Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa
File: ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa (raw, json)
Hash identifier: uyL4dK+GxQJBMXh9UYIbcUhltwwIoPW7biUU7zD77zg=
Subject key identifier: C9:D7:34:99:8C:11:D4:3C:EC:F8:6D:1E:CC:10:F7:66:33:AF:A2:17
Certificate issuer: /CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Certificate serial: 019423D7B69BEAB90A2DE6B347151BE9A970
Authority key identifier: EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa
Signing time: Wed 01 Jan 2025 21:48:46 +0000
ROA not before: Wed 01 Jan 2025 21:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201584
IP address blocks: 91.108.188.0/24 maxlen: 24
185.199.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.mft
rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jan 2025 02:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:b6:9b:ea:b9:0a:2d:e6:b3:47:15:1b:e9:a9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb67a840e41ac66f8f359ccbd65354c917042bbf
Validity
Not Before: Jan 1 21:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c9d734998c11d43cecf86d1ecc10f76633afa217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:9e:df:10:18:0b:1b:88:3c:63:35:a9:86:d2:
cb:be:d1:39:85:0a:37:dd:1e:57:0e:e8:1b:9a:40:
e5:d2:50:47:08:d5:e7:bd:f1:fa:89:2f:a6:7f:6c:
d6:6f:63:36:ac:31:de:9f:75:64:42:e1:37:0d:9c:
e0:f0:84:1c:f9:93:de:41:79:6e:65:1b:4b:6d:b4:
22:3d:b0:25:a7:19:5c:15:bd:13:30:b1:bd:c5:ad:
b7:ac:70:c3:ec:e5:b9:ed:8d:a1:93:31:45:4b:fd:
79:8f:2c:8b:ef:4b:ef:f0:58:9c:ac:c8:36:ea:a2:
78:ce:ff:72:f9:2e:c9:70:c2:94:17:23:e6:43:39:
a6:d6:c4:93:76:ff:f5:16:e2:6c:8a:ae:47:e9:9e:
09:3e:52:db:1f:08:86:30:aa:0e:65:2a:32:69:62:
83:78:6c:d5:5e:e8:1a:54:53:3a:1d:19:c2:61:6b:
58:87:22:f8:04:9c:36:a3:6f:b3:e3:d2:22:ad:11:
92:30:72:96:73:77:b4:f4:cc:82:8c:8a:ee:e2:72:
69:cd:54:04:3d:ef:41:e1:ad:cf:b1:3b:91:5e:51:
23:13:28:e2:cc:7d:59:0b:53:30:ce:5b:98:ee:35:
57:50:3d:04:1c:f6:87:39:ad:f1:b2:5d:0f:95:f8:
97:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D7:34:99:8C:11:D4:3C:EC:F8:6D:1E:CC:10:F7:66:33:AF:A2:17
X509v3 Authority Key Identifier:
keyid:EB:67:A8:40:E4:1A:C6:6F:8F:35:9C:CB:D6:53:54:C9:17:04:2B:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/62eoQOQaxm-PNZzL1lNUyRcEK78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/ydc0mYwR1Dzs-G0ezBD3ZjOvohc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/034095-91e5-41b2-a6bc-34fcc4187144/1/62eoQOQaxm-PNZzL1lNUyRcEK78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.188.0/24
185.199.209.0/24
Signature Algorithm: sha256WithRSAEncryption
44:f3:fc:0e:bf:a5:27:1e:10:48:ed:ae:15:3a:f5:7e:0c:61:
94:65:4a:3a:5b:f0:56:9c:77:c0:fb:b6:c0:a3:69:83:3b:0a:
d6:a5:b2:41:79:39:22:02:a3:bd:1e:bf:b3:3d:f4:8e:87:a3:
b1:e9:23:00:ce:e8:b0:7b:0d:10:0a:f9:24:24:c0:d3:8c:b2:
ef:62:e3:9b:c8:8a:af:d7:67:16:1a:b1:ee:e1:97:ce:c5:7a:
a8:76:81:79:9e:d9:50:7d:96:69:11:0a:90:f7:a6:3e:83:9a:
ee:b0:aa:1a:cf:7b:26:12:3f:de:14:c3:02:28:98:bf:c8:4e:
6a:55:d6:dd:55:19:0a:df:7d:7d:85:a8:d1:85:3a:19:37:10:
01:9b:61:03:a4:97:66:2c:e6:fa:b0:40:b1:1d:ca:35:10:db:
cf:85:ae:f0:33:b1:a7:3b:1c:f3:54:67:9d:51:ae:e9:f9:56:
ee:2a:a3:10:4a:7e:d5:e3:ed:69:31:aa:8d:7f:99:8c:16:7f:
54:73:7a:07:f5:57:2b:b4:f3:91:9c:34:d7:13:d9:fd:0f:1c:
b9:3b:a4:12:71:cd:d3:c3:34:fc:ac:3a:f0:fc:a4:b4:92:99:
27:ba:cf:4f:8b:99:b3:82:6d:01:1b:7b:c5:9e:1c:eb:35:f8:
70:72:c2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jan 18 10:53:33 2025 by rpki-client on console-fra.rpki-client.org