Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/jy9aR7JivACbyOKyL1-NRV3aZSI.roa
File: jy9aR7JivACbyOKyL1-NRV3aZSI.roa (raw, json)
Hash identifier: VP7tgihrBA7oU8MZ5JIgB/FrqOSlCWWPgUELJyALKvc=
Subject key identifier: 8F:2F:5A:47:B2:62:BC:00:9B:C8:E2:B2:2F:5F:8D:45:5D:DA:65:22
Certificate issuer: /CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Certificate serial: 018CC6B8872C484E1F44138F3E54F59783B9
Authority key identifier: 5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/jy9aR7JivACbyOKyL1-NRV3aZSI.roa
Signing time: Mon 01 Jan 2024 20:30:31 +0000
ROA not before: Mon 01 Jan 2024 20:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13172
IP address blocks: 195.225.127.0/24 maxlen: 24
91.211.232.0/24 maxlen: 24
185.108.188.0/24 maxlen: 24
91.211.235.0/24 maxlen: 24
91.211.234.0/24 maxlen: 24
2a03:d180::/32 maxlen: 32
2a03:d180:fffe::/48 maxlen: 48
2a03:d180:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.mft
rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:87:2c:48:4e:1f:44:13:8f:3e:54:f5:97:83:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bc9a6c85ca7a5657b9e8ae80865d12ef8166a03
Validity
Not Before: Jan 1 20:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f2f5a47b262bc009bc8e2b22f5f8d455dda6522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e9:94:c5:b9:51:55:32:df:e5:eb:5c:f4:be:
8e:ba:86:2a:af:51:55:5a:69:31:88:ba:ad:7f:01:
5b:ad:25:ac:9d:0e:55:46:c9:35:e1:8d:39:c5:fd:
42:82:8a:4c:87:21:5f:bd:c7:48:d8:57:94:0f:8e:
96:cb:6f:c8:df:41:cb:ae:eb:36:ed:dd:cb:18:c5:
7b:87:23:a7:12:65:67:f6:5b:f9:67:3d:f2:f7:69:
06:68:0b:c4:bb:51:70:f6:a7:8e:cc:08:57:1f:19:
5d:d2:50:64:0f:1a:87:eb:34:1a:a7:90:18:e4:8f:
c4:c4:a4:14:be:2e:48:49:cb:1e:74:72:06:bb:1f:
59:ab:10:97:cc:ae:64:b8:79:ed:ee:08:9a:29:95:
5b:48:5b:57:bc:88:17:ac:31:27:cc:96:bb:54:07:
f4:44:05:24:3e:db:f7:30:69:02:19:d2:d1:c2:6a:
26:a0:32:0a:36:75:a3:5c:f6:6e:09:eb:91:f8:89:
8c:3b:3b:40:83:2a:2b:bf:3e:12:55:50:8a:b0:36:
5a:c5:a3:69:eb:a6:a0:7e:db:7d:22:56:fb:9d:27:
ab:81:0f:48:d0:fa:62:57:48:84:d0:b3:b3:b5:7a:
e6:cd:8f:f0:95:08:d9:83:1b:1b:59:20:86:a1:b8:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2F:5A:47:B2:62:BC:00:9B:C8:E2:B2:2F:5F:8D:45:5D:DA:65:22
X509v3 Authority Key Identifier:
keyid:5B:C9:A6:C8:5C:A7:A5:65:7B:9E:8A:E8:08:65:D1:2E:F8:16:6A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8mmyFynpWV7noroCGXRLvgWagM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/jy9aR7JivACbyOKyL1-NRV3aZSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/6555e3-82f6-46ca-a170-48f77ee85ab9/1/W8mmyFynpWV7noroCGXRLvgWagM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.232.0/24
91.211.234.0/23
185.108.188.0/24
195.225.127.0/24
IPv6:
2a03:d180::/32
Signature Algorithm: sha256WithRSAEncryption
9d:9f:c9:6b:13:5f:22:fd:16:21:ba:b4:24:e1:73:fa:fb:da:
40:dd:c1:8b:0b:94:75:9f:87:3f:83:b2:b5:2b:4a:90:b5:72:
f8:9e:b4:16:02:58:57:b4:75:ee:d5:6e:7e:1f:a9:3d:c7:78:
71:d6:81:41:4c:db:eb:16:7f:b7:df:88:29:75:4f:05:d2:b1:
16:0f:2b:ef:bf:e4:73:f8:a3:8d:4d:94:95:d8:62:49:5b:61:
6d:27:95:8e:83:34:6e:91:40:cd:90:17:75:e0:19:d5:97:bf:
2a:20:38:e0:57:67:27:b3:17:02:03:4a:47:b0:79:fb:b6:1e:
8a:f9:fe:0f:bd:a4:d3:93:ae:0c:a6:b0:8e:e2:fa:2e:94:48:
b9:36:64:8d:9f:15:3e:0f:bc:1b:7e:33:56:92:0d:5f:a8:cd:
c7:4b:37:14:27:da:6d:b0:7d:86:dc:b7:e0:ee:31:93:9f:f4:
88:98:19:65:68:14:8f:9a:01:aa:6c:2d:27:3e:2d:29:8b:1a:
e4:40:83:e4:52:0b:8a:0e:27:e0:75:2a:6f:3a:0f:d5:e1:37:
5f:a1:f9:bf:c1:99:39:48:49:43:5d:d9:18:37:2a:41:29:69:
6a:2c:89:a4:6d:ff:7a:a3:47:b3:b6:35:ab:52:99:ba:5c:42:
71:ff:e7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:49:42 2024 by rpki-client on console-fra.rpki-client.org