Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/AS_YRyCOQqctYdpBs_xGqPWT2Ts.roa
File: AS_YRyCOQqctYdpBs_xGqPWT2Ts.roa (raw, json)
Hash identifier: mHi+aT8ucu0gYQBkDEbSYCftREywdiOBXbArdIlQ/hc=
Subject key identifier: 01:2F:D8:47:20:8E:42:A7:2D:61:DA:41:B3:FC:46:A8:F5:93:D9:3B
Certificate issuer: /CN=99282d77c662e68bb87e83338b76ad6bead93185
Certificate serial: 018CC500EB1B633BD79DC3C3A60A54E09EF8
Authority key identifier: 99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/AS_YRyCOQqctYdpBs_xGqPWT2Ts.roa
Signing time: Mon 01 Jan 2024 12:30:20 +0000
ROA not before: Mon 01 Jan 2024 12:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206784
IP address blocks: 185.176.136.0/22 maxlen: 32
2a0a:1780::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:eb:1b:63:3b:d7:9d:c3:c3:a6:0a:54:e0:9e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99282d77c662e68bb87e83338b76ad6bead93185
Validity
Not Before: Jan 1 12:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=012fd847208e42a72d61da41b3fc46a8f593d93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:06:ad:b6:be:b1:7b:9b:9c:ff:5a:06:69:
f1:cb:a7:2f:d2:09:16:ce:cf:b4:1b:15:b8:be:af:
e1:95:12:06:10:1d:01:5f:5c:d5:85:cb:f1:7b:d6:
44:21:d6:1f:16:ee:1c:55:1e:fa:64:f5:bc:fc:63:
4e:78:5c:c1:f3:a0:44:29:ac:b6:36:79:1b:4b:10:
45:4f:af:bc:52:fd:cb:8e:9b:e5:2e:33:b7:3c:5b:
f2:65:c2:8b:5f:61:fd:17:6d:c8:9d:75:20:7e:08:
cf:a0:b4:18:9a:cb:87:88:78:fb:67:2f:88:19:47:
24:ef:e7:65:a5:8e:1a:d4:71:ca:3a:c7:44:e4:ec:
56:4a:0b:f3:78:42:69:95:f9:f7:16:80:d9:99:53:
e7:17:ba:d9:47:c5:78:65:ca:cb:12:cb:e4:f4:2a:
91:74:6b:e0:95:e1:72:79:7c:12:9d:43:d9:70:90:
50:61:cf:2d:ee:77:6a:8f:d8:f0:e7:8f:b2:e7:61:
80:8d:ac:f1:5a:1d:97:17:2e:5a:51:42:30:0b:5c:
5c:0c:12:b9:ce:c6:8d:80:a5:20:b5:44:59:69:6a:
27:a2:b9:cf:fc:d9:94:77:b3:41:f5:4c:61:81:46:
1f:c9:88:03:d2:c8:66:cf:fb:ca:08:78:c7:50:0a:
48:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2F:D8:47:20:8E:42:A7:2D:61:DA:41:B3:FC:46:A8:F5:93:D9:3B
X509v3 Authority Key Identifier:
keyid:99:28:2D:77:C6:62:E6:8B:B8:7E:83:33:8B:76:AD:6B:EA:D9:31:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSgtd8Zi5ou4foMzi3ata-rZMYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/AS_YRyCOQqctYdpBs_xGqPWT2Ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/61c61d-5ed8-4766-9b4b-056b9c231f34/1/mSgtd8Zi5ou4foMzi3ata-rZMYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.136.0/22
IPv6:
2a0a:1780::/29
Signature Algorithm: sha256WithRSAEncryption
58:b3:ee:4f:23:bd:72:c7:ac:65:a5:5a:b1:4c:7b:ac:90:19:
b5:d9:78:3f:33:64:3c:dd:37:c0:f7:67:da:58:25:72:41:7e:
0b:21:8f:15:ce:af:f4:f8:7f:62:d7:c0:3b:52:49:66:ad:00:
b4:b7:8a:12:5a:6e:99:92:05:31:ae:99:8b:69:52:b4:6b:b9:
0b:1a:2c:19:ee:0e:14:83:ad:34:7b:07:59:1f:e7:c3:f8:83:
4e:38:ec:b4:b1:ca:f5:da:64:e7:3f:8d:1a:d0:03:d3:52:ae:
3b:04:5c:14:7d:21:94:ed:c1:4d:4b:4d:81:33:ef:d2:9f:37:
21:62:aa:09:68:1f:75:68:9c:76:67:9f:2c:1e:a8:43:42:0b:
9f:ae:67:f8:48:10:13:12:27:93:c1:7b:55:89:15:dc:8f:8e:
7c:19:e3:af:55:e6:1c:34:46:2d:2a:78:d9:4e:9d:84:54:db:
d9:8f:19:59:9e:35:17:e8:98:14:83:69:48:e2:71:e2:bb:93:
c6:06:7d:4d:44:40:d4:79:8c:8a:33:f8:ca:23:e9:2e:18:95:
17:13:c1:34:1b:0d:6b:8a:ac:6e:cb:4f:98:83:b8:d4:4d:a9:
fa:d2:07:6d:61:9f:e9:26:c8:fd:9d:e1:39:42:3f:13:df:82:
54:76:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:42:40 2024 by rpki-client on console-ams.rpki-client.org