Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/ymqh-fhJ91nG_ut_BTnjPIzHa_g.roa
File: ymqh-fhJ91nG_ut_BTnjPIzHa_g.roa (raw, json)
Hash identifier: 4kw6JrWXfx6VqIRYUbxwmHtk3/GHhOhaga+mG2s/XVQ=
Subject key identifier: CA:6A:A1:F9:F8:49:F7:59:C6:FE:EB:7F:05:39:E3:3C:8C:C7:6B:F8
Certificate issuer: /CN=0c05ca111c0093b56514215be467b515dda56c06
Certificate serial: 018F151C4DC67BB33EFEAD01BA0344A58667
Authority key identifier: 0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/ymqh-fhJ91nG_ut_BTnjPIzHa_g.roa
Signing time: Thu 25 Apr 2024 11:55:27 +0000
ROA not before: Thu 25 Apr 2024 11:55:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215218
IP address blocks: 194.164.39.0/24 maxlen: 24
2a13:e700:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:15:1c:4d:c6:7b:b3:3e:fe:ad:01:ba:03:44:a5:86:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c05ca111c0093b56514215be467b515dda56c06
Validity
Not Before: Apr 25 11:55:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca6aa1f9f849f759c6feeb7f0539e33c8cc76bf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d8:f5:91:39:0a:10:73:89:13:2c:0e:ba:4c:
f4:af:30:5a:43:8c:68:7b:b1:ac:42:3b:81:cf:9e:
3e:5a:02:d6:a9:4d:8d:68:7b:36:a6:48:bd:8f:dc:
09:19:b4:ee:4b:07:a2:3b:2f:50:de:0b:8d:dc:2a:
54:3d:af:7f:b6:d5:c6:5f:a5:35:ce:b1:63:1f:25:
63:60:ea:1b:44:02:b3:a2:67:5d:39:22:3a:67:b3:
d8:98:75:fd:b0:da:bc:24:6a:18:59:03:80:d7:f7:
97:23:d6:a7:86:f9:da:22:64:d5:e2:45:e6:23:99:
2a:0c:f0:58:1d:59:93:1f:71:29:af:2d:5c:7b:f3:
d6:0c:d2:5f:8c:71:97:62:d3:7d:26:c9:6d:03:93:
ce:5f:76:dd:e6:dd:aa:42:b3:a1:bf:23:39:d2:70:
14:68:5b:67:27:c2:f8:1f:dd:37:73:fe:50:80:ae:
7f:be:9c:54:69:55:f2:8f:8e:29:d7:c1:1f:a2:a7:
78:39:f7:d2:1e:58:98:2c:30:7b:fb:e2:46:e2:3f:
83:1a:d8:47:e3:90:13:0b:cf:b2:b7:d5:70:69:1a:
7b:a0:17:60:48:20:5f:90:71:d9:07:ef:b6:c5:2f:
35:71:40:4f:82:e1:12:d3:55:d9:53:c1:52:be:89:
2c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6A:A1:F9:F8:49:F7:59:C6:FE:EB:7F:05:39:E3:3C:8C:C7:6B:F8
X509v3 Authority Key Identifier:
keyid:0C:05:CA:11:1C:00:93:B5:65:14:21:5B:E4:67:B5:15:DD:A5:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/ymqh-fhJ91nG_ut_BTnjPIzHa_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0fbf48-5db7-49fe-bf44-6a36705bba6f/1/DAXKERwAk7VlFCFb5Ge1Fd2lbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.39.0/24
IPv6:
2a13:e700:1::/48
Signature Algorithm: sha256WithRSAEncryption
9c:b5:88:f1:6b:a1:01:07:51:46:41:b0:8e:85:91:7f:a5:20:
42:b3:26:6f:08:52:f9:19:b6:bf:dc:5c:89:13:8a:b6:ad:11:
5f:b2:56:06:25:6b:40:05:60:5b:64:2f:ec:93:e9:80:a3:ba:
f1:cd:36:3b:66:5b:ee:64:cc:dd:00:a3:3f:96:75:0b:7e:fe:
ba:d1:8b:89:90:d0:2f:58:d0:1e:1f:53:55:c1:a1:26:a4:9a:
d0:26:dc:ac:c3:95:8b:c4:8d:fd:0a:0e:fe:a4:4d:e7:bb:e2:
82:83:a6:d5:9d:0c:fa:0a:aa:05:69:da:bc:c7:a9:c8:4d:37:
36:64:6d:df:e6:ef:99:e0:86:57:ee:ec:19:87:f8:ec:3d:74:
00:0d:9b:c5:81:9c:03:b5:f8:9b:e1:f6:46:04:b0:7d:59:53:
a1:11:b5:5b:a7:7e:1d:bf:02:c0:78:bc:f3:7b:76:fa:24:05:
4f:a7:9b:02:40:11:ac:cd:5b:36:4c:f1:e8:97:53:99:96:47:
76:9e:aa:b6:07:ed:44:4b:32:19:e5:9d:85:77:1a:66:ff:2d:
b8:9a:70:05:de:0a:83:1e:52:ba:97:aa:87:db:b6:7e:55:18:
c9:d8:38:f9:86:fc:07:a1:3a:1c:a4:b0:03:7a:23:94:76:63:
99:8a:68:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 14:33:54 2024 by rpki-client on console-fra.rpki-client.org