Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/jy7aoIutuPuUnDdWAv4ltpQa944.roa
File: jy7aoIutuPuUnDdWAv4ltpQa944.roa (raw, json)
Hash identifier: Nyi5oVNIYdJBeINMqgTnXJRHlMntj8N2Izz5BX4QCJI=
Subject key identifier: 8F:2E:DA:A0:8B:AD:B8:FB:94:9C:37:56:02:FE:25:B6:94:1A:F7:8E
Certificate issuer: /CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Certificate serial: 018CC7945F2BCA15E5D0770FECDBEBCA722F
Authority key identifier: B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/jy7aoIutuPuUnDdWAv4ltpQa944.roa
Signing time: Tue 02 Jan 2024 00:30:38 +0000
ROA not before: Tue 02 Jan 2024 00:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212043
IP address blocks: 5.59.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:5f:2b:ca:15:e5:d0:77:0f:ec:db:eb:ca:72:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9481119afe1bff229facd4ef9c8c61b0fabeaf2
Validity
Not Before: Jan 2 00:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f2edaa08badb8fb949c375602fe25b6941af78e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:67:ca:b5:f7:c9:47:ce:34:94:38:8b:e5:
ef:0d:4e:70:ac:53:fc:bd:ba:aa:7b:c5:1e:84:4c:
7a:53:cd:eb:a6:9f:6a:eb:19:93:84:fa:7d:89:62:
8e:2f:08:1d:34:f8:5a:03:8d:4c:c5:dd:4b:d3:a2:
6c:6d:1f:d7:d4:c6:f2:6d:1d:37:26:ad:d3:5d:05:
d9:15:24:db:1c:6c:80:52:bb:d4:12:21:f8:24:a6:
3d:0a:27:c4:6c:72:df:2c:c8:e4:cb:b7:d2:bf:04:
d0:2f:c6:db:d7:31:d9:77:c0:ff:47:cb:0c:cf:52:
19:a6:19:77:ed:b2:9f:b4:91:9a:82:66:12:08:00:
36:06:9f:4c:dc:d1:f0:69:45:c8:d5:a1:fe:b6:22:
f5:a5:ef:a8:b5:3f:d3:b5:15:6b:e7:d7:0f:64:9f:
85:ce:6a:50:00:bd:f6:40:ec:c2:f6:b6:0e:6c:01:
4a:17:28:d6:26:6a:c8:f6:b5:52:84:3f:a3:78:ee:
6c:a1:38:6c:b3:cc:91:c4:86:a5:e2:88:c9:a6:44:
c1:19:01:68:52:66:2c:d5:39:83:0e:f4:07:07:3e:
6f:23:8d:66:c8:0a:d1:c4:79:71:62:35:b0:90:25:
d5:2a:61:70:e8:a7:2a:10:76:28:46:ff:8a:3e:78:
80:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2E:DA:A0:8B:AD:B8:FB:94:9C:37:56:02:FE:25:B6:94:1A:F7:8E
X509v3 Authority Key Identifier:
keyid:B9:48:11:19:AF:E1:BF:F2:29:FA:CD:4E:F9:C8:C6:1B:0F:AB:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/jy7aoIutuPuUnDdWAv4ltpQa944.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cb0007-3ea9-4759-8d70-9b9bce15e0c6/1/uUgRGa_hv_Ip-s1O-cjGGw-r6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.59.240.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:1b:4d:c1:fe:b1:23:73:0c:de:12:97:9c:a4:39:9e:51:ba:
fb:a4:7f:57:14:c7:ce:4b:62:5c:21:c5:5c:97:ab:e9:17:36:
fd:03:92:a2:ca:84:b8:4b:2a:38:c0:cc:ba:a0:44:21:5e:9c:
d1:b4:04:fc:d8:33:05:a0:76:53:5a:bd:f7:c7:f3:ff:e7:50:
8b:85:42:30:6f:d1:fd:96:f1:33:62:b9:81:44:68:57:7e:28:
4e:b0:c3:1e:2a:38:b5:48:f3:83:1d:67:e9:d9:df:24:64:80:
57:42:43:4f:cf:fe:31:79:63:c1:59:f6:0d:10:77:76:1f:dd:
4d:0c:ca:68:0e:c0:24:3d:10:34:f9:56:00:01:9c:1b:a4:e1:
d4:a6:8d:aa:77:2a:5c:65:b4:c9:fd:39:28:a6:66:23:50:2e:
2d:4d:96:cc:ad:de:fe:22:71:6a:21:6c:26:9a:d2:ec:f1:8e:
88:2c:86:fb:b4:11:48:9a:f1:3b:3b:72:ca:22:6f:a5:e0:3f:
4b:5c:65:ea:8b:9a:31:b3:f4:df:df:82:35:42:aa:ac:bd:d4:
38:f4:2e:61:a2:85:c7:c3:2a:47:92:9a:77:db:9b:13:44:0e:
bf:d9:a6:6b:a6:96:ad:d6:72:90:37:11:0f:a0:fa:50:ea:8c:
cd:13:4c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 16:16:02 2024 by rpki-client on console-fra.rpki-client.org