Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/YMHctJC6wJ_jf-ssAiTCKTZcETE.roa
File: YMHctJC6wJ_jf-ssAiTCKTZcETE.roa (raw, json)
Hash identifier: Umb4KNfCbjZZKAfzjISSupIYr/uKgM7zzQhUvGoJYHc=
Subject key identifier: 60:C1:DC:B4:90:BA:C0:9F:E3:7F:EB:2C:02:24:C2:29:36:5C:11:31
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 018CC493315CF55D3928E86F0D04404C9EF2
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/YMHctJC6wJ_jf-ssAiTCKTZcETE.roa
Signing time: Mon 01 Jan 2024 10:30:29 +0000
ROA not before: Mon 01 Jan 2024 10:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 85.239.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:31:5c:f5:5d:39:28:e8:6f:0d:04:40:4c:9e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Jan 1 10:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60c1dcb490bac09fe37feb2c0224c229365c1131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:7d:b7:33:a1:1f:9e:69:b7:e3:10:2f:e8:00:
1d:e6:c4:af:56:bc:59:08:d0:2f:c6:19:97:25:8c:
b4:a4:ce:ea:61:65:7a:4f:80:5c:1d:02:4d:95:6c:
5f:3d:e0:13:3d:6a:39:7c:b1:9b:88:87:45:35:b9:
bc:e7:e7:71:a6:9f:0d:fc:e5:d6:14:42:a3:13:1f:
ad:ec:cb:18:a6:66:5a:59:2c:23:c4:78:3e:f3:75:
2c:5d:22:30:6c:62:34:3f:1e:a0:52:06:19:56:2e:
77:4e:ea:d9:96:ee:cb:90:19:b9:0a:68:a9:b5:27:
50:d4:83:57:ef:59:76:a1:01:a5:bf:a6:9a:25:b0:
72:18:03:09:d1:67:9e:5b:bc:6e:70:2f:eb:46:1a:
db:82:4c:65:ae:7e:81:cb:60:6e:23:52:eb:47:ff:
29:86:47:01:34:95:fd:fe:be:db:9e:3e:c7:88:3d:
1e:0e:94:cb:5b:26:39:ce:1c:44:b8:91:bf:4b:20:
df:59:27:55:5e:25:74:75:71:83:23:b4:83:2d:e2:
d8:ed:d6:bf:35:97:97:3a:69:1c:06:8f:89:6f:b6:
cf:e8:a1:33:07:1d:cd:0f:df:ae:98:9d:31:7d:5c:
90:e5:29:af:91:96:5b:85:6a:59:17:cf:ac:b6:8b:
9d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C1:DC:B4:90:BA:C0:9F:E3:7F:EB:2C:02:24:C2:29:36:5C:11:31
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/YMHctJC6wJ_jf-ssAiTCKTZcETE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.148.0/24
Signature Algorithm: sha256WithRSAEncryption
06:2c:4a:d2:25:eb:bc:72:1a:f1:d4:b3:bc:13:fe:d1:33:aa:
9d:10:41:3d:b8:bf:9d:c9:1c:2b:3c:da:d0:8a:27:d7:c0:79:
07:06:69:b8:b1:ea:c7:3a:b9:35:79:26:f3:9b:79:9e:78:05:
03:2b:31:40:2a:7e:55:d1:21:26:52:04:f0:77:2e:20:9d:ea:
7a:51:ba:3b:c9:13:ed:0b:a4:ac:3c:ca:6b:bc:f0:95:24:6f:
3d:7c:4c:4c:79:f4:e2:97:0e:79:d5:d2:26:19:df:b2:5b:47:
80:a6:ed:1e:2c:af:6c:79:de:54:d2:d3:69:14:c1:59:1b:d7:
1c:4b:50:f9:df:1a:ca:cb:7e:f3:81:d3:6f:70:38:54:44:6d:
c9:76:0a:b5:9b:6d:36:85:e8:81:30:ed:7b:b9:1a:f9:ed:d3:
e4:b5:ba:36:51:72:36:29:c0:d4:9b:8c:37:cc:08:f5:8e:46:
fa:b0:1c:74:a6:19:78:b0:17:51:4c:71:49:34:17:e1:48:a4:
fd:05:e5:63:a5:f9:2b:8f:19:6c:69:c6:e7:e6:8e:18:1e:8d:
eb:56:1f:d2:ab:f7:fe:22:c4:d3:76:74:dc:c4:2a:27:88:b9:
aa:36:9f:99:02:60:2b:30:54:bb:07:fb:de:91:7a:6a:d0:16:
ff:25:30:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:04:13 2024 by rpki-client on console-ams.rpki-client.org