Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YXP9Qou-2-imk4f5nvTDkQzdY-E.roa
File: YXP9Qou-2-imk4f5nvTDkQzdY-E.roa (raw, json)
Hash identifier: 6L8h2eHOprY+6afLHlp0grHDCIuWAzWZYFgWzznAAgU=
Subject key identifier: 61:73:FD:42:8B:BE:DB:E8:A6:93:87:F9:9E:F4:C3:91:0C:DD:63:E1
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5010A0FF7746D3F1C13E622FD287D44
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YXP9Qou-2-imk4f5nvTDkQzdY-E.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20712
IP address blocks: 45.92.3.0/24 maxlen: 24
185.112.64.0/22 maxlen: 24
45.89.37.0/24 maxlen: 24
45.140.134.0/24 maxlen: 24
45.89.39.0/24 maxlen: 24
91.190.97.0/24 maxlen: 24
91.190.105.0/24 maxlen: 24
185.255.168.0/22 maxlen: 24
45.88.23.0/24 maxlen: 24
45.88.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:0a:0f:f7:74:6d:3f:1c:13:e6:22:fd:28:7d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6173fd428bbedbe8a69387f99ef4c3910cdd63e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e0:03:0d:39:61:3b:a4:72:b4:5a:20:51:2f:
9d:ed:04:31:13:85:ce:f4:62:be:a4:d5:a3:bc:8f:
ac:c1:4d:6f:cb:e4:f4:7e:33:f8:86:cc:c9:d0:a6:
46:eb:3e:00:fa:2e:28:14:3c:75:b6:9c:8b:b5:af:
64:9e:34:8c:c2:fd:e5:83:7e:06:96:b5:81:44:d5:
de:d4:8c:11:86:70:dd:ce:c8:9f:d6:39:37:fd:d3:
dc:bf:05:3c:d6:33:34:b3:49:cd:24:e8:4d:ee:9d:
a6:cb:91:e3:8e:ec:40:3c:4e:ef:f6:d8:5c:66:ed:
2f:3f:34:b8:3f:20:02:63:30:97:7b:5b:33:52:42:
fa:70:78:30:71:5a:7b:d5:3f:58:2b:b3:41:49:40:
82:f7:65:a4:62:56:97:29:28:dd:b9:e3:b2:02:59:
9e:7c:f2:f7:23:96:3b:08:a0:97:1b:56:d1:17:04:
b9:8d:59:6c:ef:5d:0c:bf:5f:73:1c:30:ae:09:42:
84:ec:0c:64:ea:68:ae:07:74:58:4a:6c:b7:01:bc:
e6:e1:f9:4b:93:3f:b5:6a:6d:aa:13:f0:79:a3:bf:
0b:a7:90:3c:18:91:52:ea:b8:f7:42:fc:08:ce:fe:
e5:23:74:30:a3:ac:c2:2f:c5:76:ea:33:9e:96:1b:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:73:FD:42:8B:BE:DB:E8:A6:93:87:F9:9E:F4:C3:91:0C:DD:63:E1
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/YXP9Qou-2-imk4f5nvTDkQzdY-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.21.0/24
45.88.23.0/24
45.89.37.0/24
45.89.39.0/24
45.92.3.0/24
45.140.134.0/24
91.190.97.0/24
91.190.105.0/24
185.112.64.0/22
185.255.168.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:1f:ac:24:97:b2:f9:02:34:37:7b:73:4f:2f:8f:3b:d0:fd:
2a:e9:c0:f0:e2:62:43:20:ba:0f:d4:49:ad:f9:eb:df:d4:63:
71:fa:59:ff:d2:ac:c6:2f:36:43:f7:0e:ed:27:b7:a9:f4:17:
2c:eb:5f:cf:c7:69:9a:0c:60:fb:92:19:10:69:d5:2e:05:93:
3a:75:57:b1:39:f9:a0:4c:1c:e8:be:dc:bc:57:1f:b5:90:6f:
e3:16:f6:63:43:e8:30:3a:11:a8:97:67:0e:a3:0b:d3:d4:72:
be:2a:de:0d:9c:35:b9:33:fb:2c:03:bc:53:b9:38:98:5f:81:
7e:d1:b3:52:76:d8:63:f7:24:bd:d5:71:f6:b2:36:2d:03:f8:
6e:b0:45:ae:75:34:15:29:ab:b5:39:5e:b1:42:79:e8:47:7e:
9c:60:1c:2e:9a:a2:1d:a3:f1:1e:44:2e:56:23:ee:9e:0a:66:
27:59:a0:71:2a:02:d4:13:d2:3b:78:ae:43:00:f8:58:4f:be:
2a:72:0f:a2:06:83:27:87:92:28:9b:c5:96:bf:65:23:35:68:
4b:eb:76:d6:56:40:53:06:ae:a3:6d:14:c9:9d:2b:a7:e7:0a:
62:c8:f1:e2:64:63:fd:b1:61:5c:38:94:4c:f6:8b:7a:bc:5d:
14:76:df:ab
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAYzFAQoP93RtPxwT5iL9KH1EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwMTAxMTIzMDI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTczZmQ0MjhiYmVkYmU4YTY5Mzg3Zjk5ZWY0YzM5MTBjZGQ2M2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OADDTlhO6RytFogUS+d7QQxE4XO
9GK+pNWjvI+swU1vy+T0fjP4hszJ0KZG6z4A+i4oFDx1tpyLta9knjSMwv3lg34G
lrWBRNXe1IwRhnDdzsif1jk3/dPcvwU81jM0s0nNJOhN7p2my5HjjuxAPE7v9thc
Zu0vPzS4PyACYzCXe1szUkL6cHgwcVp71T9YK7NBSUCC92WkYlaXKSjdueOyAlme
fPL3I5Y7CKCXG1bRFwS5jVls710Mv19zHDCuCUKE7Axk6miuB3RYSmy3Abzm4flL
kz+1am2qE/B5o78Lp5A8GJFS6rj3QvwIzv7lI3Qwo6zCL8V26jOelhuCCQIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFGFz/UKLvtvoppOH+Z70w5EM3WPhMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvWVhQOVFvdS0yLWltazRmNW52VERrUXpkWS1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQALVgVAwQA
LVgXAwQALVklAwQALVknAwQALVwDAwQALYyGAwQAW75hAwQAW75pAwQCuXBAAwQC
uf+oMA0GCSqGSIb3DQEBCwUAA4IBAQBaH6wkl7L5AjQ3e3NPL4870P0q6cDw4mJD
ILoP1Emt+evf1GNx+ln/0qzGLzZD9w7tJ7ep9Bcs61/Px2maDGD7khkQadUuBZM6
dVexOfmgTBzovty8Vx+1kG/jFvZjQ+gwOhGol2cOowvT1HK+Kt4NnDW5M/ssA7xT
uTiYX4F+0bNSdthj9yS91XH2sjYtA/husEWudTQVKau1OV6xQnnoR36cYBwumqId
o/EeRC5WI+6eCmYnWaBxKgLUE9I7eK5DAPhYT74qcg+iBoMnh5Iom8WWv2UjNWhL
63bWVkBTBq6jbRTJnSun5wpiyPHiZGP9sWFcOJRM9ot6vF0Udt+r
-----END CERTIFICATE-----
Generated at Mon May 6 05:08:55 2024 by rpki-client on console-fra.rpki-client.org