Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/1YjUG6dbDuaJGU-pGPiowxRKSkU.roa
File: 1YjUG6dbDuaJGU-pGPiowxRKSkU.roa (raw, json)
Hash identifier: /IyfliTfh/ApQV5993ktkjhDCyHCwuKF/CTKwxwnuiM=
Subject key identifier: D5:88:D4:1B:A7:5B:0E:E6:89:19:4F:A9:18:F8:A8:C3:14:4A:4A:45
Certificate issuer: /CN=621a130a90cb037e3803fea0bf465aa082fe3498
Certificate serial: 019049E973576A43F1BBB4C73844D7FF72A8
Authority key identifier: 62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/1YjUG6dbDuaJGU-pGPiowxRKSkU.roa
Signing time: Mon 24 Jun 2024 11:02:34 +0000
ROA not before: Mon 24 Jun 2024 11:02:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216149
IP address blocks: 81.30.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:49:e9:73:57:6a:43:f1:bb:b4:c7:38:44:d7:ff:72:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621a130a90cb037e3803fea0bf465aa082fe3498
Validity
Not Before: Jun 24 11:02:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d588d41ba75b0ee689194fa918f8a8c3144a4a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:41:f6:9f:13:88:62:f6:02:de:5c:ed:12:41:
f3:a8:d9:52:fa:40:9e:e2:2d:7f:eb:c5:7d:3c:0c:
8f:b4:5f:75:26:0f:27:96:50:d2:82:db:8b:e0:1e:
8a:0f:23:12:46:88:ff:aa:18:01:79:6a:e1:29:26:
28:02:a6:37:b3:a6:c9:7c:8f:b7:3c:ce:47:5a:f0:
67:e2:f4:e2:d6:1e:87:22:7c:e0:4a:db:de:74:72:
b6:dd:8a:8d:3b:10:9b:de:60:b3:27:d6:19:1c:59:
7b:cc:4a:a8:9f:f5:f8:d8:65:5d:7f:41:5d:6c:9f:
d0:65:27:d1:ae:d6:06:80:cd:a0:10:2e:5b:c2:08:
21:b1:6c:3f:24:3c:be:1a:ff:05:d4:bc:25:81:a8:
62:6e:21:be:55:63:e7:bc:ba:88:7a:a1:45:12:5f:
ba:78:51:6d:88:b0:a8:e1:c1:e7:4d:23:14:bd:a4:
af:bd:1e:81:01:e5:96:6c:f2:67:04:a1:fa:73:81:
c6:27:f1:fa:84:fb:c1:d7:9d:aa:50:97:dc:66:26:
c5:32:6f:a6:72:c7:ae:9a:b7:75:df:89:cd:25:ef:
25:7f:9b:a7:c2:45:07:09:38:37:a0:23:ff:5c:31:
0e:ff:2a:95:20:cf:5a:ac:77:a6:c0:27:57:c5:ff:
dd:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:88:D4:1B:A7:5B:0E:E6:89:19:4F:A9:18:F8:A8:C3:14:4A:4A:45
X509v3 Authority Key Identifier:
keyid:62:1A:13:0A:90:CB:03:7E:38:03:FE:A0:BF:46:5A:A0:82:FE:34:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhoTCpDLA344A_6gv0ZaoIL-NJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/1YjUG6dbDuaJGU-pGPiowxRKSkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/21492f-1663-409d-bfb2-6a0451c49d4d/1/YhoTCpDLA344A_6gv0ZaoIL-NJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.104.0/24
Signature Algorithm: sha256WithRSAEncryption
65:89:0c:6c:1e:90:27:80:26:ab:a6:bf:81:78:c1:39:52:c0:
e8:de:5b:a2:e3:43:83:10:dd:02:99:a2:ff:de:cb:c7:ae:bc:
1f:9e:37:c1:db:93:11:07:f5:0c:f6:87:9f:04:f5:17:89:5b:
8f:c6:f4:50:47:58:54:e9:02:ea:4d:c0:e1:aa:99:38:c1:98:
d5:49:dc:65:57:ef:8f:65:37:ef:82:af:f8:51:56:16:99:b2:
be:75:4b:9d:f9:8b:5f:3a:27:3e:c5:a1:ae:36:f0:a6:5d:3b:
a3:40:84:07:6f:ca:4c:e6:de:34:8e:ec:42:a2:ca:09:f9:c5:
a1:db:65:9b:19:9f:4a:05:36:c5:f1:86:70:1d:cf:7e:d9:78:
03:4d:21:fb:77:14:15:11:da:a8:46:f6:a8:a8:1d:7c:95:5a:
17:ca:d3:37:24:3d:01:aa:59:0c:17:d9:5e:17:6c:70:48:4c:
58:97:81:ea:86:89:cb:f6:bb:51:fc:7f:88:c7:5a:cc:a3:a7:
88:21:94:fa:c9:38:e2:1c:b4:cc:ed:83:31:5a:d0:0c:91:c7:
4a:dc:76:9f:3f:a1:f5:05:a3:ec:20:cd:b3:58:24:18:0c:5b:
f1:ac:88:21:a4:7e:f1:a0:f2:43:eb:74:b4:7e:fe:01:3f:61:
07:b5:7f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:42:16 2024 by rpki-client on console-ams.rpki-client.org