Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/Yl8pGv-MLtsl4qZAl4UKm970TlM.roa
File: Yl8pGv-MLtsl4qZAl4UKm970TlM.roa (raw, json)
Hash identifier: MR1WA1jrJBQGuzqVtuL9zppF+wcGzdWleG9vTxVD54A=
Subject key identifier: 62:5F:29:1A:FF:8C:2E:DB:25:E2:A6:40:97:85:0A:9B:DE:F4:4E:53
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 018CC5DBEAC5B6FA475F81BBA4248D34DA72
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/Yl8pGv-MLtsl4qZAl4UKm970TlM.roa
Signing time: Mon 01 Jan 2024 16:29:33 +0000
ROA not before: Mon 01 Jan 2024 16:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29060
IP address blocks: 217.17.144.0/20 maxlen: 24
81.162.128.0/18 maxlen: 18
81.91.112.0/20 maxlen: 24
37.246.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ea:c5:b6:fa:47:5f:81:bb:a4:24:8d:34:da:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Jan 1 16:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=625f291aff8c2edb25e2a64097850a9bdef44e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:ca:c7:60:43:70:7a:f6:5a:e4:48:34:b1:
e7:2e:1a:0d:ec:40:cc:07:b9:25:ae:05:87:4b:f5:
64:00:f7:11:4b:23:96:1c:84:db:6e:a3:e0:c2:d7:
67:d3:59:cd:7b:48:74:c9:99:a4:f1:b9:3e:1b:d5:
2f:73:a4:4f:af:34:f0:02:aa:d6:ac:aa:ad:67:53:
51:c9:5b:63:ac:59:7f:91:dd:19:3e:20:32:e9:2d:
12:60:41:c7:4d:3e:6c:69:7c:37:9d:7a:cc:67:e7:
cb:8b:4c:f9:ec:df:51:9f:1e:fb:22:f2:ce:31:d6:
f4:b9:5f:8c:e1:38:cd:bf:f1:74:11:0c:4c:5f:dc:
e8:85:cf:81:7c:8b:cd:f5:35:f1:2c:0d:98:6d:47:
a0:49:a6:36:3b:7f:f1:1c:02:c4:95:d8:25:85:fe:
55:de:a2:b2:90:48:32:2e:01:1c:d6:b5:30:0b:f6:
e7:29:7a:06:5b:f5:2f:05:73:73:e9:88:d2:cd:c3:
14:61:6c:fa:af:43:75:9a:70:e0:68:a0:4e:c6:1f:
e9:47:fc:a6:70:28:a1:94:c1:9c:57:5e:ab:58:25:
8f:9f:73:26:dd:93:7b:a9:aa:1c:76:9a:4b:99:7c:
fd:13:63:b5:93:3a:ab:ea:9c:41:27:90:57:35:49:
ba:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5F:29:1A:FF:8C:2E:DB:25:E2:A6:40:97:85:0A:9B:DE:F4:4E:53
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/Yl8pGv-MLtsl4qZAl4UKm970TlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.246.0.0/16
81.91.112.0/20
81.162.128.0/18
217.17.144.0/20
Signature Algorithm: sha256WithRSAEncryption
98:19:c6:89:37:ed:04:52:a4:21:df:e9:a5:08:57:0b:84:72:
79:f6:1c:49:f8:99:db:8f:75:d1:12:d2:ca:7f:ac:41:e5:f4:
f9:d5:bc:30:0b:97:da:10:3f:60:db:cf:81:af:53:2d:5e:e6:
7d:b3:74:62:84:da:ad:7d:f9:25:f3:78:9f:6a:94:58:f0:a3:
c6:36:a6:88:3c:59:50:06:b1:13:9f:47:a9:f9:81:a9:6a:83:
a9:d1:23:3d:f4:a1:8a:a4:da:da:55:54:4c:89:8a:5a:31:51:
b6:34:df:53:05:3c:50:6e:da:94:f6:af:f8:b9:91:90:3e:74:
71:e5:50:93:7d:1b:1e:f4:88:48:d6:e6:54:6e:02:ea:94:15:
b0:a2:0a:37:5c:42:ac:85:71:ef:51:9a:fd:e5:e2:1a:75:9d:
f4:ec:e4:41:84:3a:fe:b9:f0:af:c7:a2:45:b7:63:e9:87:15:
df:36:e7:e7:2e:dd:c0:c4:04:ea:e4:b6:09:e0:ff:ba:71:50:
80:ec:2d:23:0e:48:1d:25:16:aa:9b:f9:2b:b7:52:17:c9:82:
ac:ec:33:17:ae:d3:27:52:ac:6b:63:9e:10:d8:9c:0f:3b:20:
9e:c3:9b:41:8a:6d:18:94:ff:d5:50:9f:bd:b7:22:07:28:67:
ba:3e:6c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:45:34 2024 by rpki-client on console-ams.rpki-client.org