Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/YE8yNulznQ3jys62mLykQ7POd_8.roa
File: YE8yNulznQ3jys62mLykQ7POd_8.roa (raw, json)
Hash identifier: /fYIcrL6YB2K4QRrOezR03EIgdKEHzA9OYxQP2ZLraw=
Subject key identifier: 60:4F:32:36:E9:73:9D:0D:E3:CA:CE:B6:98:BC:A4:43:B3:CE:77:FF
Certificate issuer: /CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Certificate serial: 018CC9BB1E475E2A4C67D7B307424F935632
Authority key identifier: AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/YE8yNulznQ3jys62mLykQ7POd_8.roa
Signing time: Tue 02 Jan 2024 10:32:12 +0000
ROA not before: Tue 02 Jan 2024 10:32:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25386
IP address blocks: 62.80.160.0/19 maxlen: 20
185.117.240.0/22 maxlen: 23
2a06:9000::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:1e:47:5e:2a:4c:67:d7:b3:07:42:4f:93:56:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbd8e99f827ff95d281d4ff7bc27f045fabf105
Validity
Not Before: Jan 2 10:32:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=604f3236e9739d0de3caceb698bca443b3ce77ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6d:f1:1c:81:24:25:e6:b5:b8:a0:f0:5f:8b:
6d:b5:1c:0a:c8:c1:62:cc:de:5c:93:e4:f6:d1:0b:
29:76:81:9b:df:ff:cd:2f:0f:83:f5:32:b7:67:e7:
ab:2a:f1:87:e9:14:e4:b5:88:08:1c:87:76:dd:c4:
17:74:d8:6c:ca:f7:dc:aa:67:ee:21:75:64:99:b9:
2f:df:18:29:6e:4b:cf:a1:3c:19:f0:77:25:7a:36:
6f:23:d6:31:84:1c:f0:3c:22:04:77:d7:92:94:d6:
cc:2d:e1:cb:5e:b9:82:70:76:a7:ef:03:0d:59:e7:
cd:28:ce:42:91:19:3a:c7:a1:57:19:dc:7c:8f:6e:
cb:8e:90:4f:be:9b:91:3e:4d:b6:48:7a:66:dc:92:
3f:6b:f5:07:f8:81:2a:a5:e5:59:f8:d1:68:cb:90:
47:18:f0:db:a5:51:dd:12:ce:20:81:35:f0:a0:e1:
27:8c:68:e1:a6:4c:92:86:52:ee:11:7f:a3:7f:41:
e1:e8:91:ad:47:20:1a:c3:81:40:74:12:ed:73:16:
ce:d1:f5:df:cf:e3:ef:cb:00:3d:2d:ca:a4:6f:ba:
e1:ad:72:b6:db:14:4f:f5:80:94:a9:0b:79:ec:b1:
a2:09:fd:77:b3:09:3e:ff:d2:8c:36:f3:df:93:4f:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4F:32:36:E9:73:9D:0D:E3:CA:CE:B6:98:BC:A4:43:B3:CE:77:FF
X509v3 Authority Key Identifier:
keyid:AD:BD:8E:99:F8:27:FF:95:D2:81:D4:FF:7B:C2:7F:04:5F:AB:F1:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb2Omfgn_5XSgdT_e8J_BF-r8QU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/YE8yNulznQ3jys62mLykQ7POd_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/b993c7-fa8d-43c0-9374-1d31a1960147/1/rb2Omfgn_5XSgdT_e8J_BF-r8QU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.80.160.0/19
185.117.240.0/22
IPv6:
2a06:9000::/29
Signature Algorithm: sha256WithRSAEncryption
93:76:39:ab:5c:2c:95:e1:aa:2c:9d:5c:33:b6:9a:c7:62:55:
90:f2:02:83:57:6d:b8:99:f7:01:3a:f4:75:3c:81:86:56:25:
fe:59:9d:b6:33:95:be:59:8b:2d:03:25:be:98:9b:7a:1a:28:
1a:64:b2:93:7b:39:31:d6:85:5a:49:22:52:55:0f:42:54:80:
5b:50:7b:cb:5a:a5:80:48:2b:ed:97:a6:58:1d:95:bb:81:88:
db:f4:75:c6:5c:48:b6:7f:12:6b:a8:52:c2:22:f7:1c:bf:e0:
1c:36:96:14:6e:21:75:47:3b:4a:87:d0:fd:e1:ae:25:cf:bc:
28:85:85:62:b2:7a:8b:c7:e6:e9:49:e1:ea:2d:db:38:52:cb:
bb:50:cf:c9:cb:75:3f:a5:29:35:f3:5d:f5:2a:01:f1:9c:f5:
86:73:ee:79:24:91:3c:61:4c:c2:ff:83:3d:3c:6e:25:07:7e:
d6:86:54:29:cc:a7:28:b9:ac:b2:c2:dd:92:ce:e6:2a:8c:f6:
fd:d5:69:a1:28:64:57:a8:bb:e3:9e:dc:c3:05:f2:51:b3:46:
3c:75:32:ff:1b:26:5d:4a:19:45:31:ef:9d:8e:70:42:53:c3:
75:5d:18:99:a0:0a:21:ee:9e:87:8f:d2:2a:26:cf:34:bf:1d:
e2:b0:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:47:09 2024 by rpki-client on console-ams.rpki-client.org