Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/y2L2b-3xu0dbzltG02jgWffZmbA.roa
File: y2L2b-3xu0dbzltG02jgWffZmbA.roa (raw, json)
Hash identifier: WhYXj0MswePMe5gZTk1kiwg4tIfyDsR/TDRMd/sNOck=
Subject key identifier: CB:62:F6:6F:ED:F1:BB:47:5B:CE:5B:46:D3:68:E0:59:F7:D9:99:B0
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 018CC3491B7A43E36643C4840256918134C3
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/y2L2b-3xu0dbzltG02jgWffZmbA.roa
Signing time: Mon 01 Jan 2024 04:29:57 +0000
ROA not before: Mon 01 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60089
IP address blocks: 185.206.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jul 2024 08:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:1b:7a:43:e3:66:43:c4:84:02:56:91:81:34:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Jan 1 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb62f66fedf1bb475bce5b46d368e059f7d999b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:84:ef:3a:40:5a:6b:f0:e3:15:43:02:f6:2b:
d2:45:06:fc:07:60:69:ee:71:d9:9d:ff:5c:b7:2e:
e7:2d:ef:6d:2c:cf:36:0a:13:be:a2:85:29:b6:5e:
53:7b:8d:fc:74:ad:7d:81:a3:34:e4:11:d0:58:e0:
60:f5:f5:a7:2c:60:6e:9d:1f:b0:41:30:ff:9e:a7:
b8:50:4a:0e:c3:4f:e9:8c:5c:f4:33:81:c9:5f:da:
de:21:71:d0:e1:61:d0:2d:6e:ff:d0:37:df:4f:32:
53:c6:38:31:46:05:18:55:d8:d2:12:bb:d8:fa:13:
e8:ce:65:27:b0:df:dd:77:89:66:9d:ce:7c:28:a8:
27:2e:8e:91:3e:10:ec:75:25:3f:9e:5a:7d:d0:0e:
73:b3:42:01:cc:ea:77:76:ce:3e:8d:c9:c8:de:5a:
46:70:04:53:77:f4:00:8b:c2:32:bd:e8:b2:d6:54:
8a:1e:a8:87:cd:b8:ce:e6:ca:70:47:4e:74:5b:be:
9a:ab:7d:09:47:89:b9:79:59:64:08:71:a7:03:c4:
6b:c3:f8:47:c9:06:97:07:fc:47:aa:aa:5e:1e:85:
be:34:a8:23:5d:7d:d4:3a:af:17:ed:3b:45:e9:cc:
96:8d:ba:10:e6:47:a8:72:1e:e0:2b:10:09:38:ce:
ac:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:62:F6:6F:ED:F1:BB:47:5B:CE:5B:46:D3:68:E0:59:F7:D9:99:B0
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/y2L2b-3xu0dbzltG02jgWffZmbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.206.55.0/24
Signature Algorithm: sha256WithRSAEncryption
80:af:1a:4d:43:d6:28:e4:e3:82:65:71:fe:d5:91:d1:26:a2:
02:08:c5:bf:25:f9:61:78:d8:be:fe:28:c4:a4:1d:0d:e3:a2:
d1:56:3b:01:39:3e:d8:48:ad:1a:17:4c:44:08:97:10:5e:c2:
a8:dc:e0:11:fc:27:41:b1:85:05:cd:3f:1d:ff:82:7e:3f:9c:
f0:59:61:dc:92:a3:a6:16:ee:00:f5:f1:ab:8e:58:51:42:67:
74:7c:9c:f0:93:18:aa:00:41:fe:18:c6:1b:02:dc:bd:d5:73:
f0:74:91:d3:ed:17:ad:97:dd:1d:84:0c:a0:f4:e4:4f:95:87:
86:74:8d:97:34:44:ff:c0:32:77:1d:a0:24:a9:17:93:8e:02:
15:8b:3f:dd:3a:9d:ec:9f:36:54:eb:ef:26:45:84:d5:c2:5e:
dd:31:c4:f4:4c:42:c5:98:45:ca:85:7a:b2:c1:8d:34:ed:1d:
e1:a4:7e:70:d3:06:ec:82:8d:db:a1:e2:e9:da:a4:54:c7:a1:
3a:14:00:20:36:a1:cf:49:ec:23:0b:dc:2e:f7:5c:1c:d9:5d:
97:4e:26:c6:09:77:06:16:b0:26:72:e9:51:7f:10:17:4a:14:
4e:4b:2e:b0:57:7d:97:39:66:51:f2:c1:c3:54:be:43:21:cf:
1f:af:78:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 4 15:50:00 2024 by rpki-client on console-ams.rpki-client.org