Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/YDypugJEq-P68_VuKHYQL8twQGM.roa
File: YDypugJEq-P68_VuKHYQL8twQGM.roa (raw, json)
Hash identifier: O39oNrnnjNG5j+qsFbULxGBpSVkIQKReDeST4HzOGas=
Subject key identifier: 60:3C:A9:BA:02:44:AB:E3:FA:F3:F5:6E:28:76:10:2F:CB:70:40:63
Certificate issuer: /CN=32010f70276e418d58f08c56a79a82b99aca1763
Certificate serial: 018CC4938433644A4CFF79D5D9F695A4DCBE
Authority key identifier: 32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/YDypugJEq-P68_VuKHYQL8twQGM.roa
Signing time: Mon 01 Jan 2024 10:30:51 +0000
ROA not before: Mon 01 Jan 2024 10:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 45.88.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:84:33:64:4a:4c:ff:79:d5:d9:f6:95:a4:dc:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32010f70276e418d58f08c56a79a82b99aca1763
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=603ca9ba0244abe3faf3f56e2876102fcb704063
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ce:2e:36:8e:f5:d3:be:b2:c7:d3:8b:fe:b8:
90:57:03:ce:e1:00:1b:8e:81:ee:75:3c:e8:0e:c8:
f1:c5:70:6f:64:94:ae:a2:1c:48:06:41:55:3c:89:
ee:b1:4b:14:a7:a0:6a:9f:d5:fc:a1:a4:b6:46:67:
13:d5:66:ad:9e:5a:33:c0:ee:d5:a1:a1:e6:2b:da:
c4:9a:a2:6f:02:a1:12:e5:d0:5a:a6:13:07:ce:62:
e4:26:32:8c:fb:0e:84:fa:ad:65:61:6c:b8:91:ff:
31:40:2a:86:2e:97:0d:d6:d7:24:1b:6a:e7:ed:48:
e6:ee:db:3a:ed:f7:cf:f1:3b:af:83:97:ab:ea:02:
1c:a9:95:02:99:39:fe:c3:61:bf:d4:de:7f:ce:2d:
8e:2a:4d:a5:ba:cf:1a:c8:a5:86:00:95:18:6e:72:
7d:77:4c:23:c2:07:7e:da:de:c0:01:8a:7a:e3:40:
88:ce:ae:69:b0:4e:6b:ec:a1:1a:e8:40:e3:b1:68:
f3:3c:89:c8:40:7b:4f:48:c7:b5:ee:81:cc:7f:22:
a0:df:c2:8e:17:ff:6f:d8:91:43:15:87:87:88:79:
53:fa:84:c0:f0:bd:ec:12:c6:47:b5:74:57:23:0a:
07:12:37:94:0d:5f:af:e0:78:0f:d6:97:b9:8c:df:
28:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3C:A9:BA:02:44:AB:E3:FA:F3:F5:6E:28:76:10:2F:CB:70:40:63
X509v3 Authority Key Identifier:
keyid:32:01:0F:70:27:6E:41:8D:58:F0:8C:56:A7:9A:82:B9:9A:CA:17:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MgEPcCduQY1Y8IxWp5qCuZrKF2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/YDypugJEq-P68_VuKHYQL8twQGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b648fb-f50b-4cc2-a2b1-2f68216b7424/1/MgEPcCduQY1Y8IxWp5qCuZrKF2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.248.0/22
Signature Algorithm: sha256WithRSAEncryption
