Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/YXy7s8MmJPjCMgX9JWB11BbCRWU.roa
File: YXy7s8MmJPjCMgX9JWB11BbCRWU.roa (raw, json)
Hash identifier: Y3ROw8mCKN56ldprVQPPxkA3rtB5SlzvxrYqYk6rgO4=
Subject key identifier: 61:7C:BB:B3:C3:26:24:F8:C2:32:05:FD:25:60:75:D4:16:C2:45:65
Certificate issuer: /CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Certificate serial: 018CCA67069686723E54770BAFE8F81CE0FA
Authority key identifier: DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/YXy7s8MmJPjCMgX9JWB11BbCRWU.roa
Signing time: Tue 02 Jan 2024 13:39:58 +0000
ROA not before: Tue 02 Jan 2024 13:39:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50823
IP address blocks: 185.83.64.0/22 maxlen: 22
178.170.128.0/23 maxlen: 23
178.170.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.mft
rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:67:06:96:86:72:3e:54:77:0b:af:e8:f8:1c:e0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7dd65966737ce8f65e40ef2fea1cffafb162b0
Validity
Not Before: Jan 2 13:39:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=617cbbb3c32624f8c23205fd256075d416c24565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:38:cc:1d:a1:6f:28:13:dc:32:39:76:52:
6e:98:ce:94:e4:08:c0:14:8f:1c:66:05:0c:96:8a:
8f:98:9c:d6:6a:b7:02:25:02:b6:70:8a:8f:a8:c7:
50:dd:67:2b:f6:2a:b3:f5:e6:0c:fb:bc:18:59:c2:
79:03:82:69:5f:a7:c6:a7:54:1d:f5:f3:47:65:c4:
75:dc:a0:3b:a4:b1:24:9e:9d:3b:9d:f4:eb:c6:b2:
ae:e4:d7:6a:9e:57:cb:7b:84:68:14:11:93:eb:70:
cf:a4:d6:15:0e:1b:47:7f:55:62:8c:26:6b:a2:79:
d2:e6:54:31:c7:d1:3e:b1:e0:a5:9f:84:ee:e5:19:
e5:b0:96:d4:48:fd:5e:63:10:f8:67:48:d4:dc:df:
90:3f:a2:af:44:07:08:a9:f7:21:15:23:ed:cd:b4:
5e:72:83:e1:f5:2e:b9:fc:a1:ed:97:c0:c4:84:fc:
31:17:a6:41:8b:e0:ce:63:2a:3e:35:f4:09:4b:2d:
5d:a7:37:a9:4d:d5:f6:af:71:a5:e8:6c:9d:56:ab:
d0:ae:88:1e:6f:7e:d3:fc:a5:d0:2c:a4:f0:ff:db:
bd:72:05:c8:07:ea:c1:ec:8e:4b:4f:39:fc:f2:3b:
c1:f7:7a:c1:ce:23:87:d0:25:15:01:10:31:e0:49:
c2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7C:BB:B3:C3:26:24:F8:C2:32:05:FD:25:60:75:D4:16:C2:45:65
X509v3 Authority Key Identifier:
keyid:DF:7D:D6:59:66:73:7C:E8:F6:5E:40:EF:2F:EA:1C:FF:AF:B1:62:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/333WWWZzfOj2XkDvL-oc_6-xYrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/YXy7s8MmJPjCMgX9JWB11BbCRWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/e283bb-d4d3-4b3a-b2b3-8ac8965708bc/1/333WWWZzfOj2XkDvL-oc_6-xYrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.170.128.0-178.170.130.255
185.83.64.0/22
Signature Algorithm: sha256WithRSAEncryption
29:68:d4:5f:9b:e2:5a:9f:30:86:64:53:80:54:84:ba:12:67:
af:79:5a:4e:b3:36:90:57:3c:2e:bc:8e:ec:99:5d:9d:0e:5d:
f8:e1:2e:90:ad:78:8c:96:02:ef:42:f8:00:8d:ba:23:cb:85:
31:a0:d9:7d:75:57:d4:fd:6d:b1:0a:90:c4:1d:80:35:0c:c4:
0d:c0:f9:ec:dd:02:67:3c:cc:16:09:d0:69:e3:9b:75:c2:16:
e1:e5:9c:6a:45:a7:fc:d5:7d:6d:7c:32:ef:2e:af:90:ea:5c:
3b:4e:37:66:ee:1b:0d:c1:ca:2e:c7:5b:c3:3b:d0:b1:99:7e:
de:a4:9d:36:3e:ce:48:f6:33:c1:e7:e9:99:1a:10:e0:a7:f7:
a1:23:e0:f1:1f:29:34:ac:ca:9d:19:ad:6d:e8:2b:7e:02:cf:
8b:01:c4:88:97:9e:73:31:cb:4d:f2:f4:35:22:a0:a6:7f:4d:
78:4f:13:e1:8e:06:9f:9c:75:da:40:96:36:ec:d8:53:ee:5c:
78:37:21:b3:f2:fc:51:34:d0:a1:76:91:62:28:0c:a0:1f:3f:
f9:49:d6:c8:63:25:57:7d:0a:65:b6:20:5f:60:e5:1e:db:d6:
56:c2:3d:08:41:0a:8d:51:c2:fc:1d:de:e0:7e:10:e9:43:0e:
4c:49:d9:06
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue May 21 02:26:24 2024 by rpki-client on console-ams.rpki-client.org