Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YwQ5Vocw27XNW39iWRRIDGFUmoc.roa
File: YwQ5Vocw27XNW39iWRRIDGFUmoc.roa (raw, json)
Hash identifier: LE4lFPy0GmiqRiUSPNFkTUYGeICb1BQH1puUSyPvYq0=
Subject key identifier: 63:04:39:56:87:30:DB:B5:CD:5B:7F:62:59:14:48:0C:61:54:9A:87
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 01906410763E9865566FEB583DB733741D18
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YwQ5Vocw27XNW39iWRRIDGFUmoc.roa
Signing time: Sat 29 Jun 2024 12:55:18 +0000
ROA not before: Sat 29 Jun 2024 12:55:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 84.55.19.0/24 maxlen: 24
84.55.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:64:10:76:3e:98:65:56:6f:eb:58:3d:b7:33:74:1d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Jun 29 12:55:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=630439568730dbb5cd5b7f625914480c61549a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:d6:d9:41:ad:ab:67:f1:2f:6a:b5:7e:9f:
37:c4:d9:5f:ea:f2:a1:ad:3e:b7:81:f2:c3:4f:00:
b6:a0:fe:10:32:a4:c0:05:32:5e:e0:89:89:f4:5e:
0d:8f:fc:28:68:bd:f8:3a:9c:e9:0e:81:2a:ad:fe:
3e:43:cb:a3:15:bd:80:0b:63:a5:7c:ef:eb:4d:7a:
9e:65:a4:c8:d7:50:6e:a0:1b:41:4a:e9:34:23:e5:
74:79:03:fb:6e:94:6e:0c:19:70:d2:67:7f:9a:32:
21:f2:43:2d:4d:d2:11:dc:b1:c2:68:2a:e1:e5:2e:
97:c3:ac:fd:b0:5b:c4:8e:ed:84:61:ec:05:40:df:
41:f3:5f:5b:77:74:52:55:4b:1a:92:4a:24:e4:04:
34:2a:ce:7c:aa:36:11:df:53:37:61:36:e3:cc:ee:
c2:b0:14:da:4e:25:a1:20:7c:ac:b9:b0:54:c6:b6:
ef:82:5d:f2:87:a2:f4:03:26:40:e3:e8:90:6a:45:
40:ef:38:6d:b2:25:58:4b:dc:51:33:b9:30:70:65:
f4:ef:84:a1:af:2f:3e:0a:4f:5f:59:71:d3:9a:96:
24:8c:1e:ab:82:f8:ed:93:ae:16:7d:eb:5e:7e:80:
55:86:91:29:a1:4f:c4:14:be:02:b5:9d:6c:3b:35:
ec:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:04:39:56:87:30:DB:B5:CD:5B:7F:62:59:14:48:0C:61:54:9A:87
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YwQ5Vocw27XNW39iWRRIDGFUmoc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.55.19.0/24
84.55.23.0/24
Signature Algorithm: sha256WithRSAEncryption
29:58:d7:ab:fa:52:f3:7f:bf:0d:e9:ae:9f:11:fe:8c:be:93:
26:62:96:45:79:86:b1:d6:ed:aa:0b:ad:53:cd:3c:b6:d4:41:
fe:67:0d:85:9d:76:8f:07:f1:cc:3c:11:a3:f6:7d:b7:d9:39:
25:f7:5c:8f:c9:93:c1:cb:0f:e2:3d:68:68:16:1a:a4:08:60:
0a:3d:ea:c6:69:a4:62:0e:13:14:2b:9b:11:a0:5d:c7:1a:5c:
f3:7d:71:3e:49:58:61:95:69:48:d5:bc:23:2d:f5:3f:aa:1d:
4e:54:19:b2:8d:c3:2c:7d:34:c7:a7:d7:9d:8b:31:e3:a7:dc:
f1:32:dc:00:60:99:dc:ff:e3:7f:6b:ae:c8:df:02:f8:c7:c4:
b7:38:83:6c:bc:e9:c8:38:36:df:74:a3:8c:68:6f:af:06:4d:
4b:99:1b:71:7d:90:ac:1f:65:0f:ec:92:ba:f0:6c:bf:57:89:
5b:b5:a6:c3:92:08:76:a4:e0:c8:a7:7c:f3:0a:aa:4d:3a:42:
e5:9e:28:7a:70:5c:57:ab:5e:a9:6f:ab:08:4c:56:a2:ed:56:
c5:c6:0b:68:36:8b:85:8c:ab:f2:e6:bd:e4:2b:29:6e:e2:c8:
45:8c:5d:6b:5a:d6:fb:69:3c:bc:e7:fb:52:0c:1b:a6:b3:36:
d8:0f:4a:ad
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZBkEHY+mGVWb+tYPbczdB0YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwNjYxNzU4Y2UzMzA2MjI0NzBhMzlhZThkNmVmNGEyMDQ0
ZjgzYzQwHhcNMjQwNjI5MTI1NTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzA0Mzk1Njg3MzBkYmI1Y2Q1YjdmNjI1OTE0NDgwYzYxNTQ5YTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb/W2UGtq2fxL2q1fp83xNlf6vKh
rT63gfLDTwC2oP4QMqTABTJe4ImJ9F4Nj/woaL34OpzpDoEqrf4+Q8ujFb2AC2Ol
fO/rTXqeZaTI11BuoBtBSuk0I+V0eQP7bpRuDBlw0md/mjIh8kMtTdIR3LHCaCrh
5S6Xw6z9sFvEju2EYewFQN9B819bd3RSVUsakkok5AQ0Ks58qjYR31M3YTbjzO7C
sBTaTiWhIHysubBUxrbvgl3yh6L0AyZA4+iQakVA7zhtsiVYS9xRM7kwcGX074Sh
ry8+Ck9fWXHTmpYkjB6rgvjtk64WfetefoBVhpEpoU/EFL4CtZ1sOzXsgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGMEOVaHMNu1zVt/YlkUSAxhVJqHMB8GA1UdIwQY
MBaAFGBmF1jOMwYiRwo5ro1u9KIET4PEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2Ut
MWY4NzQ2OTQ1NDgzLzEvWXdRNVZvY3cyN1hOVzM5aVdSUklER0ZVbW9jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZGQxMjgtNmQ2ZS00OWUzLWI3N2UtMWY4NzQ2OTQ1NDgz
LzEvWUdZWFdNNHpCaUpIQ2ptdWpXNzBvZ1JQZzhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVDcTAwQA
VDcXMA0GCSqGSIb3DQEBCwUAA4IBAQApWNer+lLzf78N6a6fEf6MvpMmYpZFeYax
1u2qC61TzTy21EH+Zw2FnXaPB/HMPBGj9n232Tkl91yPyZPByw/iPWhoFhqkCGAK
PerGaaRiDhMUK5sRoF3HGlzzfXE+SVhhlWlI1bwjLfU/qh1OVBmyjcMsfTTHp9ed
izHjp9zxMtwAYJnc/+N/a67I3wL4x8S3OINsvOnIODbfdKOMaG+vBk1LmRtxfZCs
H2UP7JK68Gy/V4lbtabDkgh2pODIp3zzCqpNOkLlnih6cFxXq16pb6sITFai7VbF
xgtoNouFjKvy5r3kKylu4shFjF1rWtb7aTy85/tSDBumszbYD0qt
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:31:37 2024 by rpki-client on console-fra.rpki-client.org