Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/YCQ-Qb2orpiMfTz4qYFyTN3N8Qg.roa
File: YCQ-Qb2orpiMfTz4qYFyTN3N8Qg.roa (raw, json)
Hash identifier: hEUywpr4tC17beAfg58IRvXiBqwqASSRFGMna2I34Yk=
Subject key identifier: 60:24:3E:41:BD:A8:AE:98:8C:7D:3C:F8:A9:81:72:4C:DD:CD:F1:08
Certificate issuer: /CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Certificate serial: 018F13D357CEBE1238101A9B0F3151868668
Authority key identifier: A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/YCQ-Qb2orpiMfTz4qYFyTN3N8Qg.roa
Signing time: Thu 25 Apr 2024 05:56:08 +0000
ROA not before: Thu 25 Apr 2024 05:56:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3268
IP address blocks: 82.116.192.0/19 maxlen: 19
82.116.202.0/24 maxlen: 24
82.116.208.0/24 maxlen: 24
2a0d:8700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:13:d3:57:ce:be:12:38:10:1a:9b:0f:31:51:86:86:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a721082c80abaf95fad7ea60f3c5ec0e05e28edc
Validity
Not Before: Apr 25 05:56:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60243e41bda8ae988c7d3cf8a981724cddcdf108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:bc:32:17:ca:07:af:e5:73:ab:15:0a:99:7d:
0f:99:25:fe:85:b9:72:f3:db:71:27:4b:61:2c:b4:
e7:e1:fa:86:90:36:34:0c:fa:15:9c:93:c8:f1:3f:
67:1f:f0:f7:88:21:ec:90:5e:05:aa:fd:2b:0b:07:
c4:fc:63:35:dd:d4:6c:5c:25:23:aa:82:9f:42:10:
bf:d9:d7:60:1e:c3:fc:0c:89:b7:03:1c:31:da:a8:
c8:45:58:b1:9a:c8:41:10:cb:05:97:d5:f0:a5:5b:
8b:7d:7e:ae:b2:c7:9c:21:98:8a:cb:58:8e:9f:7b:
70:6d:fb:6b:a8:b1:52:b1:5b:bf:ee:27:83:85:9e:
00:48:35:2a:69:36:b0:63:4e:6a:93:e6:c3:16:c0:
5d:32:3d:bd:9a:1d:07:e7:dc:f2:df:9d:66:1c:6c:
89:3c:16:35:b8:52:07:79:d3:e7:6c:70:ad:13:18:
45:f8:12:00:3f:98:bb:b4:70:cd:47:55:f1:73:8e:
77:bc:24:3f:9f:13:3a:bc:6e:2b:a3:e4:55:8e:1f:
67:bc:f9:b1:dc:05:af:60:4c:79:b0:d8:77:06:7f:
7b:fb:28:38:6c:05:ff:ac:b7:66:28:71:14:db:92:
5c:46:50:d5:8d:fd:c7:e4:33:b7:1f:df:9c:b4:4d:
da:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:24:3E:41:BD:A8:AE:98:8C:7D:3C:F8:A9:81:72:4C:DD:CD:F1:08
X509v3 Authority Key Identifier:
keyid:A7:21:08:2C:80:AB:AF:95:FA:D7:EA:60:F3:C5:EC:0E:05:E2:8E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pyEILICrr5X61-pg88XsDgXijtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/YCQ-Qb2orpiMfTz4qYFyTN3N8Qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/7478dc-c96d-4be5-8086-253b8b41a75c/1/pyEILICrr5X61-pg88XsDgXijtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.192.0/19
IPv6:
2a0d:8700::/29
Signature Algorithm: sha256WithRSAEncryption
5a:21:a4:09:0e:db:81:5d:e4:bd:4a:4f:26:04:d2:07:ac:a5:
d1:27:c1:ed:38:3d:44:56:ce:fb:b3:ac:37:41:c3:0c:e1:ad:
27:ad:d5:9b:d2:9f:1d:76:70:7f:56:33:69:eb:eb:b1:30:06:
a5:48:c8:68:f6:6c:81:4a:62:3e:9a:0b:05:bb:09:80:6d:3b:
b1:76:16:02:77:15:8f:9e:ce:9f:2a:48:2a:68:7b:c2:63:90:
0a:46:c4:4c:62:1e:37:ea:68:ea:8e:d4:3a:d8:1b:aa:c3:ae:
d9:d3:2a:5f:0e:a3:e8:49:93:eb:17:e9:c2:78:5e:2e:aa:f9:
a4:ab:f5:5b:15:5d:20:b7:58:8f:a9:26:18:f8:df:89:d1:eb:
5a:02:81:fd:a7:4b:a5:fe:c4:8b:c9:22:9b:69:d4:bd:2d:14:
8f:b1:25:8d:4e:c3:c8:09:7a:77:5b:f9:01:3b:e5:f9:0d:54:
e8:4a:98:c1:8e:8b:1e:2f:dc:7a:be:d7:88:82:89:b9:cd:df:
04:6a:be:c5:ba:cb:1b:83:37:24:06:37:34:9e:8e:91:6d:74:
e6:07:9b:fc:0d:41:47:19:f1:52:f3:c7:b0:4f:89:7a:e5:96:
dc:23:75:07:4c:f2:2b:db:a9:fb:cb:19:51:d7:46:7d:09:86:
4e:d1:4c:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:22:39 2024 by rpki-client on console-fra.rpki-client.org