Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/YGussiopGkDmMfehNPQTSfEkn4A.roa
File: YGussiopGkDmMfehNPQTSfEkn4A.roa (raw, json)
Hash identifier: m3dCfDE/HvnuvnMw6ehcZ870MsXguxpm+D6PDieSAwU=
Subject key identifier: 60:6B:AC:B2:2A:29:1A:40:E6:31:F7:A1:34:F4:13:49:F1:24:9F:80
Certificate issuer: /CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Certificate serial: 018CC7271C10AD0A4B881DA70CC5D42B5A53
Authority key identifier: DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/YGussiopGkDmMfehNPQTSfEkn4A.roa
Signing time: Mon 01 Jan 2024 22:31:18 +0000
ROA not before: Mon 01 Jan 2024 22:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49964
IP address blocks: 185.99.48.0/24 maxlen: 24
193.105.133.0/24 maxlen: 24
193.138.101.0/24 maxlen: 24
109.69.218.0/24 maxlen: 24
128.127.180.0/24 maxlen: 24
185.192.44.0/24 maxlen: 24
185.192.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 06:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:1c:10:ad:0a:4b:88:1d:a7:0c:c5:d4:2b:5a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de456cdb4d140345c3dcaebfc7634d4e7cdcb913
Validity
Not Before: Jan 1 22:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=606bacb22a291a40e631f7a134f41349f1249f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6e:ce:c0:60:5f:d3:e9:74:5b:f6:9c:2c:29:
70:3b:cf:4e:3d:91:32:21:db:a4:21:bc:40:75:c2:
d4:a9:86:38:5c:b6:0e:79:f1:20:ed:75:a9:ad:ac:
30:b4:ee:06:87:24:b9:b5:de:f3:17:3f:3e:86:04:
ea:41:30:bf:3b:8f:3d:61:ea:d6:3a:2c:76:3e:df:
67:f4:cf:e3:a2:21:d9:ea:03:87:83:ee:bd:84:a4:
85:58:bf:ef:7f:6c:b2:5c:6d:e2:f0:14:f4:77:af:
05:db:35:5b:c8:ce:91:93:89:7a:35:c3:5b:89:bc:
2d:78:5f:a8:f1:c4:0b:24:1c:87:84:09:42:5b:fc:
1b:d1:29:b1:61:b4:0b:b3:d7:7b:21:2e:d1:bc:31:
9e:24:50:f2:3e:1c:80:73:c6:d4:eb:16:49:95:31:
cf:1a:f8:bb:89:c7:60:a4:17:74:3e:55:1e:44:1a:
e0:44:13:3d:b4:86:2d:17:f4:13:8c:23:95:ba:05:
45:2c:ae:8d:fa:50:13:37:4c:62:23:68:0f:77:89:
f3:0d:81:bb:d4:3f:75:e8:53:79:48:88:ac:8f:77:
d6:c3:72:ab:78:52:cc:96:0b:6c:c7:28:b2:a5:e1:
51:41:59:77:ea:95:f8:33:e1:36:a6:27:2e:38:98:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:6B:AC:B2:2A:29:1A:40:E6:31:F7:A1:34:F4:13:49:F1:24:9F:80
X509v3 Authority Key Identifier:
keyid:DE:45:6C:DB:4D:14:03:45:C3:DC:AE:BF:C7:63:4D:4E:7C:DC:B9:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3kVs200UA0XD3K6_x2NNTnzcuRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/YGussiopGkDmMfehNPQTSfEkn4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/20cb33-e2bf-46aa-abfa-928e7bc69570/1/3kVs200UA0XD3K6_x2NNTnzcuRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.218.0/24
