Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/y0zdRWuzmIRAskpsFNPm0uwwsKY.roa
File: y0zdRWuzmIRAskpsFNPm0uwwsKY.roa (raw, json)
Hash identifier: msvJ/R06trDjxb6r8ztanpJcgLakTgUxB4wZRY6B+8E=
Subject key identifier: CB:4C:DD:45:6B:B3:98:84:40:B2:4A:6C:14:D3:E6:D2:EC:30:B0:A6
Certificate issuer: /CN=cdaaa0e082360360acda347664eb8314eb11da10
Certificate serial: 018CC3B6BCFF630F5995D634E27F466136A2
Authority key identifier: CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/y0zdRWuzmIRAskpsFNPm0uwwsKY.roa
Signing time: Mon 01 Jan 2024 06:29:42 +0000
ROA not before: Mon 01 Jan 2024 06:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62051
IP address blocks: 92.52.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:bc:ff:63:0f:59:95:d6:34:e2:7f:46:61:36:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdaaa0e082360360acda347664eb8314eb11da10
Validity
Not Before: Jan 1 06:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb4cdd456bb3988440b24a6c14d3e6d2ec30b0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:29:b3:1d:e9:94:b0:d4:3a:cd:5a:e3:f0:14:
37:80:9c:2f:35:f3:27:42:23:e3:53:d5:b9:ac:d3:
e6:92:be:1b:b2:cb:ce:8a:13:69:a2:28:89:e0:da:
87:08:b5:2b:d2:93:6b:c3:b9:1d:c4:83:5b:d5:cf:
0e:1d:9a:05:2a:bf:11:9f:ec:a1:6f:0c:5e:3f:ac:
ab:65:fa:c7:fc:af:03:f6:a5:b7:2a:31:b6:b7:d0:
a5:3e:f0:f7:76:39:eb:7d:3f:3a:ec:a6:b1:ca:64:
29:24:65:24:10:84:b3:ff:77:d0:92:77:b5:6e:cb:
ff:31:c0:27:b0:62:73:a2:d8:b5:c6:05:3b:84:7c:
a3:54:0e:6f:4c:d9:bf:28:1e:9e:f8:ce:48:29:76:
5c:12:6c:f1:f5:33:14:5c:6d:f7:12:39:b3:9c:20:
0c:75:3c:15:9e:02:64:c1:79:39:96:95:b1:5e:d7:
5d:30:30:a0:90:eb:3e:f6:27:eb:64:fc:e9:cc:0f:
51:5d:1c:6e:67:d6:6e:c0:79:d6:34:c9:ec:9e:ab:
d3:ed:13:de:95:75:6c:c4:b6:86:ac:24:59:4f:fb:
25:c0:0b:8b:f3:cd:e0:f6:9c:a6:20:5c:3e:5e:66:
b3:82:03:41:ee:7b:56:5e:0a:38:01:83:0c:44:21:
bd:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4C:DD:45:6B:B3:98:84:40:B2:4A:6C:14:D3:E6:D2:EC:30:B0:A6
X509v3 Authority Key Identifier:
keyid:CD:AA:A0:E0:82:36:03:60:AC:DA:34:76:64:EB:83:14:EB:11:DA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/y0zdRWuzmIRAskpsFNPm0uwwsKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/589127-1096-4c91-96cc-7e4d6f6f6e66/1/zaqg4II2A2Cs2jR2ZOuDFOsR2hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.52.216.0/24
Signature Algorithm: sha256WithRSAEncryption
51:f7:e9:fa:5e:f9:93:ac:94:21:5e:4f:35:6d:52:e9:c0:19:
38:a6:18:3e:56:cb:4c:72:fd:38:f5:e2:af:20:44:3b:5c:f3:
ce:75:9b:8e:43:05:47:d4:c4:97:7c:87:28:07:70:a1:5a:13:
ff:5c:bf:fe:be:cc:44:84:ba:0a:8e:2f:40:10:50:e0:e1:2b:
d6:7e:50:af:29:23:7f:d4:21:f4:ec:96:6a:71:3b:a0:9a:d4:
36:45:e9:b5:89:49:68:73:a5:55:4b:3d:06:04:ae:11:54:53:
5a:86:95:11:7c:04:33:91:02:79:35:db:f8:90:75:c0:96:f5:
2f:1b:27:86:45:a3:be:de:d7:de:97:77:c6:ff:9a:96:3f:38:
63:dc:72:5d:3c:a3:06:14:c5:70:f7:92:b1:85:ca:cb:4e:5e:
ff:db:e9:b4:27:c7:38:3e:41:5d:f7:84:7b:43:a3:6d:e8:89:
82:48:ee:7a:05:73:42:74:95:fc:25:03:38:b6:dd:04:ea:30:
32:cf:e3:6b:96:6f:c9:99:fd:8c:2e:6c:66:9b:fd:fe:98:82:
2e:06:a1:f7:f5:6b:8d:2a:a7:35:c6:6a:03:1f:c7:77:a4:ce:
d7:09:cf:d9:5b:ef:08:64:dc:65:68:90:98:fa:d2:4d:7f:16:
31:25:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:34:43 2024 by rpki-client on console-ams.rpki-client.org