Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/yREnOG-NUAY6D4UZyZT8yfx3xbQ.roa
File: yREnOG-NUAY6D4UZyZT8yfx3xbQ.roa (raw, json)
Hash identifier: Jj9YpRAUuBiOxyjt51/i/JsVmuj0yas01gGLwiozORs=
Subject key identifier: C9:11:27:38:6F:8D:50:06:3A:0F:85:19:C9:94:FC:C9:FC:77:C5:B4
Certificate issuer: /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial: 018CCA2B9A2665FA82BB2A8C3A3D0F961C36
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/yREnOG-NUAY6D4UZyZT8yfx3xbQ.roa
Signing time: Tue 02 Jan 2024 12:35:04 +0000
ROA not before: Tue 02 Jan 2024 12:35:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57129
IP address blocks: 185.202.200.0/22 maxlen: 24
2a06:cd00::/29 maxlen: 48
2a0d:5900::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:9a:26:65:fa:82:bb:2a:8c:3a:3d:0f:96:1c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Validity
Not Before: Jan 2 12:35:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c91127386f8d50063a0f8519c994fcc9fc77c5b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:87:67:34:30:4c:f1:15:99:0c:eb:f6:d6:dd:
b4:ed:0d:c7:5b:da:07:e0:28:6b:65:df:94:c2:cb:
9e:e5:0f:38:0b:cf:e2:25:40:dd:6c:75:46:4e:c8:
e4:0b:33:b0:f7:7a:fc:83:54:b0:d6:36:4e:f7:45:
fb:4f:c8:fa:61:e2:0f:0b:92:db:64:18:97:69:49:
7d:5a:a5:cf:77:a6:63:34:10:ac:1c:a9:fb:b8:4b:
ee:02:38:cb:0a:bf:b0:0e:d7:a2:8a:65:ff:ae:ec:
56:74:98:53:09:6b:94:2b:08:1a:20:df:56:b4:de:
44:ba:32:57:a8:cd:12:8c:7c:13:87:d3:8f:5c:af:
4e:da:f4:85:1d:78:a6:d9:18:03:63:c7:b4:9e:db:
c7:ba:a9:bb:d3:9c:d2:30:ce:bb:02:12:8e:c4:b6:
c4:dd:29:10:07:ca:14:8b:e6:53:1d:b9:44:f8:0a:
e3:61:ac:9a:f7:4a:5b:70:8b:eb:9d:cf:ac:8e:96:
05:43:2c:04:f7:55:48:6f:08:c7:7f:26:3d:d4:9e:
53:25:22:ba:20:b8:26:59:4d:78:0a:f0:4a:fb:72:
32:c0:fa:a5:cc:2e:a0:c7:ac:27:9d:9d:00:4c:9a:
ce:00:c6:60:4b:43:d7:d8:41:01:84:ef:c2:c8:b7:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:11:27:38:6F:8D:50:06:3A:0F:85:19:C9:94:FC:C9:FC:77:C5:B4
X509v3 Authority Key Identifier:
keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/yREnOG-NUAY6D4UZyZT8yfx3xbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.200.0/22
IPv6:
2a06:cd00::/29
2a0d:5900::/29
Signature Algorithm: sha256WithRSAEncryption
a3:41:c0:78:03:c7:8f:cd:6e:6e:45:e6:c2:36:97:49:48:53:
b1:9b:51:b4:3b:a2:99:df:43:79:c8:a4:74:8f:09:2f:94:15:
a5:7f:e5:3e:82:aa:9b:b2:ce:08:c9:b8:5b:9d:70:3f:df:bb:
59:e5:73:2f:b0:a9:c0:dc:cf:a9:35:9a:a0:ae:49:cf:b4:20:
9d:cd:56:54:a9:d3:71:68:86:25:b9:51:ab:fd:5a:4b:12:9f:
23:34:c3:86:6b:0d:4a:e3:0b:e9:56:e7:76:25:30:9b:54:8a:
05:9b:80:00:75:db:38:a8:18:dc:f3:ee:59:9a:0c:7e:d4:34:
45:9d:67:a8:bc:04:d8:c8:dc:4c:28:e4:ab:26:c0:6c:b9:ab:
32:35:61:26:42:9e:77:2b:07:68:c4:f5:e3:5a:d4:2d:8b:52:
f1:07:58:60:41:42:1b:20:89:86:40:9e:ea:7a:5b:65:91:2d:
42:5b:16:18:27:fb:62:65:71:e5:2e:d8:ac:ba:3a:8c:07:e2:
06:c6:34:92:76:6e:2c:98:f6:33:0e:e8:a0:99:c6:d1:99:27:
c4:3f:31:73:2f:2b:60:a8:d7:5e:fa:ae:b4:5f:51:0c:15:9d:
56:39:12:3d:16:55:87:a4:fb:94:b6:9a:f4:ae:1c:08:41:38:
4a:79:4c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:55 2024 by rpki-client on console-ams.rpki-client.org