Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/YMBqcN5ksBbP6JK6C_LLkQif2kU.roa
File: YMBqcN5ksBbP6JK6C_LLkQif2kU.roa (raw, json)
Hash identifier: LEuQR77wUkAZXQCmeUfAKhOZZZqZUFuXy2cIwevG4Wg=
Subject key identifier: 60:C0:6A:70:DE:64:B0:16:CF:E8:92:BA:0B:F2:CB:91:08:9F:DA:45
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 018CC86F3A520DDFA7650EF0666FD644C740
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/YMBqcN5ksBbP6JK6C_LLkQif2kU.roa
Signing time: Tue 02 Jan 2024 04:29:41 +0000
ROA not before: Tue 02 Jan 2024 04:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 17819
IP address blocks: 185.93.57.0/24 maxlen: 24
185.93.59.0/24 maxlen: 24
2a03:8fa0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:3a:52:0d:df:a7:65:0e:f0:66:6f:d6:44:c7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Jan 2 04:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60c06a70de64b016cfe892ba0bf2cb91089fda45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:bb:82:14:35:cf:bc:0a:55:2e:9b:cf:d1:
12:a9:31:7c:72:02:41:ac:4b:a2:61:b5:fe:0e:3e:
98:27:c5:ff:dd:a7:da:70:8e:df:a1:7f:c5:1a:d5:
41:68:d3:fb:3b:26:ab:c3:10:be:ef:da:0f:14:3e:
e6:55:67:be:4f:12:80:52:da:86:cd:b8:af:fe:40:
c6:89:7b:59:d7:45:7d:b5:a1:04:ac:71:d8:6e:59:
43:00:23:7f:41:ce:d2:76:16:61:3b:79:05:36:ed:
0c:f9:c3:73:77:f3:57:00:3b:ef:14:03:6c:7b:42:
00:a9:2d:37:19:45:46:7b:57:34:9e:b1:2c:52:7d:
9b:d1:4b:47:79:80:28:d6:71:ad:1f:bf:77:af:c5:
9c:58:2d:81:da:3c:3c:4d:57:99:b3:17:17:94:e5:
4d:34:9d:3c:42:87:3e:34:a0:2a:11:88:dc:a6:cc:
c5:cf:1f:35:8e:d2:1c:40:b1:20:da:d5:cb:a1:55:
19:5e:ca:69:a2:b3:5e:3b:f4:8b:70:9c:6b:93:c2:
2d:c9:90:2d:24:cf:72:c9:63:02:13:f7:2c:e1:11:
44:a9:d9:4e:5c:39:dc:0f:c4:8a:c3:61:af:24:7c:
56:eb:29:e9:e8:52:7f:00:c1:ad:b8:34:f6:dd:a4:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C0:6A:70:DE:64:B0:16:CF:E8:92:BA:0B:F2:CB:91:08:9F:DA:45
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/YMBqcN5ksBbP6JK6C_LLkQif2kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.57.0/24
185.93.59.0/24
IPv6:
2a03:8fa0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
35:41:06:1f:4e:d4:63:9c:34:a5:0c:d4:fa:e4:77:8e:0d:26:
1a:1e:95:ad:ac:0c:13:88:5a:38:3d:83:51:a0:4b:7a:45:21:
85:40:3e:ca:7a:9d:44:c3:9c:13:3a:a4:b9:13:5f:4e:15:cf:
1c:83:d2:0b:3f:79:54:c8:ad:20:25:db:63:2a:f4:db:b8:cf:
7b:42:27:ab:58:8d:8b:36:0b:5c:0e:55:50:2d:0f:56:36:6b:
e9:d8:90:47:b0:26:b8:aa:31:06:31:6e:72:a5:82:72:8e:01:
04:5b:29:44:ae:1a:8a:38:ab:4f:01:7c:3b:14:74:3e:ea:82:
02:2e:8e:37:89:d4:90:2e:bb:62:db:41:4e:20:7b:b9:38:69:
8e:a2:55:75:03:ac:5e:92:60:78:ed:17:81:3a:fa:97:78:8a:
2f:9e:06:45:3b:19:6b:08:19:d2:6e:6e:b1:6b:26:a1:e6:53:
44:db:dd:10:89:49:a6:c2:17:9a:3c:12:1d:11:36:3b:44:41:
e5:d1:1b:55:62:9f:37:2e:83:2b:8d:b2:14:3b:23:34:46:6b:
2c:ec:35:30:53:29:8e:53:b0:9c:cf:8e:e9:5f:d9:5c:84:8a:
41:43:d3:46:d9:b0:66:ac:a0:7c:6a:55:ac:55:b2:41:73:35:
74:1c:eb:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:35:03 2024 by rpki-client on console-fra.rpki-client.org