Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/YH4mcL9OHnFlF0hoRp6Q4wW1wfE.roa
File: YH4mcL9OHnFlF0hoRp6Q4wW1wfE.roa (raw, json)
Hash identifier: 1zD4+0LLLlsp3T5F4VdtN0zN+qf+A9C+hIEIRaDoMP4=
Subject key identifier: 60:7E:26:70:BF:4E:1E:71:65:17:48:68:46:9E:90:E3:05:B5:C1:F1
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019007708BC9DA1C9DFBE5AEB8A15D6AC74E
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/YH4mcL9OHnFlF0hoRp6Q4wW1wfE.roa
Signing time: Tue 11 Jun 2024 13:15:34 +0000
ROA not before: Tue 11 Jun 2024 13:15:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15897
IP address blocks: 2.18.4.0/22 maxlen: 22
2.22.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:07:70:8b:c9:da:1c:9d:fb:e5:ae:b8:a1:5d:6a:c7:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jun 11 13:15:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=607e2670bf4e1e7165174868469e90e305b5c1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:7c:03:71:84:dd:d8:ca:a9:28:05:56:dc:
70:53:bc:ac:53:13:f5:dc:ba:4a:0a:26:2a:fb:d7:
21:49:17:43:f5:3d:11:69:32:3b:4b:4f:48:b0:60:
2a:4e:42:e3:c1:ba:d4:97:78:7c:02:25:c7:47:5f:
bd:85:b9:c3:73:e0:94:c5:7c:c1:66:44:06:fe:f1:
f3:b2:bf:5b:18:21:5b:96:1c:eb:20:65:a7:9d:2a:
f6:31:d7:cb:a9:5c:8b:4e:d4:26:f2:be:25:ad:9e:
90:14:ae:19:25:a6:0b:2f:e8:a1:73:4e:94:0d:d2:
e5:0f:60:7c:70:94:2c:d4:c8:b0:42:00:75:80:26:
b2:cb:89:87:90:e9:97:28:26:40:0b:d6:d1:e5:1a:
74:46:f2:53:7e:a9:a8:9a:59:ea:43:63:d0:fd:69:
c2:ee:17:dc:e9:ba:a8:a3:4b:69:19:e8:44:e2:16:
5a:29:d7:3c:90:39:c8:5c:fe:83:b7:5f:1c:a0:b7:
fb:9d:c9:ea:22:06:09:4a:cd:82:db:d5:39:10:78:
cb:53:7d:75:6a:08:f5:8f:01:d5:f2:dc:a1:c1:73:
f6:c7:91:dc:13:6e:82:34:cc:28:51:87:c5:17:fc:
70:62:b0:88:e0:36:8a:96:3b:2b:2d:49:00:5b:a3:
a2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:7E:26:70:BF:4E:1E:71:65:17:48:68:46:9E:90:E3:05:B5:C1:F1
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/YH4mcL9OHnFlF0hoRp6Q4wW1wfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.18.4.0/22
2.22.168.0/22
Signature Algorithm: sha256WithRSAEncryption
11:52:e7:21:7c:4f:23:f5:c9:bd:c0:83:e8:fd:22:09:6c:2c:
3e:9f:96:fa:a5:78:2e:1f:5d:b4:8d:b5:85:f8:a2:21:31:9d:
42:c1:4d:75:8a:9e:ed:cf:6b:68:c9:b0:15:00:b7:2f:e6:33:
fa:33:80:7b:2c:9c:9e:4e:66:7b:cf:ca:2a:bf:25:5e:75:86:
2e:1d:b9:43:10:18:3e:7e:5f:5c:1f:0d:67:a3:d6:1a:5d:b5:
f2:6a:90:34:c2:73:23:b7:96:26:04:e2:01:32:68:43:4c:65:
8f:85:04:bc:a3:70:d7:2d:ae:dd:c3:49:e9:98:94:f5:a0:21:
4d:38:29:95:c5:79:41:93:88:62:b2:ab:f4:9a:86:3b:51:a6:
80:60:9f:c6:e2:7a:ef:f0:bc:4b:04:6f:a8:a2:17:3f:e7:a0:
15:da:07:32:b0:36:94:ba:d7:45:8e:a9:42:c7:8a:50:b0:44:
bb:a5:36:d6:88:b3:9c:1a:74:bb:99:11:e3:12:bf:69:26:0a:
21:6d:b2:ff:b2:ed:20:63:88:e7:58:2f:cb:15:80:98:bf:25:
55:43:4c:57:ef:a0:dd:d8:13:52:93:30:a9:78:93:c4:2b:44:
38:72:58:44:03:28:7a:23:b8:27:ff:58:c7:ce:4b:39:d8:e8:
92:ae:76:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 07:00:36 2024 by rpki-client on console-fra.rpki-client.org