Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ymfWan-OZeBzZXEY7kxmiChnV9c.roa
File: ymfWan-OZeBzZXEY7kxmiChnV9c.roa (raw, json)
Hash identifier: 3WnvSaXg36b0BA8jyjsISz5Eqtrec34yMkA0dhT1KQE=
Subject key identifier: CA:67:D6:6A:7F:8E:65:E0:73:65:71:18:EE:4C:66:88:28:67:57:D7
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018CC94D8969D6C1B4AEA590371F1D80C5CF
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ymfWan-OZeBzZXEY7kxmiChnV9c.roa
Signing time: Tue 02 Jan 2024 08:32:31 +0000
ROA not before: Tue 02 Jan 2024 08:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 141039
IP address blocks: 185.65.50.0/24 maxlen: 24
45.82.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:89:69:d6:c1:b4:ae:a5:90:37:1f:1d:80:c5:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 08:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca67d66a7f8e65e073657118ee4c6688286757d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:92:78:72:9e:9f:b7:21:ab:f4:f9:4d:c1:
8e:bb:27:1c:46:2f:21:67:a7:b4:4f:1c:be:57:0f:
d9:8f:1e:fd:7f:43:9d:7f:13:16:83:0b:f9:85:c8:
29:26:8d:61:a7:2b:ae:91:83:bf:f7:c4:6f:a6:c0:
28:b4:a8:ca:b2:31:8b:41:00:6f:44:4f:99:89:bf:
3b:55:d5:bc:29:bb:28:6b:01:07:f1:8b:45:8b:18:
e4:5b:db:65:a6:df:a0:ff:e5:23:f3:5b:9c:6c:2f:
4d:86:7f:6e:00:0f:74:a6:1c:eb:d4:cf:26:7b:70:
27:f0:bd:9a:03:67:bd:ca:d3:84:60:92:54:d4:77:
45:91:46:8c:b0:d2:6d:61:4b:ae:7c:59:96:a2:02:
21:ab:91:33:61:e7:a8:a4:69:9d:29:87:29:c8:83:
53:81:5b:6a:c2:20:9c:6a:1b:28:f9:6e:c1:2f:ec:
71:e6:b6:cd:c1:d9:4e:fb:3f:9f:c0:d0:05:7c:43:
81:a9:dd:c3:e3:95:ce:37:a4:6f:04:1f:60:0e:cd:
0d:d7:f7:55:d9:44:20:ae:85:84:f6:54:1d:37:4b:
95:d4:15:4c:0f:0e:5e:54:54:7c:30:b4:da:50:5f:
16:b7:1f:b8:56:86:a2:cc:50:1a:63:c9:13:cf:82:
96:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:67:D6:6A:7F:8E:65:E0:73:65:71:18:EE:4C:66:88:28:67:57:D7
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/ymfWan-OZeBzZXEY7kxmiChnV9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.82.33.0/24
185.65.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:05:9e:3e:68:86:6f:a5:6a:0c:15:4a:0b:70:77:43:6f:dd:
73:0e:1b:d8:35:58:64:08:1f:b4:57:6d:68:64:2c:8f:9f:06:
7d:ad:10:37:c6:a4:42:6b:35:99:84:5b:0e:e5:ab:29:a6:c9:
63:bd:cd:38:18:40:2f:75:d9:12:1f:82:da:ff:fa:40:b0:2d:
2e:7e:47:c4:8a:42:1e:6c:0a:64:13:c3:df:ed:de:93:8a:81:
b9:92:b3:a3:0d:8e:76:26:41:0b:a6:52:32:02:0f:04:38:d2:
21:e8:41:da:e7:7c:f7:bc:5f:d8:72:17:5b:6f:15:21:91:96:
7d:90:cb:b2:76:81:88:f1:9b:f9:b9:71:4a:c8:48:94:e6:9e:
76:86:fb:0c:d8:d1:8e:12:65:7a:4e:42:51:b4:33:70:77:22:
ad:bc:ad:54:0f:34:25:c9:73:63:de:1d:1e:0b:8a:e2:cc:aa:
cd:88:b0:fe:1d:d0:70:8f:bb:51:38:d0:a7:99:f5:f5:ef:38:
d9:65:9b:78:d4:45:6d:a5:d5:4b:eb:30:1e:df:26:84:1f:00:
48:9c:bf:50:4f:43:c5:4b:8e:b8:cf:70:d7:eb:77:c0:bf:d9:
dd:1a:84:17:2b:f9:10:ec:7f:a1:7a:b7:5f:e8:0b:1c:4d:66:
2a:a3:62:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:01:15 2024 by rpki-client on console-fra.rpki-client.org