Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/Y_WGs95lEJRJ07d5bgkbLDh8gM8.roa
File: Y_WGs95lEJRJ07d5bgkbLDh8gM8.roa (raw, json)
Hash identifier: RhD5LWYJhsHbZy9TWO5EFoNuTFlZC+BPNjlphys9AVc=
Subject key identifier: 63:F5:86:B3:DE:65:10:94:49:D3:B7:79:6E:09:1B:2C:38:7C:80:CF
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 018CC7956A3385AEB2888026E6E473277ABF
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/Y_WGs95lEJRJ07d5bgkbLDh8gM8.roa
Signing time: Tue 02 Jan 2024 00:31:47 +0000
ROA not before: Tue 02 Jan 2024 00:31:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 146.19.227.0/24 maxlen: 24
185.149.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:6a:33:85:ae:b2:88:80:26:e6:e4:73:27:7a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Jan 2 00:31:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63f586b3de65109449d3b7796e091b2c387c80cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e0:fe:c0:71:45:ae:e4:45:4b:78:9e:ef:1d:
f0:51:1b:e3:5c:93:3a:2a:24:1f:44:02:d9:c2:06:
2c:03:ea:f1:89:89:10:9f:71:8a:61:5d:0a:79:87:
9e:74:2b:d7:a5:e1:88:8f:03:68:fa:be:b9:10:e2:
2e:02:c7:72:1f:73:b4:2d:9b:2e:27:01:4a:8c:8b:
bb:58:a7:46:43:f2:6c:ed:e0:18:ae:90:26:ea:e7:
9d:d2:4f:12:ea:80:10:09:14:85:83:7d:67:87:b1:
87:91:78:67:61:ec:08:4e:75:20:4e:0e:95:28:13:
bc:20:e0:30:05:77:6e:cb:a8:cb:1b:a9:ea:f5:48:
d4:c7:c9:57:55:95:15:0d:75:5d:33:fe:a9:91:fe:
9e:b2:62:e1:6e:a3:f7:17:81:bb:9e:56:c5:c1:40:
00:3c:4d:2b:af:92:4f:78:11:06:4b:e4:3d:16:de:
9f:7f:50:9e:b4:34:44:24:2c:fb:9c:2b:b5:fb:02:
e1:b0:03:18:05:39:e1:c4:3d:69:0c:e9:dc:f4:62:
e4:f9:ed:e5:f8:73:25:76:e5:22:47:9c:3a:bc:a7:
d3:5e:28:28:66:e8:68:2d:1e:91:53:08:d6:77:a0:
ec:0a:8d:ce:35:19:35:59:ab:55:8f:dc:82:79:1a:
93:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F5:86:B3:DE:65:10:94:49:D3:B7:79:6E:09:1B:2C:38:7C:80:CF
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/Y_WGs95lEJRJ07d5bgkbLDh8gM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.227.0/24
185.149.151.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:63:f1:cc:94:8a:54:92:b8:67:c5:c6:4e:6d:91:fc:6f:b2:
4b:d1:79:23:20:61:c6:e2:48:1f:d6:67:39:90:38:e8:d0:7f:
c4:4b:68:2d:0c:0c:27:2e:02:bd:39:50:fc:79:38:2f:fb:41:
8d:4b:9b:2e:f0:c1:79:f1:8f:e2:b5:8a:29:f3:19:25:39:80:
2c:0c:e9:b5:b0:fb:fa:ca:2f:a7:b8:6f:a4:34:f3:af:ac:e5:
f5:fc:9c:ef:97:53:66:ff:61:8f:f3:74:05:08:12:ed:f4:14:
5b:b8:e5:4a:fc:ca:1a:1d:d4:aa:70:7a:2a:88:84:f2:ec:0e:
02:78:fc:79:22:6a:81:e9:ae:8a:41:c4:ca:b5:40:e2:25:35:
b3:85:9e:8d:55:83:ef:06:fd:7f:7b:6c:00:88:29:4c:18:8b:
90:ca:0a:b5:40:80:c9:90:9b:31:fe:8c:54:c9:3e:cc:c8:88:
05:a5:48:1f:89:d1:93:b0:9f:0e:e2:d4:4d:c0:ec:e9:a1:c7:
d4:fe:a5:61:b3:39:aa:dc:eb:df:3c:d8:3b:ef:47:07:33:8f:
ec:9e:59:6b:5e:13:16:48:ce:fb:95:6f:2b:6d:29:8f:16:6e:
8a:1a:69:23:c3:47:d0:c4:a2:8f:9a:16:6e:00:18:a1:d6:5d:
11:1b:fe:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 22:40:19 2024 by rpki-client on console-fra.rpki-client.org