Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/yjnUJtyU_clRWAbrY3pAkPk7lhs.roa
File: yjnUJtyU_clRWAbrY3pAkPk7lhs.roa (raw, json)
Hash identifier: fWGcWyx2b/65zC+DhNbIww7B3eHkso2c/1hz9DHXzGo=
Subject key identifier: CA:39:D4:26:DC:94:FD:C9:51:58:06:EB:63:7A:40:90:F9:3B:96:1B
Certificate issuer: /CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Certificate serial: 018CC9BC48F1DECE8BC9821E5A3983F6AE15
Authority key identifier: C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/yjnUJtyU_clRWAbrY3pAkPk7lhs.roa
Signing time: Tue 02 Jan 2024 10:33:28 +0000
ROA not before: Tue 02 Jan 2024 10:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39371
IP address blocks: 45.129.60.0/22 maxlen: 24
185.99.204.0/22 maxlen: 24
2a0e:44c0::/29 maxlen: 29
2a06:1480::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:48:f1:de:ce:8b:c9:82:1e:5a:39:83:f6:ae:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66dc60d16dfe1649d86c1693e17858c2306387f
Validity
Not Before: Jan 2 10:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca39d426dc94fdc9515806eb637a4090f93b961b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f6:e5:26:51:8a:b8:57:ac:0a:a3:e3:a8:a8:
c1:c4:18:54:d5:d0:20:cc:93:52:49:88:9b:ac:c8:
96:20:1f:9d:cf:3e:70:42:d1:3b:78:67:30:89:d2:
d6:98:69:96:a3:76:84:ca:0a:b9:5a:c2:02:5a:17:
48:bc:00:1a:6e:49:e6:92:1d:ca:a6:9f:27:9a:e6:
96:a1:b4:9d:89:09:c0:1a:e3:73:6d:7d:82:02:78:
e0:82:dc:ed:aa:2d:9a:8c:1e:7f:5e:c3:d1:47:83:
c7:a4:86:e9:55:89:d3:ca:40:11:2a:e7:29:0f:c6:
b0:c0:0a:f3:f5:bb:bc:ff:29:d3:d3:36:3a:f4:1f:
ce:a8:3b:df:22:5e:28:66:ee:52:2a:da:16:86:f4:
eb:26:c3:5f:8f:68:e7:bf:95:57:b1:67:65:af:57:
d1:e3:12:d5:98:64:06:f5:57:19:0f:4e:02:ee:91:
07:45:e9:4c:a8:00:1d:45:4e:6f:58:5b:c1:89:64:
4d:7c:58:c0:aa:a6:c2:80:69:1e:87:9a:8f:7e:02:
aa:45:d1:aa:4e:a4:cf:c1:e4:a7:f5:a8:c9:c7:23:
6b:bf:1e:6a:f8:d2:80:b1:94:c9:29:1c:8c:db:1c:
a2:37:eb:c6:5d:49:cd:6d:22:06:2e:1d:bb:f1:f9:
54:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:39:D4:26:DC:94:FD:C9:51:58:06:EB:63:7A:40:90:F9:3B:96:1B
X509v3 Authority Key Identifier:
keyid:C6:6D:C6:0D:16:DF:E1:64:9D:86:C1:69:3E:17:85:8C:23:06:38:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm3GDRbf4WSdhsFpPheFjCMGOH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/yjnUJtyU_clRWAbrY3pAkPk7lhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f0e161-a43c-4d31-b65d-d4fed5085392/1/xm3GDRbf4WSdhsFpPheFjCMGOH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.60.0/22
185.99.204.0/22
IPv6:
2a06:1480::/29
