Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/ytByduVv07fOh6Oy5Gc9pKytyMM.roa
File: ytByduVv07fOh6Oy5Gc9pKytyMM.roa (raw, json)
Hash identifier: AYRT7qL4gnhuUC9DKqgcUrWrex1VzEfRF70IBTcMxaY=
Subject key identifier: CA:D0:72:76:E5:6F:D3:B7:CE:87:A3:B2:E4:67:3D:A4:AC:AD:C8:C3
Certificate issuer: /CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Certificate serial: 018CC26D837F990F27EC99B6C5D970AF50D9
Authority key identifier: 67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/ytByduVv07fOh6Oy5Gc9pKytyMM.roa
Signing time: Mon 01 Jan 2024 00:30:06 +0000
ROA not before: Mon 01 Jan 2024 00:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3311
IP address blocks: 185.118.123.0/24 maxlen: 24
185.118.122.0/24 maxlen: 24
185.118.121.0/24 maxlen: 24
185.118.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:83:7f:99:0f:27:ec:99:b6:c5:d9:70:af:50:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67c008dc0bf0ad2233f4e0d658a714a45b48a1c4
Validity
Not Before: Jan 1 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cad07276e56fd3b7ce87a3b2e4673da4acadc8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3d:37:0a:68:3b:5e:d5:e2:d6:0e:e3:c4:04:
f8:12:a1:c8:a6:2f:d3:94:81:26:7b:fa:70:37:c1:
6c:75:c9:a0:49:d4:f8:ea:67:33:d9:77:e6:d4:e1:
d4:ca:a9:b8:1c:64:29:62:31:e9:f2:2b:2b:03:17:
33:f2:97:ad:4e:ae:bb:aa:78:ce:26:41:f0:c6:45:
b8:26:d7:b2:a5:08:dd:a9:35:cf:71:cd:8c:87:01:
22:e0:7e:f0:b5:b3:6c:5c:10:bc:aa:59:d0:2d:55:
04:c6:e2:45:cb:c5:ce:62:16:a6:09:7b:d4:2d:38:
11:be:bf:ad:fa:6b:ca:1e:bd:f7:0c:99:2d:3a:b4:
5e:e1:19:09:a2:a7:a0:d0:a0:75:55:3b:86:b3:56:
17:ee:00:46:af:24:fb:ed:09:cd:7e:ac:74:1d:f6:
37:30:4c:48:b8:b4:c7:c7:70:3c:7e:02:5f:54:7e:
2b:5b:87:a6:19:ad:c5:69:fe:71:31:0c:01:f4:cd:
91:4e:d4:8d:53:02:df:d5:c9:ca:f9:72:d8:16:43:
63:a1:2b:88:82:da:c4:48:8e:2c:5c:4e:49:be:80:
d3:20:1c:cb:95:0f:4f:8b:24:15:1e:7d:8f:c5:01:
59:98:29:e3:ef:f7:d5:07:1b:98:6f:17:52:36:ef:
e0:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D0:72:76:E5:6F:D3:B7:CE:87:A3:B2:E4:67:3D:A4:AC:AD:C8:C3
X509v3 Authority Key Identifier:
keyid:67:C0:08:DC:0B:F0:AD:22:33:F4:E0:D6:58:A7:14:A4:5B:48:A1:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/ytByduVv07fOh6Oy5Gc9pKytyMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/1dc5f4-ff5d-45d8-91cd-80532dd74d4d/1/Z8AI3AvwrSIz9ODWWKcUpFtIocQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.118.120.0/22
Signature Algorithm: sha256WithRSAEncryption
