Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/yLO3bqawGbMdqWu9QS44380lAFI.roa
File: yLO3bqawGbMdqWu9QS44380lAFI.roa (raw, json)
Hash identifier: 7Ug0vJYcHts6Y+bv8Z7OpxQNFuagow5lxKmt2gZy3eA=
Subject key identifier: C8:B3:B7:6E:A6:B0:19:B3:1D:A9:6B:BD:41:2E:38:DF:CD:25:00:52
Certificate issuer: /CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Certificate serial: 018CCA2A03603307277644B4ABEB2F5107B4
Authority key identifier: 95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/yLO3bqawGbMdqWu9QS44380lAFI.roa
Signing time: Tue 02 Jan 2024 12:33:20 +0000
ROA not before: Tue 02 Jan 2024 12:33:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204393
IP address blocks: 185.187.48.0/24 maxlen: 24
185.187.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:03:60:33:07:27:76:44:b4:ab:eb:2f:51:07:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9588d8b4c7aa45a9b2cd737c614871eb7181babe
Validity
Not Before: Jan 2 12:33:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8b3b76ea6b019b31da96bbd412e38dfcd250052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:0f:ce:a5:dd:07:d4:d1:ae:87:e6:62:cc:10:
63:e4:1a:7a:7b:72:cb:0c:be:4c:33:6d:5d:87:d2:
9c:10:b4:46:64:0c:d6:ef:44:cd:f9:a9:d9:ea:53:
e3:d4:8d:e5:c4:ff:20:64:11:fd:47:d5:3c:25:06:
1d:cc:cc:c7:fd:c2:9c:41:35:2c:93:de:08:36:41:
cd:e6:2d:5b:d2:17:65:16:ff:fb:f2:d7:7e:e9:da:
dc:9b:dd:7b:63:ba:96:9f:86:fa:eb:de:b3:c2:60:
0f:4e:74:ab:c1:dc:65:cd:2a:4a:fb:4e:60:ca:b2:
11:55:5f:fd:f8:3d:b7:b6:e5:9d:45:ae:90:28:ad:
5e:44:97:1d:c2:4f:56:40:61:36:08:22:80:63:84:
d5:dc:b5:62:e8:3b:e4:9f:2d:ab:a7:cd:97:1c:1e:
da:2f:dd:57:8c:c8:2b:b6:15:26:be:f7:5b:31:83:
96:53:b7:da:15:5d:1b:13:6d:b9:55:25:53:7f:a2:
88:a8:1e:41:cb:b1:8a:82:a5:95:d2:89:3b:18:14:
e8:a7:32:58:2c:dc:f7:f8:18:53:3b:7a:da:ff:65:
72:b0:3e:0b:04:9d:a2:06:83:af:25:4b:9e:d1:bb:
6f:d4:73:16:e4:c8:ac:08:fd:67:a3:fd:28:18:c7:
e1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B3:B7:6E:A6:B0:19:B3:1D:A9:6B:BD:41:2E:38:DF:CD:25:00:52
X509v3 Authority Key Identifier:
keyid:95:88:D8:B4:C7:AA:45:A9:B2:CD:73:7C:61:48:71:EB:71:81:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lYjYtMeqRamyzXN8YUhx63GBur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/yLO3bqawGbMdqWu9QS44380lAFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/00c3ab-4a7f-4f74-b556-a488bd42024f/1/lYjYtMeqRamyzXN8YUhx63GBur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.48.0/23
