Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YkLtKOiSBaQfgjX8bz9uHKNqJBg.roa
File: YkLtKOiSBaQfgjX8bz9uHKNqJBg.roa (raw, json)
Hash identifier: 5QUk+uQRIzH+PYgXv66kch8QS9WwVUyz22O6cJves+s=
Subject key identifier: 62:42:ED:28:E8:92:05:A4:1F:82:35:FC:6F:3F:6E:1C:A3:6A:24:18
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 018FE86FBE6BCE8078AB1E6324D3FEBE793E
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YkLtKOiSBaQfgjX8bz9uHKNqJBg.roa
Signing time: Wed 05 Jun 2024 12:46:28 +0000
ROA not before: Wed 05 Jun 2024 12:46:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44803
IP address blocks: 45.148.28.0/22 maxlen: 22
217.78.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:6f:be:6b:ce:80:78:ab:1e:63:24:d3:fe:be:79:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jun 5 12:46:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6242ed28e89205a41f8235fc6f3f6e1ca36a2418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:03:ad:ec:d8:b3:81:db:3e:1f:59:da:42:57:
bf:7f:f4:cd:55:60:b4:7b:9a:0d:fa:e6:ad:12:19:
ba:ea:5e:b9:98:a2:df:2c:a1:e3:6d:e1:26:39:9e:
6c:26:1f:a5:a7:59:2d:6b:c0:18:00:bf:d5:c5:66:
d8:38:d7:ed:11:2f:27:06:a0:1c:91:d3:36:97:a6:
c8:1d:18:dd:f1:9b:69:8f:96:55:3a:d6:cc:00:76:
cb:5c:3b:40:d4:cf:22:72:4f:97:6a:ec:ca:03:c6:
11:47:e4:b0:32:c7:cf:e1:a2:4b:8a:f1:d9:1b:6a:
af:77:46:11:70:1f:fa:84:8b:fd:ec:23:66:f6:23:
a9:1a:75:0d:0c:95:48:98:03:4c:d9:1a:d5:69:4a:
21:c5:2b:cd:ca:6e:e0:9b:77:b8:f8:1e:f7:c0:f3:
b6:d5:98:f5:ea:87:4b:35:0c:b9:45:93:47:1c:70:
95:1d:1a:cd:2c:ac:6b:54:2e:02:32:71:bc:c9:5d:
96:61:63:de:40:f2:55:73:b6:89:09:da:f3:09:92:
ad:87:6b:dc:2d:3b:d0:92:b0:ec:6d:4e:9c:e9:da:
7b:5b:8a:89:50:6f:22:d4:5f:b6:99:9f:31:06:c5:
0b:0f:e8:e3:6c:cf:eb:87:c6:d9:f1:b1:23:35:ed:
ee:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:42:ED:28:E8:92:05:A4:1F:82:35:FC:6F:3F:6E:1C:A3:6A:24:18
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YkLtKOiSBaQfgjX8bz9uHKNqJBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.28.0/22
217.78.237.0/24
Signature Algorithm: sha256WithRSAEncryption
08:eb:11:61:7f:78:7a:24:2a:ea:b8:13:07:14:8a:02:ea:20:
98:31:03:f2:7c:f0:45:10:91:8e:cf:ca:49:fb:fa:f9:6e:df:
cc:3e:e8:08:b5:de:94:ca:87:82:00:70:5a:d1:1d:b0:45:e9:
cb:74:a1:34:c9:09:67:8a:c2:45:c1:88:c5:3d:84:c3:06:fd:
69:58:d3:86:f4:88:47:1c:61:5e:9e:2f:f5:3a:83:fa:22:70:
42:c7:ea:7b:91:3e:ec:2a:81:1a:41:35:00:83:7c:05:67:a0:
48:57:07:c7:32:35:76:d5:f4:fa:27:cb:95:bd:dc:40:49:b1:
c6:41:c5:98:cd:8c:3c:90:3d:29:38:35:86:eb:4d:35:2d:ef:
5a:84:5f:9e:96:15:76:29:54:96:26:83:89:77:d4:ad:43:6c:
d7:f2:8c:c5:c9:30:08:4e:95:b3:75:74:79:14:81:2f:c2:ef:
d9:f1:ed:4c:2d:fd:3f:4a:89:b6:35:db:76:a6:77:a8:da:69:
38:b2:48:ee:b9:6d:de:e7:5e:91:34:86:47:1c:fa:61:e6:fc:
f6:75:4f:c9:16:12:dc:08:8c:49:05:77:80:a2:a4:1b:f0:85:
04:6d:65:7e:42:16:cd:43:e1:0a:35:18:29:ae:6d:2b:a5:dc:
f3:13:34:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:46:49 2024 by rpki-client on console-fra.rpki-client.org