Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/YQILhkdquxasbfgzjbQEjQxSrnw.roa
File: YQILhkdquxasbfgzjbQEjQxSrnw.roa (raw, json)
Hash identifier: n64fi9U+648cfDqn8da0YenoPg6HJYORRbRCkp74+Ys=
Subject key identifier: 61:02:0B:86:47:6A:BB:16:AC:6D:F8:33:8D:B4:04:8D:0C:52:AE:7C
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0192C85F892E2D953A643F89CEB47EE70C8C
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/YQILhkdquxasbfgzjbQEjQxSrnw.roa
Signing time: Sat 26 Oct 2024 10:29:17 +0000
ROA not before: Sat 26 Oct 2024 10:29:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 94.241.164.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c8:5f:89:2e:2d:95:3a:64:3f:89:ce:b4:7e:e7:0c:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Oct 26 10:29:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61020b86476abb16ac6df8338db4048d0c52ae7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ad:a0:d9:f5:58:cb:e9:8c:0e:97:d3:5a:8e:
96:cb:08:2a:07:9c:e1:9c:16:69:96:a5:c2:e4:1a:
87:14:96:52:67:95:3d:fd:f1:cc:e4:bc:cb:cc:31:
29:91:1f:4f:55:aa:11:29:13:8b:32:3b:c2:69:23:
67:98:da:b9:ea:c0:1d:f8:0e:2f:54:9b:09:32:06:
f4:8d:1d:e5:02:8e:d4:53:38:ce:cc:ed:1a:60:3b:
7a:d2:cf:7a:40:6f:37:6a:a9:ec:a4:e5:8b:da:40:
95:33:06:0c:a9:66:aa:ac:c1:87:e0:2c:75:a9:64:
46:e5:dd:c4:92:0e:d3:8d:b8:c5:8d:bb:c9:cd:71:
75:4c:5e:b1:27:b1:6f:04:a4:ad:48:38:5c:ae:c0:
20:af:cb:79:1f:bd:7c:e0:4b:79:2b:d9:00:da:47:
3d:3a:53:f6:18:51:40:e7:83:39:9d:ef:fa:b8:f8:
f8:c9:69:cd:30:58:a8:9c:08:eb:d0:a1:2b:00:3c:
4a:54:32:39:13:eb:a3:f1:ee:74:5c:c3:97:1a:da:
cf:5b:00:9d:0c:7e:ba:9a:98:93:83:ba:26:80:de:
f5:12:40:2c:85:8b:3e:6c:3f:b2:df:18:de:11:a2:
5c:b3:0c:6e:c4:4a:6f:f7:00:7f:5f:30:f0:2f:97:
c4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:02:0B:86:47:6A:BB:16:AC:6D:F8:33:8D:B4:04:8D:0C:52:AE:7C
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/YQILhkdquxasbfgzjbQEjQxSrnw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.241.164.0/23
Signature Algorithm: sha256WithRSAEncryption
95:29:ac:d4:b3:3b:46:b3:31:87:97:18:ba:d5:bb:c0:21:b8:
a4:44:4c:48:32:51:9e:a2:a8:46:bb:d3:f9:c6:82:65:0f:3f:
03:f8:22:c6:14:48:05:b7:8f:a2:d6:05:29:05:dd:f2:f0:f0:
f4:3a:46:6a:fa:7e:81:9e:3b:05:c9:56:38:b1:eb:1d:a2:11:
40:79:00:69:a5:19:15:a6:06:f2:d8:3d:c1:9c:81:95:66:3c:
79:25:a4:e7:4a:8a:75:0b:3b:23:10:fd:7d:41:fd:a5:aa:1c:
e4:85:9a:a2:fa:6e:99:25:d5:c1:b5:69:18:bc:7d:9e:9a:74:
12:a1:a2:d2:9d:80:53:09:38:c7:4b:15:18:80:31:55:0b:ad:
f5:21:6b:81:44:94:c9:2a:aa:30:a8:73:4e:68:08:b4:a6:1f:
6c:d3:c8:5e:af:6f:a7:3b:9b:c8:17:6d:7f:59:15:06:bb:c2:
40:2e:c1:2e:c7:b4:0d:e4:c0:65:21:35:fb:0d:81:e9:bf:57:
21:9a:8f:d0:43:c0:17:8d:88:82:ce:07:cb:c3:ff:89:d2:24:
03:72:69:dc:26:71:99:48:59:f4:75:70:dc:5b:4a:7e:da:7a:
f5:8a:29:b6:37:f4:e9:b9:34:b1:fc:84:5b:36:19:57:04:39:
02:ce:8e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:56:55 2024 by rpki-client on console-ams.rpki-client.org