Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/YOgEjC8pEOOUy-GD4rc5MKi765g.roa
File: YOgEjC8pEOOUy-GD4rc5MKi765g.roa (raw, json)
Hash identifier: Tia/QtTJUxtxzvOtq2nJCID8CGHwDHsXcIJigGxO/LU=
Subject key identifier: 60:E8:04:8C:2F:29:10:E3:94:CB:E1:83:E2:B7:39:30:A8:BB:EB:98
Certificate issuer: /CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Certificate serial: 018CC94D513CE8063FC68FD13D3BC13EDADB
Authority key identifier: 23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/YOgEjC8pEOOUy-GD4rc5MKi765g.roa
Signing time: Tue 02 Jan 2024 08:32:16 +0000
ROA not before: Tue 02 Jan 2024 08:32:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205509
IP address blocks: 194.9.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:51:3c:e8:06:3f:c6:8f:d1:3d:3b:c1:3e:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d34dd3d211e5c2ea7bd2f527a13e1e996820ec
Validity
Not Before: Jan 2 08:32:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60e8048c2f2910e394cbe183e2b73930a8bbeb98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b2:a2:7d:84:31:b5:08:8c:39:29:40:b2:a3:
d2:de:1b:b8:9c:bf:76:5a:0b:de:f3:46:28:b8:9f:
09:af:88:b7:91:da:1e:0c:7c:8a:4c:3c:b1:4a:fa:
8e:5b:e3:eb:f0:16:12:2f:7d:eb:3f:c0:a0:13:ce:
b6:c3:9c:6d:5d:83:21:34:60:9f:46:5f:75:7c:24:
60:72:39:2e:eb:83:1c:36:f5:e2:ca:57:90:fb:4c:
5d:f8:1f:0a:31:b7:53:f0:01:1d:10:7b:09:4b:42:
d4:b5:15:bc:e4:bb:cd:80:65:7d:ac:6e:31:34:f0:
eb:ea:ca:99:c3:14:27:1a:c6:48:10:11:2f:5f:d6:
a0:ea:ca:ac:52:4e:21:2a:fe:f6:57:01:d6:a5:2b:
e4:94:e8:43:1b:47:e0:56:c9:66:49:a9:b5:8a:5b:
ea:9a:9b:56:50:d5:65:4f:19:80:a5:5f:83:90:8b:
6b:5c:26:14:0e:06:62:99:8c:1b:5c:45:75:44:dc:
f9:0b:e3:91:83:02:bc:00:f5:7d:a4:d5:52:92:d9:
e4:e9:65:de:de:a8:54:1e:19:51:d9:88:a4:95:77:
11:c5:4f:3c:79:c2:6f:a4:cd:c8:7c:6e:bf:14:73:
6c:63:e9:6d:2a:ca:86:a2:dc:41:83:e6:74:dc:dd:
fa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:04:8C:2F:29:10:E3:94:CB:E1:83:E2:B7:39:30:A8:BB:EB:98
X509v3 Authority Key Identifier:
keyid:23:D3:4D:D3:D2:11:E5:C2:EA:7B:D2:F5:27:A1:3E:1E:99:68:20:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9NN09IR5cLqe9L1J6E-HploIOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/YOgEjC8pEOOUy-GD4rc5MKi765g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dc2c04-59f6-4f22-b7bd-fe671c1d5150/1/I9NN09IR5cLqe9L1J6E-HploIOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.29.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:a1:91:4c:58:6e:8c:1b:c7:59:f8:35:42:c9:5e:5f:ee:46:
6e:da:90:68:57:b9:9c:a6:fa:f1:83:60:1d:a0:00:2f:bf:66:
00:1b:ff:24:b8:bc:6c:09:f3:9f:5d:ef:84:40:e8:a0:d4:13:
8a:6b:c9:f4:bb:cb:ef:7c:ff:e1:bd:f2:de:a6:6c:38:f1:a0:
ba:00:3e:81:3f:85:16:23:5a:02:df:01:f0:0d:64:3f:09:5a:
8f:c8:b4:b7:09:f4:18:1b:f3:dd:38:fe:70:f4:1d:55:e3:40:
5a:79:86:b0:e4:a9:f5:d7:bd:51:c5:40:8c:e0:d2:80:26:9d:
7a:7b:cb:24:74:51:bb:19:80:b6:95:bb:e2:18:a2:d7:93:7d:
0d:35:bb:0d:94:6f:28:e9:94:68:42:09:e6:e4:fe:d6:6e:e0:
bc:95:6f:f9:de:a3:5c:d1:04:22:4a:53:3c:d4:e2:ae:b9:8d:
ad:92:23:87:e0:d2:2d:ea:f5:83:1c:e6:33:67:c7:f8:f4:7f:
88:a3:f1:8f:73:e4:cf:f9:9e:b9:69:c7:ef:9d:4f:05:a5:90:
34:af:18:77:c2:c2:73:bd:19:5b:bf:a4:4f:27:76:1c:9b:13:
44:b0:f7:0c:1c:98:ef:5d:5f:d8:5f:ef:f1:c4:06:5e:3d:4d:
69:be:a8:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 21:15:11 2024 by rpki-client on console-ams.rpki-client.org