Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/yLEMZF9hKWuki8HfnAnJv3ZrJ6k.roa
File: yLEMZF9hKWuki8HfnAnJv3ZrJ6k.roa (raw, json)
Hash identifier: CpSnwk163fTo1M6Cngtge9vWLBK3A0quqdcc3JDoPXA=
Subject key identifier: C8:B1:0C:64:5F:61:29:6B:A4:8B:C1:DF:9C:09:C9:BF:76:6B:27:A9
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018CC56E36D5FE1E9451AF8FC889B1611B00
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/yLEMZF9hKWuki8HfnAnJv3ZrJ6k.roa
Signing time: Mon 01 Jan 2024 14:29:43 +0000
ROA not before: Mon 01 Jan 2024 14:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54641
IP address blocks: 85.237.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:36:d5:fe:1e:94:51:af:8f:c8:89:b1:61:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 1 14:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8b10c645f61296ba48bc1df9c09c9bf766b27a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a1:77:c9:31:b7:df:8a:40:0d:81:06:e5:69:
2b:de:27:61:1e:63:de:96:1f:56:49:9b:a8:ec:5e:
bf:20:2f:1e:b3:5d:de:fc:9c:31:22:ef:e3:7d:72:
02:e0:e8:cb:c5:ca:94:a4:6f:0a:fb:00:d1:58:26:
25:3a:2d:21:94:f8:d7:50:c5:11:16:8e:1d:56:bf:
08:c7:6f:f6:a9:c4:59:29:aa:48:5a:19:b1:f4:d7:
3a:cc:91:9b:17:3e:03:b2:f3:b8:c5:42:8d:cb:b9:
69:21:2a:54:ce:7c:1a:5c:16:3e:c8:76:ed:60:27:
b4:ee:2c:88:21:2a:f5:0b:fb:61:e3:ec:2d:6f:ab:
5e:1d:f5:ec:80:b5:9b:99:5e:f9:46:1f:fb:4e:72:
45:20:ec:e2:b9:d6:82:35:f6:8f:ef:5f:a1:b4:c5:
1a:d8:4f:29:61:7f:ef:2a:f1:23:86:45:a0:66:2e:
e4:5d:6e:04:9c:d9:a5:74:07:0e:f0:c1:06:6b:7b:
c9:55:b2:77:c4:57:62:46:5c:12:19:df:fb:c7:b4:
53:d9:e7:89:64:21:58:b6:55:74:d4:69:92:5b:66:
f0:25:19:07:85:54:6e:42:38:f2:32:9c:77:6e:b6:
0e:a4:f0:09:c5:30:ed:c2:29:de:b7:4b:d2:42:69:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B1:0C:64:5F:61:29:6B:A4:8B:C1:DF:9C:09:C9:BF:76:6B:27:A9
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/yLEMZF9hKWuki8HfnAnJv3ZrJ6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:97:9f:c4:3f:6f:40:e4:7e:42:f0:74:b9:01:38:4c:bd:76:
6b:bb:89:bc:15:83:5e:02:cc:95:34:b9:8b:cd:ba:af:0b:d4:
23:99:9d:66:81:5d:42:a0:a6:10:6e:43:19:45:f1:9c:db:eb:
14:2b:ca:f9:91:1b:47:1b:f1:b1:0a:1a:41:a1:e5:74:18:ea:
cb:f5:64:71:4d:5c:e4:1b:14:6c:8d:ff:d3:7d:85:a3:ba:9b:
37:22:86:e6:2e:e9:b0:49:57:98:23:9d:6b:46:f4:82:74:13:
d5:6b:67:fd:f7:bc:58:69:9f:48:5b:1f:d5:ba:77:1b:08:43:
f7:bd:45:33:c7:28:9b:be:fb:57:23:76:70:33:9f:1b:17:62:
09:0b:0d:3b:fc:8b:04:27:fb:28:44:6e:d5:1f:21:a5:53:b0:
0e:56:fe:b6:66:b7:dd:d5:b1:03:db:31:8d:93:fe:9b:5e:ec:
f3:cd:15:0c:cf:df:39:fd:97:bd:18:b6:05:41:f2:22:18:10:
8e:ec:58:e3:fb:82:b0:e8:b7:02:67:4d:07:9e:1f:ce:8f:cd:
5d:8a:ba:3b:af:73:54:17:f9:29:cd:14:72:dc:04:49:f7:a4:
94:df:90:a2:f9:25:a9:93:9f:8a:54:f9:70:a5:36:e0:52:86:
8b:95:eb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:52:41 2024 by rpki-client on console-ams.rpki-client.org