Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/yU61vylArWjzQFbTMYFSuj5QHcs.roa
File: yU61vylArWjzQFbTMYFSuj5QHcs.roa (raw, json)
Hash identifier: Wnm1G8IMc7iTbsO/CviHeXmF06kYHfR3q60vPHf50iA=
Subject key identifier: C9:4E:B5:BF:29:40:AD:68:F3:40:56:D3:31:81:52:BA:3E:50:1D:CB
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018CC56E360B515E8996092D5A15DA8B7417
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/yU61vylArWjzQFbTMYFSuj5QHcs.roa
Signing time: Mon 01 Jan 2024 14:29:43 +0000
ROA not before: Mon 01 Jan 2024 14:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25369
IP address blocks: 85.237.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:36:0b:51:5e:89:96:09:2d:5a:15:da:8b:74:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 1 14:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c94eb5bf2940ad68f34056d3318152ba3e501dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:de:b1:a5:d8:6c:c5:fa:f0:da:83:30:90:28:
80:d3:fb:00:80:82:3d:0a:15:c8:91:ca:3d:f9:81:
cc:cd:5d:fd:47:db:39:56:56:12:36:18:88:4b:97:
08:94:fe:9b:65:a9:58:20:92:25:9e:26:b8:95:aa:
e6:b1:c8:41:81:c6:b0:27:ad:2b:f0:91:14:bd:e7:
3f:11:e7:7e:c3:37:1d:6a:93:8e:fe:9e:50:36:02:
65:65:c5:31:67:49:a1:f0:42:af:b6:a3:4d:44:97:
f6:b1:55:b1:d1:22:51:79:62:61:4b:6d:15:57:e1:
64:58:24:08:22:3b:62:52:26:21:c2:9c:67:8e:56:
37:58:1c:02:8b:f1:0d:a8:81:5b:a8:a6:1f:1a:d9:
82:cd:e4:b2:33:d6:ea:a9:eb:39:52:11:cb:b0:65:
88:bf:ff:c2:3c:7c:39:92:64:50:85:cd:71:70:dc:
34:75:eb:a1:f5:bf:41:6d:87:16:65:6a:0a:1d:05:
32:3e:fa:d1:20:08:9c:16:8c:72:ae:b7:95:9d:2e:
69:31:88:b6:df:d9:61:52:87:ca:e7:34:81:1c:eb:
1c:90:87:df:03:7b:76:ef:9e:ec:4a:8d:a8:61:c9:
ad:5c:e0:49:0f:ac:c6:00:7d:e0:20:6f:3f:c6:8f:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4E:B5:BF:29:40:AD:68:F3:40:56:D3:31:81:52:BA:3E:50:1D:CB
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/yU61vylArWjzQFbTMYFSuj5QHcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.68.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e2:08:41:00:a4:5e:a8:a2:29:55:82:00:20:1e:b4:4a:9f:
67:e0:8b:de:5e:54:7f:59:33:24:75:95:db:ef:c9:f8:7c:44:
b9:c3:c2:47:1a:c2:73:07:e6:e3:61:27:12:5a:de:23:6f:2d:
3a:34:c7:ac:1a:55:94:59:61:9f:ad:fc:48:62:ff:ad:48:2f:
bc:c4:65:64:a6:3f:8b:23:0c:64:93:04:4f:1e:17:e8:46:41:
fe:8e:95:40:98:95:8f:23:99:27:31:04:67:98:ff:dc:21:8d:
2d:b4:e3:90:e3:4e:de:5a:43:fe:f6:96:b1:9e:9b:ed:be:34:
31:d8:88:15:bf:b4:0b:59:16:ee:10:f6:3c:f2:f7:6b:8c:ba:
56:b1:eb:cb:3d:53:76:b8:00:5e:97:dd:bd:6b:39:d5:9b:e0:
65:0f:c8:fd:a4:90:67:6a:46:0d:4c:6f:67:61:ad:97:66:34:
e7:2e:6d:85:bc:0f:a5:f6:d1:ce:38:41:6a:89:6e:27:ed:02:
16:57:d5:36:ef:e1:5b:70:82:25:10:ff:5b:ac:06:24:73:f6:
37:9e:e7:3a:8c:19:c0:5e:3d:97:9f:dc:4c:af:84:14:6c:7e:
d5:36:1d:5f:50:f5:51:04:90:5a:70:6e:39:1b:68:8c:bf:45:
d8:4a:9f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 01:30:36 2024 by rpki-client on console-fra.rpki-client.org