49:78:85:28:70:1e:98:68:cf:1b:0f:f1:c3:0e:1f:ab:f2:fb:
93:64:d6:54:0a:00:98:4d:03:18:f4:b2:ac:14:9a:7d:75:3d:
6e:5c:28:28:fe:08:a8:79:a0:0f:d1:1e:10:67:98:2f:5a:9d:
a3:a7:08:1b:15:35:ee:57:9b:14:f4:77:e9:49:4f:be:55:6e:
81:8f:3a:9a:6d:0f:f5:1b:4d:a3:62:c5:17:cc:20:80:7e:18:
ea:84:e1:f6:0d:74:4a:a0:e3:69:58:b8:a8:94:5a:e9:37:6b:
b7:ec:0d:9e:1a:58:ef:33:44:9f:47:36:e9:a4:ae:3c:47:4f:
e3:89:76:48:0f:20:39:d2:bf:b1:f3:22:a4:a6:a2:60:31:b1:
3d:03:68:65:83:82:b2:c1:82:d4:f4:fa:6b:8d:c1:4e:b1:b9:
ea:29:0e:2c:60:8f:4b:b6:5c:a1:61:40:2c:28:74:6d:0b:a3:
a9:43:8d:67:df:c7:be:39:22:bb:df:a1:eb:e4:18:1c:0b:75:
90:31:c9:e8:48:a4:f9:9a:77:15:29:37:1f:c6:f2:a1:a2:8a:
fd:9f:f4:cd:51:8c:fd:28:dd:75:bc:54:b0:d3:6b:b3:63:8f:
3b:57:66:2d:1d:c5:df:e6:da:c9:61:7c:e6:49:d0:a7:c5:59:
47:5c:9a:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbYN/mQ8n7Jm2xdlwr1DZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3YzAwOGRjMGJmMGFkMjIzM2Y0ZTBkNjU4YTcxNGE0NWI0
OGExYzQwHhcNMjQwMTAxMDAzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYWQwNzI3NmU1NmZkM2I3Y2U4N2EzYjJlNDY3M2RhNGFjYWRjOGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD03Cmg7XtXi1g7jxAT4EqHIpi/T
lIEme/pwN8FsdcmgSdT46mcz2Xfm1OHUyqm4HGQpYjHp8isrAxcz8petTq67qnjO
JkHwxkW4JteypQjdqTXPcc2MhwEi4H7wtbNsXBC8qlnQLVUExuJFy8XOYhamCXvU
LTgRvr+t+mvKHr33DJktOrRe4RkJoqeg0KB1VTuGs1YX7gBGryT77QnNfqx0HfY3
MExIuLTHx3A8fgJfVH4rW4emGa3Faf5xMQwB9M2RTtSNUwLf1cnK+XLYFkNjoSuI
gtrESI4sXE5JvoDTIBzLlQ9PiyQVHn2PxQFZmCnj7/fVBxuYbxdSNu/gAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMrQcnblb9O3zoejsuRnPaSsrcjDMB8GA1UdIwQY
MBaAFGfACNwL8K0iM/Tg1linFKRbSKHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2Qt
ODA1MzJkZDc0ZDRkLzEveXRCeWR1VnYwN2ZPaDZPeTVHYzlwS3l0eU1NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xZGM1ZjQtZmY1ZC00NWQ4LTkxY2QtODA1MzJkZDc0ZDRk
LzEvWjhBSTNBdndyU0l6OU9EV1dLY1VwRnRJb2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuXZ4MA0G
CSqGSIb3DQEBCwUAA4IBAQBJeIUocB6YaM8bD/HDDh+r8vuTZNZUCgCYTQMY9LKs
FJp9dT1uXCgo/gioeaAP0R4QZ5gvWp2jpwgbFTXuV5sU9HfpSU++VW6BjzqabQ/1
G02jYsUXzCCAfhjqhOH2DXRKoONpWLiolFrpN2u37A2eGljvM0SfRzbppK48R0/j
iXZIDyA50r+x8yKkpqJgMbE9A2hlg4KywYLU9PprjcFOsbnqKQ4sYI9LtlyhYUAs
KHRtC6OpQ41n38e+OSK736Hr5BgcC3WQMcnoSKT5mncVKTcfxvKhoor9n/TNUYz9
KN11vFSw02uzY487V2YtHcXf5trJYXzmSdCnxVlHXJpg
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:06:54 2024 by rpki-client on console-fra.rpki-client.org