Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/yj-2m89JJxJjpMAz6LNTmZOGRlA.roa
File: yj-2m89JJxJjpMAz6LNTmZOGRlA.roa (raw, json)
Hash identifier: kF0McqQvZIyKcWADP/i5gUImD4jortfKwAVoZvgPwyc=
Subject key identifier: CA:3F:B6:9B:CF:49:27:12:63:A4:C0:33:E8:B3:53:99:93:86:46:50
Certificate issuer: /CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Certificate serial: 018CC492AB1C65677FCDE94CB3FF1EA90847
Authority key identifier: 16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/yj-2m89JJxJjpMAz6LNTmZOGRlA.roa
Signing time: Mon 01 Jan 2024 10:29:55 +0000
ROA not before: Mon 01 Jan 2024 10:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60245
IP address blocks: 185.54.238.0/23 maxlen: 23
185.54.237.0/24 maxlen: 24
185.54.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:ab:1c:65:67:7f:cd:e9:4c:b3:ff:1e:a9:08:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=162bc6f6bac142a03abb1a7ad91690683f03a4dc
Validity
Not Before: Jan 1 10:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca3fb69bcf49271263a4c033e8b3539993864650
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:e7:5f:dc:a9:43:12:0c:82:be:4a:6f:a3:88:
5e:b9:c9:b5:c5:fa:91:18:8e:a5:33:f0:28:57:24:
a9:5c:11:72:78:56:7b:b6:3d:57:5e:86:71:f9:42:
d5:2b:d6:08:8e:98:f5:ec:2d:6c:89:93:7e:19:1d:
33:40:72:31:63:95:2a:73:89:be:69:b2:ba:6c:70:
5f:94:4d:4c:3b:85:b1:05:2d:bc:68:ba:8d:4c:c5:
c2:af:6f:df:44:10:a1:e9:5d:ff:19:58:01:b0:b0:
71:f0:85:7d:a4:18:08:ba:66:33:3c:96:3b:6c:00:
e4:c8:96:21:99:ac:4c:27:d0:d0:f5:8c:7a:d4:1c:
0a:3a:ae:29:a5:8b:8e:3f:3b:61:c4:33:8e:45:54:
f9:9b:76:c3:b8:05:23:ee:d7:8f:01:53:e3:98:d3:
49:05:18:1c:ec:e8:d2:87:81:2c:fa:ac:82:b1:6d:
07:9a:b9:2a:77:f3:70:dd:ef:a0:d1:9a:62:f5:ed:
f6:c0:ef:a4:1c:e7:0f:a2:c3:6a:8a:23:19:f9:55:
46:62:b3:17:5b:40:cf:d4:85:bf:d6:0c:76:2e:dd:
c5:d7:61:9e:93:7c:78:7b:49:e5:8e:e0:c5:c9:50:
ef:30:cb:f2:d5:b3:3b:95:46:15:a8:a5:e3:6b:31:
60:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3F:B6:9B:CF:49:27:12:63:A4:C0:33:E8:B3:53:99:93:86:46:50
X509v3 Authority Key Identifier:
keyid:16:2B:C6:F6:BA:C1:42:A0:3A:BB:1A:7A:D9:16:90:68:3F:03:A4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FivG9rrBQqA6uxp62RaQaD8DpNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/yj-2m89JJxJjpMAz6LNTmZOGRlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/20581f-bd5e-4ea1-8217-0be7aae8a0d1/1/FivG9rrBQqA6uxp62RaQaD8DpNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.236.0/22
