Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/YRVTgoGrL-6crppxzzRctLL70tM.roa
File: YRVTgoGrL-6crppxzzRctLL70tM.roa (raw, json)
Hash identifier: svK32wGgN01T7obRuLpx6CfHiWwA6CoV1I/49hEgdHI=
Subject key identifier: 61:15:53:82:81:AB:2F:EE:9C:AE:9A:71:CF:34:5C:B4:B2:FB:D2:D3
Certificate issuer: /CN=9a6e147448289634b98688ee5a5af447d42cbb07
Certificate serial: 018FBAEDDFB50142B5EE9D14F32B1C36CEF1
Authority key identifier: 9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/YRVTgoGrL-6crppxzzRctLL70tM.roa
Signing time: Mon 27 May 2024 16:41:42 +0000
ROA not before: Mon 27 May 2024 16:41:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31898
IP address blocks: 45.12.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ba:ed:df:b5:01:42:b5:ee:9d:14:f3:2b:1c:36:ce:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6e147448289634b98688ee5a5af447d42cbb07
Validity
Not Before: May 27 16:41:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6115538281ab2fee9cae9a71cf345cb4b2fbd2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:82:c3:1b:14:af:f9:0a:65:c4:ee:5b:a8:
64:dc:67:b4:fc:bc:4a:e5:f0:bc:b7:ef:04:55:f1:
bb:86:81:66:ad:28:8c:64:eb:0d:c9:85:8c:d4:8d:
8b:c0:17:fa:01:6a:f3:32:cf:a1:33:42:fc:ed:73:
77:08:a5:ac:b7:c7:24:45:19:d0:b1:16:7d:07:53:
c7:d1:5b:d6:30:c4:0d:7f:8c:11:f3:f8:59:1f:ca:
19:63:49:60:4c:49:fb:d4:48:f9:8c:0e:c6:d0:95:
b7:7f:bd:fa:34:4d:af:a1:ee:e4:19:34:90:3a:4e:
b1:5c:ef:3b:76:bb:8a:89:9c:62:88:85:31:1c:6b:
a9:f7:4d:d6:70:da:67:ca:aa:b3:ed:ee:80:e6:4e:
b8:aa:ef:bf:45:d4:52:04:e2:13:05:12:5e:b3:5f:
31:15:2a:03:cc:4c:1a:e4:47:cf:e9:c2:5a:23:cb:
48:7c:eb:0d:e5:99:e5:0c:34:73:b1:e6:cc:8a:5c:
9c:89:48:8d:b5:f3:bc:41:f1:5c:84:16:10:32:6a:
40:13:34:a2:29:a1:76:1b:7d:6d:ab:c2:6b:18:e6:
fb:f7:0b:a9:27:b0:74:0a:6b:4e:ba:36:c0:c6:e7:
83:f6:e9:cc:be:00:00:81:57:c7:80:a2:5a:61:c0:
3d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:15:53:82:81:AB:2F:EE:9C:AE:9A:71:CF:34:5C:B4:B2:FB:D2:D3
X509v3 Authority Key Identifier:
keyid:9A:6E:14:74:48:28:96:34:B9:86:88:EE:5A:5A:F4:47:D4:2C:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mm4UdEgoljS5hojuWlr0R9Qsuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/YRVTgoGrL-6crppxzzRctLL70tM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/661dad-00c9-4f17-94d8-2bbd01f9e500/1/mm4UdEgoljS5hojuWlr0R9Qsuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:1c:96:07:fb:dd:bb:a2:c3:8a:45:af:4d:aa:b8:ca:9b:58:
60:a6:10:b4:d1:43:17:8c:41:1d:1f:68:88:af:96:7f:55:9d:
92:b9:e2:fd:f2:2b:a1:2f:3f:d4:ca:78:17:7c:9b:8d:9b:36:
83:71:a9:58:18:db:6f:75:10:68:e1:fc:0c:2c:18:31:60:77:
87:21:9a:fd:06:47:7f:9b:3f:1d:fa:6e:05:cb:ff:8a:89:98:
f3:30:ba:44:97:73:3e:87:f4:f2:55:7f:43:5d:0f:01:bd:8c:
d5:ba:ce:88:fe:96:ad:dd:d5:8c:a4:86:3e:73:cb:27:f8:a7:
53:54:2e:0f:9e:b8:69:bb:1c:1d:c0:c7:36:f3:e0:81:55:e6:
7b:52:68:29:34:8e:fb:42:e0:5a:be:fc:da:ba:68:13:12:bd:
1f:2f:e3:80:ff:02:6f:7a:75:8a:be:b5:7a:10:7a:fc:fb:45:
69:c9:f3:66:8c:05:8f:37:f9:df:f5:4f:d6:00:73:28:d7:59:
b8:5d:f0:f4:56:58:ee:06:5d:fc:e9:44:81:8f:27:da:b5:9c:
b8:f9:1a:0a:76:7f:b5:26:b1:4c:87:79:76:93:aa:61:1b:9d:
4f:97:99:11:b9:2d:35:f4:3d:d7:68:2f:7f:74:67:8b:d0:28:
86:2f:a9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:51:36 2024 by rpki-client on console-fra.rpki-client.org