Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/YjESUaXjSOKbI1y0AwWn1BbFkjc.roa
File: YjESUaXjSOKbI1y0AwWn1BbFkjc.roa (raw, json)
Hash identifier: jAmbc6Q1Fceud5SqwiN08wSz2QzU4mnpLzz2PP756Lw=
Subject key identifier: 62:31:12:51:A5:E3:48:E2:9B:23:5C:B4:03:05:A7:D4:16:C5:92:37
Certificate issuer: /CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Certificate serial: 018D1C31DD12E6506C757CC8A10A5FA49665
Authority key identifier: FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/YjESUaXjSOKbI1y0AwWn1BbFkjc.roa
Signing time: Thu 18 Jan 2024 10:50:46 +0000
ROA not before: Thu 18 Jan 2024 10:50:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203214
IP address blocks: 78.109.235.0/24 maxlen: 24
78.109.236.0/24 maxlen: 24
78.109.237.0/24 maxlen: 24
78.109.238.0/24 maxlen: 24
185.52.100.0/24 maxlen: 24
185.52.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 00:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:31:dd:12:e6:50:6c:75:7c:c8:a1:0a:5f:a4:96:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb061a39f0a037923113d6b8bb9b5bdab5b2f466
Validity
Not Before: Jan 18 10:50:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62311251a5e348e29b235cb40305a7d416c59237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:24:de:fd:df:de:83:0e:68:a9:4e:f6:6b:b2:
b2:c7:b4:e1:86:33:f0:1a:36:b5:19:bc:6d:69:6a:
71:f9:e0:99:38:bd:31:56:58:ee:b1:8c:07:ed:8d:
bc:8f:5b:f2:ae:a3:b6:21:b3:3d:b8:2b:78:78:2b:
ab:74:87:1c:b2:65:0b:e7:46:84:45:0a:76:77:f0:
f9:fa:1e:d2:79:cf:86:56:95:3e:42:2c:90:ac:ca:
7f:3a:57:92:ee:78:da:52:69:21:78:5b:a8:ba:e9:
88:07:ce:55:30:a9:39:b7:a3:28:9c:68:b9:2f:01:
e6:d6:80:78:94:cc:69:1b:96:10:3c:99:e7:62:14:
a8:93:30:d0:f0:0c:7b:7f:04:c8:e6:54:37:eb:1e:
6a:b6:d7:cf:ed:fc:a1:e1:67:24:6a:8d:77:e0:05:
37:60:4f:86:59:e4:94:53:f6:6e:40:92:7a:e4:7a:
81:03:49:ab:e8:f0:96:53:32:dd:43:1d:0c:87:6e:
0d:b3:ec:8d:69:7b:f7:ed:78:fd:11:00:4f:b3:ab:
40:99:0a:09:b9:f0:64:69:0a:51:e2:cf:8a:b0:0a:
20:77:d8:6e:b5:52:37:8b:d9:f3:f2:04:6b:cd:82:
b1:ce:f0:cf:02:d2:87:96:a1:a2:c7:23:0d:ce:b1:
e4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:31:12:51:A5:E3:48:E2:9B:23:5C:B4:03:05:A7:D4:16:C5:92:37
X509v3 Authority Key Identifier:
keyid:FB:06:1A:39:F0:A0:37:92:31:13:D6:B8:BB:9B:5B:DA:B5:B2:F4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/YjESUaXjSOKbI1y0AwWn1BbFkjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a3294b-d478-4dbd-aae5-fd167ad92a9d/1/1-wYaOfCgN5IxE9a4u5tb2rWy9GY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.109.235.0-78.109.238.255
185.52.100.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:47:76:a3:d1:08:87:31:0b:e2:cf:38:a3:b3:12:9a:b2:b1:
bc:1a:ba:9c:76:3e:c2:af:7e:04:85:64:3e:b7:b5:80:ab:2d:
00:14:fa:12:21:92:a3:87:62:21:64:e1:7d:76:96:a1:64:5a:
c2:d0:98:c4:72:30:2f:47:47:f2:86:c7:e4:7c:ac:3e:3f:17:
0d:59:fe:2e:9e:a3:f1:19:4e:43:a6:ef:2d:50:de:1e:02:60:
49:71:6f:2f:2e:aa:3a:6d:83:d8:06:09:d7:e4:72:54:34:3c:
99:24:0c:17:94:3f:66:1a:b5:b3:50:51:c6:ce:02:ba:05:0b:
03:bc:01:7c:00:42:af:c9:0c:53:31:c4:0f:10:b1:d6:77:de:
33:0f:ef:7e:b0:e8:a2:56:81:89:85:d0:83:da:17:e8:8d:09:
a8:38:64:e8:2c:8f:44:b3:89:16:32:aa:f9:24:0d:91:00:62:
56:2e:1b:1a:f9:33:41:ce:16:1f:5a:1a:cf:3c:7f:95:a3:23:
6e:b3:bf:1a:4d:15:23:48:c7:f0:f5:88:55:18:21:b9:86:d3:
7d:bd:8f:4e:fa:81:07:d0:17:6d:0e:95:3e:70:4f:ae:07:d7:
df:88:c2:b0:75:4d:90:44:07:3d:5c:09:b9:61:b0:5b:42:10:
8e:3d:7c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 10:00:13 2024 by rpki-client on console-ams.rpki-client.org