Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/YeM-g03gjzKuo7FlaV-SdRxQcLE.roa
File: YeM-g03gjzKuo7FlaV-SdRxQcLE.roa (raw, json)
Hash identifier: UMoTq9cUgHH5R1lHAXDNFuKITlMZFccUiiq2UTRmdvc=
Subject key identifier: 61:E3:3E:83:4D:E0:8F:32:AE:A3:B1:65:69:5F:92:75:1C:50:70:B1
Certificate issuer: /CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Certificate serial: 018CC2DB1388106E4F1A8AFE20FAB8D7F577
Authority key identifier: 6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/YeM-g03gjzKuo7FlaV-SdRxQcLE.roa
Signing time: Mon 01 Jan 2024 02:29:46 +0000
ROA not before: Mon 01 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208834
IP address blocks: 45.83.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:13:88:10:6e:4f:1a:8a:fe:20:fa:b8:d7:f5:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea1a10f7d944dacc1dec041aaa559d522bfbaeb
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61e33e834de08f32aea3b165695f92751c5070b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:66:76:fa:ac:53:6f:31:d8:f7:86:a7:97:
01:63:5b:1d:d7:03:32:54:15:bf:7f:d6:08:85:ea:
83:0e:43:47:70:57:35:31:bc:7f:a6:9f:f3:86:47:
42:33:c5:2a:4b:41:98:71:e7:ba:d7:1d:7a:cf:b1:
03:ed:fb:c6:b4:c4:9b:ff:2a:bf:09:1a:bb:72:bc:
98:6b:1b:cc:39:da:62:27:b1:f5:90:45:5e:9e:1c:
bf:35:91:65:d1:41:18:63:e9:33:7c:23:56:7f:12:
74:76:bb:09:48:63:24:93:d9:51:14:f3:a1:d2:60:
dd:de:98:75:4d:d4:3b:c1:a7:9b:20:bb:30:76:9e:
8f:ba:29:d5:43:8e:c5:36:5f:0e:35:0d:b9:3b:71:
fb:76:36:6f:f0:e8:af:9b:1a:e0:5e:23:07:01:25:
b1:82:16:18:95:bf:a3:8a:2e:8f:85:d3:ec:51:0f:
b8:8e:44:cd:77:2a:95:2b:fb:e7:0d:33:e6:ad:e5:
12:60:b2:57:10:3c:42:33:db:f8:4f:6a:79:0f:48:
6b:90:c0:f3:73:85:52:8d:38:2c:68:b2:d8:2e:44:
38:0f:5e:eb:a2:a7:6c:3c:96:b6:9d:0d:b1:ce:20:
44:7a:cb:e9:62:8e:5b:8e:a8:09:aa:5b:90:68:9c:
55:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E3:3E:83:4D:E0:8F:32:AE:A3:B1:65:69:5F:92:75:1C:50:70:B1
X509v3 Authority Key Identifier:
keyid:6E:A1:A1:0F:7D:94:4D:AC:C1:DE:C0:41:AA:A5:59:D5:22:BF:BA:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqGhD32UTazB3sBBqqVZ1SK_uus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/YeM-g03gjzKuo7FlaV-SdRxQcLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/85e104-5e52-4048-b1b1-c50968cda86f/1/bqGhD32UTazB3sBBqqVZ1SK_uus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:8f:c3:6a:39:ac:cc:43:03:5c:6f:17:a4:52:1c:44:dd:54:
1f:a2:31:9f:e1:88:cd:f0:16:07:09:f1:16:c1:51:95:b1:b1:
