Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/yegZmFUGK-fL6hvCpNH1ner9pDQ.roa
File: yegZmFUGK-fL6hvCpNH1ner9pDQ.roa (raw, json)
Hash identifier: o9GJL6bcxxLL/RNqbsBEo5PglyGiYJcrr5A0kCuBa6I=
Subject key identifier: C9:E8:19:98:55:06:2B:E7:CB:EA:1B:C2:A4:D1:F5:9D:EA:FD:A4:34
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 018CC5004501AED1002B1D5C2342728022E9
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/yegZmFUGK-fL6hvCpNH1ner9pDQ.roa
Signing time: Mon 01 Jan 2024 12:29:38 +0000
ROA not before: Mon 01 Jan 2024 12:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203966
IP address blocks: 213.171.70.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:45:01:ae:d1:00:2b:1d:5c:23:42:72:80:22:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: Jan 1 12:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9e8199855062be7cbea1bc2a4d1f59deafda434
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4e:e3:cf:7e:c4:e0:80:6c:4e:56:a1:1f:e4:
41:0c:d6:17:58:9a:50:e4:31:87:cb:7e:a5:91:12:
ae:2d:17:a5:04:08:21:40:90:b4:b2:ca:bc:8e:3a:
63:09:d9:48:6e:0e:76:32:2a:de:62:7e:40:79:4b:
3a:5f:be:9e:2b:0f:44:8b:8a:3d:e9:c0:4d:76:81:
1a:79:e2:70:20:e8:01:93:e7:76:1e:93:71:6c:08:
d1:70:2d:ec:fe:16:65:6e:40:92:05:78:bb:b1:ba:
33:e1:34:00:6c:68:c9:a7:99:16:b0:e7:7e:dc:8a:
d2:d8:a7:cc:ed:60:f6:43:ba:80:10:1f:f2:a1:9b:
b1:46:60:90:a2:cc:fa:30:55:fb:63:0d:21:1d:6f:
04:30:96:0d:15:a1:59:ba:1f:43:e6:07:fc:eb:9c:
68:45:2d:35:07:bb:b3:7c:6d:c6:9f:da:fa:df:10:
ad:42:7c:0e:ad:7c:b0:19:7b:a1:0c:00:29:8c:fd:
2b:bd:c5:81:ed:20:f2:60:cd:44:e4:db:37:b5:53:
2d:e5:4f:77:9d:6c:8c:42:3f:28:37:b9:d5:2e:3b:
25:b8:c9:c0:d7:73:a2:2b:e3:68:05:b5:32:ed:8f:
38:f1:50:20:7b:28:8e:16:11:91:77:fb:a5:c8:e5:
55:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E8:19:98:55:06:2B:E7:CB:EA:1B:C2:A4:D1:F5:9D:EA:FD:A4:34
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/yegZmFUGK-fL6hvCpNH1ner9pDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.171.70.0/23
Signature Algorithm: sha256WithRSAEncryption
46:4b:0f:fc:cd:67:6b:48:35:2a:94:09:56:fc:c2:95:3d:00:
78:91:55:1a:97:01:4f:c7:95:74:75:8a:f5:f7:0d:6e:c9:1a:
b2:1e:f7:98:6c:05:40:a5:24:36:21:1d:e4:55:b2:04:a6:3d:
98:ad:d1:51:be:83:54:82:63:3b:43:8f:f3:05:fd:82:ab:60:
ac:a9:99:f9:3b:33:b9:86:8a:1a:1e:86:30:f5:87:0d:cd:35:
0f:4c:f6:fb:19:c6:44:0a:5a:e9:af:e4:c7:f6:f2:c9:83:24:
dd:62:d2:eb:61:65:17:fc:af:7b:db:fa:2d:f2:cc:fd:c0:01:
25:0d:22:f5:7c:bd:7c:09:52:4c:11:b7:c8:32:3c:8b:07:a5:
3f:1a:35:37:fa:31:65:51:29:f8:c8:a8:ea:5e:55:d5:2e:43:
51:5f:6e:eb:07:ad:79:98:c4:51:84:88:4a:56:fd:4c:07:4e:
6c:5a:21:a6:65:1d:ce:d6:2f:68:db:31:16:7f:b3:20:67:be:
bb:a3:45:4b:47:27:0e:7e:bf:10:54:57:32:3d:d7:39:67:2f:
a9:c9:a3:6b:f4:d5:62:8a:5c:d5:4a:6e:d4:72:15:39:25:b8:
cc:45:99:39:da:44:fd:67:44:f6:6b:b5:7e:8f:6a:f0:21:cf:
82:8e:66:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 19:23:14 2024 by rpki-client on console-ams.rpki-client.org