Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/YtxYW6rFWAeCMVRFKlA7J-2lXRE.roa
File: YtxYW6rFWAeCMVRFKlA7J-2lXRE.roa (raw, json)
Hash identifier: 1XfylpwCzBXiT31trVx3iE6Ofg60viy7BM9p2CzQHKA=
Subject key identifier: 62:DC:58:5B:AA:C5:58:07:82:31:54:45:2A:50:3B:27:ED:A5:5D:11
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018FF25240F5A16B1D2A595FAC5B30D11350
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/YtxYW6rFWAeCMVRFKlA7J-2lXRE.roa
Signing time: Fri 07 Jun 2024 10:50:27 +0000
ROA not before: Fri 07 Jun 2024 10:50:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215115
IP address blocks: 94.142.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 15:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f2:52:40:f5:a1:6b:1d:2a:59:5f:ac:5b:30:d1:13:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jun 7 10:50:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62dc585baac55807823154452a503b27eda55d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f4:52:89:72:65:a0:7d:9d:07:56:ed:03:9a:
3f:66:58:d5:54:ce:2a:b8:65:53:40:be:50:51:cd:
d6:d0:01:a3:4e:61:e6:2b:c3:6e:74:5a:57:ee:34:
82:da:94:1b:62:fe:fe:2a:a0:23:4c:66:23:ef:bb:
90:4f:74:b6:15:94:c3:69:ff:9e:b4:64:0e:90:0b:
45:93:bb:2c:b8:27:06:69:ce:f2:6a:50:1e:d7:d9:
da:1f:6c:55:29:9c:e0:97:30:b1:2a:74:31:f3:ac:
29:7e:00:1d:46:c8:18:2d:53:b1:5b:dc:5b:95:9e:
c2:76:37:12:3c:05:77:61:6f:51:ac:74:d0:96:f7:
f0:28:18:fb:15:61:a3:3d:b5:4d:f9:66:cd:f3:84:
f5:4a:3a:f2:37:3d:dd:41:76:34:41:f4:49:98:e8:
54:d4:05:b0:38:ab:8f:96:d6:2f:c9:cb:9a:c2:c2:
bf:fc:4c:82:28:b4:73:e9:ca:7b:08:c6:17:a1:2d:
d2:49:7f:56:24:82:12:75:1d:09:0e:ec:c5:f2:b3:
60:8d:fb:b5:03:76:e6:43:67:5f:50:5f:17:19:4d:
dc:12:a2:fb:a0:77:2a:18:b7:6d:e2:c6:ee:36:3d:
53:29:1b:5a:e5:13:f8:48:73:7e:b4:a8:56:81:ae:
de:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DC:58:5B:AA:C5:58:07:82:31:54:45:2A:50:3B:27:ED:A5:5D:11
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/YtxYW6rFWAeCMVRFKlA7J-2lXRE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.143.0/24
Signature Algorithm: sha256WithRSAEncryption
62:bf:98:5f:56:31:4c:cd:3f:d1:ea:6e:07:5c:4e:b2:f9:11:
dd:26:55:a5:28:8b:e7:8f:1f:7d:b2:f2:2f:90:a7:2c:4e:de:
c9:42:ff:9f:83:d0:7e:15:d7:6e:ec:10:fe:c6:3e:00:c1:66:
6c:b1:3e:80:63:89:91:bf:aa:53:26:f4:82:1a:03:f1:9d:a9:
c8:7c:09:09:dd:ba:99:ff:27:e4:e0:ff:8d:83:ce:b9:b9:02:
4b:97:2d:f6:e7:c7:b2:d3:2a:29:ea:42:b2:5e:38:03:fc:07:
ad:1e:57:9f:b1:d8:52:c2:9c:6c:96:38:33:88:47:1c:c5:12:
1d:f1:41:d7:e0:53:e8:56:aa:91:8c:b9:91:14:3c:23:c6:da:
83:63:00:16:ad:65:05:c2:a8:1a:fe:35:14:18:3e:fe:0a:50:
95:8a:e4:9e:a5:46:30:04:e2:c8:21:dd:7c:88:d1:a4:42:78:
2d:5e:c0:a5:4e:67:0f:01:0d:73:ce:0a:31:a4:a1:f4:1a:a5:
c5:48:c6:c1:50:63:a7:6c:b5:e0:3d:c5:6a:7d:fb:fb:21:95:
ff:c8:82:e0:6c:c3:3f:36:26:47:06:57:77:69:10:2a:f9:c4:
bb:44:e0:ca:f3:42:2e:9a:1f:2f:9d:53:ed:39:dc:4a:61:9d:
c0:63:7b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:29:38 2024 by rpki-client on console-fra.rpki-client.org