Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/Y0AX-xcKhxMKs_m89Nu8kWnXqTQ.roa
File: Y0AX-xcKhxMKs_m89Nu8kWnXqTQ.roa (raw, json)
Hash identifier: dbMtDKcac+udSZtSadQ+oe9A70wfQvQR/lJ1+HdB7Kk=
Subject key identifier: 63:40:17:FB:17:0A:87:13:0A:B3:F9:BC:F4:DB:BC:91:69:D7:A9:34
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 018CC793646573D912E52E6F19267A947B4B
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/Y0AX-xcKhxMKs_m89Nu8kWnXqTQ.roa
Signing time: Tue 02 Jan 2024 00:29:34 +0000
ROA not before: Tue 02 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49524
IP address blocks: 185.82.224.0/22 maxlen: 22
2a05:9540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:64:65:73:d9:12:e5:2e:6f:19:26:7a:94:7b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Jan 2 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=634017fb170a87130ab3f9bcf4dbbc9169d7a934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:11:c1:61:26:d4:d0:ae:1a:0f:01:4e:f2:
4a:33:c6:23:03:2d:77:ff:44:4a:f4:81:16:2e:08:
57:3e:a7:6e:ed:bb:0a:0e:ce:66:ae:08:c0:9c:b1:
e6:52:d9:49:a5:c1:87:54:01:48:0e:72:9c:c5:4e:
e8:9e:1b:8d:97:ca:45:db:22:15:80:97:23:3d:b1:
bf:15:0f:04:b6:8d:d1:16:2c:15:9f:16:a3:7d:26:
4d:af:fc:fd:1b:9f:1d:4b:2a:8c:96:26:57:4e:d1:
0b:be:e6:f0:32:7e:2b:bd:44:ea:20:f8:62:50:fe:
6b:d0:d8:2b:d4:8a:48:fa:79:be:36:0c:c6:6e:ee:
0b:38:ee:9a:dc:98:5b:ea:9a:91:d6:59:dc:eb:a9:
ac:51:d7:59:c5:00:a8:72:6d:a4:a3:7a:bf:94:41:
3a:08:69:3a:33:f2:5d:76:3b:63:02:d3:39:6f:40:
a6:b0:47:55:45:5f:38:31:f8:12:fd:12:c4:5a:cd:
3a:8a:3f:ae:92:09:74:f5:16:6b:8f:44:51:b2:7b:
eb:e5:ca:d3:6d:96:29:ce:79:b1:3a:b7:82:fa:ef:
db:25:45:ee:46:71:b2:93:4b:05:bd:5a:aa:8f:ca:
cc:c6:93:7d:dd:1e:25:1e:46:b9:10:7b:01:bb:9c:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:40:17:FB:17:0A:87:13:0A:B3:F9:BC:F4:DB:BC:91:69:D7:A9:34
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/Y0AX-xcKhxMKs_m89Nu8kWnXqTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.224.0/22
IPv6:
2a05:9540::/29
Signature Algorithm: sha256WithRSAEncryption
5c:79:ec:c8:06:cf:02:e2:12:34:d9:4e:e3:f4:19:fd:af:a8:
41:cb:2d:9d:52:5e:14:3d:d9:37:6f:c2:fd:2c:d0:dd:cb:0c:
ef:dc:6e:b7:ac:e0:2f:ae:7c:25:5b:73:a5:2c:eb:da:f3:7b:
4c:f4:f9:a0:01:7e:29:90:0b:ac:e8:2e:e1:62:19:c0:98:92:
9c:5f:52:5a:54:7c:8b:9e:0d:d4:01:78:83:ab:1d:1d:93:41:
50:64:f1:d3:b1:02:36:33:10:78:70:de:2c:b5:29:ae:c3:ba:
0c:2a:69:7f:4f:19:85:00:95:34:1d:b6:22:cf:ee:f2:e0:e0:
d9:d3:35:7f:f2:ac:77:2a:32:09:05:da:b4:9b:f4:45:14:a4:
77:94:e4:7a:bf:bf:86:8f:fd:6d:51:db:a1:f2:4e:28:12:03:
a1:f9:eb:e4:a2:5a:7d:b9:60:34:10:71:ef:38:2e:28:38:5b:
36:c1:72:a5:02:7d:e5:6f:81:96:6a:78:18:93:b1:2f:c2:d4:
f0:4c:42:29:2e:20:f5:d7:e2:4f:48:81:60:a2:e7:ed:af:88:
23:c2:32:19:db:14:98:80:55:ca:a7:62:d9:0e:d3:5f:76:8e:
e9:70:f3:cf:ef:54:6a:8b:56:b3:25:85:0d:a4:98:d3:d4:da:
26:dc:6f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:46:07 2024 by rpki-client on console-fra.rpki-client.org