Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/Y89DXWPW7-kVwT02BTSBCKQImg8.roa
File: Y89DXWPW7-kVwT02BTSBCKQImg8.roa (raw, json)
Hash identifier: bGiHH3aymSGbPp9ZbgkW4SNPH1VZPdzexMT6N50kL6w=
Subject key identifier: 63:CF:43:5D:63:D6:EF:E9:15:C1:3D:36:05:34:81:08:A4:08:9A:0F
Certificate issuer: /CN=2cc25ff32918f0b49306259d483afb9e381a3915
Certificate serial: 018CC3B733B298AEB442670347A03CD954D6
Authority key identifier: 2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/Y89DXWPW7-kVwT02BTSBCKQImg8.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202391
IP address blocks: 185.158.172.0/24 maxlen: 24
185.158.175.0/24 maxlen: 24
185.158.174.0/24 maxlen: 24
185.158.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.mft
rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:33:b2:98:ae:b4:42:67:03:47:a0:3c:d9:54:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2cc25ff32918f0b49306259d483afb9e381a3915
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63cf435d63d6efe915c13d3605348108a4089a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b8:76:59:f5:38:1c:a3:c8:fa:17:59:b0:a1:
66:1b:c1:d8:fd:3f:e4:8b:3e:58:0c:46:26:6d:73:
55:b0:15:6f:16:db:a4:c8:de:2f:23:8f:40:f1:0c:
11:2c:d7:a1:3d:31:de:e3:ca:e5:9b:3e:17:89:aa:
c2:8f:32:65:1f:c5:7d:6d:bb:a6:bd:57:8b:61:44:
62:ec:97:a9:d1:52:39:9b:2c:28:b4:dd:da:af:cf:
04:d6:e6:51:37:7a:85:43:87:03:5f:9d:c9:a7:c2:
12:1b:c9:54:9e:80:c5:5e:44:21:48:87:40:2f:c2:
58:60:05:36:a9:d1:9f:f1:37:2b:c2:99:cc:71:bc:
be:19:96:b2:04:fa:c2:e5:81:cc:b8:66:ef:d0:15:
7e:1d:e5:b2:7e:18:50:b8:a9:06:9a:2b:eb:eb:38:
ba:e5:89:c0:a5:ab:b9:76:bf:07:b2:6c:0c:97:2e:
ed:b5:3d:a2:ee:8b:5c:97:b0:07:7e:10:34:c4:7a:
ed:4d:fb:70:65:8f:66:38:fc:4b:7a:07:b8:be:04:
f3:2c:87:b5:68:48:e8:35:9d:55:f8:9e:04:c8:f7:
14:4b:04:e6:7f:51:94:c7:fe:86:b5:24:98:cf:82:
d1:6b:af:6a:60:7c:b1:61:c6:ee:0b:c6:04:02:ff:
48:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:CF:43:5D:63:D6:EF:E9:15:C1:3D:36:05:34:81:08:A4:08:9A:0F
X509v3 Authority Key Identifier:
keyid:2C:C2:5F:F3:29:18:F0:B4:93:06:25:9D:48:3A:FB:9E:38:1A:39:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LMJf8ykY8LSTBiWdSDr7njgaORU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/Y89DXWPW7-kVwT02BTSBCKQImg8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1277ec-156a-46c4-9f03-e25751b3ffd5/1/LMJf8ykY8LSTBiWdSDr7njgaORU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.158.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:31:ac:ce:f7:59:0c:d5:21:76:4b:9e:15:00:08:92:95:53:
de:ef:17:04:75:90:1b:0e:fb:c7:a5:b3:70:82:19:98:29:75:
9e:0f:8e:7c:5f:86:0d:57:76:83:c2:dd:3c:90:92:c2:f9:dc:
c7:6d:61:75:8b:25:65:0d:67:f0:ce:56:26:b2:00:3c:d8:0d:
e2:6f:26:6d:d1:58:18:05:63:62:13:d3:4d:cf:82:26:1a:4a:
a3:c0:a9:ac:00:1d:33:8b:41:50:a5:38:2a:1b:9e:77:c6:ff:
61:37:d6:c7:79:6b:ed:a7:d1:2d:6d:b1:c6:74:df:d3:a9:c7:
82:c0:97:b1:2f:fd:71:ec:22:0a:82:05:99:1f:44:b0:be:ae:
5a:10:4e:8a:22:ca:ec:d3:03:55:22:ae:0c:07:6f:52:2e:34:
70:61:0f:66:3f:f5:d0:da:95:42:2e:bf:b4:92:36:92:ba:be:
20:71:88:2d:47:54:ab:b2:a0:7c:65:ec:5d:95:f8:32:9f:6a:
30:9c:61:88:bc:7b:5d:0d:92:f3:bb:8a:5d:93:04:a4:5f:44:
8c:22:77:eb:a4:23:d9:4d:44:7c:b9:23:b8:0f:09:a4:7d:be:
92:c1:8a:6d:34:dd:d6:f7:c0:2f:44:23:a1:cb:35:e7:a3:92:
de:86:25:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:47:17 2024 by rpki-client on console-ams.rpki-client.org