fb:d9:14:74:c6:41:42:7f:2b:63:3f:d4:6b:b1:c1:2f:f4:21:
fb:a9:9a:a0:02:fe:28:14:1d:f9:63:bf:45:99:d0:4b:6d:48:
54:a0:a2:58:60:8c:7b:eb:e0:b2:19:87:e8:24:55:c4:5a:67:
00:f5:ce:ba:17:ba:74:ec:ea:61:9c:4c:0a:82:b5:72:6f:64:
cf:79:29:68:c0:cb:ed:63:e7:af:26:47:5a:7a:92:ba:ce:2f:
75:89:49:76:f4:dc:e9:ca:56:9c:16:13:92:d8:e9:89:9f:24:
b8:af:f6:d3:b9:97:9f:49:48:1d:db:0b:3c:46:60:25:80:e0:
2d:14:68:82:a2:08:d5:11:62:51:c1:32:08:2b:6f:b3:04:2d:
08:5a:dc:fd:a6:9b:4c:0c:6e:f5:04:2a:34:51:f9:ea:b1:d1:
08:b8:7f:7e:f7:3f:b6:e1:48:82:b8:5c:c7:c8:d4:dd:3d:26:
f4:b2:a3:5c:14:da:fb:0d:9d:04:1c:eb:e6:0c:30:1b:db:c3:
f7:ec:31:a9:2d:54:64:15:43:7d:69:12:d3:02:ed:23:da:0d:
3c:a4:5c:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2xOIEG5PGor+IPq41/V3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYTFhMTBmN2Q5NDRkYWNjMWRlYzA0MWFhYTU1OWQ1MjJi
ZmJhZWIwHhcNMjQwMTAxMDIyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWUzM2U4MzRkZTA4ZjMyYWVhM2IxNjU2OTVmOTI3NTFjNTA3MGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivZmdvqsU28x2PeGp5cBY1sd1wMy
VBW/f9YIheqDDkNHcFc1Mbx/pp/zhkdCM8UqS0GYcee61x16z7ED7fvGtMSb/yq/
CRq7cryYaxvMOdpiJ7H1kEVenhy/NZFl0UEYY+kzfCNWfxJ0drsJSGMkk9lRFPOh
0mDd3ph1TdQ7waebILswdp6PuinVQ47FNl8ONQ25O3H7djZv8OivmxrgXiMHASWx
ghYYlb+jii6PhdPsUQ+4jkTNdyqVK/vnDTPmreUSYLJXEDxCM9v4T2p5D0hrkMDz
c4VSjTgsaLLYLkQ4D17roqdsPJa2nQ2xziBEesvpYo5bjqgJqluQaJxVRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGHjPoNN4I8yrqOxZWlfknUcUHCxMB8GA1UdIwQY
MBaAFG6hoQ99lE2swd7AQaqlWdUiv7rrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnFHaEQzMlVUYXpCM3NCQnFxVloxU0tfdXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC84NWUxMDQtNWU1Mi00MDQ4LWIxYjEt
YzUwOTY4Y2RhODZmLzEvWWVNLWcwM2dqekt1bzdGbGFWLVNkUnhRY0xFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC84NWUxMDQtNWU1Mi00MDQ4LWIxYjEtYzUwOTY4Y2RhODZm
LzEvYnFHaEQzMlVUYXpCM3NCQnFxVloxU0tfdXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVNIMA0G
CSqGSIb3DQEBCwUAA4IBAQC0j8NqOazMQwNcbxekUhxE3VQfojGf4YjN8BYHCfEW
wVGVsbH72RR0xkFCfytjP9RrscEv9CH7qZqgAv4oFB35Y79FmdBLbUhUoKJYYIx7
6+CyGYfoJFXEWmcA9c66F7p07OphnEwKgrVyb2TPeSlowMvtY+evJkdaepK6zi91
iUl29NzpylacFhOS2OmJnyS4r/bTuZefSUgd2ws8RmAlgOAtFGiCogjVEWJRwTII
K2+zBC0IWtz9pptMDG71BCo0UfnqsdEIuH9+9z+24UiCuFzHyNTdPSb0sqNcFNr7
DZ0EHOvmDDAb28P37DGpLVRkFUN9aRLTAu0j2g08pFwN
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:24:32 2024 by rpki-client on console-fra.rpki-client.org