Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/ygHRyobDTgwqn79Qs-y4OgSKW-4.roa
File: ygHRyobDTgwqn79Qs-y4OgSKW-4.roa (raw, json)
Hash identifier: 87SI3xSsXIAGrtWu9gJA0WWnW89a2zsyj0ZcxrGjPTQ=
Subject key identifier: CA:01:D1:CA:86:C3:4E:0C:2A:9F:BF:50:B3:EC:B8:3A:04:8A:5B:EE
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 018CC3495D410E29E470B2A75B9478C7053F
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/ygHRyobDTgwqn79Qs-y4OgSKW-4.roa
Signing time: Mon 01 Jan 2024 04:30:14 +0000
ROA not before: Mon 01 Jan 2024 04:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20559
IP address blocks: 185.52.60.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:5d:41:0e:29:e4:70:b2:a7:5b:94:78:c7:05:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Jan 1 04:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca01d1ca86c34e0c2a9fbf50b3ecb83a048a5bee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2c:44:ee:b7:b4:ba:87:21:26:52:31:83:45:
e4:ff:1f:66:9c:52:c1:e3:d6:aa:89:1f:46:00:66:
5f:91:ad:ec:92:8e:20:cc:7d:70:53:c2:0d:df:1a:
8c:93:6f:33:48:66:ff:71:2f:0c:d3:86:54:ca:3a:
c9:31:22:4d:6a:57:80:70:6f:e5:19:61:40:6c:57:
e1:db:0d:dd:2f:1f:40:80:94:50:22:f8:73:50:e8:
98:ca:72:78:04:e7:3c:0c:01:3f:e7:20:70:21:48:
44:8a:3a:b1:b5:ff:7f:9c:51:cb:05:2a:7f:fe:d7:
0d:cc:10:b4:96:10:8c:a0:ac:a8:ec:23:d8:5d:81:
ea:cc:1e:c8:9c:ac:13:f3:65:56:3f:aa:f2:be:04:
bd:ae:6d:4d:87:12:5a:1d:b1:f7:95:9a:56:e8:d1:
c5:b3:cc:58:dd:42:b8:42:35:56:8e:95:99:77:8d:
93:51:32:30:e2:d1:98:6c:67:ec:ba:89:9b:9d:81:
ff:87:6d:e7:44:6b:6c:85:2c:e1:83:62:ca:45:58:
8e:e3:67:0d:df:e2:da:5c:e5:da:58:ad:68:fb:b9:
11:71:2b:70:e3:47:a6:77:4f:0c:1e:9b:40:5d:92:
db:da:70:ef:05:f6:81:b9:bb:49:fc:da:eb:e9:37:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:01:D1:CA:86:C3:4E:0C:2A:9F:BF:50:B3:EC:B8:3A:04:8A:5B:EE
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/ygHRyobDTgwqn79Qs-y4OgSKW-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.60.0/22
Signature Algorithm: sha256WithRSAEncryption
36:a0:9e:35:cf:e8:8d:35:ab:39:4a:8f:12:34:52:27:d6:dc:
bb:d8:60:18:59:6d:76:fa:9e:87:6e:f4:a6:37:ee:5b:f3:5d:
a9:d7:45:b9:84:04:bc:38:e6:50:58:52:51:8c:9a:4a:a8:12:
4c:3b:a0:b6:2a:97:1d:47:33:c5:f2:b3:6a:b0:34:a6:b0:17:
7a:11:79:78:ad:24:13:fc:ce:23:73:52:ff:52:c6:90:b8:51:
ca:bc:be:f6:5c:82:58:80:47:3a:14:d8:d0:0c:e5:7d:43:be:
fc:ed:9f:6d:b9:94:b6:95:63:36:82:30:cb:a1:ac:7d:ac:d6:
f1:53:03:08:92:8c:27:f9:e7:5d:1e:bb:47:fb:b0:31:f3:4c:
bd:70:33:f2:49:96:4c:fb:fc:f0:45:44:6e:43:a3:2a:f6:dd:
c4:76:19:77:e4:98:96:b0:1e:c7:81:e2:5b:bb:0e:22:59:f4:
73:30:27:4c:05:ab:a4:db:fb:55:b2:37:04:63:ce:e4:13:6e:
9d:82:7e:75:35:70:e6:f7:9d:a3:70:1a:12:02:81:d4:b9:c7:
fc:f8:26:00:ad:5a:19:a8:df:35:19:fa:3f:84:4d:b2:42:47:
46:35:2d:2c:e0:f5:c0:c5:56:75:69:22:b1:a0:ee:df:37:d4:
d0:f5:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:24:47 2024 by rpki-client on console-ams.rpki-client.org