Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/y6fB6OXAcE6qIZXGG2882GYIpe8.roa
File: y6fB6OXAcE6qIZXGG2882GYIpe8.roa (raw, json)
Hash identifier: XYfP6h3nvWyfdKXcZ7v2GXMLoQbrgm3OPEdlVpeoioc=
Subject key identifier: CB:A7:C1:E8:E5:C0:70:4E:AA:21:95:C6:1B:6F:3C:D8:66:08:A5:EF
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B9448D430C7BDB2D61F0AD19587F4E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/y6fB6OXAcE6qIZXGG2882GYIpe8.roa
Signing time: Mon 01 Jan 2024 20:31:19 +0000
ROA not before: Mon 01 Jan 2024 20:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205874
IP address blocks: 151.237.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:44:8d:43:0c:7b:db:2d:61:f0:ad:19:58:7f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cba7c1e8e5c0704eaa2195c61b6f3cd86608a5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:60:ee:75:80:8a:cd:50:fd:b7:b1:6e:c1:9e:
68:7a:0c:2d:09:48:67:e7:4e:98:ae:be:7b:61:84:
b9:66:e1:94:c5:95:6b:a2:8b:17:9e:52:ee:e4:8e:
90:9c:23:98:1f:d1:ea:1e:82:d0:98:30:39:49:a8:
7d:f4:9a:6c:14:7b:50:f4:d7:2c:7c:b1:f3:52:3e:
9b:41:7c:61:d6:c6:a7:37:54:81:33:69:53:9c:46:
72:dd:29:b2:36:a1:8e:36:1d:72:25:56:dd:39:18:
c8:69:25:0a:5e:bb:43:14:56:2b:0e:b7:df:74:b9:
22:f1:a9:77:c0:31:c1:ed:6c:db:a5:c8:bb:23:e0:
92:fa:4d:f8:f6:0e:8e:aa:74:13:b6:c0:6e:8a:33:
e2:7e:88:b1:a1:67:47:dc:e9:8f:27:2a:f8:2d:dd:
04:0b:e1:d3:a3:3c:68:83:f4:10:b8:c9:69:5a:4b:
57:5f:0f:7e:a1:3b:f4:19:88:2b:49:c5:fd:4a:da:
d8:b4:97:d3:c6:39:8d:7f:1c:9d:ad:96:1b:96:f7:
fb:a3:0f:f4:6b:ce:b2:cd:fe:a1:9c:19:e9:09:d1:
cd:b5:8a:b4:ec:18:82:c5:b5:32:ff:cd:c3:99:11:
7a:10:62:b4:98:31:f0:20:86:b8:8c:5b:e7:c0:97:
e3:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A7:C1:E8:E5:C0:70:4E:AA:21:95:C6:1B:6F:3C:D8:66:08:A5:EF
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/y6fB6OXAcE6qIZXGG2882GYIpe8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.25.0/24
Signature Algorithm: sha256WithRSAEncryption
82:50:1a:4c:67:7f:b9:63:69:89:29:18:fb:19:65:83:63:4d:
d9:10:4a:ab:4a:40:5b:5c:49:c0:66:9a:b3:32:92:3a:13:30:
74:8e:37:18:de:d7:ed:4f:fb:f4:ab:98:a0:8b:2c:8e:0e:0a:
81:c2:a6:5e:74:f3:7d:28:19:df:aa:69:34:57:b7:35:4a:7b:
fa:9a:16:97:5d:30:fa:31:f4:2e:0e:2f:32:6d:7d:8b:d9:c0:
79:39:59:ce:0b:56:c5:ef:dd:93:da:46:84:01:1e:47:e9:89:
3e:5a:cd:d7:61:87:89:3b:4c:c0:ce:fe:19:a0:e1:16:c4:7b:
e2:1a:ff:8a:0d:3d:3d:92:24:af:52:99:53:a3:5c:de:cd:52:
ee:34:25:da:e1:08:8b:24:b1:d9:01:b9:74:c1:bb:fb:5b:64:
2f:a1:fa:61:13:1f:26:92:6f:27:88:a5:7b:e1:98:99:02:51:
e8:3b:c6:8a:c4:ac:a9:19:04:e9:2a:82:a3:3d:08:77:52:bc:
d9:a3:97:33:04:aa:b5:ca:9a:8b:f8:a6:ae:16:a0:e3:35:c5:
58:84:16:a8:b2:49:05:74:67:ec:4f:78:09:25:e6:29:6f:45:
2d:7a:2a:6f:5e:c0:65:14:fe:36:af:e6:7c:d2:6a:e4:35:6b:
64:b0:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:43:38 2024 by rpki-client on console-fra.rpki-client.org