Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YbClvmvk5BtCIjuQF5Vhv8sYjR8.roa
File: YbClvmvk5BtCIjuQF5Vhv8sYjR8.roa (raw, json)
Hash identifier: S96TTfcnS9BXCbGSV1PkCHSyetccXlcsiDAztaan06o=
Subject key identifier: 61:B0:A5:BE:6B:E4:E4:1B:42:22:3B:90:17:95:61:BF:CB:18:8D:1F
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0192818C5B196395A83EF70969EDEEE378A6
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YbClvmvk5BtCIjuQF5Vhv8sYjR8.roa
Signing time: Sat 12 Oct 2024 16:25:12 +0000
ROA not before: Sat 12 Oct 2024 16:25:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 188.241.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:81:8c:5b:19:63:95:a8:3e:f7:09:69:ed:ee:e3:78:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 12 16:25:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61b0a5be6be4e41b42223b90179561bfcb188d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:83:48:09:98:a3:c0:51:2a:b4:ca:03:2b:75:
7c:c3:b7:e2:0f:0a:fc:17:fa:fd:c6:8c:71:26:f2:
c7:d4:79:e4:04:03:6e:04:72:40:76:99:a4:04:f0:
a8:4d:57:88:b1:07:9f:9f:e8:11:fc:a3:60:95:38:
08:2d:a1:c8:02:c6:67:84:58:4a:78:4e:20:f9:77:
ae:47:71:bb:81:a2:80:37:0f:89:cf:c2:d1:66:d1:
1d:a7:f2:7c:5a:44:f7:28:6e:ca:50:af:1a:31:cf:
e0:6a:b0:0e:ee:e3:08:23:f7:f8:e1:11:61:b8:73:
5b:e2:4e:34:6a:51:fa:f1:c9:38:8b:e8:c4:53:00:
02:e3:ff:e2:14:bb:c9:34:54:7f:37:2b:7f:c2:51:
44:67:96:ad:a4:55:3a:2c:0d:c5:bd:31:ab:de:81:
45:19:02:01:a9:9e:f8:6c:4b:b6:b0:8b:f9:95:fc:
ba:72:e2:6b:12:13:2e:ba:1e:94:40:ec:88:0b:ea:
f5:63:41:2b:55:65:71:0f:2f:85:42:c4:92:f7:68:
bc:6b:e3:4f:de:10:f1:a6:20:6d:35:5a:31:10:1f:
a6:94:ab:17:1b:e0:6f:04:9e:ce:63:85:f9:37:e0:
a8:00:72:7f:db:3f:b1:78:c9:03:02:4b:6f:76:99:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B0:A5:BE:6B:E4:E4:1B:42:22:3B:90:17:95:61:BF:CB:18:8D:1F
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YbClvmvk5BtCIjuQF5Vhv8sYjR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.241.214.0/24
Signature Algorithm: sha256WithRSAEncryption
33:aa:84:b0:0a:16:4e:88:8a:2a:55:1f:2a:b8:53:18:c3:a8:
69:bd:49:f3:57:9c:ee:d2:a3:e2:3a:d2:3c:5a:8e:ba:ee:e2:
3e:e7:a8:30:27:f5:92:d9:85:16:90:db:c2:57:b7:61:56:c4:
7e:4d:7f:32:9b:15:4f:68:2a:b2:f6:2b:11:a9:ee:8d:dd:ec:
f6:99:8e:36:aa:85:f0:45:8a:74:79:ac:37:d4:7d:1d:24:ae:
1c:28:7c:d8:14:6e:5d:1f:2a:b5:ec:28:91:0d:70:b2:5f:7f:
eb:1b:19:7e:f0:48:0a:d4:f3:41:ca:8a:68:28:62:c5:34:09:
43:0d:7c:28:2f:20:ea:8f:58:42:a1:16:a3:87:a1:d0:f6:6d:
d0:36:e5:0b:bc:bd:ca:d0:55:69:15:bd:31:3a:09:5a:d9:4c:
47:f8:40:eb:a1:98:fa:5c:4e:5f:4f:64:d8:71:9f:c4:2c:47:
3c:c9:20:a8:fd:f6:a9:c3:41:c9:de:c0:48:bd:05:fc:26:14:
b6:ac:db:42:24:d7:63:69:0f:c3:5f:36:4e:0f:f5:e8:4b:0e:
7b:21:63:17:c9:66:7a:cc:79:32:86:88:f5:e5:0f:ae:64:64:
8c:55:52:62:7a:33:a0:0b:b3:c4:4e:8a:34:a7:89:74:af:d9:
65:c9:f9:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:08:05 2024 by rpki-client on console-fra.rpki-client.org