128.127.180.0/24
185.99.48.0/24
185.192.44.0/23
193.105.133.0/24
193.138.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:e9:b8:74:9f:ba:c7:2d:00:8b:2b:92:83:f4:50:4e:6d:7a:
e5:bf:92:eb:38:12:2a:b6:cc:18:75:0a:e0:0d:5c:65:b3:b0:
48:99:15:f3:c3:7e:c1:5b:40:d6:7f:1b:66:89:fd:4a:c1:5b:
47:b3:6c:b5:ef:ca:73:7d:92:2f:69:41:c2:66:62:df:65:3b:
4c:77:65:d3:e1:ef:50:fc:2a:ec:8d:26:61:37:ae:03:c2:2b:
a7:83:e1:32:fb:1f:f4:b5:8a:b5:f4:91:59:a4:6f:b7:11:b0:
a0:f7:ce:27:69:d7:38:71:d9:87:70:5a:e1:37:14:51:64:31:
68:fe:73:de:d7:68:72:b3:44:92:5d:d7:89:76:f7:13:de:7e:
b6:2f:30:e9:5d:f7:92:0b:3e:7d:82:4f:dd:16:fd:85:a6:b6:
25:25:72:21:db:20:57:7c:35:36:eb:28:b0:26:39:76:98:5d:
b6:6e:24:d6:46:e6:4c:20:56:f3:a0:7a:e9:ee:7c:ba:1c:e7:
29:b8:26:18:20:a3:d2:dd:fb:85:69:73:6b:a3:8c:3d:33:f3:
bb:18:73:94:de:e9:3a:40:fb:30:79:2f:56:25:95:43:a6:24:
1a:04:0a:e7:c9:c4:08:a5:dc:df:f9:9a:5a:d0:32:11:00:6a:
b9:98:fa:1d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAYzHJxwQrQpLiB2nDMXUK1pTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlNDU2Y2RiNGQxNDAzNDVjM2RjYWViZmM3NjM0ZDRlN2Nk
Y2I5MTMwHhcNMjQwMTAxMjIzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDZiYWNiMjJhMjkxYTQwZTYzMWY3YTEzNGY0MTM0OWYxMjQ5ZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlm7OwGBf0+l0W/acLClwO89OPZEy
IdukIbxAdcLUqYY4XLYOefEg7XWprawwtO4GhyS5td7zFz8+hgTqQTC/O489YerW
Oix2Pt9n9M/joiHZ6gOHg+69hKSFWL/vf2yyXG3i8BT0d68F2zVbyM6Rk4l6NcNb
ibwteF+o8cQLJByHhAlCW/wb0SmxYbQLs9d7IS7RvDGeJFDyPhyAc8bU6xZJlTHP
Gvi7icdgpBd0PlUeRBrgRBM9tIYtF/QTjCOVugVFLK6N+lATN0xiI2gPd4nzDYG7
1D916FN5SIisj3fWw3KreFLMlgtsxyiypeFRQVl36pX4M+E2picuOJiPjQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFGBrrLIqKRpA5jH3oTT0E0nxJJ+AMB8GA1UdIwQY
MBaAFN5FbNtNFANFw9yuv8djTU583LkTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEt
OTI4ZTdiYzY5NTcwLzEvWUd1c3Npb3BHa0RtTWZlaE5QUVRTZkVrbjRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8yMGNiMzMtZTJiZi00NmFhLWFiZmEtOTI4ZTdiYzY5NTcw
LzEvM2tWczIwMFVBMFhEM0s2X3gyTk5UbnpjdVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAbUXaAwQA
gH+0AwQAuWMwAwQBucAsAwQAwWmFAwQAwYplMA0GCSqGSIb3DQEBCwUAA4IBAQBr
6bh0n7rHLQCLK5KD9FBObXrlv5LrOBIqtswYdQrgDVxls7BImRXzw37BW0DWfxtm
if1KwVtHs2y178pzfZIvaUHCZmLfZTtMd2XT4e9Q/CrsjSZhN64Dwiung+Ey+x/0
tYq19JFZpG+3EbCg984nadc4cdmHcFrhNxRRZDFo/nPe12hys0SSXdeJdvcT3n62
LzDpXfeSCz59gk/dFv2FprYlJXIh2yBXfDU26yiwJjl2mF22biTWRuZMIFbzoHrp
7ny6HOcpuCYYIKPS3fuFaXNro4w9M/O7GHOU3uk6QPsweS9WJZVDpiQaBArnycQI
pdzf+Zpa0DIRAGq5mPod
-----END CERTIFICATE-----
Generated at Sun Jun 23 14:47:05 2024 by rpki-client on console-ams.rpki-client.org