Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/yHEYXv-BuJs6FpHkhX4RkxJ-xCc.roa
File: yHEYXv-BuJs6FpHkhX4RkxJ-xCc.roa (raw, json)
Hash identifier: LKOJkgxJvbS9KW66rumdyyhfKZmxUjfTy5KVOn9EbcM=
Subject key identifier: C8:71:18:5E:FF:81:B8:9B:3A:16:91:E4:85:7E:11:93:12:7E:C4:27
Certificate issuer: /CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Certificate serial: 018CC801DC505EA2688B788CF0130EF06747
Authority key identifier: E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/yHEYXv-BuJs6FpHkhX4RkxJ-xCc.roa
Signing time: Tue 02 Jan 2024 02:30:14 +0000
ROA not before: Tue 02 Jan 2024 02:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31537
IP address blocks: 185.169.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.mft
rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 22:04:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:dc:50:5e:a2:68:8b:78:8c:f0:13:0e:f0:67:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e99405ee8f5d8e764e90bd66bdd1e89ac12809e8
Validity
Not Before: Jan 2 02:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c871185eff81b89b3a1691e4857e1193127ec427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9f:94:5b:a1:56:dc:c1:99:96:97:2f:a0:38:
f5:65:44:d8:8a:37:71:f7:d8:47:63:52:51:af:e5:
46:50:08:f0:9c:09:98:59:59:54:7e:1c:98:d7:1d:
29:1b:d3:2f:00:34:5f:b1:4b:b4:e0:78:93:de:1b:
38:5c:b8:c9:8e:f3:3a:0c:6e:2c:d1:d7:91:e5:3f:
49:5c:bc:fb:cc:22:33:51:df:90:2d:4d:86:77:7f:
0c:45:b8:1a:80:9e:07:01:5f:68:03:4f:0c:f2:c4:
22:06:2c:c6:08:04:07:c2:28:39:11:03:0b:82:0e:
55:59:b8:eb:d2:db:e3:51:2a:fc:be:63:ca:4d:7f:
49:4b:31:a5:c6:d3:03:28:e2:8a:f2:bb:c7:83:40:
97:b0:a9:24:0c:29:00:53:d8:c1:5d:71:e7:c3:6e:
e0:75:95:59:54:7e:60:7e:59:24:e9:dc:84:c1:b6:
ac:22:6f:0d:bb:01:35:a5:50:99:c6:c0:22:24:ff:
bb:3f:ca:05:26:26:4a:bc:3f:80:74:2d:b6:3e:80:
2f:b2:2c:c8:42:8e:8e:7c:86:ee:d7:04:1d:17:bb:
07:5f:8b:9e:08:25:b5:f9:d5:c9:4d:62:b1:e4:0f:
0e:9d:b4:5f:69:92:57:05:12:48:d8:1c:47:3a:2e:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:71:18:5E:FF:81:B8:9B:3A:16:91:E4:85:7E:11:93:12:7E:C4:27
X509v3 Authority Key Identifier:
keyid:E9:94:05:EE:8F:5D:8E:76:4E:90:BD:66:BD:D1:E8:9A:C1:28:09:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ZQF7o9djnZOkL1mvdHomsEoCeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/yHEYXv-BuJs6FpHkhX4RkxJ-xCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1b9202-4869-4d45-9521-eb11b4954f33/1/6ZQF7o9djnZOkL1mvdHomsEoCeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.169.76.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:20:80:69:e1:23:54:90:9f:1a:df:c0:1c:85:51:98:db:d8:
ca:86:ba:bd:b7:70:e8:e8:37:53:ed:b4:22:35:0f:d0:d9:dc:
02:a3:e6:7d:e8:f6:84:4b:eb:dc:84:da:74:08:60:54:6e:8a:
3e:a9:2a:c1:a8:61:61:c2:99:da:c6:eb:d9:7e:7b:36:36:8b:
ae:d2:cc:4e:7a:fa:71:60:71:70:9a:0a:b5:80:ed:4e:5d:e4:
aa:93:f2:3a:a2:61:e0:d8:49:07:93:61:53:80:2a:79:a0:fd:
5c:ec:a4:72:5c:fa:10:20:f8:5b:ec:9c:64:1c:bb:8b:f1:b7:
7b:fd:5e:43:c4:b9:48:80:84:3e:0f:63:83:3c:02:e8:41:ef:
ea:b7:71:ce:d2:78:84:4a:50:87:e9:94:21:ca:bb:4b:3b:31:
d0:63:23:ca:6c:ed:6f:e6:9a:18:5e:08:0f:57:6b:32:33:2b:
b3:be:1d:60:ff:4a:ba:55:b5:0f:09:ee:97:9b:0b:d8:b4:77:
a8:71:4b:c9:bb:4c:2e:e2:b9:ac:42:34:34:5e:e6:49:a9:b9:
c2:cd:40:a5:ad:81:17:0a:25:e8:f2:c6:a9:51:23:42:f8:14:
78:69:f6:4e:c1:88:62:18:bc:3d:e6:d7:ea:ed:35:e5:19:db:
f7:95:cb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 01:40:32 2024 by rpki-client on console-fra.rpki-client.org