Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/YB8kBL4A--fN_9bTAUFy0pspLRI.roa
File: YB8kBL4A--fN_9bTAUFy0pspLRI.roa (raw, json)
Hash identifier: ujPtL62HboThgRTFbTeF25Ed1sY8q5l86eVJUZ2B6dc=
Subject key identifier: 60:1F:24:04:BE:00:FB:E7:CD:FF:D6:D3:01:41:72:D2:9B:29:2D:12
Certificate issuer: /CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Certificate serial: 019034C0471C167316EC3F96E58D696C9DE6
Authority key identifier: 88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/YB8kBL4A--fN_9bTAUFy0pspLRI.roa
Signing time: Thu 20 Jun 2024 08:25:34 +0000
ROA not before: Thu 20 Jun 2024 08:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35319
IP address blocks: 185.252.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.mft
rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:34:c0:47:1c:16:73:16:ec:3f:96:e5:8d:69:6c:9d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=880d8ab6aa2c72f079755f76cf0120aa5dddc7df
Validity
Not Before: Jun 20 08:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=601f2404be00fbe7cdffd6d3014172d29b292d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:41:c3:33:f3:cf:a7:ac:66:e3:c4:87:db:37:
7a:a2:ea:dc:3d:90:7a:a1:0b:0e:56:10:55:39:f6:
94:c6:1f:38:8c:16:42:a9:31:9c:10:73:b6:e0:1f:
30:aa:8c:85:28:0c:3b:2d:8a:9a:da:08:1f:6a:77:
d4:5c:7f:fb:5a:af:01:74:81:15:12:d0:a6:2d:c4:
86:79:bf:a1:90:8b:d7:d3:af:96:2f:3f:e0:29:ae:
0e:ab:e3:c5:32:cd:30:2f:23:73:ba:05:89:2a:8e:
15:9f:38:69:83:42:84:f6:7c:e5:37:79:70:27:26:
98:0f:73:24:e0:b5:c9:ea:ba:35:ac:26:ab:0b:b6:
56:a2:49:ad:34:10:2e:1f:81:6f:7d:66:cc:27:11:
9d:8a:7a:7d:61:58:01:da:fa:fe:af:f3:1b:5b:53:
42:cc:84:0e:a3:ee:24:08:0c:33:72:47:a5:57:97:
16:b6:77:12:c4:f3:c6:e2:48:b2:80:b6:99:54:2d:
4e:c9:b0:b7:30:1d:ce:7f:fc:d5:6e:cd:2b:11:48:
37:b0:25:09:43:c9:18:31:a9:7d:e8:46:e1:e5:c0:
42:8c:57:8e:1c:c8:76:ea:fe:48:eb:93:58:92:c4:
78:22:58:ba:85:6c:59:3e:cd:47:31:0f:b6:4f:0a:
cf:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1F:24:04:BE:00:FB:E7:CD:FF:D6:D3:01:41:72:D2:9B:29:2D:12
X509v3 Authority Key Identifier:
keyid:88:0D:8A:B6:AA:2C:72:F0:79:75:5F:76:CF:01:20:AA:5D:DD:C7:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iA2KtqoscvB5dV92zwEgql3dx98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/YB8kBL4A--fN_9bTAUFy0pspLRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c84cd3-672b-44b2-8ce0-40289479ac05/1/iA2KtqoscvB5dV92zwEgql3dx98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:7c:25:8c:c4:c8:86:ae:a8:47:ea:0c:ae:ab:58:6f:fe:08:
e0:f9:56:44:a3:af:c7:60:ff:e4:3c:10:97:75:55:fc:85:88:
bb:b0:0b:41:5d:ad:28:4a:f8:69:4a:7d:2f:93:63:d8:ff:01:
2c:57:72:93:ee:09:02:60:03:38:90:6a:3a:01:4a:df:34:1e:
54:36:46:d8:a5:33:e1:ef:ad:31:43:52:07:aa:77:dc:7b:dd:
3a:ff:c4:cd:4e:35:04:0b:b3:9b:d5:00:87:40:2c:e7:48:ac:
87:d2:a6:46:c4:75:67:b3:da:37:2a:64:c7:a3:75:08:bd:9b:
f7:ef:ef:eb:6c:27:40:ff:81:b4:a7:bb:d2:1a:3f:81:04:2d:
7a:22:3a:da:5f:d1:2b:5b:b5:13:c8:f3:70:a1:34:67:67:43:
3e:06:5b:3a:b9:52:5e:14:23:d6:4c:20:89:bf:74:a1:1a:ab:
d4:91:33:b4:ef:90:e7:60:c9:c9:5a:31:34:95:1a:d7:bf:68:
ec:13:7d:6a:50:76:18:ee:73:f6:6b:9c:ab:05:63:6a:64:c3:
19:5d:44:a7:e4:14:cc:3a:f1:cd:bd:25:88:c0:29:ba:31:ee:
b9:98:30:08:ed:8f:87:0b:be:bc:46:c0:66:52:5f:b8:3e:5f:
a0:39:0b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 10:24:50 2024 by rpki-client on console-fra.rpki-client.org