Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ypKIw29x8YTg8tnz-vAi4FIsf38.roa
File: ypKIw29x8YTg8tnz-vAi4FIsf38.roa (raw, json)
Hash identifier: TtYEZ6ZVpvWvP9Y7o87J2muRcefbeQ/2cepoRBTme1k=
Subject key identifier: CA:92:88:C3:6F:71:F1:84:E0:F2:D9:F3:FA:F0:22:E0:52:2C:7F:7F
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 018F33DEC500B07E090D5ED56D28085587FD
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ypKIw29x8YTg8tnz-vAi4FIsf38.roa
Signing time: Wed 01 May 2024 11:16:28 +0000
ROA not before: Wed 01 May 2024 11:16:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43005
IP address blocks: 85.9.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:de:c5:00:b0:7e:09:0d:5e:d5:6d:28:08:55:87:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: May 1 11:16:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca9288c36f71f184e0f2d9f3faf022e0522c7f7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d4:23:e3:81:9f:31:8b:f1:45:ab:56:e6:3d:
bd:db:c7:bc:98:e8:b6:64:8d:63:ef:5f:6a:53:c7:
ca:e8:b8:52:6c:0b:b7:6c:32:4f:a0:66:fb:b2:91:
33:40:38:1f:19:e8:fe:a1:c3:d8:a4:01:d2:85:d4:
35:78:8e:a1:58:fe:89:c3:92:5a:cd:d7:a2:95:4a:
3e:b0:ed:37:51:2b:c9:12:48:64:b6:91:7e:93:d3:
e8:55:dc:65:f2:af:70:74:34:96:e0:a7:9f:60:8a:
7c:f5:36:f0:6c:d6:ac:fc:11:59:27:3f:45:8a:7d:
6f:5a:1a:bc:2a:9e:74:36:bf:87:26:90:ef:6f:22:
a4:71:f9:b3:59:21:ba:9f:e7:67:fb:5d:54:9e:8b:
22:c0:e3:fb:c6:d3:ba:cf:04:d5:88:a5:52:ea:89:
f4:c4:9f:b8:37:39:24:d2:ae:8f:ae:02:90:18:b3:
46:b9:58:a4:24:f9:ba:79:6d:87:21:49:32:fe:2e:
13:c3:6d:f8:b5:e9:55:44:6e:12:21:5d:10:29:15:
41:3e:ed:97:b1:5d:a7:fd:a8:44:8c:aa:b0:7a:92:
d4:df:dd:42:ab:4b:bd:c0:5e:47:01:0e:ef:fe:fd:
c7:ea:45:86:4b:b7:08:2d:ea:93:92:18:48:85:5b:
8f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:92:88:C3:6F:71:F1:84:E0:F2:D9:F3:FA:F0:22:E0:52:2C:7F:7F
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/ypKIw29x8YTg8tnz-vAi4FIsf38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.9.82.0/24
Signature Algorithm: sha256WithRSAEncryption
72:96:1a:e0:5d:70:6c:64:6c:4f:6e:fa:34:b5:00:81:f6:2d:
e3:31:61:1e:e5:b6:fc:ef:64:4f:ab:d2:42:7e:88:c6:61:62:
09:64:e1:51:ed:b6:61:fb:73:a9:17:c4:14:93:d7:14:1d:a2:
01:1d:2e:37:54:32:75:69:b7:23:0e:72:73:02:1e:1b:b4:1f:
ad:a1:24:66:82:a7:5c:52:6f:c5:aa:c3:6b:18:c0:ae:e9:b6:
cd:81:7b:e0:c2:b2:ca:20:40:f9:96:60:73:bf:b4:83:c3:4f:
cd:89:63:a7:a7:8a:32:ce:cc:01:aa:0f:08:8c:7a:5e:83:ab:
00:30:33:98:49:46:b5:0a:3c:52:e8:ba:46:eb:fb:af:c8:98:
0b:dd:e6:4c:86:fd:4d:46:a0:9a:ed:71:9e:43:03:b3:0e:ab:
d5:af:62:1c:8b:7e:dd:0f:03:1e:b5:d4:3a:93:d6:75:09:c1:
5d:19:39:3d:da:83:96:bb:2d:bc:15:07:59:84:44:27:6a:53:
db:eb:a1:2a:05:86:61:41:9b:5e:ae:48:6a:5e:15:7f:b1:d6:
46:f3:5f:da:fa:19:20:ee:71:17:c9:bb:03:91:95:0e:d0:86:
e6:5c:26:19:43:de:96:a7:95:fa:d2:bb:cd:b4:64:30:79:72:
b4:20:bf:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 23:50:07 2024 by rpki-client on console-ams.rpki-client.org