Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/YRlqRY2QVvxQhtkaD_-Au4AD-T0.roa
File: YRlqRY2QVvxQhtkaD_-Au4AD-T0.roa (raw, json)
Hash identifier: OD8Edm2EjjjvP7K5EtqofbQQ1F45yYa9IpVBZNrts0c=
Subject key identifier: 61:19:6A:45:8D:90:56:FC:50:86:D9:1A:0F:FF:80:BB:80:03:F9:3D
Certificate issuer: /CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Certificate serial: 018CC56ED96264D16ECC028C70857C0A5E5C
Authority key identifier: 62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/YRlqRY2QVvxQhtkaD_-Au4AD-T0.roa
Signing time: Mon 01 Jan 2024 14:30:25 +0000
ROA not before: Mon 01 Jan 2024 14:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49173
IP address blocks: 185.141.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:d9:62:64:d1:6e:cc:02:8c:70:85:7c:0a:5e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=625b5cf9e29912448cbbbc86d20561899cdb104d
Validity
Not Before: Jan 1 14:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61196a458d9056fc5086d91a0fff80bb8003f93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5c:f8:08:78:60:ce:74:b8:88:cd:c8:a8:f5:
fa:1a:e7:b1:6c:e3:75:fb:91:10:1a:10:2a:dd:e2:
73:f2:6f:6e:4c:11:53:39:32:f2:83:f2:8c:92:4d:
2b:38:21:ef:a7:d9:60:30:68:f1:ee:a9:8b:d8:7d:
69:a9:fb:44:4e:81:13:83:e4:1a:0c:60:6c:66:47:
60:03:70:ba:79:aa:d4:60:69:85:c2:90:78:68:9e:
ea:e9:5f:db:45:e4:4d:05:d7:1c:a7:1a:c6:1d:b9:
95:a7:6a:a9:33:f3:75:d0:57:1e:f3:42:ae:23:ba:
93:8e:46:c2:38:9d:8d:60:fd:0b:38:f8:63:52:75:
96:2d:42:23:e8:6c:b7:ab:56:7a:52:52:c2:79:31:
e3:ad:63:b3:d8:9e:79:1a:36:dd:1c:d3:2e:b0:20:
d5:e5:fb:21:2b:fe:74:14:0e:3d:e7:06:d6:5f:dd:
b2:6e:7f:89:e4:84:7a:ea:8c:41:97:2a:ee:df:d9:
38:61:d1:56:d3:20:03:da:43:ae:85:f5:6a:ee:eb:
bf:c5:15:9b:6d:40:b9:dc:18:f2:6b:9e:95:02:16:
51:a7:cf:80:21:d2:44:8a:47:f2:18:46:93:80:b4:
00:8d:6e:f4:60:c7:61:66:95:25:d3:58:85:12:c4:
47:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:19:6A:45:8D:90:56:FC:50:86:D9:1A:0F:FF:80:BB:80:03:F9:3D
X509v3 Authority Key Identifier:
keyid:62:5B:5C:F9:E2:99:12:44:8C:BB:BC:86:D2:05:61:89:9C:DB:10:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yltc-eKZEkSMu7yG0gVhiZzbEE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/YRlqRY2QVvxQhtkaD_-Au4AD-T0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/97ccab-d0c8-42e8-8725-a586b07add72/1/Yltc-eKZEkSMu7yG0gVhiZzbEE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.240.0/22
Signature Algorithm: sha256WithRSAEncryption
