Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/YsByhiDQ_EsWaPtQid0ztGlZTA0.roa
File: YsByhiDQ_EsWaPtQid0ztGlZTA0.roa (raw, json)
Hash identifier: nRHyxGe0tAOl2wW1ql5SaJQ9348yit4smWqFrTXDX18=
Subject key identifier: 62:C0:72:86:20:D0:FC:4B:16:68:FB:50:89:DD:33:B4:69:59:4C:0D
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 019426D9893C0629A320D9A386315AAC5CFB
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/YsByhiDQ_EsWaPtQid0ztGlZTA0.roa
Signing time: Thu 02 Jan 2025 11:49:37 +0000
ROA not before: Thu 02 Jan 2025 11:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39608
IP address blocks: 86.111.64.0/19 maxlen: 19
86.111.88.0/21 maxlen: 22
91.194.81.0/24 maxlen: 24
91.216.165.0/24 maxlen: 24
176.36.0.0/14 maxlen: 14
176.36.0.0/16 maxlen: 17
176.36.160.0/24 maxlen: 24
176.37.0.0/16 maxlen: 17
176.38.0.0/16 maxlen: 17
176.39.0.0/16 maxlen: 16
176.39.34.0/23 maxlen: 24
176.39.36.0/23 maxlen: 24
185.53.76.0/23 maxlen: 24
185.53.78.0/24 maxlen: 24
193.93.160.0/22 maxlen: 22
193.107.224.0/22 maxlen: 22
194.33.189.0/24 maxlen: 24
194.50.85.0/24 maxlen: 24
194.60.69.0/24 maxlen: 24
2a01:5800::/32 maxlen: 32
2a01:bf20::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:89:3c:06:29:a3:20:d9:a3:86:31:5a:ac:5c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 2 11:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=62c0728620d0fc4b1668fb5089dd33b469594c0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:47:c3:03:1f:3d:92:a5:b9:92:b8:15:cf:
c3:42:02:67:96:81:15:66:6c:3d:56:27:8a:1d:29:
4f:65:f3:45:cf:de:eb:e7:4c:17:c8:70:6b:34:23:
0f:b1:2e:23:69:4a:b0:b1:ec:94:9e:f0:df:74:01:
37:f6:5a:69:53:81:4d:f0:a1:6c:ff:c5:b4:18:a2:
a3:1a:de:c2:5e:f3:5b:aa:5d:91:23:3e:dd:59:0d:
a0:26:93:5d:33:7e:d0:2d:7d:f9:75:3e:3f:87:ee:
7a:21:15:58:8e:4d:6a:9c:79:35:f8:ef:bc:8f:ba:
47:de:9e:87:67:c7:81:60:2e:c3:f0:e7:13:ca:b7:
e1:79:f6:4d:7b:1c:3b:5b:17:a4:75:fb:83:46:52:
d5:7e:df:64:b7:ac:0e:52:be:29:4d:dd:04:b2:fe:
da:21:46:1d:09:05:f5:6e:3f:fa:dd:82:89:31:78:
a4:cf:20:9b:d9:5f:ab:5c:46:18:b1:08:cf:7c:89:
f0:a9:a4:9b:5b:20:e2:02:68:c0:02:66:e0:b3:1a:
8c:f3:c9:49:6e:a7:cf:60:7e:62:cf:36:8f:8b:54:
b4:07:df:42:f3:aa:fd:12:7b:15:2b:2d:84:cc:0b:
88:37:4f:7b:0d:50:d5:85:0c:55:cb:3b:92:bc:50:
99:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C0:72:86:20:D0:FC:4B:16:68:FB:50:89:DD:33:B4:69:59:4C:0D
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/YsByhiDQ_EsWaPtQid0ztGlZTA0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.64.0/19
91.194.81.0/24
91.216.165.0/24
176.36.0.0/14
185.53.76.0-185.53.78.255
193.93.160.0/22
193.107.224.0/22
194.33.189.0/24
194.50.85.0/24
194.60.69.0/24
IPv6:
2a01:5800::/32
2a01:bf20::/32
Signature Algorithm: sha256WithRSAEncryption
36:12:90:b9:dc:f1:20:fa:f7:97:0b:b4:12:c5:9b:ec:8f:93:
ea:49:05:26:b5:d8:29:48:1d:70:e9:3c:b8:1d:e0:60:a6:0a:
b3:cd:6c:0a:b5:b0:04:99:80:64:b5:f2:f2:7d:d4:8e:6f:e5:
d4:a3:e2:b5:51:1c:52:65:52:e6:01:a7:ce:64:d8:f8:db:b0:
48:54:3b:14:66:b6:f5:de:cd:ef:93:b7:b1:fe:5c:f6:6b:44:
31:d9:54:28:42:ab:ec:4b:7b:bb:c2:4f:24:5c:6a:e5:eb:45:
53:6a:98:9c:9f:56:34:6c:3c:4d:68:d1:24:78:08:49:ff:1d:
73:7d:90:be:f6:49:9a:fc:24:f2:b2:b2:4e:cf:0c:d7:c8:e4:
04:8f:1a:87:a4:02:30:09:57:0a:88:d7:15:2d:46:14:fd:d9:
b4:b2:0f:d7:eb:5a:ec:9d:75:0d:4c:da:9b:69:6f:96:57:d6:
46:a7:2b:9c:c9:bc:34:e9:d9:e4:b8:38:92:c8:ac:2a:e5:cc:
ac:60:69:a5:71:ae:9d:e3:d5:8f:e0:04:bd:c8:1a:09:7e:60:
ee:2c:86:77:56:9d:2e:00:b3:7a:f6:f9:3e:e9:0d:fd:c8:fd:
00:0e:cd:19:e6:c0:2f:9e:35:b7:13:32:e3:85:3b:26:70:c6:
08:01:19:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:49:25 2025 by rpki-client