Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/YfDMhn5cIlX7xtiF_RM3lsuugg0.roa
File: YfDMhn5cIlX7xtiF_RM3lsuugg0.roa (raw, json)
Hash identifier: tS9HsyhdAhGsGkIQqapvZEOUY1o9qHw3QcKlzJYhsoQ=
Subject key identifier: 61:F0:CC:86:7E:5C:22:55:FB:C6:D8:85:FD:13:37:96:CB:AE:82:0D
Certificate issuer: /CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Certificate serial: 0192A5DCB26141869DD8EA7B8FE144A0F8FD
Authority key identifier: E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/YfDMhn5cIlX7xtiF_RM3lsuugg0.roa
Signing time: Sat 19 Oct 2024 17:39:17 +0000
ROA not before: Sat 19 Oct 2024 17:39:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210636
IP address blocks: 80.244.4.0/24 maxlen: 24
194.76.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:a5:dc:b2:61:41:86:9d:d8:ea:7b:8f:e1:44:a0:f8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e467dbe6ac755a9063c360b1525e844fd2a57b93
Validity
Not Before: Oct 19 17:39:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61f0cc867e5c2255fbc6d885fd133796cbae820d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b2:72:00:48:bf:d8:eb:a9:29:c4:29:25:af:
c0:5b:74:e4:9c:8e:d7:70:77:f0:46:ef:c5:e2:d0:
bb:cd:1b:f6:83:8c:23:cc:64:33:be:8a:a5:20:24:
fd:c7:67:71:8e:41:07:9e:97:05:2b:71:87:56:8a:
f8:f6:3e:15:36:60:a8:bc:81:38:7f:a8:41:9d:ec:
f7:12:a8:7a:39:2f:a4:2a:4e:2f:74:93:d6:97:57:
78:93:f6:31:3a:9d:b5:fc:8d:72:9a:dc:d7:19:73:
c3:3e:01:4f:cc:2e:c6:ec:71:17:08:15:92:1c:2e:
b7:f6:21:76:22:09:ef:aa:88:ff:a4:d6:45:b5:21:
12:b4:80:04:2c:29:05:74:aa:ef:26:5b:da:3d:58:
8b:ae:3b:f2:0f:d7:65:d7:a7:ac:d6:19:96:66:bb:
5f:33:fa:9b:e6:b8:a5:42:a1:a3:da:78:52:05:79:
c1:36:f3:8d:89:89:7b:5a:39:29:b8:25:13:51:6a:
57:38:69:2f:10:8c:20:a7:19:2e:c7:f1:f2:ce:f9:
d6:00:0b:d4:1d:e6:cf:7e:c7:f0:ec:85:1d:fc:d2:
92:83:66:f2:ea:70:78:60:40:b3:46:7e:d0:51:09:
06:af:ca:ad:44:21:23:6a:a8:a8:26:24:f6:c8:17:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F0:CC:86:7E:5C:22:55:FB:C6:D8:85:FD:13:37:96:CB:AE:82:0D
X509v3 Authority Key Identifier:
keyid:E4:67:DB:E6:AC:75:5A:90:63:C3:60:B1:52:5E:84:4F:D2:A5:7B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/YfDMhn5cIlX7xtiF_RM3lsuugg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/716f47-10b8-4f39-859f-ece577e307ad/1/5Gfb5qx1WpBjw2CxUl6ET9Kle5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.4.0/24
194.76.186.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:40:6b:2d:41:14:60:2d:d6:18:eb:c2:61:34:7e:18:47:05:
50:7c:71:19:5b:ed:30:3b:68:b1:ae:2d:99:47:1b:40:80:66:
f0:2c:c7:29:d2:c4:20:db:36:61:4e:8e:bf:3f:0f:32:bd:9a:
ae:ea:9a:af:1a:ff:2b:7c:b6:ae:90:ba:9c:d9:af:eb:84:e6:
6e:05:f0:1e:a6:65:15:7a:44:54:01:18:6a:e1:79:a5:4d:b5:
d0:c0:cd:2b:03:9e:ae:97:8c:3b:b6:d5:83:7a:36:92:2b:91:
36:52:71:40:a1:ed:e0:48:8d:71:d8:71:ef:54:5f:35:80:46:
49:73:d1:76:f4:82:cc:99:a2:b4:1f:7d:61:48:9e:82:6c:58:
b8:73:26:0e:4f:3d:cf:10:6c:0c:a1:90:00:5c:1a:8c:3b:e9:
ed:98:a1:0f:c3:f2:df:55:48:ba:a8:1a:1f:71:12:3e:2c:79:
6f:38:a3:3c:f7:18:60:88:72:be:f9:a2:4c:21:3c:da:f7:ac:
e8:95:88:d5:9f:e9:87:2e:ff:8f:b1:f7:90:e6:23:c4:a7:e5:
8d:b3:f8:f5:e4:ff:84:ed:48:e2:b6:5a:ee:95:98:08:9e:7b:
c4:39:0c:cd:8d:bf:dc:7f:3c:c6:c8:91:3e:98:4f:90:71:32:
92:b6:e5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:30:35 2024 by rpki-client on console-ams.rpki-client.org