Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/YUVth6yfLvarNah8sQmHoo1cG_w.roa
File: YUVth6yfLvarNah8sQmHoo1cG_w.roa (raw, json)
Hash identifier: IT9BXKrpaf7W42xMn/OI0wCy0O3gPCDqinpgjYb8CzI=
Subject key identifier: 61:45:6D:87:AC:9F:2E:F6:AB:35:A8:7C:B1:09:87:A2:8D:5C:1B:FC
Certificate issuer: /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial: 018CC8DD1333458131C6DB3C9B2A04979CC6
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/YUVth6yfLvarNah8sQmHoo1cG_w.roa
Signing time: Tue 02 Jan 2024 06:29:40 +0000
ROA not before: Tue 02 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60537
IP address blocks: 185.29.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:13:33:45:81:31:c6:db:3c:9b:2a:04:97:9c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
Validity
Not Before: Jan 2 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61456d87ac9f2ef6ab35a87cb10987a28d5c1bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:27:32:aa:55:f4:f6:6c:d8:da:d4:16:49:37:
c8:75:a4:f9:56:56:d8:dd:9d:da:df:13:b9:60:01:
24:b3:ab:6a:84:fa:b4:0b:78:33:95:fe:e0:63:af:
8f:a0:73:63:0a:d3:60:88:ec:80:69:45:12:28:90:
21:a0:86:0d:df:8f:ef:f3:ea:ac:c6:28:1b:d8:c8:
7a:b0:52:1a:c8:e0:ce:1b:8b:a4:95:1d:83:3c:38:
d0:b6:33:ac:59:c3:21:01:78:47:05:38:e5:33:14:
aa:e2:17:09:47:b4:a4:e9:1c:76:b2:c8:7d:da:87:
e9:47:f0:91:1e:74:47:37:5d:67:8a:c4:82:2f:5b:
07:ef:31:c0:78:46:4b:f9:88:40:7e:26:7d:ff:b1:
08:77:7b:a3:79:5f:eb:1b:91:aa:b6:e4:42:39:b4:
d8:31:72:58:2e:a2:0d:3c:7f:7b:6a:af:e7:ec:4b:
0f:4b:64:c4:d1:a3:6b:15:d5:ed:84:a2:79:5c:a3:
ef:3f:d6:6f:a0:11:23:60:3b:e6:04:5e:33:da:90:
7a:79:9d:80:92:b5:05:20:5f:09:7c:f8:01:7b:00:
b2:5b:2c:26:89:68:99:69:93:f9:f9:17:ca:71:1b:
2c:2b:2f:c5:40:29:e2:4a:d0:c4:78:31:0f:47:41:
93:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:45:6D:87:AC:9F:2E:F6:AB:35:A8:7C:B1:09:87:A2:8D:5C:1B:FC
X509v3 Authority Key Identifier:
keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/YUVth6yfLvarNah8sQmHoo1cG_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.29.192.0/22
Signature Algorithm: sha256WithRSAEncryption
53:11:b0:87:81:99:e5:9a:9e:94:64:fc:0c:32:12:e3:8b:5f:
89:28:ee:2e:c2:19:3e:19:45:f2:f7:7b:dc:a1:16:5f:9b:0c:
5a:de:02:79:5f:b9:95:bd:0b:38:2d:3d:4d:a1:57:db:60:68:
95:24:9b:54:63:c9:bd:b9:01:fb:0b:4a:2a:41:8a:14:b5:96:
3c:78:d7:01:a6:7a:7b:fc:77:8b:d9:41:83:e2:a0:91:f6:fe:
ef:e1:2d:d4:a9:09:15:fa:27:6f:bf:99:d4:9f:40:c1:06:8e:
d4:0b:92:16:f5:b1:c4:a1:82:8b:4f:83:4d:fd:62:ed:fe:52:
4b:72:4f:b0:f6:b2:1e:65:75:ca:80:a8:29:35:5a:dd:e9:4a:
ed:64:a3:04:ca:50:4c:f9:7f:ef:b9:59:75:6d:39:84:a3:d1:
03:98:7f:f1:4f:64:b8:13:42:06:92:47:09:a1:ff:5e:40:76:
7e:8d:7d:4c:59:76:67:2f:4d:12:0a:ba:d5:f8:83:47:0b:eb:
b9:7a:0f:c9:fb:28:b4:3c:85:f9:46:65:f7:c8:c9:c1:d1:60:
71:04:30:e0:c4:7a:9b:e8:bb:ea:3f:fc:74:2f:88:c8:eb:a5:
a5:02:d6:5a:8b:d1:18:15:dc:e6:e0:3d:23:22:84:73:61:0c:
ab:08:a7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:01:45 2024 by rpki-client on console-fra.rpki-client.org