2a0e:44c0::/29
Signature Algorithm: sha256WithRSAEncryption
3b:b7:e1:5a:50:44:6e:67:94:4d:20:f4:fb:b9:2e:ae:2d:db:
32:4d:00:56:73:0f:20:7b:b3:73:e4:15:d7:8e:73:8a:32:f0:
7e:8a:d0:72:bc:f9:bf:14:dd:9f:a3:29:ad:fa:4a:fd:dd:69:
82:da:e9:fa:2c:11:3f:3e:21:e7:49:5e:4c:95:de:2a:b1:8f:
93:84:0c:10:e8:79:9b:04:e9:ec:5c:3e:1c:b0:9d:1d:3c:71:
ef:3a:30:76:4f:65:ef:aa:66:6a:b4:89:3c:96:73:11:47:e7:
e5:69:d4:31:f4:61:8d:a1:6d:f3:58:fd:7f:2e:f3:dd:f8:f5:
ad:5d:18:df:c3:fe:c8:ee:ae:b3:7e:72:40:a7:3a:bb:8a:78:
7f:dd:2f:a0:91:7d:a4:45:82:38:0d:43:32:7a:63:3f:20:04:
3b:57:ce:18:9d:91:18:d8:36:ba:ca:8f:af:d1:ae:ea:49:14:
b9:06:f6:ea:49:d2:74:74:d0:a9:30:a0:db:cf:1b:1d:36:4d:
65:21:7d:0c:56:6e:eb:35:9a:f3:41:4b:c8:23:71:2c:8b:cf:
d0:d5:bf:65:fc:71:07:ed:69:84:cc:37:d8:90:92:17:c1:55:
94:0b:e2:9b:aa:53:8c:c5:6a:b7:77:93:a0:ed:de:a8:75:e8:
f2:5c:0e:89
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYzJvEjx3s6LyYIeWjmD9q4VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NmRjNjBkMTZkZmUxNjQ5ZDg2YzE2OTNlMTc4NThjMjMw
NjM4N2YwHhcNMjQwMTAyMTAzMzI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTM5ZDQyNmRjOTRmZGM5NTE1ODA2ZWI2MzdhNDA5MGY5M2I5NjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPblJlGKuFesCqPjqKjBxBhU1dAg
zJNSSYibrMiWIB+dzz5wQtE7eGcwidLWmGmWo3aEygq5WsICWhdIvAAabknmkh3K
pp8nmuaWobSdiQnAGuNzbX2CAnjggtztqi2ajB5/XsPRR4PHpIbpVYnTykARKucp
D8awwArz9bu8/ynT0zY69B/OqDvfIl4oZu5SKtoWhvTrJsNfj2jnv5VXsWdlr1fR
4xLVmGQG9VcZD04C7pEHRelMqAAdRU5vWFvBiWRNfFjAqqbCgGkeh5qPfgKqRdGq
TqTPweSn9ajJxyNrvx5q+NKAsZTJKRyM2xyiN+vGXUnNbSIGLh278flUuwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMo51CbclP3JUVgG62N6QJD5O5YbMB8GA1UdIwQY
MBaAFMZtxg0W3+FknYbBaT4XhYwjBjh/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQt
ZDRmZWQ1MDg1MzkyLzEveWpuVUp0eVVfY2xSV0FiclkzcEFrUGs3bGhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mMGUxNjEtYTQzYy00ZDMxLWI2NWQtZDRmZWQ1MDg1Mzky
LzEveG0zR0RSYmY0V1NkaHNGcFBoZUZqQ01HT0g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCLYE8AwQC
uWPMMBQEAgACMA4DBQMqBhSAAwUDKg5EwDANBgkqhkiG9w0BAQsFAAOCAQEAO7fh
WlBEbmeUTSD0+7kuri3bMk0AVnMPIHuzc+QV145zijLwforQcrz5vxTdn6MprfpK
/d1pgtrp+iwRPz4h50leTJXeKrGPk4QMEOh5mwTp7Fw+HLCdHTxx7zowdk9l76pm
arSJPJZzEUfn5WnUMfRhjaFt81j9fy7z3fj1rV0Y38P+yO6us35yQKc6u4p4f90v
oJF9pEWCOA1DMnpjPyAEO1fOGJ2RGNg2usqPr9Gu6kkUuQb26knSdHTQqTCg288b
HTZNZSF9DFZu6zWa80FLyCNxLIvP0NW/ZfxxB+1phMw32JCSF8FVlAvim6pTjMVq
t3eToO3eqHXo8lwOiQ==
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:42:17 2024 by rpki-client on console-ams.rpki-client.org