Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YN2tl1cV7qGVCiQbF6Y-hiX4_RQ.roa
File: YN2tl1cV7qGVCiQbF6Y-hiX4_RQ.roa (raw, json)
Hash identifier: 7X0zaArtwHpo5hHCbtBsrCpGmhSH96ZXhJOLD10RjZg=
Subject key identifier: 60:DD:AD:97:57:15:EE:A1:95:0A:24:1B:17:A6:3E:86:25:F8:FD:14
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB3C9D936AB56BA90C14CD553C90CD
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YN2tl1cV7qGVCiQbF6Y-hiX4_RQ.roa
Signing time: Mon 01 Jan 2024 02:29:56 +0000
ROA not before: Mon 01 Jan 2024 02:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209961
IP address blocks: 45.150.44.0/22 maxlen: 22
2.57.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3c:9d:93:6a:b5:6b:a9:0c:14:cd:55:3c:90:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60ddad975715eea1950a241b17a63e8625f8fd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:6f:9f:56:51:69:a2:60:88:0c:79:40:b5:
af:2d:a2:d5:de:51:b3:38:5e:14:9e:a3:44:4d:22:
2a:46:15:93:1d:ef:5b:1b:49:c9:ec:1e:71:4b:6f:
c8:53:ba:89:30:19:13:7f:d2:fb:ce:5e:36:03:6a:
a7:6c:29:48:d0:c0:4c:1a:b3:30:12:1d:8e:61:0b:
a6:7f:29:1a:a5:d9:e7:9a:27:7c:2c:cd:d6:0b:92:
0e:3b:11:92:fb:38:b5:3f:d4:ac:cb:2b:8c:53:ae:
c9:cb:57:67:4c:f2:40:a2:fc:77:bb:5c:e4:f7:e3:
5f:2f:94:16:58:79:42:aa:ba:33:85:49:8f:d4:93:
d1:16:90:dc:64:a7:76:6f:d9:c7:e2:a5:6e:fb:63:
87:7a:8f:39:29:ff:fd:9b:5f:b3:df:72:51:a0:7e:
2f:b7:73:2d:64:5d:c7:7b:9f:46:2f:e6:95:ce:1e:
3c:69:3a:b9:f7:24:64:6e:27:a1:9b:18:d9:31:e2:
f6:a3:cd:54:5f:02:a6:a5:eb:35:fa:28:5b:b9:1a:
77:31:02:e2:ac:95:a5:bf:66:df:c3:5b:9b:0e:2d:
41:94:b8:13:c6:2f:0e:2c:d0:31:45:ce:3e:ad:7f:
4b:66:71:98:e3:36:95:9d:56:f8:8e:ee:f1:9c:c9:
87:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DD:AD:97:57:15:EE:A1:95:0A:24:1B:17:A6:3E:86:25:F8:FD:14
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/YN2tl1cV7qGVCiQbF6Y-hiX4_RQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.212.0/22
45.150.44.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:fa:16:02:60:65:4b:93:fd:7f:e4:bc:cb:ba:4d:ae:fa:d0:
23:20:77:56:cc:7e:6a:61:96:7e:2e:72:dc:1a:f1:4b:14:0d:
39:0e:d2:fc:ba:9e:af:f8:3c:c0:15:5f:0a:5a:92:ee:94:2e:
e4:7d:ee:8b:6e:7c:0b:de:d9:4a:6d:98:f6:ae:07:c2:fd:c1:
4d:2b:9c:51:58:98:98:01:03:6e:cd:e7:f8:e2:e5:cf:b7:45:
af:20:3f:2a:97:cc:6e:77:4e:80:ce:6e:a6:df:65:a5:da:35:
50:4a:c0:9b:d8:e6:d2:36:d6:f7:16:38:98:3b:2d:24:5b:72:
52:ca:a5:ca:4c:9a:2d:99:11:67:7c:4d:99:46:d5:de:62:b7:
3c:1a:76:f3:db:28:26:5c:f6:54:6c:6a:fb:44:ed:ed:f1:b2:
8e:5c:dd:79:4b:fb:13:23:c8:ba:40:25:03:7b:9b:fb:d2:ae:
6b:a7:19:22:d1:3a:c7:2b:72:e3:e5:7f:07:99:e1:9d:14:72:
44:9c:f8:cd:16:c9:63:33:97:3a:ce:7f:eb:53:58:0c:bf:84:
0d:6d:e7:f4:16:bb:61:95:b0:53:82:96:58:97:6b:4f:84:46:
c2:8b:a9:87:4e:1b:05:3a:1e:61:a4:1c:3f:28:8d:58:91:46:
e9:98:21:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:54:50 2024 by rpki-client on console-fra.rpki-client.org