Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YdcCN664xKwVWxEkWR1dvvcVhos.roa
File: YdcCN664xKwVWxEkWR1dvvcVhos.roa (raw, json)
Hash identifier: ymcFRRDbxh3s/WugRhpB4vcF5IRfDpuQhvbv/csBawU=
Subject key identifier: 61:D7:02:37:AE:B8:C4:AC:15:5B:11:24:59:1D:5D:BE:F7:15:86:8B
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC8028477A8C34A2CFD34296C1BD35E24
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YdcCN664xKwVWxEkWR1dvvcVhos.roa
Signing time: Tue 02 Jan 2024 02:30:57 +0000
ROA not before: Tue 02 Jan 2024 02:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135073
IP address blocks: 185.210.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:84:77:a8:c3:4a:2c:fd:34:29:6c:1b:d3:5e:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61d70237aeb8c4ac155b1124591d5dbef715868b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8a:98:70:c7:62:f7:45:9a:a6:fa:29:90:b3:
c4:b5:51:a4:e1:ae:8d:2d:4d:0d:d7:8a:d6:a2:75:
c6:45:1b:98:f0:74:b3:d4:36:59:29:f3:d2:7a:0c:
64:b9:de:de:87:72:c7:31:b6:d2:46:72:5a:9b:6f:
d8:cf:71:20:a9:81:0b:f9:86:a0:17:d8:d4:9e:9e:
2c:a0:a0:9d:e8:e4:af:6b:21:a3:5d:db:f5:d2:c6:
ba:df:36:24:91:42:12:5e:b0:e8:c3:d3:85:24:45:
0a:df:88:98:93:e7:26:53:1c:a3:88:6e:65:44:de:
40:c9:b3:61:1c:7b:e3:aa:8e:18:61:22:60:fd:b2:
33:ef:e8:29:0d:b5:68:be:a7:4e:b3:bc:37:2c:b0:
e3:dc:35:b3:8f:55:d6:57:c2:38:3a:54:ae:1b:a2:
33:72:eb:9e:9e:82:ec:f6:64:0f:55:96:d2:0d:82:
f9:13:51:b6:69:0b:78:db:cb:c0:01:ba:16:5e:fe:
91:d2:68:4d:73:2b:8f:50:ee:ae:1b:a3:5e:57:8e:
63:d0:da:a9:0b:d6:ba:9e:46:b9:ef:a2:c0:56:4d:
92:fb:89:fb:89:15:e6:72:ca:c5:67:14:df:b0:2e:
9e:a9:76:4f:63:6a:77:69:48:0e:88:f5:e4:4c:65:
ff:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:D7:02:37:AE:B8:C4:AC:15:5B:11:24:59:1D:5D:BE:F7:15:86:8B
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YdcCN664xKwVWxEkWR1dvvcVhos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.233.0/24
Signature Algorithm: sha256WithRSAEncryption
26:1d:b2:44:27:30:8d:c2:58:6c:b2:81:98:28:f7:18:b1:83:
1e:c9:87:66:e2:3c:64:10:65:75:36:09:b5:95:67:b2:13:e7:
a2:95:b6:67:6c:b4:17:08:a1:13:d6:a9:d0:4d:ad:bc:a6:ce:
7a:46:3a:4b:c1:8a:57:50:2f:b8:58:9f:51:71:a2:3b:3c:4c:
bf:6f:53:1c:b2:d8:8c:ba:b2:e7:6a:a8:7d:8e:24:93:8b:31:
9c:fb:77:ef:25:6f:1b:45:b9:08:75:b7:64:ba:d2:72:99:d5:
0e:7d:d6:5f:7f:54:28:ee:86:03:d5:f0:fd:ff:0d:ce:a4:1e:
65:61:50:56:13:30:6c:67:17:aa:d9:14:c9:bd:27:ad:5d:ec:
46:fa:2a:f8:54:e5:b8:15:a1:4b:55:d5:a6:5f:77:0b:f1:94:
ff:cd:bf:88:5a:b1:27:a0:54:e2:7d:45:ae:4b:9e:64:ba:ea:
48:93:c8:b6:62:b9:06:f3:0d:a4:4a:55:6f:20:46:86:a4:f1:
dc:c1:6f:f2:69:7d:fb:d5:99:cb:08:ca:0b:05:d6:5c:b8:ec:
a4:c6:4f:99:3c:4a:61:2d:50:b9:fa:72:75:55:b4:9d:f0:14:
96:18:e8:91:86:56:95:a6:ee:79:1f:ce:a7:9f:25:29:c5:cd:
56:4d:d9:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:27:31 2024 by rpki-client on console-ams.rpki-client.org