Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/yce26U9_4382uaqbNy5KbmacCA0.roa
File: yce26U9_4382uaqbNy5KbmacCA0.roa (raw, json)
Hash identifier: m6DffsXV1rBeVIxt2gy8yFH6srq4LSHe0pfPFvOlGrU=
Subject key identifier: C9:C7:B6:E9:4F:7F:E3:7F:36:B9:AA:9B:37:2E:4A:6E:66:9C:08:0D
Certificate issuer: /CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Certificate serial: 018F2A8753997D43B513087D06C2ECA56A7F
Authority key identifier: A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/yce26U9_4382uaqbNy5KbmacCA0.roa
Signing time: Mon 29 Apr 2024 15:44:22 +0000
ROA not before: Mon 29 Apr 2024 15:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208324
IP address blocks: 185.239.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.mft
rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2a:87:53:99:7d:43:b5:13:08:7d:06:c2:ec:a5:6a:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6785773df313b91711bf6bc5b149ecc246b9e89
Validity
Not Before: Apr 29 15:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9c7b6e94f7fe37f36b9aa9b372e4a6e669c080d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:46:99:39:8e:9b:2a:01:94:66:19:80:04:
db:73:96:b5:e1:c9:73:75:51:ab:3d:c3:e1:e7:49:
38:2f:a3:a5:e9:22:ab:c2:4c:35:90:3c:e0:f2:53:
aa:a7:08:37:c4:18:9e:7e:d2:97:14:e6:6f:66:5a:
4d:3e:e0:55:01:16:e5:9c:e7:6e:fb:df:75:c4:e0:
76:47:f6:b9:90:f1:9b:df:f7:d5:f6:bb:0b:75:b7:
d1:d5:56:b6:d3:d7:39:a6:e8:f3:db:61:ba:3f:0c:
d0:e6:6e:a3:12:ac:7b:4c:75:d5:c0:4f:70:98:c2:
f1:13:57:c8:60:5d:15:13:f7:fe:7f:54:bc:f6:ae:
76:65:4f:2f:5b:3b:05:87:c9:9c:02:bf:3f:39:89:
88:14:d6:b7:b1:5e:75:c4:7d:84:ba:9a:64:d0:91:
9f:84:9c:4f:29:84:95:7a:59:d1:4c:2f:eb:2d:67:
cb:71:fa:58:11:a7:b4:40:49:31:31:01:fc:68:f2:
f4:2b:84:ee:39:73:4b:a6:59:d4:f0:99:11:36:f8:
36:96:38:68:1c:de:de:90:be:80:18:56:2f:e3:a5:
13:31:4e:e7:b5:18:90:67:fa:c2:1a:5d:0c:5b:c7:
d8:71:ed:2c:c5:d4:cc:59:b4:70:5e:9a:e4:d2:8f:
4e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C7:B6:E9:4F:7F:E3:7F:36:B9:AA:9B:37:2E:4A:6E:66:9C:08:0D
X509v3 Authority Key Identifier:
keyid:A6:78:57:73:DF:31:3B:91:71:1B:F6:BC:5B:14:9E:CC:24:6B:9E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhXc98xO5FxG_a8WxSezCRrnok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/yce26U9_4382uaqbNy5KbmacCA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/ae9211-c52d-480d-a591-d75869c0c71e/1/pnhXc98xO5FxG_a8WxSezCRrnok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.179.0/24
Signature Algorithm: sha256WithRSAEncryption
86:b7:76:f0:5a:4f:e2:e3:2c:8f:20:f0:27:3c:6b:ed:e7:cd:
54:69:58:c0:ab:75:99:8c:95:4d:1e:a4:40:90:f6:43:82:05:
aa:4f:7b:15:1a:75:b8:d7:9c:d3:89:f9:88:b2:f2:8c:56:df:
24:bf:c5:ec:3a:a6:15:08:e1:ea:8b:8b:e5:ca:35:b9:1a:64:
21:89:d6:3c:61:d1:e3:cd:ce:dd:3b:d1:49:a0:34:9a:1f:f8:
55:fb:37:e9:a0:9f:fe:6c:9b:6b:e8:22:bc:e5:95:1b:c2:b6:
1c:c6:4e:05:21:83:d4:97:ab:e7:ce:99:dd:db:3f:a3:77:aa:
b8:01:1f:91:89:d8:7e:3a:ea:9f:d0:2e:68:f7:67:99:de:f8:
d1:f9:a3:c5:35:06:20:4b:7d:85:b5:38:7b:b7:f0:b3:c3:c6:
b3:09:4d:a1:8e:96:0c:85:09:4f:96:dd:94:1e:36:17:a2:fa:
99:68:12:40:5d:83:4a:3f:c0:8b:d8:0e:ba:57:13:31:82:06:
df:d8:fb:b0:66:67:c9:57:48:4c:5e:75:40:be:8a:a2:b7:9c:
b7:99:18:bc:9a:9e:f8:76:95:bc:df:1b:5f:df:7d:b1:9d:9f:
78:07:2d:51:d1:b5:c8:05:62:69:0b:9d:1f:cd:22:5a:97:c1:
78:fb:c7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:50:14 2024 by rpki-client on console-ams.rpki-client.org