Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/yHtjWNkg6wy9JN1AOObEAZdGdMk.roa
File: yHtjWNkg6wy9JN1AOObEAZdGdMk.roa (raw, json)
Hash identifier: vjIzLE56whnyvX1oKnrY3P+J9l53LRSAgTrN9J3+xfo=
Subject key identifier: C8:7B:63:58:D9:20:EB:0C:BD:24:DD:40:38:E6:C4:01:97:46:74:C9
Certificate issuer: /CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Certificate serial: 018E21F00D3B8553EF42AF7621D8626CD3DA
Authority key identifier: 57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/yHtjWNkg6wy9JN1AOObEAZdGdMk.roa
Signing time: Sat 09 Mar 2024 06:39:23 +0000
ROA not before: Sat 09 Mar 2024 06:39:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 95.128.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:21:f0:0d:3b:85:53:ef:42:af:76:21:d8:62:6c:d3:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e1d4a3095e9fa8b937d7faa437593727d23932
Validity
Not Before: Mar 9 06:39:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c87b6358d920eb0cbd24dd4038e6c401974674c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a0:71:39:f8:28:34:f3:33:d8:68:37:61:16:
53:e6:38:c0:da:f9:e9:3a:e2:56:27:17:a5:aa:0d:
3d:9f:fb:dc:4b:f1:eb:b3:87:00:dc:8d:2e:3f:39:
a0:1d:1a:4b:f7:8a:d2:cc:9a:56:e3:f5:39:26:53:
f6:c8:60:ed:e6:da:72:af:79:30:04:f8:f0:f3:5b:
27:5a:5a:8a:f8:ef:25:47:8e:4a:9e:8d:6f:3d:c8:
62:ba:16:d5:84:c0:23:c8:09:bd:9e:45:29:70:68:
66:25:b4:ee:f2:4a:ee:4f:4e:ec:e5:d1:36:1b:60:
7d:77:ca:e7:47:2a:8c:15:d8:4d:67:53:d7:be:7a:
be:9e:a9:51:52:b8:98:8c:89:51:e2:2c:22:91:83:
e6:8d:3d:2b:94:fa:d4:3d:b2:d3:01:b0:61:c8:d5:
b9:a9:7f:f0:93:be:93:ac:2c:4c:e5:9f:b5:b9:d2:
27:4d:3c:18:83:2b:74:a9:47:f9:61:37:e7:86:5f:
62:79:0f:24:a7:b6:e7:af:e5:ad:65:8a:5e:fc:68:
18:d7:8b:2d:62:b3:1d:50:eb:fb:24:0d:c2:59:5c:
ed:d7:69:df:31:20:e6:df:00:9e:f2:af:04:72:21:
f4:e3:ed:2a:58:c5:c2:03:8a:53:17:27:a7:7a:65:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:7B:63:58:D9:20:EB:0C:BD:24:DD:40:38:E6:C4:01:97:46:74:C9
X509v3 Authority Key Identifier:
keyid:57:E1:D4:A3:09:5E:9F:A8:B9:37:D7:FA:A4:37:59:37:27:D2:39:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-HUowlen6i5N9f6pDdZNyfSOTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/yHtjWNkg6wy9JN1AOObEAZdGdMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/85626b-cc88-47c2-835e-4d75282ce2eb/1/V-HUowlen6i5N9f6pDdZNyfSOTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.155.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:a6:fb:00:de:d5:07:f3:80:9c:3b:de:5c:f5:4e:cf:18:be:
a3:68:07:47:ee:94:97:06:d9:3a:72:97:17:d9:fd:99:ec:70:
42:4d:53:fb:6b:ab:c4:f8:fb:9f:f8:83:de:41:c8:2d:de:ca:
da:7c:ab:1a:64:91:85:e1:e0:db:ee:bd:09:a9:af:5c:49:55:
58:d8:b7:c0:13:53:2f:c7:30:a9:2a:4b:16:97:d8:59:c5:fa:
02:ef:82:e4:6d:b5:ca:48:c0:40:e0:9c:35:99:83:ed:a8:e6:
a6:b1:aa:21:0a:70:36:ca:59:fa:6b:7f:b5:ea:f8:9e:80:43:
1d:12:c8:39:c6:ae:7c:b9:f4:e4:8f:00:13:48:2d:c9:a3:30:
b4:03:73:75:27:ef:b2:b1:46:83:2c:25:f3:b0:4a:8d:e8:5e:
c7:2b:cb:79:e2:ed:37:e7:f5:71:15:f3:78:58:1d:20:4c:24:
0e:e8:7d:b0:29:8e:ba:b4:68:dc:6f:b6:dc:1a:af:0f:08:8a:
d6:60:52:a6:0a:48:0e:51:fc:0d:31:9b:7a:f5:9d:21:b5:04:
52:67:7b:bc:4f:bb:ba:71:4a:64:d8:d3:04:79:a1:bc:98:1e:
d1:03:eb:50:f8:3d:76:03:9b:39:70:98:bc:95:0f:03:c4:24:
f0:88:f5:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 12:58:11 2024 by rpki-client on console-fra.rpki-client.org