Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/YT0RO_u6ajsT46ISGf9J3gRr_bw.roa
File: YT0RO_u6ajsT46ISGf9J3gRr_bw.roa (raw, json)
Hash identifier: LE4+g3MSvPvkLZDH5dPT20EJQRm3QdLtn3BooNgZKmU=
Subject key identifier: 61:3D:11:3B:FB:BA:6A:3B:13:E3:A2:12:19:FF:49:DE:04:6B:FD:BC
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 018CC64A6DE12338DB520B771DB891C26D6B
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/YT0RO_u6ajsT46ISGf9J3gRr_bw.roa
Signing time: Mon 01 Jan 2024 18:30:15 +0000
ROA not before: Mon 01 Jan 2024 18:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12993
IP address blocks: 195.216.236.0/24 maxlen: 24
194.152.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:6d:e1:23:38:db:52:0b:77:1d:b8:91:c2:6d:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Jan 1 18:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=613d113bfbba6a3b13e3a21219ff49de046bfdbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d3:00:71:42:db:2c:6c:5b:9d:f3:7f:61:57:
6e:49:34:68:53:82:26:be:bc:d7:d1:8b:3e:06:9c:
c0:75:1e:a6:40:07:4f:51:82:76:a5:23:bd:0c:7e:
08:ce:ea:58:2c:fd:28:45:11:18:5c:7f:ac:72:65:
3b:5d:f4:ba:8a:7c:23:a3:dc:08:7b:64:d3:54:02:
31:c7:bc:e6:5a:0e:85:c6:29:72:c5:ce:91:cd:1a:
1f:c2:8f:a1:ea:23:ad:ff:a7:5e:15:51:46:12:e7:
46:58:b7:be:bc:3d:a9:dc:e9:b3:54:73:a0:e5:e9:
e0:5b:c1:a7:55:9f:09:e7:7d:5f:f8:b9:68:8a:74:
cd:ec:bd:27:66:dc:32:c5:0d:bd:45:a3:64:6b:30:
43:8c:8c:6c:2d:b0:80:f2:a9:c0:a7:8c:f4:0b:8a:
e2:c5:59:c8:c1:cd:a5:0f:22:79:d5:73:bb:6d:b8:
f8:fc:5e:a3:2a:6f:1d:4c:b2:10:36:8e:88:b4:da:
53:40:75:4c:e4:69:ad:8d:34:da:3f:9d:1e:80:a7:
53:a1:d5:da:16:2c:f0:4d:bc:d7:17:b4:cc:9c:7e:
5f:91:06:a5:a5:73:24:14:f2:eb:ce:82:cd:07:24:
3e:3e:a3:48:3e:15:91:f2:a7:04:38:6a:26:87:9c:
6d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:3D:11:3B:FB:BA:6A:3B:13:E3:A2:12:19:FF:49:DE:04:6B:FD:BC
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/YT0RO_u6ajsT46ISGf9J3gRr_bw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.32.0/23
195.216.236.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:46:02:33:54:59:47:22:d4:9c:97:cb:34:15:42:03:c4:59:
31:5b:8f:a2:1d:70:7a:62:13:3b:48:2a:75:a4:63:05:43:94:
f4:d3:f2:7d:e3:86:1d:d4:a8:b8:59:47:f2:5a:b1:cf:37:ac:
9b:f4:3c:04:f3:87:fb:9b:b1:ea:8c:1a:bb:b0:cc:35:0e:54:
e9:4b:5b:fc:92:99:2c:1f:d7:8e:2a:99:f5:d3:28:b6:75:88:
3a:0e:1f:80:0e:1f:bf:87:ea:81:a5:0f:df:01:6f:28:69:8c:
d0:ff:df:a8:75:ce:54:72:85:d4:26:78:28:4f:b5:6e:b1:94:
5d:0e:93:68:38:92:00:2e:e7:22:ac:6a:dc:d1:e6:af:a4:95:
eb:f6:b1:11:4c:c4:f2:83:25:4a:3c:1f:b7:d9:be:79:d5:4a:
bc:e2:6c:05:06:6a:83:f5:92:db:4c:ac:5c:4f:9c:58:5a:cf:
73:d3:f0:b8:55:31:43:30:e8:c6:91:08:3c:ea:cf:ee:2d:cf:
73:6c:be:c6:07:03:36:c5:64:20:03:2b:94:b4:f2:10:b8:de:
66:9a:69:98:aa:96:be:71:10:30:84:e6:a5:9c:4a:1c:58:d4:
bb:0d:79:72:b3:45:af:6f:d2:e9:51:02:27:c1:7c:41:42:50:
f4:e8:2f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:38 2024 by rpki-client on console-ams.rpki-client.org