Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/ye9q6fBOtBdrJ1biqlaut0364-Q.roa
File: ye9q6fBOtBdrJ1biqlaut0364-Q.roa (raw, json)
Hash identifier: 4YzAhPcVJzz/MQADUtuzGNrCv3yG7g5ZPI7upePcINU=
Subject key identifier: C9:EF:6A:E9:F0:4E:B4:17:6B:27:56:E2:AA:56:AE:B7:4D:FA:E3:E4
Certificate issuer: /CN=85b871d69395610465779323b91b34e69bfcf5b5
Certificate serial: 018EC82AFEB0983AE9A5B610EF2A3F5A4523
Authority key identifier: 85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/ye9q6fBOtBdrJ1biqlaut0364-Q.roa
Signing time: Wed 10 Apr 2024 13:20:44 +0000
ROA not before: Wed 10 Apr 2024 13:20:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206581
IP address blocks: 185.168.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:2a:fe:b0:98:3a:e9:a5:b6:10:ef:2a:3f:5a:45:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85b871d69395610465779323b91b34e69bfcf5b5
Validity
Not Before: Apr 10 13:20:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9ef6ae9f04eb4176b2756e2aa56aeb74dfae3e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:fe:86:b1:16:2c:b3:0d:10:78:14:2d:f1:
13:eb:a7:3e:b2:22:b6:5b:50:11:24:ad:94:e7:3e:
e9:af:fc:b0:ed:70:a7:13:95:3c:00:7b:d3:89:f7:
ad:bc:f0:fe:13:70:18:60:7e:3c:cd:80:58:81:40:
67:b2:52:6c:8d:a2:37:fe:c1:b7:1b:f5:70:6d:91:
c4:ca:e4:30:66:5a:a1:24:ab:82:6d:06:85:6c:8a:
f2:2b:d9:2e:98:1f:5c:18:78:82:d6:0a:5b:f5:5c:
be:a1:a4:ad:e0:27:33:0a:9f:69:04:91:f5:03:99:
55:36:83:b0:bd:47:a0:53:4f:1f:f9:fe:6b:b4:bb:
85:3b:fd:87:80:9e:a4:78:ab:31:af:a8:34:9e:93:
20:7a:f4:f2:72:54:a3:35:af:a8:00:06:85:dc:12:
e9:9c:d3:bb:de:69:4d:c1:20:78:f7:7c:e1:51:4d:
9a:a0:87:e5:e2:f7:8c:32:5a:dd:68:3e:ea:62:af:
41:3d:27:02:4f:de:91:75:e7:2b:46:5d:4d:d6:ef:
89:af:3a:1f:11:27:b0:57:5d:cf:ed:29:7f:d7:08:
74:c5:04:50:45:8c:9c:7c:d2:43:0e:ed:01:ad:c2:
ad:4b:98:cc:25:68:7d:ce:49:62:be:91:99:ea:9e:
d6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:EF:6A:E9:F0:4E:B4:17:6B:27:56:E2:AA:56:AE:B7:4D:FA:E3:E4
X509v3 Authority Key Identifier:
keyid:85:B8:71:D6:93:95:61:04:65:77:93:23:B9:1B:34:E6:9B:FC:F5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hbhx1pOVYQRld5MjuRs05pv89bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/ye9q6fBOtBdrJ1biqlaut0364-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6744ac-9a1c-4013-be00-26a0b8def0c3/1/hbhx1pOVYQRld5MjuRs05pv89bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.168.127.0/24
Signature Algorithm: sha256WithRSAEncryption
61:2a:30:c9:26:30:0e:53:5a:de:88:49:4a:49:c4:e7:ff:e0:
02:2c:e3:3d:48:df:dd:26:96:27:dc:8f:2a:b2:80:18:50:06:
2b:2b:b4:16:a2:56:a9:ed:20:17:2d:41:b4:16:f6:0f:23:1a:
49:37:67:9e:8b:e1:25:b2:ba:79:67:38:c8:56:9d:82:87:4c:
b3:34:8c:1e:25:62:3d:8f:1a:f1:ae:3b:d9:95:44:13:1e:2e:
0e:7f:26:6a:c8:1b:c8:fd:c5:68:70:32:16:0a:c5:c1:cf:34:
bc:61:f0:d3:3a:15:38:00:ce:a2:77:ab:84:ab:60:e4:60:50:
95:e2:25:5a:c9:87:68:fa:f7:cc:e3:cd:05:33:f2:f5:18:96:
4d:4d:b6:f4:f4:f7:3a:5c:08:7a:5b:10:6c:94:b8:12:4a:76:
51:e8:83:2e:01:e1:fb:6a:f7:f1:6a:79:91:7e:dc:2e:00:95:
88:26:f4:47:74:9c:94:ad:34:ff:35:2b:de:c1:4b:37:12:6f:
5c:1a:41:7d:98:01:c1:af:f9:d1:6e:b7:d9:d1:40:5a:a1:63:
d0:6c:9c:bc:83:73:b3:4d:ea:0e:cd:76:c2:13:6a:f2:e4:95:
dc:01:c6:cb:28:d6:e8:07:a5:58:c6:91:c3:e2:4b:9f:52:a5:
78:b0:af:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:51:31 2024 by rpki-client on console-ams.rpki-client.org