Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/YNhAjPv_MdAuuPqHnm7y290GX8U.roa
File: YNhAjPv_MdAuuPqHnm7y290GX8U.roa (raw, json)
Hash identifier: RDUzcoBXQC6ymboFjCcAST2IbBCynepiIOArHYwunvA=
Subject key identifier: 60:D8:40:8C:FB:FF:31:D0:2E:B8:FA:87:9E:6E:F2:DB:DD:06:5F:C5
Certificate issuer: /CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Certificate serial: 018CC4254DBB286864EA23AD91AA6728D9EF
Authority key identifier: 73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/YNhAjPv_MdAuuPqHnm7y290GX8U.roa
Signing time: Mon 01 Jan 2024 08:30:28 +0000
ROA not before: Mon 01 Jan 2024 08:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24971
IP address blocks: 188.215.18.0/23 maxlen: 23
188.213.234.0/23 maxlen: 23
185.25.184.0/22 maxlen: 22
2a00:8220::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:03:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4d:bb:28:68:64:ea:23:ad:91:aa:67:28:d9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c90ad151d4326a6d62e13046d788f85bf82e94
Validity
Not Before: Jan 1 08:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60d8408cfbff31d02eb8fa879e6ef2dbdd065fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:62:80:5c:e6:99:73:df:28:cb:00:05:f8:f3:
b6:ab:06:93:43:2e:53:41:f8:99:97:94:b1:06:91:
5f:f6:2e:3f:0e:68:52:c1:f2:b9:44:0d:4d:be:60:
50:8f:59:e3:44:75:97:9d:1c:cf:1d:06:77:68:e4:
11:cf:2c:16:03:63:63:5e:97:dc:48:ed:91:4b:39:
19:f8:e1:ea:86:81:76:70:fe:73:f6:ef:f1:57:94:
0d:6e:83:1f:c2:ac:04:44:f2:14:2a:54:c0:56:74:
10:44:67:58:15:24:a7:42:62:21:75:51:3c:fd:82:
4d:e0:a0:72:3f:ad:7d:39:26:41:16:58:ea:7a:c7:
51:4d:97:ae:c8:af:ab:cc:00:bc:a6:01:9f:1c:77:
93:ae:40:c5:ec:2e:b0:11:e6:f6:77:1a:8f:00:87:
66:1b:30:71:eb:56:62:b5:8a:55:94:d9:03:a2:06:
1f:65:b1:2a:1f:21:39:50:ef:41:37:b6:80:58:06:
e7:4d:36:c0:45:71:42:b7:be:2f:bc:dc:c0:60:c7:
44:3a:9f:7a:2c:92:f2:d7:17:b8:2b:11:5c:ad:16:
2f:a2:38:f9:eb:f3:a7:3d:63:0b:a1:0c:9f:79:7d:
e0:35:15:a5:a5:4e:3a:9d:ec:a3:5d:ea:af:2b:19:
a8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D8:40:8C:FB:FF:31:D0:2E:B8:FA:87:9E:6E:F2:DB:DD:06:5F:C5
X509v3 Authority Key Identifier:
keyid:73:C9:0A:D1:51:D4:32:6A:6D:62:E1:30:46:D7:88:F8:5B:F8:2E:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8kK0VHUMmptYuEwRteI-Fv4LpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/YNhAjPv_MdAuuPqHnm7y290GX8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9be2a0-1060-41c7-b8e2-ba626d325d59/1/c8kK0VHUMmptYuEwRteI-Fv4LpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.184.0/22
188.213.234.0/23
188.215.18.0/23
IPv6:
2a00:8220::/32
Signature Algorithm: sha256WithRSAEncryption
0b:2b:50:09:07:89:56:69:08:db:35:08:43:a4:a8:64:df:2f:
93:34:94:7a:01:f6:df:59:66:f9:68:c1:21:a6:f1:55:49:8a:
68:e6:d2:94:c0:be:34:ac:a6:bd:72:a5:b8:d0:45:b8:8a:30:
b4:90:0e:58:b9:48:a4:06:3f:b2:49:0c:82:f8:5d:4b:00:02:
d1:a7:6d:43:98:91:70:4e:e9:d7:b9:9b:85:ca:6c:38:28:c8:
4d:ea:94:d5:93:c8:f1:7a:62:02:b0:08:c2:5a:d0:66:29:0a:
70:72:87:05:16:20:29:33:c7:84:e4:16:37:37:42:2f:27:22:
4d:f5:fb:d7:4a:0e:02:0c:24:db:36:9c:8d:3b:8d:a8:d8:27:
b2:73:b7:83:c2:23:48:a0:c9:83:e0:c7:ed:85:49:83:6c:61:
fb:f4:d6:2b:80:3d:5f:5c:61:95:65:ea:3d:0e:22:ae:a2:db:
46:2c:63:5c:21:dc:cf:2e:7b:ad:3a:9f:5b:d7:56:fc:cc:b9:
10:f5:fc:2b:1a:80:4a:a5:e2:3a:46:03:f2:55:d7:14:cd:99:
a0:15:10:bb:2d:2a:40:0c:9b:a7:73:b5:d7:83:65:f1:82:76:
0a:0c:38:1b:f8:9c:32:18:f3:c5:5b:56:ed:ec:8a:86:a3:54:
9e:1a:e8:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:29:42 2024 by rpki-client on console-fra.rpki-client.org