Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/7YRDJN-w13cUbzRWPPNysebcPV4.roa
File: 7YRDJN-w13cUbzRWPPNysebcPV4.roa (raw, json)
Hash identifier: T4+fVdvNRRmq/pVoO5rJIC+IuYlEzUDSS3NCkdsYkfg=
Subject key identifier: ED:84:43:24:DF:B0:D7:77:14:6F:34:56:3C:F3:72:B1:E6:DC:3D:5E
Certificate issuer: /CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Certificate serial: 018E633DE73FB95B00126E9ADB2A35A74738
Authority key identifier: C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/7YRDJN-w13cUbzRWPPNysebcPV4.roa
Signing time: Thu 21 Mar 2024 22:59:45 +0000
ROA not before: Thu 21 Mar 2024 22:59:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59729
IP address blocks: 92.42.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:63:3d:e7:3f:b9:5b:00:12:6e:9a:db:2a:35:a7:47:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8ec7c4a57155ce8dec5b1cd62ffa84017b16f58
Validity
Not Before: Mar 21 22:59:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed844324dfb0d777146f34563cf372b1e6dc3d5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:b9:ff:99:9d:dc:56:55:5d:8e:20:40:2a:
71:a6:64:dd:bf:08:fb:d3:2e:fc:ef:2e:9c:6d:03:
21:37:08:37:99:ac:12:0a:7b:fb:0b:08:4e:d3:dc:
a2:fd:cd:8c:4c:99:3b:cc:c7:67:de:80:78:1f:14:
79:59:3c:1e:d7:93:49:bc:01:da:95:0c:2b:82:15:
f5:da:93:01:be:de:cf:ff:d2:a0:e4:f6:1e:3c:7d:
ef:5d:72:4b:d7:44:f4:b6:a2:bf:f9:eb:15:6f:7b:
48:93:ee:fe:b7:ee:10:7e:67:87:dc:6f:68:ed:f2:
c3:a9:16:eb:ee:57:bc:56:23:01:19:b3:4e:82:e7:
60:23:99:c2:1c:ab:43:eb:51:ce:22:45:6e:56:b4:
bb:8f:08:94:92:36:f5:ae:81:0a:70:61:35:51:59:
28:1b:b6:9a:55:7e:62:70:c0:e7:f6:7c:b8:d4:07:
0f:00:72:20:af:2a:f1:80:de:9e:27:b9:16:71:dc:
b6:11:2f:e0:1f:82:de:76:f9:43:36:63:a1:0a:4b:
fa:4f:25:b4:66:cc:51:97:67:a4:35:9f:36:60:91:
49:ee:17:2a:b1:63:fb:d6:21:c4:89:02:ea:e6:18:
da:6d:aa:f8:31:43:04:19:42:9f:f7:2a:2f:b7:c3:
1c:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:84:43:24:DF:B0:D7:77:14:6F:34:56:3C:F3:72:B1:E6:DC:3D:5E
X509v3 Authority Key Identifier:
keyid:C8:EC:7C:4A:57:15:5C:E8:DE:C5:B1:CD:62:FF:A8:40:17:B1:6F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yOx8SlcVXOjexbHNYv-oQBexb1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/7YRDJN-w13cUbzRWPPNysebcPV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/2d95e7-ba17-477f-89b7-da5f6a658f8b/1/yOx8SlcVXOjexbHNYv-oQBexb1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.99.0/24
Signature Algorithm: sha256WithRSAEncryption
18:ec:d3:d2:ad:5c:03:c8:63:f6:a0:79:ee:5f:e6:ac:94:84:
af:50:5b:7e:9f:b3:9e:07:bf:b5:09:b7:c4:37:d9:9d:d9:90:
37:2b:bb:2b:fc:5c:2e:75:1a:58:53:95:aa:6d:d1:57:95:6e:
87:d0:c4:4d:ae:a7:9f:2d:79:de:70:66:9e:a4:f0:d9:c9:19:
61:07:ca:44:fb:ac:1a:8c:2b:e4:5d:b9:18:53:ff:ab:60:2d:
e6:a6:52:16:f0:44:8f:18:42:b8:82:2a:26:40:f0:9b:2a:49:
95:ce:01:1f:b7:a7:70:68:9e:88:68:92:7c:3b:51:02:c1:2a:
d2:f1:f2:07:fa:b0:c3:20:7f:db:3c:9e:42:34:86:a6:45:37:
ab:f7:d6:93:9d:8b:b7:86:2c:66:44:83:bc:eb:82:67:42:4f:
30:13:ed:6d:6d:cd:94:35:32:b5:44:23:6e:98:b8:4c:cf:40:
04:7c:a9:4f:d0:b6:37:41:02:1c:6d:e5:2f:36:e3:f7:ae:5f:
17:d3:d2:87:df:ed:8d:73:b0:37:77:2f:5c:ab:8e:7b:04:b2:
f7:c0:81:e5:95:09:cc:c6:2d:0d:56:00:01:aa:ee:83:55:1b:
bb:6f:ac:b8:59:08:f6:38:ae:b1:80:96:92:22:dd:8c:09:a6:
5e:6b:a9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:51:11 2024 by rpki-client on console-fra.rpki-client.org