Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/usPnkwwZAWDMq9Trj_H_XqZhFzw.roa
File: usPnkwwZAWDMq9Trj_H_XqZhFzw.roa (raw, json)
Hash identifier: DrUc7Xp0e4/eeaU12MBnT8f6Gre92pPVWebBJtYjpkY=
Subject key identifier: BA:C3:E7:93:0C:19:01:60:CC:AB:D4:EB:8F:F1:FF:5E:A6:61:17:3C
Certificate issuer: /CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Certificate serial: 018EC24B846E639D8B00B1D3EECF9C2B16F7
Authority key identifier: 62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/usPnkwwZAWDMq9Trj_H_XqZhFzw.roa
Signing time: Tue 09 Apr 2024 09:58:32 +0000
ROA not before: Tue 09 Apr 2024 09:58:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6700
IP address blocks: 62.108.96.0/19 maxlen: 24
62.193.128.0/19 maxlen: 24
85.222.160.0/23 maxlen: 24
91.148.64.0/18 maxlen: 24
91.223.162.0/24 maxlen: 24
178.20.205.0/24 maxlen: 24
178.20.207.0/24 maxlen: 24
185.47.208.0/22 maxlen: 24
194.106.160.0/19 maxlen: 24
195.252.64.0/18 maxlen: 24
213.244.224.0/20 maxlen: 24
217.26.64.0/20 maxlen: 24
2001:8c8::/32 maxlen: 32
2a02:e40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.mft
rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 05:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c2:4b:84:6e:63:9d:8b:00:b1:d3:ee:cf:9c:2b:16:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6278a768c910badcd5c4aef7c172a9f061547e8c
Validity
Not Before: Apr 9 09:58:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bac3e7930c190160ccabd4eb8ff1ff5ea661173c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1f:45:31:1f:fb:9e:ec:f3:44:74:1b:d1:71:
32:d9:bf:bf:1f:8c:3a:31:17:a9:d0:81:2b:08:35:
e9:aa:44:9c:c4:dd:87:34:d2:70:56:4f:f6:a1:e4:
4c:84:4a:0b:8b:f1:a8:3e:45:c3:81:44:61:73:11:
1b:a3:0b:f4:8d:75:87:c3:75:55:8e:5e:b1:5c:91:
32:56:10:6d:17:27:2d:95:dc:ba:1d:9b:55:a2:69:
bc:66:08:a8:27:c2:33:15:bb:2e:b4:e7:a3:0f:39:
17:7e:f5:70:bb:7d:6f:e1:11:50:c9:36:22:44:4a:
71:3e:a8:8a:f6:f6:45:3b:c3:02:9d:d5:61:2c:bd:
79:bb:11:0c:95:4f:89:9e:d7:33:0b:a8:20:cc:00:
27:29:18:b0:24:0f:8b:2d:da:45:eb:13:a5:aa:29:
e4:75:a4:93:5c:70:73:8e:20:64:3d:c0:29:56:f1:
85:56:5d:1c:6e:3a:9a:7f:3a:67:28:50:ae:39:a6:
51:7a:12:ad:c2:63:45:52:de:c9:fb:44:80:08:0c:
b0:b6:b7:45:c2:1e:ae:75:62:0d:40:e3:f2:91:14:
34:36:35:12:b4:b6:44:1a:c8:2d:be:19:c1:59:b9:
4d:5c:92:60:81:63:25:a4:62:ff:18:b2:ee:68:83:
70:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C3:E7:93:0C:19:01:60:CC:AB:D4:EB:8F:F1:FF:5E:A6:61:17:3C
X509v3 Authority Key Identifier:
keyid:62:78:A7:68:C9:10:BA:DC:D5:C4:AE:F7:C1:72:A9:F0:61:54:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YninaMkQutzVxK73wXKp8GFUfow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/usPnkwwZAWDMq9Trj_H_XqZhFzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/42dfc0-a764-4d5d-a634-3454f490fd96/1/YninaMkQutzVxK73wXKp8GFUfow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.96.0/19
62.193.128.0/19
85.222.160.0/23
91.148.64.0/18
91.223.162.0/24
178.20.205.0/24
178.20.207.0/24
185.47.208.0/22
194.106.160.0/19
195.252.64.0/18
213.244.224.0/20
217.26.64.0/20
IPv6:
2001:8c8::/32
2a02:e40::/32
Signature Algorithm: sha256WithRSAEncryption
10:22:b9:74:65:84:9f:f9:1e:72:e1:ae:2a:89:b5:24:de:59:
fa:3a:69:42:79:9c:50:5f:a0:db:cd:24:65:0a:dd:4d:79:39:
8f:6a:55:48:9c:d0:b3:1c:66:e7:68:48:1c:55:8c:cf:46:63:
5b:6a:b7:df:94:2d:80:f5:62:8e:a8:af:4d:dc:fe:db:0f:44:
ff:aa:51:49:a1:4a:de:c2:c9:6e:2f:61:73:f1:e6:11:5b:4e:
45:bb:b0:fa:36:83:a7:c9:ef:e3:12:95:ca:99:07:02:84:82:
08:45:fb:e8:73:6d:16:85:e3:99:6c:e4:76:56:6b:a6:b3:9c:
72:8d:72:8e:36:39:59:26:26:81:17:83:30:fd:6c:58:54:a1:
87:b7:6f:6a:4b:15:35:a6:fc:e2:68:ce:0d:46:fd:2e:a0:9f:
9a:75:59:e7:cb:a4:6d:92:cc:20:12:b7:c9:85:ea:f4:24:8b:
02:ae:1d:6f:c3:83:b4:18:dc:7c:8b:38:31:c1:69:75:eb:45:
66:5a:9b:0f:37:14:b0:f1:79:30:1a:91:a4:26:e5:3c:3c:c4:
76:30:e7:f5:5f:30:a2:4b:c5:8b:09:24:10:c2:c3:d9:52:f1:
95:38:27:e9:d1:30:aa:24:a2:12:f7:ad:cc:26:b1:c5:58:ab:
20:eb:d0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:27:26 2024 by rpki-client on console-ams.rpki-client.org