Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yYAcZAzCFj2TOuOYmZ72thEPvEU.roa
File: yYAcZAzCFj2TOuOYmZ72thEPvEU.roa (raw, json)
Hash identifier: 0PhT14aenExP+gAl3rLjXsUQ8XT4103juRwCeLYkvnY=
Subject key identifier: C9:80:1C:64:0C:C2:16:3D:93:3A:E3:98:99:9E:F6:B6:11:0F:BC:45
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC80270E3D7E6B45A8D54149E2372EB0A
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yYAcZAzCFj2TOuOYmZ72thEPvEU.roa
Signing time: Tue 02 Jan 2024 02:30:52 +0000
ROA not before: Tue 02 Jan 2024 02:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 18229
IP address blocks: 185.255.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:70:e3:d7:e6:b4:5a:8d:54:14:9e:23:72:eb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9801c640cc2163d933ae398999ef6b6110fbc45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:60:c9:e0:e8:39:13:0c:b7:de:0f:f1:63:f4:
cc:08:04:cf:db:f4:77:03:d6:58:ef:f4:ce:0a:10:
e4:55:6e:90:1c:51:c2:20:64:34:af:9a:44:fb:e9:
ea:ce:04:7d:90:ce:0f:af:b7:1e:7a:9b:e6:2e:97:
79:83:c0:da:44:41:ab:bb:0f:2c:5a:2f:d4:79:92:
41:78:d2:95:88:29:67:cb:1e:cb:f1:30:3f:ee:cd:
04:c9:50:22:9b:b9:d5:87:63:c4:42:d2:92:52:a3:
37:a9:b6:e8:2e:35:89:f5:c4:b0:e9:c6:dc:c8:cc:
ab:d3:4e:14:19:de:39:67:63:44:8f:ef:a6:5b:e2:
a1:09:04:13:e9:4a:51:3c:ab:b6:77:5b:21:d2:ba:
2e:e5:5d:69:3e:ef:23:8c:df:10:26:28:5b:84:12:
2b:ac:b4:60:db:43:27:aa:3d:28:f7:4e:9b:3b:18:
0c:ee:6e:f1:51:fa:d6:b8:b3:53:92:51:18:06:e0:
24:59:a4:5a:cd:c3:c3:5a:91:56:1d:40:3c:a5:ef:
dc:9a:78:98:47:6e:c4:8d:ab:ca:58:97:30:e4:8c:
83:01:08:fb:45:4b:16:d3:21:f8:52:d1:4b:2b:ad:
8b:b6:c7:68:70:cf:51:32:9b:6d:f0:ab:9d:99:f4:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:80:1C:64:0C:C2:16:3D:93:3A:E3:98:99:9E:F6:B6:11:0F:BC:45
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/yYAcZAzCFj2TOuOYmZ72thEPvEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.127.0/24
Signature Algorithm: sha256WithRSAEncryption
59:47:d3:ab:ab:70:c9:da:a1:9b:3f:b2:54:3d:8c:91:b5:43:
bc:8c:53:d2:81:e8:7d:a6:56:8e:4d:2d:e3:42:51:05:a5:b4:
39:b5:44:92:6c:dd:9e:81:7f:a5:c2:f2:97:d8:ec:7f:10:df:
ab:61:3e:79:f0:26:1a:eb:a4:ce:90:a3:1c:41:42:9d:d2:af:
a7:80:86:2f:ea:b0:28:5c:37:ff:ff:a5:7a:89:c0:98:3a:7f:
57:23:91:68:8a:7b:f8:5f:50:bf:cd:d1:97:2c:d1:00:f8:30:
0e:5c:cb:57:14:9e:56:c0:9f:22:1f:da:70:65:d0:5d:e4:c9:
8a:20:d2:c6:69:55:9a:f2:55:e8:a9:b1:ae:32:d5:7d:36:05:
66:7e:b6:4e:2e:0c:57:d5:94:0a:40:10:8d:37:ca:4a:c9:d5:
92:20:66:1b:f7:25:ec:db:c1:36:77:c1:9f:a6:12:22:2f:e2:
fa:be:a4:54:f5:bd:2d:ec:e8:40:a8:4a:4e:0a:32:68:92:00:
bc:49:f3:07:47:9c:a9:70:d0:9f:f4:b1:65:40:65:20:d2:b8:
45:5e:01:15:49:b7:06:cc:24:c9:37:0b:c2:bb:2a:c5:36:ba:
d4:2d:2f:ae:3e:05:77:a3:0a:1d:29:bb:10:1e:b6:b7:eb:d0:
5f:6e:22:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:58:12 2024 by rpki-client on console-fra.rpki-client.org