Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/yZcy2wJ41lMoec7SuJfdS4U3HFU.roa
File: yZcy2wJ41lMoec7SuJfdS4U3HFU.roa (raw, json)
Hash identifier: rZ+ZuAn3cg3HSrLJl8flgdsYrVETsubQdvu2s6YOsl8=
Subject key identifier: C9:97:32:DB:02:78:D6:53:28:79:CE:D2:B8:97:DD:4B:85:37:1C:55
Certificate issuer: /CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Certificate serial: 018CC4936EB152DF4B5D5E7BF420046F9B5A
Authority key identifier: 94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/yZcy2wJ41lMoec7SuJfdS4U3HFU.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203170
IP address blocks: 185.77.190.0/24 maxlen: 24
185.77.190.0/23 maxlen: 23
185.77.191.0/24 maxlen: 24
2a05:5f00::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:6e:b1:52:df:4b:5d:5e:7b:f4:20:04:6f:9b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e6f473302c6a3c89df7b8932c56bc841cb5fac
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c99732db0278d6532879ced2b897dd4b85371c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:51:70:34:a1:59:0e:ad:05:5b:d1:71:f3:
27:cd:a7:89:90:43:47:7d:21:d4:da:09:9e:05:93:
a6:84:4b:37:b7:16:96:88:eb:e7:82:c5:ae:c0:81:
e5:7c:c6:c1:c4:85:78:9c:3c:a0:3c:33:6c:23:3f:
8b:19:48:0f:0b:c1:2f:5d:98:c1:3c:e8:85:a5:61:
8b:44:83:db:f5:0b:63:44:c9:e7:2d:90:83:5e:6f:
17:31:32:20:b0:b6:ef:3a:02:74:a3:8f:a2:37:18:
9e:99:7e:bc:f9:90:e9:61:f8:56:a8:47:31:27:8a:
e5:41:12:2f:20:de:c2:8a:6b:b6:c2:dd:96:7d:91:
fd:e5:ee:b3:1a:95:34:8c:58:e5:8c:e1:e1:87:8f:
a7:c8:57:c7:b4:ea:24:4d:4b:53:29:65:5a:89:d4:
64:a7:72:60:84:53:65:7a:66:20:8b:46:ff:4b:8f:
50:27:7d:e4:46:6b:5f:da:48:73:42:5a:dd:bd:5a:
e2:44:0f:3a:16:55:75:90:f9:b1:83:2c:44:11:a9:
d2:51:5f:68:b9:20:dd:80:24:54:01:a0:1b:ca:ae:
3b:c0:3f:de:58:a4:e6:b9:aa:83:65:4c:e2:2c:dd:
bc:fd:a5:72:76:76:6b:65:a8:67:21:6d:53:f5:6f:
0d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:97:32:DB:02:78:D6:53:28:79:CE:D2:B8:97:DD:4B:85:37:1C:55
X509v3 Authority Key Identifier:
keyid:94:E6:F4:73:30:2C:6A:3C:89:DF:7B:89:32:C5:6B:C8:41:CB:5F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOb0czAsajyJ33uJMsVryEHLX6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/yZcy2wJ41lMoec7SuJfdS4U3HFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/07e947-a4dc-48df-92c0-9a1f0ddb9e70/1/lOb0czAsajyJ33uJMsVryEHLX6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.77.190.0/23
IPv6:
2a05:5f00::/30
Signature Algorithm: sha256WithRSAEncryption
16:ce:d1:b4:1c:2e:8a:b3:93:a1:1a:45:3c:89:b9:43:22:95:
f4:06:18:64:6a:ea:25:b1:be:08:bc:a3:d3:12:c4:44:57:03:
cb:09:90:2d:f8:ac:e6:73:64:07:a5:7a:e4:ed:05:d7:f3:8e:
e2:9c:f0:36:15:b2:4f:02:bb:45:8c:74:4d:13:97:da:bf:87:
99:0c:42:49:08:88:28:f2:6d:38:82:d5:7d:34:74:6f:2d:e2:
16:90:b3:83:9e:80:3c:38:ba:ea:f6:1c:d2:50:3f:9a:73:d4:
04:4b:12:9f:31:35:0a:6d:6e:9d:b2:bb:ef:24:97:1e:0f:36:
b2:12:c4:f9:47:67:67:1b:51:07:0b:72:79:af:00:e7:2f:ec:
63:61:bd:ea:89:cc:18:19:b9:dc:3c:0f:e2:2b:d9:7e:98:00:
cd:e7:26:49:ac:6e:35:29:33:f7:65:11:38:50:54:ab:a0:ed:
cc:54:2e:f6:8e:f2:84:ae:be:f4:62:43:1e:ac:8f:19:89:e5:
92:13:f9:0f:55:c7:47:ee:d6:75:3d:42:54:26:6c:41:53:4f:
df:20:fc:27:99:05:f3:43:44:47:ff:dd:59:e0:c0:0f:71:69:
3c:c2:75:02:6a:96:7e:85:fa:b8:78:63:70:70:d2:ed:d2:22:
40:57:a0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:41:05 2024 by rpki-client on console-fra.rpki-client.org