Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/YOwN-I--XY-TILUrPHq5w9CDRs0.roa
File: YOwN-I--XY-TILUrPHq5w9CDRs0.roa (raw, json)
Hash identifier: Tl6UyGz5chIyqkC+4aY+8IzMpOpox+9jHVzHoCchbWE=
Subject key identifier: 60:EC:0D:F8:8F:BE:5D:8F:93:20:B5:2B:3C:7A:B9:C3:D0:83:46:CD
Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Certificate serial: 018CC493582A8E944C6EA8D318C28EF108A8
Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/YOwN-I--XY-TILUrPHq5w9CDRs0.roa
Signing time: Mon 01 Jan 2024 10:30:39 +0000
ROA not before: Mon 01 Jan 2024 10:30:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61033
IP address blocks: 89.46.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft
rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:58:2a:8e:94:4c:6e:a8:d3:18:c2:8e:f1:08:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3
Validity
Not Before: Jan 1 10:30:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60ec0df88fbe5d8f9320b52b3c7ab9c3d08346cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5a:d9:17:63:11:52:0a:f4:81:57:8c:ce:f9:
a3:2f:22:79:63:50:de:b2:ba:c3:b4:a5:a5:75:51:
d6:49:b6:ff:ca:fd:97:0d:cd:4a:26:6b:c6:41:3e:
75:c6:e0:98:4d:0a:cf:24:72:45:b8:b5:2c:2d:14:
14:46:7c:7f:13:3a:b4:c1:80:1c:ed:a3:cc:99:2c:
e4:07:eb:98:ce:17:bd:1b:5c:fc:cd:e2:b8:51:8e:
a8:ef:bc:8e:20:35:42:2d:5b:ae:2c:e5:8c:4c:7c:
33:91:4b:da:39:49:2a:6a:6c:96:6b:20:0d:e8:fd:
2a:3c:47:0a:0a:ae:08:4c:26:f9:90:ec:ba:9c:f2:
88:82:50:17:79:b2:e9:39:cb:40:9c:d9:2c:43:11:
38:3a:73:28:96:db:03:fb:5a:87:e5:14:27:22:69:
c4:80:b3:54:5f:e2:ef:04:5f:70:96:92:4b:57:c1:
6e:64:ae:fe:07:1b:d7:96:0f:7b:6c:a5:f2:a6:9d:
c3:59:6d:b1:94:24:df:4c:5c:51:c3:07:28:7d:e4:
c5:e6:dc:b3:a3:c0:6a:90:24:7f:3d:f7:c5:77:15:
4d:35:ab:f2:de:6d:6e:f6:f5:80:50:71:08:27:f6:
8c:22:b3:5a:40:73:55:7e:70:59:73:05:3d:05:0b:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:EC:0D:F8:8F:BE:5D:8F:93:20:B5:2B:3C:7A:B9:C3:D0:83:46:CD
X509v3 Authority Key Identifier:
keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/YOwN-I--XY-TILUrPHq5w9CDRs0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.120.0/24
Signature Algorithm: sha256WithRSAEncryption
95:91:d1:40:19:c2:ea:80:a7:f8:6f:f2:d1:ab:a4:94:eb:60:
83:ab:b2:47:3e:30:3c:46:fa:85:74:5e:65:bf:cd:47:d7:5b:
3f:44:28:31:e3:19:2f:0d:c2:a4:0e:fa:61:d1:48:b0:00:4f:
ed:ed:f0:3d:0e:6c:2e:15:95:9a:a0:97:7b:67:72:98:d0:e6:
4e:b0:19:04:c2:e5:19:9e:5e:8d:0a:7f:8b:1d:19:80:b7:f4:
25:fc:95:66:a0:7a:06:3e:c4:a9:ac:e3:8a:42:68:2a:3f:d9:
07:d9:52:31:56:f5:06:45:2c:61:8e:0f:6d:c2:e3:50:a6:c0:
fe:a8:05:dc:bf:92:38:99:85:36:7f:0f:aa:a5:61:a6:ae:78:
cc:c3:33:d4:3b:24:56:d3:da:ec:07:86:16:0e:d6:5d:40:8f:
3b:48:0d:68:a9:26:04:73:7a:2b:c8:a6:83:d6:ee:df:e4:c8:
8e:42:b5:3a:51:23:56:04:ad:4a:f7:18:c5:e5:a4:9a:0d:4b:
78:8c:b4:f0:7f:97:b2:66:ad:a6:9b:7f:3f:f7:a7:7c:5f:a3:
81:0b:c7:a2:d7:9e:a4:8c:fe:59:2a:b1:87:61:5c:bc:0f:81:
ca:7b:64:71:53:fd:94:9b:31:d8:05:63:43:1a:ef:8b:0c:7c:
81:63:15:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 07:21:25 2024 by rpki-client on console-ams.rpki-client.org