Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/YnUVleB0c69FJ4BAQYAIu7ovkr0.roa
File: YnUVleB0c69FJ4BAQYAIu7ovkr0.roa (raw, json)
Hash identifier: Z4q1ir+cB1OjlOvMLjJdr/UtazlDHGCjVJ/tgbc8UxI=
Subject key identifier: 62:75:15:95:E0:74:73:AF:45:27:80:40:41:80:08:BB:BA:2F:92:BD
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 018CC425389E5EE17F0BC7244D5132650DFD
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/YnUVleB0c69FJ4BAQYAIu7ovkr0.roa
Signing time: Mon 01 Jan 2024 08:30:22 +0000
ROA not before: Mon 01 Jan 2024 08:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60068
IP address blocks: 185.253.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:38:9e:5e:e1:7f:0b:c7:24:4d:51:32:65:0d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Jan 1 08:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62751595e07473af45278040418008bbba2f92bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:7f:bf:46:13:ae:8e:25:cd:2d:83:fb:d9:
72:f8:62:57:a2:77:7d:5e:29:27:ae:a0:df:1c:95:
16:c1:cf:e6:74:88:74:3a:36:15:9a:3f:03:f4:cc:
e4:41:37:7f:40:67:e2:07:a8:5a:d5:f6:9f:2f:5f:
75:3c:19:d9:99:74:f7:71:26:d4:cb:00:84:a7:79:
d4:09:c5:5c:09:5e:c7:b7:a1:5b:f2:c1:68:76:08:
6a:bd:f4:c3:0d:cc:0f:f5:fb:ca:7e:ee:95:3e:a1:
3e:c5:67:6e:0b:58:78:24:d4:6d:ca:84:52:c6:28:
b7:0d:ad:01:db:6a:5f:0d:24:47:78:e4:81:cb:19:
e4:94:be:a2:3e:b8:4c:e2:e7:60:f1:77:93:35:a2:
e7:67:8f:da:a5:ce:43:1c:52:88:30:8d:1c:8e:0a:
3e:93:cf:c0:6b:0e:08:fb:e9:dc:23:fb:e2:f9:c1:
6d:3c:5a:98:66:58:bc:62:68:b0:da:71:c4:d4:54:
49:5f:07:98:02:92:8b:d8:af:a3:00:0c:6b:47:f0:
18:2b:e4:4b:ab:22:0c:df:2a:a7:84:71:0d:6b:ef:
d4:5c:76:0c:6f:12:df:28:4e:73:50:85:8d:2e:dc:
93:e4:f6:6c:b2:d6:14:c0:35:d8:b3:87:74:54:f9:
2d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:75:15:95:E0:74:73:AF:45:27:80:40:41:80:08:BB:BA:2F:92:BD
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/YnUVleB0c69FJ4BAQYAIu7ovkr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.108.0/24
Signature Algorithm: sha256WithRSAEncryption
71:8f:cb:7f:83:64:c4:f0:a1:9e:56:d9:4b:cb:15:13:4d:d6:
e4:cb:2d:a0:c5:8e:6c:d5:5e:58:99:45:c0:ce:99:76:79:aa:
08:53:ad:08:f2:cd:fe:27:2b:1c:28:8b:07:48:92:35:db:33:
a7:82:16:17:fe:9d:8d:47:d8:e5:13:8d:14:5b:5a:7a:8b:9a:
1b:97:37:23:12:c0:4b:5c:37:eb:86:1c:b2:b6:b0:1f:0f:86:
3a:fe:a7:55:88:6a:f1:55:72:ca:b7:9f:df:3f:23:22:a1:cf:
36:ec:8c:d3:0c:1f:de:83:76:e6:b1:65:43:2d:77:4c:a0:33:
2f:b5:1b:0f:6f:3a:ac:e0:aa:66:cd:77:78:e2:2b:96:6a:4f:
e8:60:fe:d3:c2:69:29:fa:b6:0c:5b:12:49:74:16:9f:0f:0c:
4f:c2:35:42:c1:4b:6b:68:b7:7e:f8:0f:fb:a9:fb:8b:79:22:
ef:51:b1:b4:92:8e:39:50:11:47:a4:18:2d:27:27:7d:ed:35:
b4:78:bd:b3:d4:39:53:62:e3:60:ce:61:5f:ab:f1:47:c4:0f:
97:48:74:ab:ab:08:00:96:74:c1:6f:52:3a:cd:74:f1:57:13:
5d:12:fd:0e:e1:cb:f0:7c:7d:eb:85:c2:86:b2:fe:e5:54:c7:
10:75:19:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJTieXuF/C8ckTVEyZQ39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwNGQyNzg0ODVmZmFlYTc5ZTkxMGEyNjI1MzNhODBiNWFi
OTFjOGEwHhcNMjQwMTAxMDgzMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Mjc1MTU5NWUwNzQ3M2FmNDUyNzgwNDA0MTgwMDhiYmJhMmY5MmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmx/v0YTro4lzS2D+9ly+GJXond9
XiknrqDfHJUWwc/mdIh0OjYVmj8D9MzkQTd/QGfiB6ha1fafL191PBnZmXT3cSbU
ywCEp3nUCcVcCV7Ht6Fb8sFodghqvfTDDcwP9fvKfu6VPqE+xWduC1h4JNRtyoRS
xii3Da0B22pfDSRHeOSByxnklL6iPrhM4udg8XeTNaLnZ4/apc5DHFKIMI0cjgo+
k8/Aaw4I++ncI/vi+cFtPFqYZli8Ymiw2nHE1FRJXweYApKL2K+jAAxrR/AYK+RL
qyIM3yqnhHENa+/UXHYMbxLfKE5zUIWNLtyT5PZsstYUwDXYs4d0VPktxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGJ1FZXgdHOvRSeAQEGACLu6L5K9MB8GA1UdIwQY
MBaAFPBNJ4SF/66nnpEKJiUzqAtauRyKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjkt
NWMwZTMxNmQyOGI4LzEvWW5VVmxlQjBjNjlGSjRCQVFZQUl1N292a3IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9hYTc0MjYtNzExZC00ZjNlLThkZjktNWMwZTMxNmQyOGI4
LzEvOEUwbmhJWF9ycWVla1FvbUpUT29DMXE1SElvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuf1sMA0G
CSqGSIb3DQEBCwUAA4IBAQBxj8t/g2TE8KGeVtlLyxUTTdbkyy2gxY5s1V5YmUXA
zpl2eaoIU60I8s3+JyscKIsHSJI12zOnghYX/p2NR9jlE40UW1p6i5oblzcjEsBL
XDfrhhyytrAfD4Y6/qdViGrxVXLKt5/fPyMioc827IzTDB/eg3bmsWVDLXdMoDMv
tRsPbzqs4KpmzXd44iuWak/oYP7Twmkp+rYMWxJJdBafDwxPwjVCwUtraLd++A/7
qfuLeSLvUbG0ko45UBFHpBgtJyd97TW0eL2z1DlTYuNgzmFfq/FHxA+XSHSrqwgA
lnTBb1I6zXTxVxNdEv0O4cvwfH3rhcKGsv7lVMcQdRmK
-----END CERTIFICATE-----
Generated at Wed May 1 23:06:49 2024 by rpki-client on console-ams.rpki-client.org