Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/YSI0imqa0lGxBBUhmNTk9jchfWA.roa
File: YSI0imqa0lGxBBUhmNTk9jchfWA.roa (raw, json)
Hash identifier: AAtMMDDyJTXC5xPbb02w3K8QWsModomVNL49sPiMW5w=
Subject key identifier: 61:22:34:8A:6A:9A:D2:51:B1:04:15:21:98:D4:E4:F6:37:21:7D:60
Certificate issuer: /CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Certificate serial: 018CC794DFC19E9E135A0C861D1FD0169FF1
Authority key identifier: 26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/YSI0imqa0lGxBBUhmNTk9jchfWA.roa
Signing time: Tue 02 Jan 2024 00:31:11 +0000
ROA not before: Tue 02 Jan 2024 00:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8412
IP address blocks: 185.225.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:df:c1:9e:9e:13:5a:0c:86:1d:1f:d0:16:9f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26d9a16c2fa7d4c370b5325214be4420b611f1f9
Validity
Not Before: Jan 2 00:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6122348a6a9ad251b104152198d4e4f637217d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:08:49:0b:c6:73:e8:7b:39:c9:48:e7:e1:5b:
02:a3:1e:74:db:5f:44:ed:5d:4e:cf:bd:54:98:1b:
c0:76:16:a5:5e:f0:9a:61:7b:6a:9e:d0:5b:56:0a:
f1:8a:65:4d:e6:6b:16:c1:36:d3:0a:91:c6:0f:39:
6b:b5:75:e1:c2:6e:0c:be:ee:4f:48:79:b9:32:29:
cc:f9:68:76:32:22:1b:2b:c0:d1:1c:a7:d3:ad:f0:
74:08:60:e3:2c:7b:71:03:82:8a:37:4f:4f:3c:8c:
1b:0e:4e:9e:e7:0d:b8:df:23:75:e6:3e:a0:9a:ed:
a3:83:ea:a9:3d:5a:b7:68:ce:17:41:55:11:1b:e9:
3b:d3:2b:67:e7:58:11:29:d7:4e:91:31:1e:18:ab:
e1:79:49:a9:bf:51:7d:c8:20:85:ed:90:7e:7b:f0:
d4:bb:8f:9d:8e:bb:4a:e2:fa:a6:df:d1:c8:4f:76:
87:01:7a:7b:76:b3:c5:2d:f9:06:7b:d4:92:04:60:
9a:c8:18:53:50:e5:04:47:ce:59:76:1f:e5:a6:31:
7c:63:d7:45:9d:c8:19:75:52:4f:48:64:81:94:8f:
33:dd:8d:11:a2:e1:02:da:1c:b9:15:74:1e:42:c8:
50:37:35:bc:53:e1:79:61:9d:7b:34:71:4a:b1:5e:
3f:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:22:34:8A:6A:9A:D2:51:B1:04:15:21:98:D4:E4:F6:37:21:7D:60
X509v3 Authority Key Identifier:
keyid:26:D9:A1:6C:2F:A7:D4:C3:70:B5:32:52:14:BE:44:20:B6:11:F1:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JtmhbC-n1MNwtTJSFL5EILYR8fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/YSI0imqa0lGxBBUhmNTk9jchfWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/c5fc54-74c2-4f3d-95c1-44023c3b784e/1/JtmhbC-n1MNwtTJSFL5EILYR8fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:b0:79:f9:b8:d6:70:3f:0b:84:61:f7:83:5c:6c:25:56:18:
b6:c7:bc:bb:d4:18:d3:96:3f:cb:a6:66:ae:0b:19:b2:9d:39:
b9:f1:97:c0:d8:38:b0:61:23:b5:0f:d0:de:da:81:70:a1:96:
5d:3d:98:03:06:8e:e4:e8:2e:3d:10:f1:2f:dc:b9:88:f1:eb:
51:97:b0:f4:f7:18:3b:b2:d2:76:91:50:ec:7d:fe:f4:95:07:
ce:d0:8d:2e:14:41:2e:a7:18:46:41:06:92:94:54:3e:62:6e:
02:bd:87:ca:be:81:e4:23:32:ba:c4:5e:7e:82:d0:df:56:e9:
5a:ef:2d:4c:00:0f:82:2c:01:3b:9b:62:17:d2:b5:48:f8:55:
ad:f3:5d:30:75:33:bd:ab:31:73:71:c8:15:28:05:9f:34:ea:
8f:72:23:69:ce:f4:fa:47:d0:7b:c7:ee:eb:93:f8:ec:a2:40:
59:25:58:a5:4d:d2:cf:fe:8e:8c:6e:b5:a1:88:7c:23:cd:9d:
bb:91:db:a1:f8:fb:69:1e:26:92:a2:10:e0:cb:83:7f:f8:a6:
a4:a6:d2:b5:75:2e:fd:ab:55:9e:53:6f:62:ee:87:67:7d:bc:
da:79:55:9b:34:5b:42:1b:d8:30:12:96:eb:e1:86:e3:fa:ea:
5b:3e:b3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:56:18 2024 by rpki-client on console-ams.rpki-client.org