Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/YO65rR_apYanUB8yGHHqH036gIM.roa
File: YO65rR_apYanUB8yGHHqH036gIM.roa (raw, json)
Hash identifier: +yyrSzFmZDJp59u5XSxDA15a6wRJMFUQjaQsbnK/uFY=
Subject key identifier: 60:EE:B9:AD:1F:DA:A5:86:A7:50:1F:32:18:71:EA:1F:4D:FA:80:83
Certificate issuer: /CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Certificate serial: 018CC56EC8A3C7CA59F3AA72F93D69E200F1
Authority key identifier: 57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/YO65rR_apYanUB8yGHHqH036gIM.roa
Signing time: Mon 01 Jan 2024 14:30:21 +0000
ROA not before: Mon 01 Jan 2024 14:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39700
IP address blocks: 185.42.72.0/22 maxlen: 24
2a01:5be0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 23:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:c8:a3:c7:ca:59:f3:aa:72:f9:3d:69:e2:00:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Validity
Not Before: Jan 1 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60eeb9ad1fdaa586a7501f321871ea1f4dfa8083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d7:e4:06:4b:ba:91:ec:80:c4:1d:b8:81:19:
fd:fe:5f:9b:56:40:88:03:0f:ed:c9:22:aa:eb:ad:
51:00:1a:78:9f:23:81:20:88:4d:90:78:f3:1c:4f:
ca:56:94:79:a3:37:b2:5f:e3:59:8f:e2:b6:fb:a2:
38:5e:e6:3a:57:b3:57:c5:52:f9:c3:70:26:da:2c:
7f:c3:c3:8f:29:ec:0e:4a:15:42:26:fc:1f:47:b6:
4b:59:01:7f:2e:77:08:e7:90:23:57:cc:8d:e9:c6:
7a:2d:9e:db:21:29:00:ce:d7:fd:c7:2f:89:d6:b7:
ff:37:b0:60:3d:37:48:40:16:bb:24:e1:e7:43:82:
e8:e1:cf:8a:21:a8:47:6a:c3:cd:86:ce:46:00:22:
40:07:37:42:42:0f:34:1e:b8:11:b0:c5:ac:19:57:
ee:e2:dd:fc:ee:81:02:31:fb:fd:f5:f0:29:bc:4b:
38:b0:23:69:c2:2c:43:51:ad:76:47:00:78:39:19:
b6:97:70:84:87:36:2c:63:b3:27:94:0e:22:6c:4f:
4d:4e:0b:bd:5e:6b:27:17:8b:93:97:07:08:40:03:
d2:da:d5:7f:10:f9:6b:33:e4:fe:58:aa:64:e0:e2:
59:1b:0c:54:75:02:87:31:23:3b:23:47:e7:37:9b:
8b:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EE:B9:AD:1F:DA:A5:86:A7:50:1F:32:18:71:EA:1F:4D:FA:80:83
X509v3 Authority Key Identifier:
keyid:57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/YO65rR_apYanUB8yGHHqH036gIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.72.0/22
IPv6:
2a01:5be0::/32
Signature Algorithm: sha256WithRSAEncryption
c9:e6:78:a5:ff:d6:45:88:0f:02:dd:a4:98:c3:16:c0:29:0d:
86:0d:d4:7f:dd:2d:e1:4b:11:42:a4:0f:df:0a:33:b8:9c:4c:
47:90:75:6f:4c:81:2e:1b:f6:bc:0f:15:19:32:07:f3:d5:76:
f6:74:eb:5c:28:3a:c4:da:50:12:f6:83:54:2d:e6:c4:5b:3e:
c5:b0:b9:ab:17:f4:42:ad:62:ff:bf:a7:55:6f:2e:aa:6f:89:
8a:a6:da:56:6d:03:41:2b:67:d5:c6:73:13:e1:4b:f5:5d:bf:
33:7f:c4:9a:df:7e:86:b2:55:85:5b:31:ba:1e:40:d6:eb:6f:
45:9e:e7:3b:7d:6a:b2:4e:10:4f:ba:b8:83:23:ad:c5:fa:17:
15:29:73:59:b7:1b:13:30:1b:89:ce:94:4d:5c:48:be:f7:39:
54:fc:78:de:03:51:76:c4:04:7d:8f:b2:d1:4b:d9:3f:b0:92:
8e:d0:cc:b0:fc:ec:9f:17:16:e3:38:69:b0:89:dd:53:d0:dd:
eb:83:ef:44:dd:bf:b4:05:50:cd:0e:19:42:92:f1:d7:52:61:
8f:a2:8d:ff:83:c1:70:5f:65:2b:47:76:05:66:fe:ad:e0:6a:
97:b3:eb:a2:88:19:26:cd:a6:ca:83:e1:b3:da:8a:dc:f4:94:
4c:08:d7:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 08:39:42 2024 by rpki-client on console-ams.rpki-client.org