Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/yuTZq7IyvkWyf-SDq6nhfFf_KN0.roa
File: yuTZq7IyvkWyf-SDq6nhfFf_KN0.roa (raw, json)
Hash identifier: N3BfiRk6NEPQczm8ajES6MDhqpR474l0JE4svqw9icc=
Subject key identifier: CA:E4:D9:AB:B2:32:BE:45:B2:7F:E4:83:AB:A9:E1:7C:57:FF:28:DD
Certificate issuer: /CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Certificate serial: 018CC6B903D806860E59D902F44AA1A345B2
Authority key identifier: 6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/yuTZq7IyvkWyf-SDq6nhfFf_KN0.roa
Signing time: Mon 01 Jan 2024 20:31:03 +0000
ROA not before: Mon 01 Jan 2024 20:31:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44558
IP address blocks: 185.37.184.0/22 maxlen: 22
31.209.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:03:d8:06:86:0e:59:d9:02:f4:4a:a1:a3:45:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7b79604af1f3908f4817956626353ee6ffc1f4
Validity
Not Before: Jan 1 20:31:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cae4d9abb232be45b27fe483aba9e17c57ff28dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:05:f7:3a:e7:04:3f:25:31:90:1c:48:d7:a2:
b9:b8:e5:63:2f:0e:52:39:b4:6d:88:0e:45:86:89:
09:db:c7:39:f6:18:be:d9:a6:c2:2f:d3:46:36:e4:
4a:38:31:90:01:54:82:94:17:5d:da:38:3f:c7:97:
1e:3b:cc:33:35:eb:2d:83:18:ef:71:25:c7:7c:78:
44:3b:7b:4e:6a:b0:09:17:6a:7e:c3:be:ea:5b:9d:
dd:47:78:d6:b3:be:eb:68:09:c1:98:01:c5:79:fe:
9b:2b:05:85:4d:51:48:f6:05:1d:f7:eb:c0:62:aa:
b4:c6:15:9b:fd:b0:4d:c8:e4:79:40:73:1e:10:dd:
5c:a0:95:01:f1:c2:4b:61:ad:9a:04:1f:b5:e1:fb:
8e:83:db:8c:03:d7:6c:c9:2b:61:34:15:e4:4b:5d:
13:cd:00:fc:88:f8:06:31:6c:d9:a5:6c:d6:9a:e2:
48:24:b1:ba:89:29:dc:b4:31:ec:c4:d3:df:9c:bc:
47:61:16:d7:19:f4:49:33:12:05:99:78:45:08:0f:
c7:ff:a7:27:29:55:fe:41:8b:b5:ed:b0:2f:8f:02:
a1:20:45:07:4e:50:ba:83:e0:3f:c3:ad:6c:65:ce:
2e:9d:52:f6:f6:3d:91:f8:49:89:90:c8:6a:10:54:
26:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:E4:D9:AB:B2:32:BE:45:B2:7F:E4:83:AB:A9:E1:7C:57:FF:28:DD
X509v3 Authority Key Identifier:
keyid:6D:7B:79:60:4A:F1:F3:90:8F:48:17:95:66:26:35:3E:E6:FF:C1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXt5YErx85CPSBeVZiY1Pub_wfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/yuTZq7IyvkWyf-SDq6nhfFf_KN0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/93a734-3cb7-412c-b45f-275b6e9fbc63/1/bXt5YErx85CPSBeVZiY1Pub_wfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.96.0/20
185.37.184.0/22
Signature Algorithm: sha256WithRSAEncryption
09:7d:6e:5a:45:71:f6:13:5b:12:5c:3d:e0:cb:14:57:d8:3c:
bd:b0:e3:14:c9:c1:49:c0:03:a1:52:bd:56:94:1d:c9:68:f3:
0a:e6:8f:c9:81:5a:80:4f:0d:8c:54:da:6c:2f:43:5f:9e:41:
5f:51:bf:8b:e4:bc:dc:d1:71:75:cc:08:35:dd:c6:42:43:a9:
34:3d:55:09:45:93:d7:b5:5b:f9:57:46:3e:6c:32:1d:77:c4:
a7:e6:66:14:27:1e:ec:5b:7b:2b:d1:99:94:27:a6:8b:a7:57:
b1:9e:73:64:21:70:9b:73:4e:3c:57:99:ef:d1:98:b5:f5:3a:
f6:5c:55:c0:2f:7f:c8:e9:df:53:da:48:ec:51:81:36:61:9f:
33:81:0a:c0:53:0b:73:d8:36:79:ff:2a:d9:9b:28:7e:76:13:
06:37:5b:eb:1a:dc:52:db:96:a6:aa:95:5a:c8:f5:6b:f4:62:
e2:b0:92:9b:09:6c:60:47:95:e2:b6:e5:29:41:da:bc:7a:42:
36:1e:e1:58:5d:42:74:a1:62:58:4a:b4:25:78:42:35:70:a5:
7b:bb:eb:8e:ca:50:d2:69:79:8e:ac:d4:f4:18:82:ac:d7:0f:
2f:5d:3c:eb:5e:bb:9b:4d:e7:e6:a5:e5:23:30:17:50:24:df:
bf:71:3f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:32:09 2024 by rpki-client on console-fra.rpki-client.org