Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/yyCQh0xu9DGhWMiQNmPsH4XUCkg.roa
File: yyCQh0xu9DGhWMiQNmPsH4XUCkg.roa (raw, json)
Hash identifier: LL1HdLP30LFwtFKZncvgRBTsUxfcvh+tFLF1k1q/EmM=
Subject key identifier: CB:20:90:87:4C:6E:F4:31:A1:58:C8:90:36:63:EC:1F:85:D4:0A:48
Certificate issuer: /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial: 018CC94D8A00F33B590617AA495885658966
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/yyCQh0xu9DGhWMiQNmPsH4XUCkg.roa
Signing time: Tue 02 Jan 2024 08:32:31 +0000
ROA not before: Tue 02 Jan 2024 08:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209989
IP address blocks: 185.216.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:8a:00:f3:3b:59:06:17:aa:49:58:85:65:89:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Validity
Not Before: Jan 2 08:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb2090874c6ef431a158c8903663ec1f85d40a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:22:ac:01:b1:b1:fa:58:c0:91:78:41:45:d9:
97:9b:87:3e:4f:ac:f6:d0:f0:2b:6f:b0:c5:5e:73:
af:fb:7e:e1:21:75:60:99:cb:7b:48:43:8d:f5:1e:
6d:69:81:4b:dc:3e:9a:a0:cc:5e:7b:a9:c4:f2:b6:
c3:76:a1:c6:9b:4c:98:11:b8:cc:cd:65:d7:40:a6:
be:e6:e3:fc:c8:e6:6d:29:fb:e3:ed:82:38:af:82:
9f:68:74:48:32:c3:8d:4e:82:27:90:0f:75:97:8d:
45:43:4b:8c:c1:ec:2b:96:32:28:4f:5d:2c:7f:57:
0c:cf:a4:65:bd:21:57:4f:6b:69:49:eb:50:6d:03:
2c:85:06:e0:26:13:a8:f3:89:0b:28:aa:33:8c:9d:
f2:ff:af:1f:b0:5e:9d:97:8e:ed:38:07:e2:cc:06:
7b:43:69:1e:98:65:f0:9f:07:63:2d:56:ec:aa:95:
26:23:d5:62:2a:a3:68:95:44:88:23:08:ee:42:46:
5f:9f:d2:31:65:9f:4d:b2:a6:a0:a2:29:c8:76:bc:
a4:1e:fd:0f:c8:fa:ce:2b:ee:3c:a0:03:57:49:86:
bc:d4:18:af:e4:12:40:4a:f2:b0:23:56:3d:a2:f0:
f2:a1:2a:83:6c:4a:75:3f:c1:29:c0:cf:de:ba:e2:
fa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:20:90:87:4C:6E:F4:31:A1:58:C8:90:36:63:EC:1F:85:D4:0A:48
X509v3 Authority Key Identifier:
keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/yyCQh0xu9DGhWMiQNmPsH4XUCkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.216.211.0/24
Signature Algorithm: sha256WithRSAEncryption
06:27:ef:3e:f1:22:04:77:ee:c0:27:33:25:c1:f3:0b:1c:d4:
e3:61:4f:0b:74:0f:2f:6d:41:72:8d:a5:ba:5f:0a:69:fe:49:
4b:e8:5d:86:2c:6f:14:05:12:d4:9b:29:f5:5c:68:b4:62:cd:
2e:56:53:4b:1d:ba:a8:34:6e:a8:4a:04:fc:66:63:9a:ff:97:
50:9f:65:d4:2c:e5:86:67:33:6b:b2:19:c3:c1:38:94:5f:6d:
7f:43:44:82:6a:f3:14:d5:ca:47:67:d0:43:aa:96:78:8f:b4:
58:ae:5a:7b:c3:fa:df:ec:ee:be:2a:6d:dd:b4:08:42:81:33:
ed:0f:f2:d3:4e:59:3b:80:31:81:0a:df:87:1a:27:d1:75:71:
de:8e:14:8e:4f:fe:0f:41:e8:4f:39:56:df:5d:bc:7e:64:5a:
9c:13:bc:81:d8:68:40:40:9c:a0:e4:27:40:0d:b8:1f:9b:46:
bc:86:35:0c:80:e7:fb:e1:31:a3:37:05:1d:79:17:41:07:ca:
a8:2a:37:1b:b4:6b:78:b1:01:9b:3a:35:d4:a4:b2:ba:66:d3:
cc:d1:b1:9a:f8:c2:19:10:a7:be:bf:83:af:b4:4d:8f:3e:7f:
b4:a5:ea:39:00:35:81:7b:6b:1d:19:23:b0:92:e6:0d:0e:cf:
fe:5d:d7:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 07:38:33 2024 by rpki-client on console-ams.rpki-client.org