
4e:b3:1e:2b:4d:87:95:f6:86:a6:b9:47:97:9d:42:
0c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CF:B3:D5:DB:B7:D1:AE:CB:19:40:E6:A8:D7:57:55:32:D0:16:CB
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/Yc-z1du30a7LGUDmqNdXVTLQFss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.117.0/24
Signature Algorithm: sha256WithRSAEncryption
65:96:fc:31:39:a2:b7:44:10:d1:ef:d1:d9:df:96:a0:dc:77:
0d:6e:0b:b6:82:fc:ee:04:04:f3:fc:de:a4:b9:0e:bf:b1:b7:
c1:f1:33:9e:b5:86:f6:70:e5:b3:8b:d1:b5:67:cf:fb:7c:bf:
aa:43:0f:23:5d:87:fd:c6:96:06:7e:06:80:1f:08:cc:07:29:
b4:82:f9:dc:e4:cb:f7:fb:7f:d3:f1:63:dd:fe:52:2f:cf:03:
46:55:92:1f:bd:09:f9:e7:de:63:7e:24:69:92:90:4b:8b:75:
32:c5:20:99:a8:88:90:5b:6d:d4:af:93:f3:a2:c4:62:79:c8:
3a:c6:98:2b:ae:a2:9a:c7:6b:bd:ab:de:23:14:9a:18:e6:57:
b0:cc:49:83:d1:64:27:80:10:48:45:54:a2:de:9f:20:5f:52:
cb:68:d8:e2:3c:29:9d:6c:b8:de:66:27:25:e7:e1:0b:1f:86:
b3:48:52:2b:20:45:b5:e6:d1:a0:40:14:f1:18:4e:b9:8b:00:
1d:f8:47:9b:fc:78:67:b3:1b:da:e4:cb:64:95:73:d2:d7:a3:
11:a3:f3:29:c6:0e:ab:48:a3:8c:6d:d1:b8:ba:07:9e:59:2a:
e0:f5:e5:47:89:19:7f:b7:47:b8:0d:23:b4:52:63:ca:86:f1:
c5:f1:03:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:40:11 2024 by rpki-client on console-ams.rpki-client.org