Signature Algorithm: sha256WithRSAEncryption
88:1c:4b:cd:1a:4d:a6:2f:70:47:9e:02:dc:70:a2:21:68:44:
78:54:85:bd:7f:c3:83:0b:7e:fa:5f:7e:aa:bd:d3:c5:42:20:
85:e3:1c:89:94:0b:22:12:e4:51:44:0f:7e:85:53:7e:b5:4a:
25:5d:7c:3a:2f:55:0f:e4:b3:43:15:1f:7e:b6:95:43:e3:88:
4e:e1:47:f8:31:e9:01:e6:35:6e:c2:6e:73:2e:5e:11:66:de:
ee:d8:8f:a4:d4:2f:35:c3:d7:81:ad:9f:7b:a5:78:35:52:6d:
ee:47:0d:49:0b:f4:79:5e:61:46:99:60:3f:c1:22:10:60:0a:
66:c7:a2:9f:6c:b0:db:2f:45:dd:5f:0b:a9:ad:91:a5:7f:10:
84:57:85:55:81:25:4a:78:fc:d9:b3:36:36:af:29:c8:88:1c:
7e:21:92:87:87:d1:3f:f0:90:4c:f6:5a:d2:8d:e4:6d:5a:61:
34:b7:29:34:8c:ca:bf:1c:b6:6e:57:1b:bb:7c:1e:23:6b:43:
2d:26:cc:cf:67:52:ce:25:00:9a:ed:37:54:e3:5c:f0:a9:82:
d0:28:c0:dd:dc:a9:3b:db:46:66:77:cc:e6:69:1a:40:85:a2:
6c:02:66:ac:55:6d:88:62:38:9e:55:32:20:fc:8b:be:33:9c:
9f:72:f8:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKgNgMwcndkS0q+svUQe0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ODhkOGI0YzdhYTQ1YTliMmNkNzM3YzYxNDg3MWViNzE4
MWJhYmUwHhcNMjQwMTAyMTIzMzIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGIzYjc2ZWE2YjAxOWIzMWRhOTZiYmQ0MTJlMzhkZmNkMjUwMDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g/Opd0H1NGuh+ZizBBj5Bp6e3LL
DL5MM21dh9KcELRGZAzW70TN+anZ6lPj1I3lxP8gZBH9R9U8JQYdzMzH/cKcQTUs
k94INkHN5i1b0hdlFv/78td+6drcm917Y7qWn4b6696zwmAPTnSrwdxlzSpK+05g
yrIRVV/9+D23tuWdRa6QKK1eRJcdwk9WQGE2CCKAY4TV3LVi6Dvkny2rp82XHB7a
L91XjMgrthUmvvdbMYOWU7faFV0bE225VSVTf6KIqB5By7GKgqWV0ok7GBTopzJY
LNz3+BhTO3ra/2VysD4LBJ2iBoOvJUue0btv1HMW5MisCP1no/0oGMfhOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMizt26msBmzHalrvUEuON/NJQBSMB8GA1UdIwQY
MBaAFJWI2LTHqkWpss1zfGFIcetxgbq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYt
YTQ4OGJkNDIwMjRmLzEveUxPM2JxYXdHYk1kcVd1OVFTNDQzODBsQUZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wMGMzYWItNGE3Zi00Zjc0LWI1NTYtYTQ4OGJkNDIwMjRm
LzEvbFlqWXRNZXFSYW15elhOOFlVaHg2M0dCdXI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBubswMA0G
CSqGSIb3DQEBCwUAA4IBAQCIHEvNGk2mL3BHngLccKIhaER4VIW9f8ODC376X36q
vdPFQiCF4xyJlAsiEuRRRA9+hVN+tUolXXw6L1UP5LNDFR9+tpVD44hO4Uf4MekB
5jVuwm5zLl4RZt7u2I+k1C81w9eBrZ97pXg1Um3uRw1JC/R5XmFGmWA/wSIQYApm
x6KfbLDbL0XdXwuprZGlfxCEV4VVgSVKePzZszY2rynIiBx+IZKHh9E/8JBM9lrS
jeRtWmE0tyk0jMq/HLZuVxu7fB4ja0MtJszPZ1LOJQCa7TdU41zwqYLQKMDd3Kk7
20Zmd8zmaRpAhaJsAmasVW2IYjieVTIg/Iu+M5yfcvhj
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:18 2024 by rpki-client on console-ams.rpki-client.org