Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/YbdnsKKcLWXNt16ld8ZvdDfRwvI.roa
File: YbdnsKKcLWXNt16ld8ZvdDfRwvI.roa (raw, json)
Hash identifier: xG7IHAySfija7pf7oM9P1hrZ7cvpaRte6EMf43t62U8=
Subject key identifier: 61:B7:67:B0:A2:9C:2D:65:CD:B7:5E:A5:77:C6:6F:74:37:D1:C2:F2
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 018CC56DED549882D5D7FD245DA8515B357A
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/YbdnsKKcLWXNt16ld8ZvdDfRwvI.roa
Signing time: Mon 01 Jan 2024 14:29:24 +0000
ROA not before: Mon 01 Jan 2024 14:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3356
IP address blocks: 45.135.136.0/24 maxlen: 24
5.182.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:ed:54:98:82:d5:d7:fd:24:5d:a8:51:5b:35:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 14:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61b767b0a29c2d65cdb75ea577c66f7437d1c2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0b:58:c9:0f:19:4a:c8:0f:24:8f:65:b2:ab:
c0:fd:55:d0:49:06:d4:79:36:6f:67:e5:13:4f:89:
34:5b:70:7b:80:d1:ab:e0:4c:dd:f4:60:5e:71:e2:
ee:13:08:ce:7b:28:1a:28:07:8c:27:63:ab:ac:51:
75:04:58:cb:b4:ee:54:da:36:66:f4:bb:c8:ba:4b:
ee:9f:e8:f0:eb:f2:d9:c0:08:3f:85:45:7b:e4:2a:
8a:88:2a:c5:f8:71:96:8a:0d:4a:84:a8:21:d6:7c:
40:90:f3:c1:bb:b5:44:e6:4f:62:c2:e0:43:ae:9b:
f5:b8:08:60:7f:5c:86:bd:87:22:cd:a7:6e:58:5a:
ba:49:9f:ec:37:da:d5:06:56:a1:40:e3:54:3b:32:
e9:67:a7:e7:83:07:e7:9d:f9:7c:be:7d:9a:c6:b6:
c5:5a:32:4c:8e:54:de:0c:e3:cb:3d:84:d1:39:aa:
5a:ca:54:89:c3:41:56:14:a9:25:ee:ed:06:cb:e5:
94:08:e4:e4:f0:ff:07:bd:b7:74:1f:e9:73:43:22:
36:7d:af:8b:a8:d6:19:0c:9d:50:c1:d0:29:ef:fa:
4c:4e:db:14:8a:4f:d6:c6:cb:b6:64:83:56:56:a6:
48:74:ff:60:9c:39:ca:b7:29:ac:c1:8b:7f:55:6f:
66:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:B7:67:B0:A2:9C:2D:65:CD:B7:5E:A5:77:C6:6F:74:37:D1:C2:F2
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/YbdnsKKcLWXNt16ld8ZvdDfRwvI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.120.0/22
45.135.136.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:60:6b:04:2f:fb:9f:93:84:72:18:9a:9c:6e:b0:35:9f:ca:
11:58:ec:34:bb:49:a7:1e:27:a8:03:12:df:d8:cd:20:6f:25:
b5:56:e2:da:f5:57:2f:a4:c8:f9:fe:74:e5:f7:cb:78:f4:06:
f7:f3:3f:2d:e1:ed:fa:6c:4e:bc:70:69:f2:5a:59:fd:58:bc:
fe:0a:ef:a6:30:75:ff:5b:9b:a8:76:2b:40:92:2c:47:b4:1e:
d3:f4:50:f1:d3:d1:cb:29:27:f2:06:80:1f:65:1b:2c:18:f5:
9a:64:5d:09:2e:13:1b:42:1c:74:e5:e5:d3:01:16:69:e3:70:
46:88:8c:0b:c7:47:09:af:f5:5f:ae:15:fc:3b:05:c0:c8:fb:
ac:07:77:f4:f8:63:3d:62:ba:8e:b2:b5:7e:59:58:26:3b:c3:
0c:38:66:95:31:e5:51:9f:c7:52:ca:d8:bf:07:14:f5:3f:cb:
83:57:1a:0d:6a:04:f5:cb:28:f3:3b:36:26:4b:71:78:4e:35:
de:b0:34:3d:00:ff:95:5c:b9:15:81:57:f9:6f:17:9a:d9:68:
f3:b0:5d:05:47:a0:ff:46:d0:dd:68:97:41:13:9e:b0:0a:51:
ad:9a:e2:e2:b1:1b:1e:d0:88:80:07:a1:f8:5e:2f:49:f3:2a:
52:d1:84:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:40:27 2024 by rpki-client on console-ams.rpki-client.org