Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/YlSGgT2x9P7-UNtLUU2W1LplRXo.roa
File: YlSGgT2x9P7-UNtLUU2W1LplRXo.roa (raw, json)
Hash identifier: tGPr5PtecoHkpBQ+OlYvjsBTWBXZVGYhOuxdtFFXiTI=
Subject key identifier: 62:54:86:81:3D:B1:F4:FE:FE:50:DB:4B:51:4D:96:D4:BA:65:45:7A
Certificate issuer: /CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Certificate serial: 018CC9BC19058B9510C0B72C8BAF1A92353A
Authority key identifier: 70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/YlSGgT2x9P7-UNtLUU2W1LplRXo.roa
Signing time: Tue 02 Jan 2024 10:33:16 +0000
ROA not before: Tue 02 Jan 2024 10:33:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51915
IP address blocks: 91.220.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:19:05:8b:95:10:c0:b7:2c:8b:af:1a:92:35:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cf5e697c6094adb6bc97156b35e005fd4cf2e2
Validity
Not Before: Jan 2 10:33:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=625486813db1f4fefe50db4b514d96d4ba65457a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:31:de:ec:8a:12:0d:62:4f:29:04:aa:d1:bb:
60:e1:b3:9a:95:16:41:ba:47:fc:a8:ae:41:79:ee:
aa:1e:b4:7e:5b:29:d7:bc:9f:bc:7d:8a:03:c3:32:
68:5e:fd:fe:ed:be:eb:eb:89:e8:4a:ee:83:3c:7f:
fa:cf:77:d0:27:10:cf:a7:9e:aa:26:f0:fc:e1:bb:
a4:40:c7:09:4c:7d:92:f8:f7:e5:70:f8:73:6e:f8:
2c:6c:01:8e:9d:2e:cb:02:4b:1b:bb:ed:eb:81:d6:
1d:20:70:e8:84:14:b6:d2:94:2d:7b:8a:85:02:19:
e8:14:14:40:b1:1c:62:ec:15:2a:05:d5:da:3f:e1:
01:2e:e7:12:c7:20:bb:89:a3:c7:a1:ad:2b:3c:13:
8f:ad:f7:f1:a5:50:74:f8:d9:eb:bc:bb:c0:30:86:
b8:c9:8c:25:11:57:d5:82:b7:1d:37:64:93:46:ef:
e2:ba:15:b5:ea:ce:19:a6:e9:83:41:ba:99:a5:9f:
b0:36:cb:16:02:c6:d0:da:6b:86:76:b7:f3:1c:f3:
8e:d5:3f:1b:c7:f0:2a:05:aa:73:e4:1c:4b:75:19:
18:9f:c4:08:45:1d:27:da:8c:5b:4e:0d:66:59:59:
42:a8:71:e8:c6:c5:e2:c4:2a:5c:71:c4:3f:71:30:
94:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:54:86:81:3D:B1:F4:FE:FE:50:DB:4B:51:4D:96:D4:BA:65:45:7A
X509v3 Authority Key Identifier:
keyid:70:CF:5E:69:7C:60:94:AD:B6:BC:97:15:6B:35:E0:05:FD:4C:F2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cM9eaXxglK22vJcVazXgBf1M8uI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/YlSGgT2x9P7-UNtLUU2W1LplRXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/4d5295-f8f2-4e05-add0-519795a22502/1/cM9eaXxglK22vJcVazXgBf1M8uI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.182.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:77:50:f0:6b:51:31:dc:34:87:5d:43:c0:c6:5c:44:e1:a9:
ad:5b:94:d0:f6:44:56:91:44:52:0f:52:f5:8c:a1:c1:b6:00:
13:29:cc:fd:e1:c3:50:3d:a8:c8:53:57:32:b0:a3:c4:1d:29:
f6:4a:ad:da:67:83:ef:31:75:e6:44:a7:3d:26:9e:ed:42:e4:
57:7a:48:9d:ac:79:5c:31:ed:f7:fd:0a:2b:9c:da:b0:5f:ba:
36:35:2d:28:2f:6a:0c:cb:62:8e:88:29:98:61:44:d3:97:f0:
e9:30:d7:85:2f:b6:82:5b:68:44:b6:69:ab:23:98:76:f7:01:
a4:25:f1:ad:e5:20:f7:2a:93:2d:ff:c0:98:93:f3:98:67:55:
ae:38:71:f4:7a:48:d0:10:25:0f:c2:0c:6f:bb:8e:86:9c:fd:
42:79:bc:9c:f4:69:0d:31:ca:f0:f9:92:41:94:4a:ee:e8:33:
d2:cf:89:d6:b0:87:e8:20:21:1d:5a:e7:7e:42:df:34:c8:24:
c7:f6:b4:d2:fd:79:41:2f:db:03:1e:fd:8a:db:58:f9:22:9d:
c0:16:13:36:fd:11:02:a1:3e:e2:a2:d8:1d:78:34:b3:22:39:
f9:1f:7c:48:9e:d7:e2:f4:98:43:35:eb:53:6d:85:9c:fd:80:
56:94:04:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:57:37 2024 by rpki-client on console-ams.rpki-client.org