Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/y8mM_BVHlYbND8RrwVTiOPoFeUI.roa
File: y8mM_BVHlYbND8RrwVTiOPoFeUI.roa (raw, json)
Hash identifier: IeLTbLGFpq7iTGGNRj0E1ODlPNZu7ptkSbfRRyIW5dA=
Subject key identifier: CB:C9:8C:FC:15:47:95:86:CD:0F:C4:6B:C1:54:E2:38:FA:05:79:42
Certificate issuer: /CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Certificate serial: 018CC3B68B646F4A42EDE3543DE93DBAA611
Authority key identifier: 3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/y8mM_BVHlYbND8RrwVTiOPoFeUI.roa
Signing time: Mon 01 Jan 2024 06:29:29 +0000
ROA not before: Mon 01 Jan 2024 06:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58324
IP address blocks: 5.100.144.0/21 maxlen: 21
185.150.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:8b:64:6f:4a:42:ed:e3:54:3d:e9:3d:ba:a6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c568c59d7a83199c3a79ea0e8375b946ed884e2
Validity
Not Before: Jan 1 06:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbc98cfc15479586cd0fc46bc154e238fa057942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:04:4e:a0:11:cc:ca:0f:0c:de:24:62:d9:
ce:a2:43:8d:c8:41:9b:84:6d:57:e6:1c:12:45:ff:
81:c7:20:cd:2a:05:29:77:99:32:6f:d1:26:37:91:
21:68:3e:49:7c:71:ca:b3:21:40:2d:4b:2b:b1:ec:
e8:1e:bf:86:25:33:db:33:a8:63:f9:ff:48:14:81:
3c:9b:84:51:fd:8f:24:f9:5c:1f:b7:b2:78:d2:af:
9c:89:ea:90:11:9c:2f:79:7e:b8:19:0a:ee:d4:6a:
36:2f:b8:bb:92:97:31:0f:a7:43:c2:4d:f4:f4:3c:
d2:0b:4f:71:c8:6e:6f:a6:c5:cc:bc:c0:1d:ac:79:
f7:de:f4:99:73:3d:42:b7:0f:dc:a6:f9:27:d7:4e:
97:67:03:3e:84:3e:a9:5c:da:52:48:ec:90:ff:c9:
b0:68:1f:b3:c2:5e:8f:fd:6c:a5:33:10:53:b7:67:
77:95:5b:aa:0f:f0:3a:5f:89:d4:7c:62:4f:3c:60:
d6:e1:ff:b9:3a:0f:24:a6:a8:25:52:c6:57:54:75:
24:61:67:1e:67:c8:70:63:36:05:6d:2c:8b:75:de:
d7:6f:72:3f:89:bb:d9:eb:3b:f4:db:1a:db:45:ec:
43:11:2f:10:88:87:f1:c6:a0:3c:10:da:12:26:e7:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:C9:8C:FC:15:47:95:86:CD:0F:C4:6B:C1:54:E2:38:FA:05:79:42
X509v3 Authority Key Identifier:
keyid:3C:56:8C:59:D7:A8:31:99:C3:A7:9E:A0:E8:37:5B:94:6E:D8:84:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PFaMWdeoMZnDp56g6DdblG7YhOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/y8mM_BVHlYbND8RrwVTiOPoFeUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6f36c2-d05c-4425-a9e4-5e37e7f3f15d/1/PFaMWdeoMZnDp56g6DdblG7YhOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.100.144.0/21
185.150.172.0/22
Signature Algorithm: sha256WithRSAEncryption
49:62:61:85:c4:e6:ad:5d:7e:3a:96:e7:b3:67:5b:99:02:97:
8f:ff:f1:82:30:79:21:01:3e:ce:b9:38:30:6c:b1:ed:c2:ca:
8b:e3:86:c6:6a:b7:c2:d5:c1:15:ae:41:ac:b4:8c:02:ac:70:
45:7d:9a:0e:9c:5e:eb:e1:88:c4:1f:f4:0c:91:4d:0c:03:ef:
7e:fb:f5:19:6f:ef:67:89:64:bf:a1:25:30:72:b7:4e:62:46:
7c:b9:9a:93:54:4b:97:f3:c2:11:f1:b1:4f:10:16:94:05:5b:
b6:1b:d8:6d:ad:08:8b:84:ce:18:ab:17:16:8a:ee:cc:30:c5:
8d:91:bb:65:83:f3:22:8d:da:42:40:36:e9:5f:4b:c2:ed:66:
52:5a:ad:4d:37:d9:9e:a1:6b:5b:24:de:e0:9a:52:40:6c:6b:
03:32:ac:92:fc:94:dc:a3:08:7d:27:47:fc:c4:e8:9d:3a:fa:
0e:fd:9d:d3:f0:bc:85:0e:df:c8:2d:f1:4d:27:bb:7e:81:ee:
0f:10:90:2f:59:bf:03:75:bb:23:d9:19:91:c5:89:e2:32:c2:
96:4d:c2:15:79:d7:1c:71:cc:b6:53:97:27:d4:e4:0b:4e:08:
8a:ce:fc:ee:36:0c:41:8a:ad:6c:d8:d7:f3:f3:6c:92:4a:80:
02:eb:78:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:41:43 2024 by rpki-client on console-fra.rpki-client.org