Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/YB50-gWYKtcNVjCDzjzpWnrcTuQ.roa
File: YB50-gWYKtcNVjCDzjzpWnrcTuQ.roa (raw, json)
Hash identifier: BjDAXFg7Gl4ZVpHBYEoBHZhmaJJ0xPUhAUt6sMWGTB4=
Subject key identifier: 60:1E:74:FA:05:98:2A:D7:0D:56:30:83:CE:3C:E9:5A:7A:DC:4E:E4
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF3400773A5E0949E4994C0789015
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/YB50-gWYKtcNVjCDzjzpWnrcTuQ.roa
Signing time: Tue 02 Jan 2024 04:30:29 +0000
ROA not before: Tue 02 Jan 2024 04:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61418
IP address blocks: 85.153.172.0/24 maxlen: 24
85.153.185.0/24 maxlen: 24
85.153.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f3:40:07:73:a5:e0:94:9e:49:94:c0:78:90:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=601e74fa05982ad70d563083ce3ce95a7adc4ee4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cb:f7:12:0a:b5:2e:5f:09:41:43:ad:bf:d3:
ae:92:be:29:07:b6:c7:68:83:f0:05:0c:e2:8d:2c:
20:71:91:36:51:33:62:b7:60:79:64:fb:78:e4:e8:
07:fd:74:29:0d:b9:13:ef:1e:50:33:64:68:5d:f2:
ce:61:af:93:dc:74:31:d1:00:39:d6:c0:f7:2f:e2:
82:b9:9f:7e:b1:f2:e6:54:e8:cf:2b:4b:0a:ca:ca:
f9:9c:40:55:2b:53:3b:31:4e:34:94:77:01:ab:b9:
d6:6e:2d:94:7f:a6:48:77:8e:33:4b:7d:33:5b:e5:
db:cc:ea:61:08:51:35:27:9c:c0:f3:20:ce:46:2b:
48:c8:70:0a:1b:2b:da:49:2b:19:47:f1:31:d9:f3:
4c:54:7a:cc:ec:58:c1:c8:5a:03:a7:3b:d4:d2:54:
ed:9f:46:28:47:00:23:af:86:d8:aa:a4:78:39:02:
18:3c:f9:da:07:2d:08:73:22:a4:af:4c:3b:54:25:
08:1b:b7:fa:e8:0b:ae:cc:9c:84:2a:4a:41:a2:5a:
be:5a:0a:10:05:fe:fe:11:ff:2b:c7:92:33:9b:62:
35:9c:e4:3b:ec:95:6d:1c:e9:09:65:66:2c:47:af:
06:23:65:d4:23:6b:12:24:64:9d:5a:d9:45:09:8b:
cf:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1E:74:FA:05:98:2A:D7:0D:56:30:83:CE:3C:E9:5A:7A:DC:4E:E4
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/YB50-gWYKtcNVjCDzjzpWnrcTuQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.172.0/24
85.153.181.0/24
85.153.185.0/24
Signature Algorithm: sha256WithRSAEncryption
21:9d:f8:0a:86:4d:6a:57:b9:b2:13:51:98:bf:13:d8:f6:e6:
68:b9:0e:3f:4d:65:7e:ac:9d:14:5e:82:51:4b:d8:f5:a8:36:
e7:de:20:de:36:a8:af:76:49:fb:1a:71:8c:0b:76:71:54:6e:
e7:93:a0:3a:36:56:f9:a0:16:bc:4f:c0:12:d2:fa:49:a8:4c:
1c:b4:fc:14:95:1f:3e:44:d8:46:42:6e:81:97:7c:08:8a:6d:
55:d0:97:93:4c:39:7c:8f:18:de:fd:a6:a1:1b:56:07:f4:e8:
d6:78:1c:12:82:7d:46:d9:fe:8b:6c:08:1c:db:37:46:dd:eb:
35:25:44:a8:1f:b5:27:f7:f2:6d:76:95:fa:63:f3:be:9c:27:
67:04:14:30:b8:f5:f8:2c:5f:24:30:c1:20:51:17:33:8c:6f:
fe:36:33:5a:bc:d1:81:02:42:84:ae:39:0b:14:e6:66:e5:42:
ad:86:a2:77:43:f5:df:ae:0f:06:3d:3f:ae:69:5b:41:c8:76:
1c:70:d4:ae:c6:cc:24:57:d8:7f:16:69:dd:7c:7f:bc:1d:a8:
e1:78:17:df:da:bd:95:85:fe:96:75:79:e0:e5:fd:8a:61:09:
6b:e7:92:cb:f7:8b:f6:c0:b6:3d:d5:15:87:1e:e1:62:03:74:
2f:54:c8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:00:03 2024 by rpki-client on console-ams.rpki-client.org