Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/YeixJiah86UwNcJGpVHd5dKO7rU.roa
File: YeixJiah86UwNcJGpVHd5dKO7rU.roa (raw, json)
Hash identifier: pC7OVeo6vz+QpolFmfNfY2wPVRTuL6wPiVQi6XFtZsA=
Subject key identifier: 61:E8:B1:26:26:A1:F3:A5:30:35:C2:46:A5:51:DD:E5:D2:8E:EE:B5
Certificate issuer: /CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c
Certificate serial: 018CC5DCF61DF0732468DBA44AD5A195F3E1
Authority key identifier: 55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/YeixJiah86UwNcJGpVHd5dKO7rU.roa
Signing time: Mon 01 Jan 2024 16:30:41 +0000
ROA not before: Mon 01 Jan 2024 16:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205891
IP address blocks: 185.55.212.0/22 maxlen: 22
5.182.68.0/22 maxlen: 22
2a02:4e20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 24 Sep 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:f6:1d:f0:73:24:68:db:a4:4a:d5:a1:95:f3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e30ba0ecc6e69189463561d4ea54c23d138f3c
Validity
Not Before: Jan 1 16:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61e8b12626a1f3a53035c246a551dde5d28eeeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c9:ca:3d:30:89:22:4b:2a:d8:65:93:46:0c:
df:da:73:0c:b8:3a:07:f6:74:21:33:dc:c7:c3:45:
77:5d:c7:00:9a:43:fe:91:53:6a:b8:3f:61:95:20:
74:26:74:70:bf:0f:a6:4c:7b:49:6d:18:9d:d9:04:
9f:63:4d:58:29:be:6f:d9:14:f8:2b:2e:92:f6:2b:
04:43:73:29:93:84:bd:24:0a:fc:09:ec:ae:97:90:
ad:3f:b4:f6:53:49:21:0c:09:9c:a5:c4:e6:44:ba:
3d:c8:61:9f:a9:5d:69:f1:9a:2c:c4:e2:59:40:e3:
30:0c:ce:09:76:34:af:90:1b:bf:7d:bf:aa:65:8f:
d4:ce:5c:d3:bd:4d:5b:35:ef:2e:4d:9b:00:17:76:
c0:d4:35:fd:17:1a:f1:94:07:ab:c4:af:32:ec:1d:
31:a2:46:24:e3:f0:42:fc:3f:02:23:56:29:56:85:
21:3c:9a:2f:aa:6a:30:0f:0e:af:4b:d5:c3:b5:f2:
d5:2c:f9:28:b1:1c:94:56:30:fa:9d:cd:82:22:13:
75:6b:c0:cc:03:93:eb:3f:66:46:5c:58:bd:b3:6c:
35:f4:b9:09:87:6a:15:a5:d1:91:01:5f:4d:71:a7:
42:77:39:e2:8b:bf:61:d1:2f:c8:f6:79:a7:77:55:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E8:B1:26:26:A1:F3:A5:30:35:C2:46:A5:51:DD:E5:D2:8E:EE:B5
X509v3 Authority Key Identifier:
keyid:55:E3:0B:A0:EC:C6:E6:91:89:46:35:61:D4:EA:54:C2:3D:13:8F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/YeixJiah86UwNcJGpVHd5dKO7rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c0b53a-eeec-4038-9238-f81ac56cc3dc/1/VeMLoOzG5pGJRjVh1OpUwj0Tjzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.68.0/22
185.55.212.0/22
IPv6:
2a02:4e20::/32
Signature Algorithm: sha256WithRSAEncryption
bc:07:2f:5b:4d:a2:84:ca:37:d8:79:8f:3a:7f:8e:14:5a:f5:
eb:57:c4:1c:a2:82:d1:37:9b:dc:99:39:52:9d:f8:58:7b:30:
be:3c:f8:ec:8f:a8:e7:cc:29:92:21:74:de:12:99:8b:87:e6:
0a:1a:47:80:ea:ab:5d:86:54:7d:01:a8:eb:c6:8b:66:72:14:
c1:1d:86:e5:bb:b8:88:a5:0c:8b:f9:a2:2c:6a:6a:c5:65:8e:
ac:23:ee:bb:f3:b3:04:89:6a:22:ee:61:db:f3:50:e5:e4:20:
88:f7:e6:2f:83:bf:89:78:2c:b2:bc:73:55:c2:30:82:95:03:
6c:5d:ae:52:37:f9:53:0f:cc:59:8c:5f:ca:97:a3:06:dc:dc:
b9:8d:3e:91:b6:fb:20:62:cc:03:40:7f:aa:86:e9:ec:3a:0b:
58:0d:43:25:ac:af:e4:d3:cf:1c:58:bc:fc:7b:bd:ac:c7:7b:
a4:01:86:dc:5f:bc:ea:fc:ac:50:41:f2:91:a7:92:78:da:6a:
0f:b2:0c:3d:3b:9b:97:c1:7d:ae:b3:e4:4c:93:b5:08:68:62:
5b:70:a1:96:ec:dd:70:ce:02:f5:d8:92:5c:72:41:b9:d8:2b:
a6:d5:d7:11:bc:00:1e:a0:b6:39:02:11:56:f4:b2:90:07:86:
21:f5:4b:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 23 23:24:39 2024 by rpki-client on console-ams.rpki-client.org