Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/YTDeG9-dk59KJQX9g1wfXJAiNNc.roa
File: YTDeG9-dk59KJQX9g1wfXJAiNNc.roa (raw, json)
Hash identifier: PQ8YNUE4Bgzjyc9s4cQ8FcoXSVl0qRZzGtUkFDCmFwg=
Subject key identifier: 61:30:DE:1B:DF:9D:93:9F:4A:25:05:FD:83:5C:1F:5C:90:22:34:D7
Certificate issuer: /CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Certificate serial: 018CC9BCDB5D795AE36E39878CCB6FB5E9A8
Authority key identifier: 76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/YTDeG9-dk59KJQX9g1wfXJAiNNc.roa
Signing time: Tue 02 Jan 2024 10:34:06 +0000
ROA not before: Tue 02 Jan 2024 10:34:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44761
IP address blocks: 195.28.18.0/23 maxlen: 23
195.28.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:db:5d:79:5a:e3:6e:39:87:8c:cb:6f:b5:e9:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76e2ae4fe0c0d6cb0749b877ae155a629fe2afd6
Validity
Not Before: Jan 2 10:34:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6130de1bdf9d939f4a2505fd835c1f5c902234d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f0:dc:ea:8f:d1:86:76:a2:d7:e3:7e:0f:a7:
a9:44:c7:94:5e:69:15:4a:92:04:72:94:51:b8:44:
33:5f:b4:95:0c:ff:31:7f:a2:de:82:ec:5c:14:ce:
fb:67:21:46:e2:91:c4:97:22:bb:27:c0:36:0c:8f:
a4:30:37:cc:67:bf:36:9f:33:81:bd:da:ca:d9:ec:
22:46:c6:52:c6:9d:ff:fc:60:0f:cb:e1:7f:c3:4b:
70:fe:8e:3e:fb:7f:b3:46:fb:88:5a:aa:39:37:93:
9d:48:55:56:34:53:43:95:ca:90:92:61:04:3b:17:
c3:48:e1:59:0b:d6:99:cb:35:0b:fe:c5:f3:c6:30:
fd:bf:c3:0c:57:2e:16:e2:a5:2c:e2:78:e4:73:6b:
c6:11:d9:17:44:d9:92:f9:17:48:23:22:2b:a0:82:
12:75:47:d5:02:31:53:97:b3:a7:30:9b:88:39:28:
cf:b0:94:78:a9:c8:37:21:07:d1:f8:a7:16:1e:ff:
58:44:39:71:6a:52:12:14:37:f1:97:c7:e0:43:40:
12:1b:ac:ed:3e:9d:d0:7d:29:b0:41:9e:89:6c:0c:
f1:0e:77:b2:39:87:c9:4b:8f:01:a0:08:b9:00:72:
72:8f:2d:57:1a:ae:f5:7c:2e:f9:79:4d:08:ed:10:
ae:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:30:DE:1B:DF:9D:93:9F:4A:25:05:FD:83:5C:1F:5C:90:22:34:D7
X509v3 Authority Key Identifier:
keyid:76:E2:AE:4F:E0:C0:D6:CB:07:49:B8:77:AE:15:5A:62:9F:E2:AF:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/duKuT-DA1ssHSbh3rhVaYp_ir9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/YTDeG9-dk59KJQX9g1wfXJAiNNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/9a52fd-0364-4150-aaca-41602fdc9fde/1/duKuT-DA1ssHSbh3rhVaYp_ir9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.18.0/23
Signature Algorithm: sha256WithRSAEncryption
82:1b:2f:27:22:4d:d0:dc:e2:92:d2:22:57:8b:f5:45:30:85:
b4:2e:21:b1:16:f7:d9:a0:ed:98:70:12:45:8f:ea:c2:a3:90:
fd:a0:ef:a5:f1:b0:d4:45:72:6b:cb:be:60:2b:d1:2a:85:75:
75:0f:d8:04:8a:4f:5d:03:f4:b9:19:08:7f:e3:57:6e:10:3d:
95:31:73:fb:dd:b9:f4:32:8b:0d:e7:be:b1:d1:1a:e8:77:70:
d2:0a:b2:16:57:1c:c1:f8:f7:07:78:91:87:8d:dc:cd:1b:b0:
db:15:31:b8:20:b6:af:be:45:1f:37:6a:75:c0:6d:a4:fd:65:
5f:44:c4:c1:6e:df:14:1b:ed:8f:bf:7c:90:85:75:55:23:28:
11:16:9b:e0:97:9c:a3:56:e2:29:fe:87:df:8f:b9:40:9d:fb:
e3:bb:79:e0:7e:d0:d8:52:f3:8d:88:49:00:75:e3:b1:f7:33:
50:ec:b7:21:68:34:e4:0d:2a:e2:f9:67:6d:d1:ba:3e:73:d1:
b4:b6:a8:aa:04:36:42:71:30:34:97:82:76:02:02:01:f1:19:
80:0e:bd:9f:5e:a4:f5:45:a1:78:64:fc:62:1c:3e:61:be:66:
9f:22:68:5e:e3:48:22:b2:a8:9a:e0:5a:c8:4e:ac:14:cb:0e:
52:45:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:53 2024 by rpki-client on console-fra.rpki-client.org