Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/yIbhCPaz7ixXFE6Wsc8pnRYxRa0.roa
File: yIbhCPaz7ixXFE6Wsc8pnRYxRa0.roa (raw, json)
Hash identifier: t1T+wCBODcdnkmQ7eZDDQl5PLgmrXmq2nZuCMtHeBlk=
Subject key identifier: C8:86:E1:08:F6:B3:EE:2C:57:14:4E:96:B1:CF:29:9D:16:31:45:AD
Certificate issuer: /CN=794f551e97a132542e3b056e905de8f3dba24c9c
Certificate serial: 018CC4934839800B1C8DC53B2E769EAAFFC0
Authority key identifier: 79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/yIbhCPaz7ixXFE6Wsc8pnRYxRa0.roa
Signing time: Mon 01 Jan 2024 10:30:35 +0000
ROA not before: Mon 01 Jan 2024 10:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47597
IP address blocks: 185.152.140.0/22 maxlen: 22
2a07:8280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:48:39:80:0b:1c:8d:c5:3b:2e:76:9e:aa:ff:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=794f551e97a132542e3b056e905de8f3dba24c9c
Validity
Not Before: Jan 1 10:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c886e108f6b3ee2c57144e96b1cf299d163145ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9d:b4:f2:2b:b9:48:99:fe:64:df:28:0d:0a:
2c:c2:7b:61:40:8c:bf:64:5c:e0:65:d7:72:68:5a:
5c:22:f3:db:66:81:dc:2a:d5:57:9c:51:3d:97:e6:
1c:34:99:14:08:5f:b0:14:a7:5d:f8:65:4e:a8:49:
1b:f4:23:e0:a4:75:68:fe:f3:7e:d2:e9:49:8f:0a:
9a:d6:08:18:ee:a2:8a:73:c8:f9:b1:e6:fd:53:16:
8c:c0:eb:f1:2c:19:11:a9:92:ef:93:ec:84:ef:e4:
20:d5:41:99:ec:62:e7:dc:41:96:96:36:dc:a2:4e:
be:85:09:2b:62:47:12:75:2b:e2:63:4e:30:0c:45:
f1:c5:9f:f1:d9:37:ac:81:1d:f7:e3:94:dd:86:95:
c0:7d:11:59:7f:d2:7b:02:bb:f3:07:72:d7:9c:8b:
fd:56:f5:c9:eb:95:ed:04:fa:96:52:79:84:a7:94:
9d:5d:d3:08:44:c9:88:86:dd:49:67:c6:bb:17:4d:
e5:ec:72:15:09:9b:c8:53:84:10:75:60:6f:71:ca:
e6:be:c4:b3:f8:03:7f:2b:f5:8c:22:9b:47:e6:b1:
23:7c:c4:d9:03:4c:a7:8d:82:07:95:29:80:82:fa:
de:22:9f:70:0a:c3:d0:da:c0:a7:51:78:74:60:1a:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:86:E1:08:F6:B3:EE:2C:57:14:4E:96:B1:CF:29:9D:16:31:45:AD
X509v3 Authority Key Identifier:
keyid:79:4F:55:1E:97:A1:32:54:2E:3B:05:6E:90:5D:E8:F3:DB:A2:4C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eU9VHpehMlQuOwVukF3o89uiTJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/yIbhCPaz7ixXFE6Wsc8pnRYxRa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1925e7-1694-43ed-8fbc-43685887436c/1/eU9VHpehMlQuOwVukF3o89uiTJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.152.140.0/22
IPv6:
2a07:8280::/29
Signature Algorithm: sha256WithRSAEncryption
25:d8:12:8d:68:29:91:c6:21:3a:53:e1:39:03:2c:d1:ae:2e:
03:45:bf:9d:ca:7f:6d:90:ef:a2:18:be:aa:4f:43:f7:e5:d1:
e3:8e:42:da:bd:25:5d:f7:8a:ab:75:e3:72:2a:d1:e1:68:a5:
8d:0b:e7:41:f1:b5:5c:c4:24:9a:52:1a:9c:36:dd:95:ca:ae:
68:59:f6:ca:dc:49:e5:84:46:72:cf:fd:a1:61:ed:00:26:5d:
aa:65:4d:c0:36:a7:85:da:18:12:1b:1c:7b:63:d5:b8:73:4b:
bf:5c:08:25:0a:df:c1:97:4e:3e:ef:15:e6:42:1d:dc:c9:1a:
89:b7:f8:60:69:50:a5:ee:2a:71:38:45:1b:ad:74:47:f8:a5:
95:03:28:08:bf:42:c4:84:d3:1b:8b:0d:16:17:d2:b3:8c:e2:
83:32:f5:f2:80:fa:8d:60:f8:0c:19:13:78:9d:6f:02:2c:59:
cc:d6:3b:55:e0:13:17:5a:16:6f:c9:e2:7c:24:c3:14:07:da:
44:b4:0f:42:03:d0:93:de:1d:b5:2c:46:09:8e:7f:bc:49:d7:
51:f2:02:2a:7f:37:98:6a:4a:85:42:43:a3:25:f4:42:a6:e3:
6f:68:8e:a4:88:ca:bc:c5:88:c2:2f:0a:21:a0:e5:4b:c5:4e:
2b:36:36:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:22:17 2024 by rpki-client on console-ams.rpki-client.org