0f:45:21:49:fc:a7:8c:d2:87:40:c6:94:a7:22:ed:7a:f3:c7:
c9:9e:04:70:83:6f:85:d5:e3:2d:ad:16:5a:f1:fa:24:5e:f9:
23:36:7e:5c:53:e0:ab:be:31:bf:64:8c:39:c1:c2:bf:40:4c:
7e:74:f4:5c:ab:46:88:31:d9:e7:11:ef:30:1c:4b:80:b0:e6:
e1:1d:33:e5:05:fd:cc:bc:9a:3e:63:f4:d9:66:24:c6:7f:be:
4e:c5:e1:2c:fa:01:0e:79:18:92:14:ff:5e:45:76:bb:09:77:
1b:ae:da:f5:14:28:10:91:23:e1:57:1a:50:3c:c1:2d:f9:db:
1a:bc:18:d8:58:39:b9:4f:75:0c:df:a3:81:48:b3:41:03:24:
c7:5f:25:98:65:b3:37:06:b9:44:ef:2a:8b:7a:9e:a6:44:80:
f6:be:bb:c7:44:c7:de:5c:e0:a0:c9:a2:44:60:73:8a:d9:56:
b9:6a:19:08:8b:16:66:f6:bf:97:f5:f7:21:e5:34:2d:88:c9:
3b:52:ac:80:b7:1b:e1:4d:48:bc:1c:a1:b9:a7:42:0f:41:aa:
85:14:87:a7:e2:ce:3b:b1:db:a7:c1:ce:ec:76:e6:d3:39:98:
4d:a2:19:76:c4:2b:10:38:0c:b0:b6:46:61:62:4e:d8:46:ee:
fb:1e:9c:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk4QzZEpM/3nV2faVpNy+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMDEwZjcwMjc2ZTQxOGQ1OGYwOGM1NmE3OWE4MmI5OWFj
YTE3NjMwHhcNMjQwMTAxMTAzMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDNjYTliYTAyNDRhYmUzZmFmM2Y1NmUyODc2MTAyZmNiNzA0MDYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmc4uNo71076yx9OL/riQVwPO4QAb
joHudTzoDsjxxXBvZJSuohxIBkFVPInusUsUp6Bqn9X8oaS2RmcT1WatnlozwO7V
oaHmK9rEmqJvAqES5dBaphMHzmLkJjKM+w6E+q1lYWy4kf8xQCqGLpcN1tckG2rn
7Ujm7ts67ffP8Tuvg5er6gIcqZUCmTn+w2G/1N5/zi2OKk2lus8ayKWGAJUYbnJ9
d0wjwgd+2t7AAYp640CIzq5psE5r7KEa6EDjsWjzPInIQHtPSMe17oHMfyKg38KO
F/9v2JFDFYeHiHlT+oTA8L3sEsZHtXRXIwoHEjeUDV+v4HgP1pe5jN8oewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGA8qboCRKvj+vP1bih2EC/LcEBjMB8GA1UdIwQY
MBaAFDIBD3AnbkGNWPCMVqeagrmayhdjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEt
MmY2ODIxNmI3NDI0LzEvWUR5cHVnSkVxLVA2OF9WdUtIWVFMOHR3UUdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNjQ4ZmItZjUwYi00Y2MyLWEyYjEtMmY2ODIxNmI3NDI0
LzEvTWdFUGNDZHVRWTFZOEl4V3A1cUN1WnJLRjJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVj4MA0G
CSqGSIb3DQEBCwUAA4IBAQAPRSFJ/KeM0odAxpSnIu1688fJngRwg2+F1eMtrRZa
8fokXvkjNn5cU+CrvjG/ZIw5wcK/QEx+dPRcq0aIMdnnEe8wHEuAsObhHTPlBf3M
vJo+Y/TZZiTGf75OxeEs+gEOeRiSFP9eRXa7CXcbrtr1FCgQkSPhVxpQPMEt+dsa
vBjYWDm5T3UM36OBSLNBAyTHXyWYZbM3BrlE7yqLep6mRID2vrvHRMfeXOCgyaJE
YHOK2Va5ahkIixZm9r+X9fch5TQtiMk7UqyAtxvhTUi8HKG5p0IPQaqFFIen4s47
sdunwc7sdubTOZhNohl2xCsQOAywtkZhYk7YRu77HpzP
-----END CERTIFICATE-----
Generated at Thu May 2 09:00:46 2024 by rpki-client on console-fra.rpki-client.org