Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/YNKKTHLSMgVIbtrarTfYIdcfgGk.roa
File: YNKKTHLSMgVIbtrarTfYIdcfgGk.roa (raw, json)
Hash identifier: O+x18o3vVj/b3rNVFHYtiPoAqnmmxQlnhXJmiaaIDsY=
Subject key identifier: 60:D2:8A:4C:72:D2:32:05:48:6E:DA:DA:AD:37:D8:21:D7:1F:80:69
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 018CC802CB519179A711CA9835FCF10936D5
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/YNKKTHLSMgVIbtrarTfYIdcfgGk.roa
Signing time: Tue 02 Jan 2024 02:31:15 +0000
ROA not before: Tue 02 Jan 2024 02:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49302
IP address blocks: 92.114.108.0/24 maxlen: 24
89.35.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:cb:51:91:79:a7:11:ca:98:35:fc:f1:09:36:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 2 02:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60d28a4c72d23205486edadaad37d821d71f8069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bd:9a:00:a2:b0:a3:f0:df:57:27:7d:7d:3b:
cc:85:96:6f:4a:45:f9:1d:fc:53:9c:b8:0b:66:5f:
36:2a:22:93:d6:a0:39:d3:32:fc:2b:98:8c:7f:b6:
3b:05:da:21:6a:f8:d7:79:59:ff:e2:06:63:4f:09:
38:4d:c8:84:ef:8f:e4:30:24:72:96:42:00:7f:f6:
69:1a:49:af:89:c1:02:e9:37:b8:08:c1:6e:36:be:
e2:f5:8b:7f:e7:91:33:01:54:1c:63:d1:f1:c3:d4:
c6:16:38:4e:94:ac:f0:60:f5:2e:c5:64:c2:a8:56:
de:ae:77:79:56:80:07:df:90:fe:78:ad:7b:2f:da:
b9:51:a0:29:14:a3:8a:d1:9d:e5:7a:0d:8c:de:59:
db:81:eb:b6:36:91:37:af:04:85:75:84:26:9a:62:
64:0f:b2:66:79:3c:1d:1c:77:48:b0:0c:9c:cb:25:
30:01:42:81:13:7c:91:71:a5:11:26:d8:0f:b1:e2:
bf:55:f2:2e:70:6d:f4:5f:c4:fc:d7:16:83:dd:ba:
41:2f:bf:00:99:87:6f:8a:9e:06:e8:aa:52:81:64:
84:b3:0e:81:78:ab:a2:8a:c3:a3:33:3b:2f:a2:40:
e0:44:5e:8f:19:49:2e:52:02:fd:e1:bd:57:08:dc:
65:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D2:8A:4C:72:D2:32:05:48:6E:DA:DA:AD:37:D8:21:D7:1F:80:69
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/YNKKTHLSMgVIbtrarTfYIdcfgGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.77.0/24
92.114.108.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:0b:9f:f2:be:10:f1:8a:88:e9:41:d3:ab:7a:7c:bd:98:3a:
ee:8d:45:b2:40:37:fa:e5:a3:d2:52:d0:7a:d2:4e:b8:67:ec:
86:a9:63:94:ce:98:5c:ec:88:68:a8:d4:72:3e:0b:48:2c:9f:
95:b3:54:35:2d:42:82:10:f7:66:6f:a7:2e:4f:97:c1:b3:d1:
69:6f:dc:19:fa:25:79:c7:de:c2:5e:ed:0e:ef:70:df:55:1d:
f5:1d:c4:cd:13:90:07:d3:0d:2b:0c:7b:28:77:cc:7b:86:32:
a4:7f:86:d6:2a:99:b4:39:a2:fc:d1:fb:74:bd:31:e3:23:e9:
38:31:ad:dc:b7:4d:2d:d2:d4:67:04:e2:48:95:d1:89:e2:a4:
26:8b:01:8c:45:a2:00:d7:bf:e8:15:c8:27:8f:02:35:f5:13:
b2:3e:d8:42:09:d6:0d:a9:07:42:89:a1:52:cc:fa:85:78:19:
9b:43:fe:fe:f6:dd:a8:1f:ec:4d:8a:96:23:62:86:e1:c4:1b:
ae:fc:11:e5:0f:b2:dd:9e:d2:86:66:58:b1:a7:63:fb:43:04:
4f:76:2b:8f:66:7a:cf:ab:57:83:1e:49:29:8b:ea:4f:ec:51:
83:22:ac:44:73:59:90:c0:dd:86:5d:f0:d4:48:2f:ab:3f:f7:
0a:88:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:37:19 2024 by rpki-client on console-fra.rpki-client.org