86:83:3a:46:ca:90:6d:b2:13:9c:b4:d9:10:ab:1a:5d:57:46:
58:ab:1f:35:d7:44:b6:15:2b:80:34:33:8f:da:fc:5b:2b:18:
a3:66:c3:66:13:4d:d4:69:24:36:f5:ee:d9:3c:31:50:46:f6:
3b:51:71:6b:e6:ad:f4:97:1d:f4:56:30:8a:69:45:a7:0f:15:
41:6b:82:b7:24:17:01:b2:e2:ef:79:e1:30:07:15:5b:3c:24:
0e:b7:03:ba:c4:55:aa:d1:c3:6d:47:cf:5e:6a:4d:0d:7a:24:
6e:a4:0c:db:fb:22:12:4d:7c:fc:65:5b:f7:1b:d9:ab:84:ef:
07:7d:0b:9a:39:ff:34:ed:c7:4b:7e:ff:79:b1:04:46:5e:ca:
8f:85:03:74:35:09:e7:46:ba:5a:5b:38:c8:5c:c2:04:e9:f5:
88:1d:03:26:ef:eb:81:85:36:2b:cf:1a:fa:2a:23:55:c4:ef:
78:2c:d1:42:d8:5a:0a:32:93:6c:82:58:f5:28:04:f0:45:27:
6c:b3:b1:17:29:42:e1:dc:78:79:e5:3b:8c:2a:4a:7f:8d:13:
a1:c1:68:96:5f:b6:6c:1b:5d:37:26:eb:e8:b3:e1:80:e2:ed:
0a:97:a2:c6:89:ec:d8:97:00:bc:23:f5:79:ae:3f:c9:49:af:
6a:0f:e5:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbtliZNFuzAKMcIV8Cl5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNWI1Y2Y5ZTI5OTEyNDQ4Y2JiYmM4NmQyMDU2MTg5OWNk
YjEwNGQwHhcNMjQwMTAxMTQzMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTE5NmE0NThkOTA1NmZjNTA4NmQ5MWEwZmZmODBiYjgwMDNmOTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn1z4CHhgznS4iM3IqPX6GuexbON1
+5EQGhAq3eJz8m9uTBFTOTLyg/KMkk0rOCHvp9lgMGjx7qmL2H1pqftEToETg+Qa
DGBsZkdgA3C6earUYGmFwpB4aJ7q6V/bReRNBdccpxrGHbmVp2qpM/N10Fce80Ku
I7qTjkbCOJ2NYP0LOPhjUnWWLUIj6Gy3q1Z6UlLCeTHjrWOz2J55GjbdHNMusCDV
5fshK/50FA495wbWX92ybn+J5IR66oxBlyru39k4YdFW0yAD2kOuhfVq7uu/xRWb
bUC53Bjya56VAhZRp8+AIdJEikfyGEaTgLQAjW70YMdhZpUl01iFEsRHSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGEZakWNkFb8UIbZGg//gLuAA/k9MB8GA1UdIwQY
MBaAFGJbXPnimRJEjLu8htIFYYmc2xBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUt
YTU4NmIwN2FkZDcyLzEvWVJscVJZMlFWdnhRaHRrYURfLUF1NEFELVQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy85N2NjYWItZDBjOC00MmU4LTg3MjUtYTU4NmIwN2FkZDcy
LzEvWWx0Yy1lS1pFa1NNdTd5RzBnVmhpWnpiRUUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuY3wMA0G
CSqGSIb3DQEBCwUAA4IBAQCGgzpGypBtshOctNkQqxpdV0ZYqx8110S2FSuANDOP
2vxbKxijZsNmE03UaSQ29e7ZPDFQRvY7UXFr5q30lx30VjCKaUWnDxVBa4K3JBcB
suLveeEwBxVbPCQOtwO6xFWq0cNtR89eak0NeiRupAzb+yISTXz8ZVv3G9mrhO8H
fQuaOf807cdLfv95sQRGXsqPhQN0NQnnRrpaWzjIXMIE6fWIHQMm7+uBhTYrzxr6
KiNVxO94LNFC2FoKMpNsglj1KATwRSdss7EXKULh3Hh55TuMKkp/jROhwWiWX7Zs
G103Juvos+GA4u0Kl6LGiezYlwC8I/V5rj/JSa9qD+Xw
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:00:27 2024 by rpki-client on console-ams.rpki-client.org