Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/Ypbd76oWCLPHqGRxWWOxup71MSI.roa
File: Ypbd76oWCLPHqGRxWWOxup71MSI.roa (raw, json)
Hash identifier: q1UdVyAlJTqiSj6/tX3qH0AkBm2gowxAfDu3JeQBHgo=
Subject key identifier: 62:96:DD:EF:AA:16:08:B3:C7:A8:64:71:59:63:B1:BA:9E:F5:31:22
Certificate issuer: /CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Certificate serial: 018CC5001CAE67549C9988EBBE03981D88E6
Authority key identifier: 02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/Ypbd76oWCLPHqGRxWWOxup71MSI.roa
Signing time: Mon 01 Jan 2024 12:29:28 +0000
ROA not before: Mon 01 Jan 2024 12:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205550
IP address blocks: 185.120.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:1c:ae:67:54:9c:99:88:eb:be:03:98:1d:88:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0283a8c69a2630cd8f6fa70af2a53fe019f2cc07
Validity
Not Before: Jan 1 12:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6296ddefaa1608b3c7a864715963b1ba9ef53122
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:26:42:a9:51:15:61:39:99:e4:d4:e9:40:4e:
af:f4:16:8d:34:69:d6:09:b5:6b:ba:68:da:39:b0:
dc:fe:2f:48:c9:96:42:28:5a:9d:33:ae:89:0e:b4:
ab:0f:1d:72:d0:e3:84:82:81:57:9a:d8:4a:63:8c:
2f:f3:72:ed:b3:63:b1:95:7f:98:a0:d9:3e:1a:8a:
11:9e:12:bc:56:7b:65:48:70:5c:a2:8f:cf:5f:be:
5d:7a:6c:c5:3e:a5:3f:5c:a6:b2:52:9e:e3:f3:4a:
21:8e:b0:13:12:fc:89:9e:8d:c6:0f:8d:3b:0f:6a:
89:e3:23:c3:0b:12:ee:34:6b:e0:b9:99:8e:68:be:
95:4a:4b:78:02:b5:48:64:77:b7:9e:4b:4a:7d:4d:
77:9b:74:1d:54:d8:57:12:a6:32:05:98:e6:50:d0:
32:56:65:17:a3:b3:d5:1d:45:4b:bf:4b:95:b9:ae:
2a:b0:82:e2:e7:84:81:2f:a2:38:99:9f:52:2a:06:
dd:7e:c9:9b:19:c5:75:dd:af:97:42:a0:20:af:ce:
4c:1a:12:6a:25:ca:32:c0:6e:e1:6e:76:2d:f6:73:
bb:21:8b:0c:41:9d:f7:3e:26:bd:6f:e9:fa:85:43:
c1:58:a9:0d:ac:ba:4a:cd:57:43:3a:6f:b3:cb:0f:
98:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:96:DD:EF:AA:16:08:B3:C7:A8:64:71:59:63:B1:BA:9E:F5:31:22
X509v3 Authority Key Identifier:
keyid:02:83:A8:C6:9A:26:30:CD:8F:6F:A7:0A:F2:A5:3F:E0:19:F2:CC:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoOoxpomMM2Pb6cK8qU_4BnyzAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/Ypbd76oWCLPHqGRxWWOxup71MSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1c24ad-24b4-4c98-a659-592c0dcdaf79/1/AoOoxpomMM2Pb6cK8qU_4BnyzAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.171.0/24
Signature Algorithm: sha256WithRSAEncryption
39:35:7c:b2:c6:d2:9e:fe:16:5b:bb:c5:06:93:60:dd:87:f8:
fd:08:1a:3d:97:f3:7e:f9:37:9f:40:40:b5:c7:04:d1:8b:b4:
64:aa:e0:c3:60:0e:b6:b2:9c:b2:b4:8f:ff:b0:3e:c2:c0:6d:
1d:60:9c:1f:9b:ee:7e:fc:68:65:1c:81:b8:62:84:04:70:df:
f1:a4:9c:5d:20:7a:37:4a:68:95:0b:7c:8f:8c:05:89:b1:66:
c4:f5:72:26:33:c9:47:9f:bc:56:5e:a7:e5:85:cd:7d:d9:c2:
02:0b:64:8a:38:b3:4e:ec:dc:74:89:71:ad:7b:ca:01:ac:8c:
a3:de:3c:de:93:4d:46:f2:06:ae:d2:c6:52:8c:45:ed:a5:c5:
ce:a5:eb:a1:92:e8:ec:7d:ef:98:51:41:76:5b:3e:e4:d7:d5:
e1:59:39:32:44:a3:b7:6f:bf:ed:57:18:b0:dc:c9:23:33:bb:
84:13:59:fc:df:d2:15:e5:0c:0d:8b:e5:01:c2:44:de:5b:3e:
56:d9:4e:a2:56:ce:a6:ce:44:70:52:e9:ab:ca:e6:7e:d0:cb:
80:f6:a9:99:52:d9:be:35:67:4e:e0:31:ed:4d:99:ea:22:82:
74:53:9b:a7:cc:9c:e6:d6:2e:72:47:53:e0:56:31:73:19:2c:
f4:bd:67:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:39:06 2024 by rpki-client on console-fra.rpki-client.org