Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/YOgTQbPxDKik_ykSfpOCKy8lR4s.roa
File: YOgTQbPxDKik_ykSfpOCKy8lR4s.roa (raw, json)
Hash identifier: PZA5b69DTKTF2UiEA7rdeb4ibzPiF/swOT4jbWML7eY=
Subject key identifier: 60:E8:13:41:B3:F1:0C:A8:A4:FF:29:12:7E:93:82:2B:2F:25:47:8B
Certificate issuer: /CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Certificate serial: 018D4564C5A3EAD9EF813CF5C5BF06471360
Authority key identifier: 21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/YOgTQbPxDKik_ykSfpOCKy8lR4s.roa
Signing time: Fri 26 Jan 2024 10:50:48 +0000
ROA not before: Fri 26 Jan 2024 10:50:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 45.132.208.0/22 maxlen: 24
83.139.202.0/23 maxlen: 24
83.139.212.0/22 maxlen: 24
83.139.216.0/22 maxlen: 24
83.139.220.0/23 maxlen: 24
83.139.224.0/20 maxlen: 24
83.139.242.0/23 maxlen: 24
83.139.244.0/23 maxlen: 24
85.31.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:45:64:c5:a3:ea:d9:ef:81:3c:f5:c5:bf:06:47:13:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c394c9b3a36b69f9ee5f8936a2f51b95eaceb4
Validity
Not Before: Jan 26 10:50:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60e81341b3f10ca8a4ff29127e93822b2f25478b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:6e:20:38:cc:86:b8:b8:13:a7:05:3c:e8:1f:
af:bc:d8:24:10:bf:71:bd:fe:13:f5:cc:d0:52:40:
43:bd:72:ad:17:21:3e:36:11:17:e6:d2:ce:56:8f:
0b:c0:0e:58:93:0d:82:1b:71:ad:ae:bd:06:a7:14:
59:21:bc:bd:c7:ed:dc:4a:15:86:bb:09:da:95:48:
55:ca:ea:9e:d1:53:b1:31:1b:fb:0f:83:3c:5e:b9:
71:5a:af:ee:5e:08:db:f0:2b:bd:74:b4:33:fc:7e:
99:f1:04:80:e5:47:b8:c3:a1:92:51:8f:cf:eb:cf:
88:19:0e:7a:cb:91:a8:4f:76:63:04:45:cb:6a:ed:
a5:cd:3a:85:cd:88:96:50:7e:83:d8:81:2a:c8:78:
dc:7e:48:05:b3:6d:92:3a:7f:00:a5:09:2a:e4:79:
ef:90:6f:45:9f:48:8f:92:34:e5:a3:66:1e:8b:9b:
d2:87:6a:ea:10:35:bc:2d:df:f8:42:8a:cd:b3:a6:
b1:74:0e:40:c3:6b:04:6f:9b:0c:28:15:95:20:4f:
f4:47:48:c4:f4:fe:37:68:02:6c:70:eb:1d:75:80:
62:23:90:5e:2d:8e:1a:b1:bd:66:2a:35:0f:29:ee:
40:a9:c7:d3:5a:c2:7d:2a:a0:7e:c0:4a:e4:9e:31:
33:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E8:13:41:B3:F1:0C:A8:A4:FF:29:12:7E:93:82:2B:2F:25:47:8B
X509v3 Authority Key Identifier:
keyid:21:C3:94:C9:B3:A3:6B:69:F9:EE:5F:89:36:A2:F5:1B:95:EA:CE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcOUybOja2n57l-JNqL1G5XqzrQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/YOgTQbPxDKik_ykSfpOCKy8lR4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/61facc-669f-4456-963f-1e436dcb85c5/1/IcOUybOja2n57l-JNqL1G5XqzrQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.132.208.0/22
83.139.202.0/23
83.139.212.0-83.139.221.255
83.139.224.0/20
83.139.242.0-83.139.245.255
85.31.160.0/21
Signature Algorithm: sha256WithRSAEncryption
70:b7:3e:48:d1:41:9a:22:f5:24:e1:7e:ac:a4:a6:f3:3a:9d:
24:21:0c:14:7b:ce:66:53:db:ca:f5:46:3d:87:47:2c:61:58:
33:b6:e5:cd:14:32:10:bb:4f:37:d9:9c:81:b4:53:4d:d7:20:
40:25:35:a1:53:a9:2e:7b:13:db:01:36:a3:60:fb:56:1d:c8:
3b:9b:61:c9:35:29:1d:cb:d7:c6:4b:fc:9e:57:48:ee:1e:a8:
ad:dd:3c:cf:f8:98:39:b2:c0:5f:bc:6c:41:cb:52:87:ac:9a:
43:75:8d:a1:ff:ad:19:d3:1e:0b:ba:ea:31:96:80:63:7b:1f:
6e:f6:d7:06:e5:c9:d0:75:69:c2:b5:34:42:cf:af:c1:8d:11:
9b:f7:4f:77:3e:b6:8c:7c:0e:a1:80:d7:ae:08:c6:65:7e:83:
0d:0a:8c:2b:74:ad:70:03:44:56:ca:eb:d9:9b:84:e3:e0:d2:
6d:ed:15:52:50:dd:1c:68:2f:d5:11:99:0e:08:bf:78:79:e6:
34:70:77:55:3d:45:19:54:98:3c:69:92:cd:4b:4f:84:a6:2b:
32:a2:2a:93:e0:6d:aa:4a:c3:ee:2d:15:d7:e8:7e:1a:f4:dd:
26:1c:9f:17:4e:4e:29:39:c3:8f:ca:58:27:70:32:bf:cf:77:
ee:d7:a4:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:06:02 2024 by rpki-client on console-ams.rpki-client.org