Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/YIkX5nDUyyTC1C-nlS-KcF49pKA.roa
File: YIkX5nDUyyTC1C-nlS-KcF49pKA.roa (raw, json)
Hash identifier: AVqk7/lDwFwt1zamRirX7/7r7GuHH38660ETNk5p9CI=
Subject key identifier: 60:89:17:E6:70:D4:CB:24:C2:D4:2F:A7:95:2F:8A:70:5E:3D:A4:A0
Certificate issuer: /CN=0b8fb1deb09e72425b309a1414917daf893bef59
Certificate serial: 018CC5DBFC9A49E233698C1F4A4E0122AB33
Authority key identifier: 0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/YIkX5nDUyyTC1C-nlS-KcF49pKA.roa
Signing time: Mon 01 Jan 2024 16:29:37 +0000
ROA not before: Mon 01 Jan 2024 16:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48324
IP address blocks: 89.44.8.0/24 maxlen: 24
185.30.32.0/22 maxlen: 22
88.82.224.0/19 maxlen: 19
185.10.70.0/24 maxlen: 24
37.17.224.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:fc:9a:49:e2:33:69:8c:1f:4a:4e:01:22:ab:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b8fb1deb09e72425b309a1414917daf893bef59
Validity
Not Before: Jan 1 16:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=608917e670d4cb24c2d42fa7952f8a705e3da4a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1e:59:40:40:28:7a:cd:44:c5:e4:3a:9f:a1:
d3:03:fd:55:7c:cd:b3:ce:50:ff:1c:d6:2b:d6:56:
65:44:60:b8:9e:85:dd:9d:f9:f2:39:a9:0a:42:e8:
d6:c3:54:00:ef:b6:9b:cb:65:00:2f:78:48:70:04:
11:0c:0c:e3:4b:a4:18:b1:48:40:d9:6c:7e:b2:35:
f9:a2:8f:d4:66:17:66:e6:29:83:7e:02:9c:40:7c:
06:68:da:c6:c2:08:f3:2b:46:c1:ed:18:54:c9:27:
2b:5e:6c:63:f5:0e:d1:ff:8b:b4:64:86:86:ad:13:
ec:e3:51:1f:04:f6:44:ee:21:ba:b9:d4:41:4a:74:
a6:c2:6b:d3:b3:97:bf:76:d7:a3:fe:2c:a9:b9:c6:
c4:60:ae:d2:9b:fd:c0:ad:5f:0e:e1:7e:91:da:c6:
79:75:e1:83:92:9a:b5:d9:c7:35:94:d2:67:2d:56:
7a:b5:b3:c4:0c:18:28:66:c1:29:b0:37:e1:5b:1f:
52:2c:a2:a8:da:0d:30:88:07:50:85:c2:8a:52:f6:
48:b6:c4:50:be:04:d9:f4:b3:a9:e3:ed:34:ca:fc:
00:83:b6:c7:85:cb:82:2c:78:db:44:bb:92:59:a0:
f9:b0:60:7a:a4:9f:a2:bd:38:da:ab:fd:50:a4:68:
f6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:89:17:E6:70:D4:CB:24:C2:D4:2F:A7:95:2F:8A:70:5E:3D:A4:A0
X509v3 Authority Key Identifier:
keyid:0B:8F:B1:DE:B0:9E:72:42:5B:30:9A:14:14:91:7D:AF:89:3B:EF:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4-x3rCeckJbMJoUFJF9r4k771k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/YIkX5nDUyyTC1C-nlS-KcF49pKA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fc763b-83e6-4bd1-b93a-f8785a58106c/1/C4-x3rCeckJbMJoUFJF9r4k771k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.17.224.0/21
88.82.224.0/19
89.44.8.0/24
185.10.70.0/24
185.30.32.0/22
Signature Algorithm: sha256WithRSAEncryption
40:f0:17:4b:50:ee:d0:f2:61:ca:29:21:22:f2:ae:76:86:9c:
b9:e1:8e:27:07:25:2d:b1:07:a7:c6:45:2e:88:f5:c6:5c:14:
48:75:a4:9c:72:81:03:3e:0e:0f:95:b3:13:dd:01:81:ad:08:
2d:54:e5:c5:e5:e5:b8:8b:8e:9e:dd:c9:3b:69:c2:2d:fa:15:
01:3a:a4:95:86:ba:52:22:5d:1f:dd:8a:5e:5a:5d:0e:5f:e4:
28:8b:36:ab:aa:63:ac:1a:3e:ae:28:ff:7f:1b:36:ca:8e:1b:
c2:f0:3d:56:2f:23:e6:e3:a2:d6:c8:cd:59:59:2d:21:cb:60:
42:db:18:6f:c4:85:7a:3d:82:81:54:26:42:ef:95:ff:1e:65:
27:25:46:32:d1:fd:04:05:e7:5a:cf:8d:bb:bd:99:cd:99:da:
40:52:9d:47:fe:41:2c:4c:2f:ff:7b:db:d8:48:c6:ec:59:b6:
f3:d9:f2:a9:ac:0c:47:1a:f7:bd:82:29:8f:b0:d9:98:7c:6f:
7a:0e:58:10:ef:4f:27:0c:68:53:c3:89:fc:83:f4:cd:ab:c8:
10:d9:dc:3e:7d:92:a0:af:f6:70:5a:6d:f7:01:5b:30:c9:6f:
15:34:2d:a8:83:aa:bc:a9:07:86:1c:a2:23:0e:6c:7d:87:fd:
23:43:cb:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 07:48:32 2024 by rpki-client on console-fra.rpki-client.org