Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/RyjWCKWkpaeViNRy-a384wKCm84.roa
File: RyjWCKWkpaeViNRy-a384wKCm84.roa (raw, json)
Hash identifier: 7XkTAWYF3hZrjbZjcrpyN0ivLZr+dCp8XkSl4IWdJ4M=
Subject key identifier: 47:28:D6:08:A5:A4:A5:A7:95:88:D4:72:F9:AD:FC:E3:02:82:9B:CE
Certificate issuer: /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial: 018CC94CC761E7BD7B010E978ADF29E8F60B
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/RyjWCKWkpaeViNRy-a384wKCm84.roa
Signing time: Tue 02 Jan 2024 08:31:41 +0000
ROA not before: Tue 02 Jan 2024 08:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12414
IP address blocks: 217.26.96.0/20 maxlen: 24
82.139.64.0/18 maxlen: 24
185.117.108.0/22 maxlen: 24
5.199.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:c7:61:e7:bd:7b:01:0e:97:8a:df:29:e8:f6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Validity
Not Before: Jan 2 08:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4728d608a5a4a5a79588d472f9adfce302829bce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:df:1b:33:6b:aa:19:2b:57:08:f0:27:21:29:
6e:f3:7c:05:46:29:9c:ac:32:12:7b:c5:27:f8:c0:
a5:7a:1a:18:dd:1c:b2:0b:99:99:84:eb:77:da:d1:
c5:92:af:9b:70:c2:e6:1d:4b:5c:a7:02:46:04:2b:
9a:33:e8:1b:e3:78:71:c2:c0:c2:b0:56:83:1c:02:
3d:6e:ba:50:60:21:49:c4:0d:92:76:bd:2d:b5:e2:
fe:f7:21:3b:96:9f:61:46:c5:05:76:f0:b4:f2:f4:
b4:2c:f7:d5:89:e9:0a:f8:ef:a6:89:e3:f9:14:c8:
d2:25:a9:11:f1:54:5e:9a:2a:d3:93:7e:81:39:a6:
00:1b:42:94:b5:74:5f:85:58:44:aa:ce:73:52:41:
2e:c8:ad:60:b9:a8:0b:28:7b:78:09:01:b8:4c:e5:
a1:32:9e:fc:91:6b:9f:5e:79:d7:ac:76:76:02:89:
e4:7d:41:99:41:88:c1:c5:2b:c8:df:47:e5:36:1e:
a8:47:8d:b3:43:eb:a6:71:4b:23:12:10:8c:f2:c0:
65:72:66:39:11:cf:49:bb:16:f0:73:4b:36:de:43:
b9:c1:e5:76:41:7f:fa:b7:fb:65:87:2e:8e:58:3b:
b6:56:bc:cd:a7:75:04:65:bc:db:4a:db:e2:49:b7:
00:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:28:D6:08:A5:A4:A5:A7:95:88:D4:72:F9:AD:FC:E3:02:82:9B:CE
X509v3 Authority Key Identifier:
keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/RyjWCKWkpaeViNRy-a384wKCm84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.199.144.0/20
82.139.64.0/18
185.117.108.0/22
217.26.96.0/20
Signature Algorithm: sha256WithRSAEncryption
47:4c:a9:d4:8d:b2:f7:ad:1d:16:0a:1f:d7:13:89:28:79:88:
78:34:81:d9:52:39:23:f9:7f:12:0e:ac:9b:0c:48:db:e1:00:
2c:64:37:20:d0:ce:21:ab:48:31:8b:22:ae:43:fc:85:76:ff:
de:22:e2:79:bd:38:c3:78:9b:89:10:c4:b9:dd:ff:5d:2d:95:
d5:d9:dd:b3:6e:c8:5d:54:30:d2:05:f0:f4:3f:d1:ec:3b:b6:
d5:ab:bc:ed:2f:f5:49:de:ec:13:8a:ee:42:de:85:fd:fd:7c:
13:ca:aa:22:aa:63:59:00:34:0d:87:f7:57:5b:f6:d7:6a:99:
55:a0:16:1e:98:af:77:f8:a4:05:f3:f0:b9:b2:11:ba:5d:1d:
56:15:ec:23:cf:74:df:03:57:67:fb:2c:dd:95:a2:c1:b9:c2:
32:2f:1d:1b:90:ac:9d:ee:9b:59:2f:ad:1c:df:c9:12:fc:a0:
d2:0a:76:5d:4d:53:57:42:7c:5e:c7:26:08:1b:5a:4e:fc:bc:
a7:36:85:b2:d5:49:16:fe:dc:f4:b7:22:cc:58:55:ef:0e:01:
92:68:a5:cd:22:66:42:d7:f5:e9:42:61:df:09:1e:16:bd:b9:
40:49:8a:43:ae:46:9a:33:10:4d:a8:90:d7:d3:30:77:aa:22:
63:95:26:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 05:25:30 2024 by rpki-client on console-fra.rpki-client.org