Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/YpVQc_50hSJlWLX67owwXq9c0P0.roa
File: YpVQc_50hSJlWLX67owwXq9c0P0.roa (raw, json)
Hash identifier: mddnfa5g3r6HpwtUBS77Gw9Y0mooYDLeIsx+PvpYva8=
Subject key identifier: 62:95:50:73:FE:74:85:22:65:58:B5:FA:EE:8C:30:5E:AF:5C:D0:FD
Certificate issuer: /CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Certificate serial: 018CCA2A66136C2C8740C328C366E0B5FE46
Authority key identifier: 92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/YpVQc_50hSJlWLX67owwXq9c0P0.roa
Signing time: Tue 02 Jan 2024 12:33:45 +0000
ROA not before: Tue 02 Jan 2024 12:33:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207151
IP address blocks: 185.165.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:66:13:6c:2c:87:40:c3:28:c3:66:e0:b5:fe:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92788f4ebb741c0c369a0fd30594cd0101dc7476
Validity
Not Before: Jan 2 12:33:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62955073fe7485226558b5faee8c305eaf5cd0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:8b:c7:b7:13:06:bc:68:d5:d2:99:e6:83:
bd:36:c0:5c:c1:90:12:fa:34:af:3b:ca:c7:9c:a8:
d1:7e:80:ad:4a:87:55:16:a3:0e:05:fb:73:24:21:
0c:5a:e1:9e:88:85:04:7e:1a:7b:1a:fc:b6:6c:f1:
2b:63:f7:13:b1:36:cf:e7:23:b0:96:01:dc:c3:5c:
7e:d2:d3:f7:1f:e6:63:41:2d:04:79:59:22:2e:0f:
65:63:d5:a1:46:61:b7:68:cb:a9:73:59:aa:e2:08:
e4:62:ad:2c:df:b2:ec:11:9a:ac:d1:dc:84:a6:d3:
2f:39:25:f8:db:e4:0f:1f:da:d4:c0:ee:8d:92:b6:
0c:7d:ad:e5:db:a1:ba:e7:75:1d:1d:9c:97:b8:46:
51:94:c3:d9:df:af:97:df:7f:47:df:00:c6:ef:42:
07:79:aa:5e:77:21:ba:d8:56:f7:70:b6:c9:6f:2b:
07:f9:b6:da:43:49:20:9e:a3:4a:c5:e9:5b:62:7b:
4e:ed:2d:01:39:ba:fa:ff:1d:ac:7d:1f:f8:a7:1d:
f9:d7:ab:ab:b1:65:cf:24:d3:70:dc:c1:2f:3d:60:
d0:37:78:20:ff:c2:a0:16:73:a7:1e:2c:30:e6:23:
b7:58:74:8e:f5:36:7a:9d:48:32:59:a2:5b:f7:85:
bb:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:95:50:73:FE:74:85:22:65:58:B5:FA:EE:8C:30:5E:AF:5C:D0:FD
X509v3 Authority Key Identifier:
keyid:92:78:8F:4E:BB:74:1C:0C:36:9A:0F:D3:05:94:CD:01:01:DC:74:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kniPTrt0HAw2mg_TBZTNAQHcdHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/YpVQc_50hSJlWLX67owwXq9c0P0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/kniPTrt0HAw2mg_TBZTNAQHcdHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.64.0/22
Signature Algorithm: sha256WithRSAEncryption
17:8f:ef:c4:19:4c:42:08:c3:96:74:3f:7e:34:c0:a3:f6:f0:
6b:d9:84:3d:d4:cf:21:a3:5b:d1:20:c5:02:bd:c2:8f:dd:64:
84:82:0b:43:0e:1c:11:dc:44:0f:12:9b:33:45:2a:2b:d1:f9:
e8:a7:b6:d6:72:74:80:f7:dd:b4:69:0e:29:97:99:3e:ef:6f:
db:cc:8c:02:9b:b5:6f:b1:56:4d:f9:12:2b:4f:e1:7d:70:9c:
ae:d1:10:43:a9:a5:e0:83:9c:c0:9a:30:f5:14:c2:4a:2f:2d:
4d:b8:2d:29:d5:6b:bb:7c:0c:d9:f2:f5:aa:ec:94:57:9a:b6:
80:c4:b7:ca:ba:12:95:71:2c:cb:c2:a5:a0:79:c0:b6:71:1d:
08:c6:83:07:3c:5b:06:98:34:b3:37:1b:3f:2c:05:b3:ce:8d:
90:0b:83:27:48:62:00:bf:6e:b0:84:be:34:41:c3:99:d0:99:
a8:af:25:52:fa:36:19:11:b8:bc:6b:63:49:39:35:6b:f2:50:
b9:d5:e9:05:c1:49:a4:4f:41:93:1a:dd:dd:b1:a0:52:cc:34:
78:32:b9:a7:f3:a7:91:80:30:3b:42:c9:11:f8:71:a6:39:49:
c2:ee:ec:13:cf:62:e1:02:f3:b5:b8:bb:dd:1e:7f:d5:5b:3a:
06:18:dc:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 16:25:05 2024 by rpki-client on console-ams.rpki-client.org