Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/YOfk2nW9IP6LRJtgQHChEL_a0iY.roa
File: YOfk2nW9IP6LRJtgQHChEL_a0iY.roa (raw, json)
Hash identifier: hayBcN62R8Im0LxiNF89oMD5POu1dWWjhL/IbJc8X18=
Subject key identifier: 60:E7:E4:DA:75:BD:20:FE:8B:44:9B:60:40:70:A1:10:BF:DA:D2:26
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 01932F6999556133EE0241C8B6D7CE0C12B2
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/YOfk2nW9IP6LRJtgQHChEL_a0iY.roa
Signing time: Fri 15 Nov 2024 10:41:09 +0000
ROA not before: Fri 15 Nov 2024 10:41:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51569
IP address blocks: 45.132.208.0/22 maxlen: 24
83.139.202.0/23 maxlen: 24
83.139.212.0/22 maxlen: 24
83.139.216.0/22 maxlen: 24
83.139.220.0/23 maxlen: 24
83.139.224.0/20 maxlen: 24
83.139.242.0/23 maxlen: 24
83.139.244.0/23 maxlen: 24
85.31.160.0/21 maxlen: 24
2a0c:48c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2f:69:99:55:61:33:ee:02:41:c8:b6:d7:ce:0c:12:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Nov 15 10:41:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60e7e4da75bd20fe8b449b604070a110bfdad226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d3:89:64:3c:99:4b:6a:d5:78:b5:64:43:5c:
77:ea:6c:b1:a3:99:29:45:39:db:a2:0b:ad:2b:1a:
bf:66:25:02:e0:cb:9c:93:85:96:f1:93:d2:75:9e:
b8:3b:91:24:f2:0d:a9:c0:db:3e:7c:9d:bc:96:3e:
ef:b1:01:55:b2:67:2a:af:61:4f:3f:fd:9d:ab:78:
b0:47:03:7c:02:48:a2:86:0b:04:e6:9f:49:52:4d:
47:02:38:c7:96:85:0d:bd:71:56:c1:03:81:37:ff:
45:72:89:e7:e6:03:d7:ec:f9:8b:bb:5f:08:9a:fb:
e4:8e:18:b4:c5:55:1e:5a:28:0d:4d:a1:37:22:bf:
9d:c6:46:b5:12:52:c8:34:bc:c6:a3:93:fa:c5:7b:
f5:e7:72:b3:70:d3:10:8f:30:e9:9c:fc:bc:15:8f:
15:70:a6:a4:f3:5a:9d:9b:d2:ed:7b:2b:e4:15:5a:
f4:9a:81:68:be:72:9b:4d:b9:6b:a6:00:ce:69:5d:
cd:3d:b7:ff:08:ab:e7:b2:5c:8d:42:bb:b4:4a:ef:
20:48:68:4e:97:04:15:fe:dc:83:f8:19:20:19:e3:
a0:4a:77:b4:f2:5e:4c:b3:f9:5e:ec:ad:5a:43:87:
0f:41:72:6f:9a:ba:cd:66:fa:6c:9b:7e:07:29:12:
98:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:E4:DA:75:BD:20:FE:8B:44:9B:60:40:70:A1:10:BF:DA:D2:26
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/YOfk2nW9IP6LRJtgQHChEL_a0iY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.208.0/22
83.139.202.0/23
83.139.212.0-83.139.221.255
83.139.224.0/20
83.139.242.0-83.139.245.255
85.31.160.0/21
IPv6:
2a0c:48c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:27:81:64:12:e5:b1:c5:86:a1:ed:53:c0:6f:4e:5e:1a:77:
d6:7c:2c:7c:87:f9:09:fe:29:80:2a:a4:0a:32:32:69:fc:b9:
d6:d7:7a:2e:55:f4:73:e1:1a:93:d5:8b:2b:57:e5:e2:c5:38:
74:0b:c6:80:90:27:cd:2c:21:93:1f:7e:2f:c3:71:07:90:e9:
e6:02:73:99:de:9a:66:73:35:e1:c0:32:01:6e:9b:1c:aa:ef:
e7:40:59:69:e1:ef:a9:5a:01:39:7d:1f:1b:2b:65:2a:a5:6f:
2b:15:69:cc:11:97:9b:d0:c4:b9:33:39:92:68:a0:8b:a0:af:
82:58:9a:75:57:34:b1:9c:1c:2f:48:78:86:53:cd:e7:60:58:
3b:c7:57:35:c8:3b:fe:88:b3:05:69:51:12:e1:1a:b0:fd:79:
fe:6b:9d:ce:0e:36:5e:f2:25:84:a2:90:ee:37:7c:e5:7a:15:
65:8a:8b:b7:fd:1b:7f:0c:64:65:75:ae:6a:72:78:09:ff:c3:
53:9a:45:90:89:1c:99:d6:82:24:82:22:58:41:63:29:03:8d:
43:b9:0a:86:a9:01:b1:cd:8b:a1:46:7a:67:3e:8b:84:13:67:
f7:11:d4:a7:a2:05:88:56:ad:a0:9a:d4:01:23:20:ff:fa:2f:
c5:a7:1d:46
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:32:54 2024 by rpki-client on console-ams.rpki-client.org