Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/Yc2at_93Zx-Rb9Z-z-Z-9fodHZw.roa
File: Yc2at_93Zx-Rb9Z-z-Z-9fodHZw.roa (raw, json)
Hash identifier: /S+DjYbf5MT7bcrd5Hza5IKCQyB9FuGS6A8HyOz+Iwo=
Subject key identifier: 61:CD:9A:B7:FF:77:67:1F:91:6F:D6:7E:CF:E6:7E:F5:FA:1D:1D:9C
Certificate issuer: /CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Certificate serial: 018CC5DC121E1C27D765B69F369B6FB00CBC
Authority key identifier: DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/Yc2at_93Zx-Rb9Z-z-Z-9fodHZw.roa
Signing time: Mon 01 Jan 2024 16:29:43 +0000
ROA not before: Mon 01 Jan 2024 16:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52000
IP address blocks: 138.124.184.0/24 maxlen: 24
138.124.183.0/24 maxlen: 24
138.124.180.0/24 maxlen: 32
138.124.187.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:12:1e:1c:27:d7:65:b6:9f:36:9b:6f:b0:0c:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de92a1ac8910cf5c865de5b0231b09d04e1132f3
Validity
Not Before: Jan 1 16:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61cd9ab7ff77671f916fd67ecfe67ef5fa1d1d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1a:00:ec:29:e3:8c:a7:01:6a:29:c5:8f:c5:
d5:81:c2:d5:da:25:88:29:bb:44:df:65:84:0b:41:
72:9e:53:cd:85:ec:fd:ae:99:b1:57:89:f2:5f:8c:
44:f8:9d:a4:73:ff:e1:4b:b1:80:ef:fc:98:02:40:
40:e8:2c:f2:64:d1:76:54:1f:57:15:61:f6:f7:dc:
8c:17:03:7c:1a:cd:b0:77:fe:b0:8f:00:bc:47:04:
aa:de:73:3d:f4:3c:81:a4:77:c2:9c:4f:fb:12:54:
63:a7:25:92:12:2b:34:8a:48:45:a4:88:2f:b2:7a:
73:73:1d:b0:aa:c0:f6:b8:14:85:b5:8d:15:4f:2c:
d3:b7:9d:dc:2e:68:86:bc:b7:8b:0a:60:cc:6e:58:
16:b5:60:37:78:b1:de:27:e3:91:8d:4f:98:c7:53:
b9:f2:2e:f4:3d:9a:0d:d2:a0:f1:6d:e1:ee:82:cd:
a8:e8:ec:9d:a1:fa:56:18:b2:3e:9e:21:f7:81:c4:
a1:eb:eb:8d:3c:f3:52:87:6c:92:15:d0:ab:ef:fe:
92:77:3b:de:20:46:b2:ac:e6:eb:ed:2a:e2:02:c4:
e8:db:d4:55:cf:fe:8b:2d:94:da:39:52:2f:1e:4a:
22:be:4a:88:f3:bf:b7:ab:e4:d4:7a:81:63:6c:0e:
9d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CD:9A:B7:FF:77:67:1F:91:6F:D6:7E:CF:E6:7E:F5:FA:1D:1D:9C
X509v3 Authority Key Identifier:
keyid:DE:92:A1:AC:89:10:CF:5C:86:5D:E5:B0:23:1B:09:D0:4E:11:32:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/Yc2at_93Zx-Rb9Z-z-Z-9fodHZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4377d6-515c-420a-9134-69e337884cc9/1/3pKhrIkQz1yGXeWwIxsJ0E4RMvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.180.0/24
138.124.183.0-138.124.184.255
138.124.187.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:34:f5:20:39:f5:5c:25:df:a8:db:03:ae:53:30:70:2d:be:
d5:5d:03:51:82:e6:53:18:4b:97:c0:ce:a4:80:da:68:a8:67:
ab:e0:16:c6:d7:ef:20:6f:87:1f:87:8c:94:ab:33:99:22:e9:
8d:0c:99:e5:2b:56:c4:40:bf:b5:60:d4:7f:3f:82:cd:07:b7:
9b:a8:c0:af:e2:1a:ad:a7:b7:7a:19:d4:aa:7a:66:c8:0d:ca:
c8:95:98:35:94:28:4b:df:0e:46:36:46:61:a2:92:63:7b:b5:
c1:ec:c4:39:d4:c8:be:08:99:c8:71:43:8c:26:32:bb:11:b5:
bc:f2:69:40:12:e7:0d:bd:03:95:0b:23:91:4d:4d:5e:15:c1:
62:a0:a2:1e:b7:ba:63:b8:ff:ad:3f:d1:31:8c:34:59:db:b1:
bb:7b:66:65:b5:16:bb:0f:53:51:2f:f1:db:9c:1a:03:8a:c4:
33:47:eb:9b:2d:a7:12:ca:c7:71:2f:23:58:a8:f9:6a:d5:c9:
68:c8:2d:18:40:82:3c:0c:22:a4:a7:61:f0:13:f8:74:12:d4:
c5:63:04:9c:77:a3:4d:02:00:70:56:ad:96:45:b8:5d:10:eb:
7a:0e:00:a0:8c:6a:e4:1b:6d:59:09:a4:0b:c1:99:41:51:28:
6a:2e:a7:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:11:23 2024 by rpki-client on console-ams.rpki-client.org