Signature Algorithm: sha256WithRSAEncryption
26:6c:0c:9a:e6:99:84:87:4a:90:ff:11:bc:77:83:28:1b:36:
95:4f:c6:a1:b3:57:6c:de:a6:bd:0a:79:b4:ad:ff:e2:15:ff:
00:6a:86:94:97:97:77:3a:4b:f3:b1:e8:d5:6e:4d:9c:25:1a:
9d:31:f3:f1:d4:23:39:47:d6:db:a6:d0:30:f7:1f:c8:aa:bf:
12:c2:f4:b8:d1:f6:7e:01:b7:2d:46:30:7a:c7:0c:12:ce:8c:
10:9e:2d:ac:dd:87:0b:c8:9b:1b:ee:9d:3c:e3:da:52:e3:bc:
de:c0:c5:3a:73:d0:e3:e8:33:f7:e0:b2:78:c2:a4:8e:9e:6f:
91:44:5e:5b:78:5e:a9:9e:96:fe:42:2f:e0:3c:c7:f6:82:9b:
7e:57:09:20:4f:34:d6:c7:cc:40:67:f2:6c:46:5f:fe:c4:ac:
37:89:2c:ed:8a:4c:c6:8d:6d:2c:43:7b:25:3c:5b:71:25:09:
e8:f8:c0:40:a1:b1:5c:6d:4a:69:d4:bf:1b:c4:0e:27:8f:12:
24:62:c6:e5:43:16:a9:fd:9d:c2:9e:d9:21:eb:07:bf:77:d2:
b4:99:0f:c1:28:17:50:98:3c:90:ce:11:5d:f0:a7:53:41:07:
c1:ac:a7:00:d7:f3:e9:ac:8b:91:39:6b:36:a3:e5:f5:57:33:
09:94:01:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkqscZWd/zelMs/8eqQhHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MmJjNmY2YmFjMTQyYTAzYWJiMWE3YWQ5MTY5MDY4M2Yw
M2E0ZGMwHhcNMjQwMTAxMTAyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTNmYjY5YmNmNDkyNzEyNjNhNGMwMzNlOGIzNTM5OTkzODY0NjUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgudf3KlDEgyCvkpvo4heucm1xfqR
GI6lM/AoVySpXBFyeFZ7tj1XXoZx+ULVK9YIjpj17C1siZN+GR0zQHIxY5Uqc4m+
abK6bHBflE1MO4WxBS28aLqNTMXCr2/fRBCh6V3/GVgBsLBx8IV9pBgIumYzPJY7
bADkyJYhmaxMJ9DQ9Yx61BwKOq4ppYuOPzthxDOORVT5m3bDuAUj7tePAVPjmNNJ
BRgc7OjSh4Es+qyCsW0Hmrkqd/Nw3e+g0Zpi9e32wO+kHOcPosNqiiMZ+VVGYrMX
W0DP1IW/1gx2Lt3F12Gek3x4e0nljuDFyVDvMMvy1bM7lUYVqKXjazFg0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMo/tpvPSScSY6TAM+izU5mThkZQMB8GA1UdIwQY
MBaAFBYrxva6wUKgOrsaetkWkGg/A6TcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yMDU4MWYtYmQ1ZS00ZWExLTgyMTct
MGJlN2FhZThhMGQxLzEveWotMm04OUpKeEpqcE1BejZMTlRtWk9HUmxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yMDU4MWYtYmQ1ZS00ZWExLTgyMTctMGJlN2FhZThhMGQx
LzEvRml2RzlyckJRcUE2dXhwNjJSYVFhRDhEcE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuTbsMA0G
CSqGSIb3DQEBCwUAA4IBAQAmbAya5pmEh0qQ/xG8d4MoGzaVT8ahs1ds3qa9Cnm0
rf/iFf8AaoaUl5d3OkvzsejVbk2cJRqdMfPx1CM5R9bbptAw9x/Iqr8SwvS40fZ+
AbctRjB6xwwSzowQni2s3YcLyJsb7p0849pS47zewMU6c9Dj6DP34LJ4wqSOnm+R
RF5beF6pnpb+Qi/gPMf2gpt+VwkgTzTWx8xAZ/JsRl/+xKw3iSztikzGjW0sQ3sl
PFtxJQno+MBAobFcbUpp1L8bxA4njxIkYsblQxap/Z3Cntkh6we/d9K0mQ/BKBdQ
mDyQzhFd8KdTQQfBrKcA1/PprIuROWs2o+X1VzMJlAHK
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:14:40 2024 by rpki-client on console-ams.rpki-client.org