Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/YR1VaKlLKJmgPfacI5z01KK0ITQ.roa
File: YR1VaKlLKJmgPfacI5z01KK0ITQ.roa (raw, json)
Hash identifier: Y0yrftUHKysSM1f3rGORYltyLomawbCFUa1XRqsEEyw=
Subject key identifier: 61:1D:55:68:A9:4B:28:99:A0:3D:F6:9C:23:9C:F4:D4:A2:B4:21:34
Certificate issuer: /CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Certificate serial: 019428234B82002EB41EE1B00DACEEF5EDC5
Authority key identifier: 8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/YR1VaKlLKJmgPfacI5z01KK0ITQ.roa
Signing time: Thu 02 Jan 2025 17:49:49 +0000
ROA not before: Thu 02 Jan 2025 17:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30742
IP address blocks: 2.59.32.0/22 maxlen: 24
80.245.132.0/22 maxlen: 24
80.245.136.0/21 maxlen: 24
82.198.192.0/19 maxlen: 24
176.118.180.0/22 maxlen: 24
176.118.180.0/24 maxlen: 24
176.118.181.0/24 maxlen: 24
176.118.182.0/24 maxlen: 24
176.118.183.0/24 maxlen: 24
185.43.24.0/22 maxlen: 24
185.48.224.0/22 maxlen: 24
185.106.184.0/22 maxlen: 22
185.115.80.0/22 maxlen: 24
185.139.112.0/22 maxlen: 22
192.145.112.0/22 maxlen: 22
193.176.72.0/22 maxlen: 22
194.146.0.0/22 maxlen: 22
2a01:9b60::/32 maxlen: 32
2a03:9980::/29 maxlen: 32
2a03:9980::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:4b:82:00:2e:b4:1e:e1:b0:0d:ac:ee:f5:ed:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec4a67dbed7444ddd27e800fb6c21013a5b11c6
Validity
Not Before: Jan 2 17:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=611d5568a94b2899a03df69c239cf4d4a2b42134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:33:22:37:f4:b7:65:c6:bf:db:a6:7f:4c:65:
08:ee:01:d3:06:c5:bc:14:06:1b:69:93:9d:9e:d0:
41:3c:6a:04:20:6c:7a:87:1e:5d:2b:33:bc:0d:44:
51:79:cc:cb:1c:10:17:6f:ec:cf:00:ac:61:78:f7:
01:70:24:0c:a9:4e:c1:7e:b1:ef:33:78:00:6a:ed:
ff:ef:9e:30:21:52:d9:9b:50:0f:b2:01:06:99:e2:
9b:ca:65:a1:b4:16:02:3f:93:2b:c8:17:a6:4b:b1:
9f:e6:03:19:93:db:95:a1:64:7f:38:66:54:9f:05:
15:be:1a:e1:2c:29:c6:84:27:de:8d:05:cc:60:0b:
02:dd:d3:55:66:12:7a:b7:6c:17:82:fc:ab:a1:f2:
02:9f:c2:7f:7b:5a:30:ce:5a:3c:88:86:12:4d:e9:
b6:9f:7f:0d:5f:a7:6f:33:30:8f:1c:77:28:3a:60:
b0:38:ac:20:ae:ef:32:9a:96:f8:86:8b:77:ae:bd:
6f:72:44:94:84:2f:01:82:e4:af:2b:f8:37:9b:39:
ca:9a:23:3e:42:b7:fc:9e:ca:17:f4:79:49:64:0d:
7b:00:65:20:6a:85:fb:73:97:36:48:7d:82:43:3c:
82:ce:f8:c0:24:3a:51:4c:b7:02:9d:38:be:fe:3d:
5f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1D:55:68:A9:4B:28:99:A0:3D:F6:9C:23:9C:F4:D4:A2:B4:21:34
X509v3 Authority Key Identifier:
keyid:8E:C4:A6:7D:BE:D7:44:4D:DD:27:E8:00:FB:6C:21:01:3A:5B:11:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsSmfb7XRE3dJ-gA-2whATpbEcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/YR1VaKlLKJmgPfacI5z01KK0ITQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/e7a2f1-2e10-4ebe-91b3-0cef512f5009/1/jsSmfb7XRE3dJ-gA-2whATpbEcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.32.0/22
80.245.132.0-80.245.143.255
82.198.192.0/19
176.118.180.0/22
185.43.24.0/22
185.48.224.0/22
185.106.184.0/22
185.115.80.0/22
185.139.112.0/22
192.145.112.0/22
193.176.72.0/22
194.146.0.0/22
IPv6:
2a01:9b60::/32
2a03:9980::/29
Signature Algorithm: sha256WithRSAEncryption
af:22:85:a5:c1:cc:f7:c6:25:87:6b:4b:32:46:65:99:83:f3:
f1:bf:de:46:9a:c8:5b:3b:09:71:2b:a6:35:71:e7:6f:1a:46:
51:7c:06:10:0e:6c:3c:ad:4e:05:ce:36:c5:ca:ba:10:4d:16:
1a:f2:db:d8:af:59:b7:fb:f0:b8:dd:e5:18:56:91:f0:ba:5c:
d0:c8:60:a7:08:50:52:b2:94:71:5d:6f:04:69:a6:9a:1f:29:
02:75:8a:71:a6:be:cd:a8:45:fb:a1:19:b2:59:00:06:ba:5d:
42:65:15:f6:f4:66:60:e7:3a:db:cb:ff:4c:f2:38:62:01:96:
86:87:72:4d:e8:1d:72:44:db:3e:51:8b:2b:30:d4:34:0f:0a:
d3:ce:c9:80:6d:2a:4f:c3:bf:97:81:16:85:3e:03:98:a9:2a:
8e:9b:d3:f5:7d:70:a2:96:0f:48:67:ce:1d:40:70:74:e5:72:
e0:a3:4b:54:fa:4c:19:d9:68:a1:c3:9c:14:8a:5a:83:81:22:
f4:ad:59:82:2f:bd:c8:cf:05:f1:b9:18:86:51:3f:ee:d9:5f:
4e:da:9d:f5:20:1c:d9:71:7b:b2:08:cc:97:c5:7f:99:27:e4:
8b:e9:66:9b:30:54:77:5b:e2:9b:65:49:bd:3d:19:0b:51:10:
bf:d6:fb:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:53:19 2025 by rpki-client