Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ygY7DHAxR9734x34YZvi9fo240k.roa
File: ygY7DHAxR9734x34YZvi9fo240k.roa (raw, json)
Hash identifier: sfX2GWFH9sR+2Ur1vEMhKFpM9OkkK5YPK30a/sp4B8o=
Subject key identifier: CA:06:3B:0C:70:31:47:DE:F7:E3:1D:F8:61:9B:E2:F5:FA:36:E3:49
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018E17DCA9DC8B3062FF6C3F64F2DDBC82E1
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ygY7DHAxR9734x34YZvi9fo240k.roa
Signing time: Thu 07 Mar 2024 07:42:01 +0000
ROA not before: Thu 07 Mar 2024 07:42:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44677
IP address blocks: 62.118.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:17:dc:a9:dc:8b:30:62:ff:6c:3f:64:f2:dd:bc:82:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Mar 7 07:42:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca063b0c703147def7e31df8619be2f5fa36e349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:28:df:5e:26:a3:a1:ed:f4:3e:f1:83:a0:03:
36:17:a0:f2:98:b8:0e:ed:24:ed:76:b4:63:6d:7d:
d6:31:e8:58:9e:29:2a:70:eb:e0:a8:81:6b:e6:6a:
15:ce:61:58:26:12:cb:00:46:69:7a:78:e1:d1:64:
b3:6f:b7:3f:40:85:38:54:65:e7:66:82:9d:41:81:
1b:6f:56:ea:f9:08:11:f0:79:d3:6e:62:40:35:97:
43:be:c6:2a:d3:1c:a9:1d:9a:e1:bd:af:d9:93:e1:
cd:1a:7d:9d:75:4b:81:53:e4:3e:af:f4:ff:15:91:
3e:f0:e5:d0:13:f5:cd:17:d3:30:2e:e5:4c:ec:f1:
37:18:b5:11:51:d0:06:5d:ca:6e:89:78:b2:b5:e7:
d4:bf:b1:c1:33:1d:29:b3:c5:bc:71:70:50:fd:1f:
58:8f:dc:82:8c:1f:93:14:a1:42:4e:25:68:89:2c:
e3:7e:9f:a8:6f:69:62:95:39:99:1a:25:81:cc:37:
8c:c6:ea:69:a4:9f:ea:cc:6d:2c:7a:8d:f5:81:f0:
d3:7d:73:49:b3:39:5f:83:cd:f8:c0:61:24:9e:3a:
9c:7c:b2:4a:b0:a3:e5:af:a7:17:af:bd:e1:27:c1:
2a:c6:86:64:c2:18:6e:bd:37:d6:2f:b7:86:a9:4c:
59:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:06:3B:0C:70:31:47:DE:F7:E3:1D:F8:61:9B:E2:F5:FA:36:E3:49
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/ygY7DHAxR9734x34YZvi9fo240k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.118.244.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:55:61:51:0d:be:5f:67:cc:de:27:9d:c3:58:c5:5a:8b:92:
03:a9:63:93:40:1f:5e:a6:27:ff:93:ab:7f:e9:b0:10:61:69:
0c:56:ff:60:b0:29:ee:31:bb:d2:c1:c0:45:4d:b5:92:fd:1b:
39:b6:a1:22:c6:a2:52:96:e3:99:76:03:e7:89:b5:e5:11:d1:
3f:45:4a:e1:b5:e6:bb:1d:d4:87:2b:b3:10:09:35:5f:6c:f8:
44:6d:66:e0:56:10:43:e2:d9:f6:44:13:2f:35:9a:22:ee:e7:
83:d1:94:4a:64:b4:c1:8f:88:06:9f:94:b7:a9:d6:b5:d2:57:
98:6e:47:d9:d7:ad:ae:55:7c:cc:d5:a4:9e:7d:6d:81:a3:28:
4f:9f:8a:ca:e0:4e:76:bd:7d:e7:c9:68:35:65:ba:35:4e:b1:
c3:02:75:e2:4c:44:3e:09:d7:c9:51:46:93:a9:a4:77:1e:a2:
7f:3c:cf:9c:f2:3f:12:52:fe:b2:e2:6a:e0:7f:f1:fd:0b:85:
f3:27:27:04:6d:df:57:b5:c6:fe:83:7d:8d:a9:f9:36:82:4c:
ff:20:60:bf:e9:19:54:c0:26:c7:5b:8b:e0:33:24:5a:7d:04:
e1:6d:30:27:65:5b:19:40:81:e0:de:fd:ab:7d:33:08:27:d5:
be:1c:8a:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4X3KncizBi/2w/ZPLdvILhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmUxYzg1OTQwOWFjNWRlNzQxNGM0OGY4NjczOTkxM2Jl
NmI3ZTUwHhcNMjQwMzA3MDc0MjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTA2M2IwYzcwMzE0N2RlZjdlMzFkZjg2MTliZTJmNWZhMzZlMzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSjfXiajoe30PvGDoAM2F6DymLgO
7STtdrRjbX3WMehYnikqcOvgqIFr5moVzmFYJhLLAEZpenjh0WSzb7c/QIU4VGXn
ZoKdQYEbb1bq+QgR8HnTbmJANZdDvsYq0xypHZrhva/Zk+HNGn2ddUuBU+Q+r/T/
FZE+8OXQE/XNF9MwLuVM7PE3GLURUdAGXcpuiXiytefUv7HBMx0ps8W8cXBQ/R9Y
j9yCjB+TFKFCTiVoiSzjfp+ob2lilTmZGiWBzDeMxupppJ/qzG0seo31gfDTfXNJ
szlfg834wGEknjqcfLJKsKPlr6cXr73hJ8EqxoZkwhhuvTfWL7eGqUxZOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMoGOwxwMUfe9+Md+GGb4vX6NuNJMB8GA1UdIwQY
MBaAFK7+HIWUCaxd50FMSPhnOZE75rflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEt
NDI4NDU4Njc5Y2U0LzEveWdZN0RIQXhSOTczNHgzNFladmk5Zm8yNDBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS80NTFmMDQtZTNjOS00NGVhLWE2YTEtNDI4NDU4Njc5Y2U0
LzEvcnY0Y2haUUpyRjNuUVV4SS1HYzVrVHZtdC1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCPnb0MA0G
CSqGSIb3DQEBCwUAA4IBAQBbVWFRDb5fZ8zeJ53DWMVai5IDqWOTQB9epif/k6t/
6bAQYWkMVv9gsCnuMbvSwcBFTbWS/Rs5tqEixqJSluOZdgPnibXlEdE/RUrhtea7
HdSHK7MQCTVfbPhEbWbgVhBD4tn2RBMvNZoi7ueD0ZRKZLTBj4gGn5S3qda10leY
bkfZ162uVXzM1aSefW2BoyhPn4rK4E52vX3nyWg1Zbo1TrHDAnXiTEQ+CdfJUUaT
qaR3HqJ/PM+c8j8SUv6y4mrgf/H9C4XzJycEbd9Xtcb+g32Nqfk2gkz/IGC/6RlU
wCbHW4vgMyRafQThbTAnZVsZQIHg3v2rfTMIJ9W+HIqS
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:46:19 2024 by rpki-client on console-fra.rpki-client.org