Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/YaPBTHjcq8yPSUfqfbgzYv7b_Kc.roa
File: YaPBTHjcq8yPSUfqfbgzYv7b_Kc.roa (raw, json)
Hash identifier: +cWr9xkD9WoxzDZXfGMket0sOpavJqpFbFO9onW0OKc=
Subject key identifier: 61:A3:C1:4C:78:DC:AB:CC:8F:49:47:EA:7D:B8:33:62:FE:DB:FC:A7
Certificate issuer: /CN=854c10240f850dfc0d5957a8d5ad4e184adb0057
Certificate serial: 018CC64A669BE402D0C90A2C297F6D871AE6
Authority key identifier: 85:4C:10:24:0F:85:0D:FC:0D:59:57:A8:D5:AD:4E:18:4A:DB:00:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hUwQJA-FDfwNWVeo1a1OGErbAFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/YaPBTHjcq8yPSUfqfbgzYv7b_Kc.roa
Signing time: Mon 01 Jan 2024 18:30:13 +0000
ROA not before: Mon 01 Jan 2024 18:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59456
IP address blocks: 212.52.3.0/24 maxlen: 24
185.55.24.0/22 maxlen: 22
2a01:8cc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/hUwQJA-FDfwNWVeo1a1OGErbAFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/hUwQJA-FDfwNWVeo1a1OGErbAFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/hUwQJA-FDfwNWVeo1a1OGErbAFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:66:9b:e4:02:d0:c9:0a:2c:29:7f:6d:87:1a:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=854c10240f850dfc0d5957a8d5ad4e184adb0057
Validity
Not Before: Jan 1 18:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61a3c14c78dcabcc8f4947ea7db83362fedbfca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:08:6e:fb:e3:af:5f:fc:f6:56:a7:37:79:88:
41:ec:81:57:8b:8b:1e:a7:86:ad:6d:04:62:be:cc:
7d:ac:fb:6b:48:8c:5c:f4:d6:c7:e4:35:4e:af:b7:
8c:23:e2:32:72:a3:eb:e4:cd:f8:e7:21:22:0f:50:
da:29:40:95:0c:cc:8d:51:4b:be:56:69:a5:fa:98:
c6:84:5e:4c:d8:ab:57:61:f1:25:2e:c1:d4:ab:d5:
bd:f0:67:51:47:ff:9b:8f:7b:2a:d4:8a:03:fa:25:
3f:44:1d:dd:93:f5:3a:ba:95:6c:81:78:89:c0:df:
81:63:73:99:53:ab:c1:23:55:c7:0e:f5:ad:8d:ea:
1b:56:80:d7:f3:92:fc:24:94:98:52:b0:e3:d9:82:
1b:75:7a:ab:07:d3:06:32:25:a4:0b:e8:da:ce:8e:
89:23:15:cb:0b:7a:0e:38:1a:1c:f9:e0:c6:82:14:
08:01:f2:17:45:4c:d4:68:7c:5d:02:a7:bb:e8:45:
c3:9e:72:32:b8:32:46:6b:7f:20:e7:b8:e2:19:d4:
d4:89:d5:84:4c:91:cc:49:11:a3:dd:1c:77:72:c1:
63:2c:68:ee:d7:88:74:ee:c6:d3:57:c9:53:40:9f:
04:d6:68:a8:d4:5b:e5:a7:8d:26:13:e8:dc:99:ed:
32:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:C1:4C:78:DC:AB:CC:8F:49:47:EA:7D:B8:33:62:FE:DB:FC:A7
X509v3 Authority Key Identifier:
keyid:85:4C:10:24:0F:85:0D:FC:0D:59:57:A8:D5:AD:4E:18:4A:DB:00:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hUwQJA-FDfwNWVeo1a1OGErbAFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/YaPBTHjcq8yPSUfqfbgzYv7b_Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/552dd8-ceb4-4617-9e9c-0f7ef4e97458/1/hUwQJA-FDfwNWVeo1a1OGErbAFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.24.0/22
212.52.3.0/24
IPv6:
2a01:8cc0::/32
Signature Algorithm: sha256WithRSAEncryption
94:02:4f:4a:c0:2f:91:11:80:20:6b:88:83:a0:f6:81:fc:ce:
74:51:af:4b:b0:02:28:bf:c1:26:e6:5c:d3:9f:fc:9b:2f:32:
9d:97:cd:01:78:14:1d:d6:e4:5e:da:95:08:7d:79:92:0b:cd:
2b:c0:b1:d6:78:5f:7b:28:39:a7:a3:cd:38:c5:46:b1:c1:d9:
fa:f0:fb:7c:62:f2:b1:eb:48:bf:cc:ef:dc:59:89:0e:89:2c:
94:41:d3:01:2c:2c:99:eb:18:ef:6a:d7:05:6d:70:1b:bc:13:
d7:57:6e:36:2b:ed:ff:3a:b0:80:ee:72:37:27:64:35:77:fd:
22:aa:e6:fb:e1:e5:e3:13:a9:e6:99:23:cd:a8:4e:bc:e2:38:
15:ab:f8:df:36:fd:6c:7d:06:1f:81:ba:3f:e6:d1:dc:72:25:
8b:d2:9f:ba:a6:57:70:d7:6b:43:a9:2a:15:4a:44:e4:76:01:
89:88:68:d4:45:33:56:9f:75:78:aa:48:b5:43:a7:4c:68:57:
03:c9:89:1b:05:e3:43:d0:c9:c6:ec:71:e0:10:4d:f6:4a:e5:
67:24:0a:1f:2c:6a:0a:e1:0a:0b:81:33:39:6c:e6:0f:18:c1:
b6:4a:f9:86:59:86:52:9f:43:74:7d:d6:e3:48:b3:29:6a:a3:
6f:5a:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:13:19 2024 by rpki-client on console-ams.rpki-client.org