Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/YfOCLVgkH5OcFe5U31ZPybk10Co.roa
File: YfOCLVgkH5OcFe5U31ZPybk10Co.roa (raw, json)
Hash identifier: +jJo6ItOq7laGD0oGw7v0MeUHbOXHHGpXvitk2U2sng=
Subject key identifier: 61:F3:82:2D:58:24:1F:93:9C:15:EE:54:DF:56:4F:C9:B9:35:D0:2A
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 01930C9C79678ACC10B063FADA3374F078FC
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/YfOCLVgkH5OcFe5U31ZPybk10Co.roa
Signing time: Fri 08 Nov 2024 16:30:01 +0000
ROA not before: Fri 08 Nov 2024 16:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31631
IP address blocks: 45.150.140.0/22 maxlen: 22
79.99.88.0/22 maxlen: 22
80.252.120.0/22 maxlen: 22
103.110.208.0/22 maxlen: 22
109.224.248.0/21 maxlen: 21
185.108.168.0/22 maxlen: 22
185.205.172.0/22 maxlen: 22
193.178.54.0/23 maxlen: 23
193.178.112.0/23 maxlen: 23
195.167.138.0/24 maxlen: 24
195.167.181.0/24 maxlen: 24
195.167.182.0/24 maxlen: 24
209.42.4.0/22 maxlen: 22
2a06:e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:0c:9c:79:67:8a:cc:10:b0:63:fa:da:33:74:f0:78:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: Nov 8 16:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61f3822d58241f939c15ee54df564fc9b935d02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b7:bb:6c:d6:67:7f:94:4a:f5:32:67:74:9f:
b6:40:be:b8:b1:93:30:cf:55:57:5e:55:df:5d:6e:
c9:12:9f:5b:dc:3e:26:d6:1f:80:95:32:44:dc:01:
b2:c8:21:be:5e:e2:4d:7e:8a:5a:67:be:9e:80:9a:
20:37:04:bd:9a:50:4e:4d:7c:67:2f:36:9d:85:10:
09:6e:00:76:37:30:89:ee:4e:60:4c:86:27:f4:b3:
ce:db:17:b0:58:3a:47:15:f2:d9:64:d9:bf:b1:13:
96:a9:be:42:6a:b8:7f:1c:5e:5f:40:47:c5:8e:8a:
29:d3:cb:76:99:25:3e:b7:ee:1f:67:5b:43:ea:21:
bd:af:0f:6c:ee:6b:6f:17:87:24:b1:9e:5a:a4:f6:
a8:55:b4:3a:ec:88:b4:6c:c3:5c:83:fb:ec:02:c9:
29:35:4f:4b:22:04:16:3d:b0:99:70:c9:32:a1:de:
f6:3c:96:07:6a:56:10:43:48:39:ce:b8:66:34:4c:
0f:cc:83:a1:82:ca:5c:b7:ce:90:ee:2c:4a:04:11:
2a:38:97:43:d7:f1:cc:02:14:21:6d:c0:d8:dd:7a:
91:0c:75:01:2c:70:fc:87:5c:f8:fb:f8:fe:2f:bb:
26:1f:a8:aa:2b:49:7a:3c:20:41:9b:b8:de:8c:a8:
06:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:F3:82:2D:58:24:1F:93:9C:15:EE:54:DF:56:4F:C9:B9:35:D0:2A
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/YfOCLVgkH5OcFe5U31ZPybk10Co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.140.0/22
79.99.88.0/22
80.252.120.0/22
103.110.208.0/22
109.224.248.0/21
185.108.168.0/22
185.205.172.0/22
193.178.54.0/23
193.178.112.0/23
195.167.138.0/24
195.167.181.0-195.167.182.255
209.42.4.0/22
IPv6:
2a06:e40::/29
Signature Algorithm: sha256WithRSAEncryption
58:f2:a4:12:ad:d3:fa:56:36:23:64:56:d0:1f:0a:8b:ad:20:
22:1f:f6:12:90:d0:90:89:a0:3f:84:1e:b3:10:08:57:32:ab:
67:20:e7:fc:73:fb:fd:68:00:aa:67:1a:6c:69:b7:c6:5f:f0:
36:c1:f1:6c:51:84:67:b7:33:85:e8:e3:6b:ec:39:be:05:92:
c8:b3:37:8a:ec:9c:b6:51:df:c0:db:ca:53:3e:11:70:df:d0:
22:2d:26:54:07:b1:f9:45:20:21:b9:0d:95:70:fa:ff:0f:cc:
86:b5:03:9f:15:1e:13:94:4b:ea:7f:f0:82:13:f3:88:31:4a:
0e:7b:44:be:65:8d:af:ee:64:2a:f6:b4:06:46:9b:e6:f0:e7:
d3:ee:45:7a:86:fb:40:eb:18:dd:d3:70:0d:e9:ea:23:cf:8d:
64:8e:54:b5:33:2f:de:25:74:66:81:f6:aa:ef:e1:d4:84:db:
06:7d:06:60:d9:e7:91:14:81:d6:a0:2e:04:38:4a:69:07:99:
d9:1f:94:13:eb:52:51:14:9c:8e:b1:f1:38:fc:43:5b:1a:00:
94:59:a5:e5:27:25:1b:5a:8c:f0:82:22:5c:e6:49:2e:4d:04:
0e:01:1a:6b:31:fa:81:9e:da:c1:fd:4f:2f:5c:2a:fa:35:a1:
41:71:31:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:12:43 2024 by rpki-client on console-fra.rpki-client.org