Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/YNSRif6DEa8JsyzzEBR_MeiVv4I.roa
File: YNSRif6DEa8JsyzzEBR_MeiVv4I.roa (raw, json)
Hash identifier: ETJDg9On3wAQcHJZFZzKyHt1TpcbbbiGwD85tpermno=
Subject key identifier: 60:D4:91:89:FE:83:11:AF:09:B3:2C:F3:10:14:7F:31:E8:95:BF:82
Certificate issuer: /CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Certificate serial: 018E1CE1264049FD2C93D3DABC698AF4C0BB
Authority key identifier: 33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/YNSRif6DEa8JsyzzEBR_MeiVv4I.roa
Signing time: Fri 08 Mar 2024 07:05:01 +0000
ROA not before: Fri 08 Mar 2024 07:05:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44092
IP address blocks: 195.36.16.0/20 maxlen: 20
195.36.16.0/24 maxlen: 24
195.36.17.0/24 maxlen: 24
195.36.18.0/24 maxlen: 24
195.36.19.0/24 maxlen: 24
195.36.20.0/24 maxlen: 24
195.36.21.0/24 maxlen: 24
195.36.22.0/24 maxlen: 24
195.36.23.0/24 maxlen: 24
195.36.24.0/24 maxlen: 24
195.36.25.0/24 maxlen: 24
195.36.26.0/24 maxlen: 24
195.36.27.0/24 maxlen: 24
195.36.28.0/24 maxlen: 24
195.36.29.0/24 maxlen: 24
195.36.30.0/24 maxlen: 24
195.36.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:1c:e1:26:40:49:fd:2c:93:d3:da:bc:69:8a:f4:c0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b1b31396083ce9ed51e462898e294ed8215ae7
Validity
Not Before: Mar 8 07:05:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60d49189fe8311af09b32cf310147f31e895bf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:19:9c:88:b9:c9:13:74:cc:83:fb:81:9d:
13:82:cf:4f:bc:bf:e0:1f:55:bd:47:8d:2a:ed:f7:
ec:6b:cb:74:9e:18:97:b4:62:69:7b:51:9d:f7:49:
8a:f4:b0:e9:01:94:fd:5d:cc:18:95:9b:83:84:68:
ca:ae:fd:5d:a8:d7:7b:5f:c6:ff:14:85:b4:de:3a:
9c:62:8b:09:91:8c:ca:f9:b9:9d:21:39:e8:ec:6d:
5e:df:c8:ac:86:93:2a:7e:17:96:72:09:96:dc:7e:
3f:64:d5:b9:74:4d:8b:07:45:eb:1a:10:71:f4:9e:
05:8c:40:5d:ae:c6:12:b5:68:ac:43:b8:df:50:24:
12:dd:f4:6a:24:df:0f:50:8c:ec:8a:63:93:f5:d7:
03:9e:ac:22:de:65:d3:ec:94:b4:de:46:47:eb:2a:
33:1c:71:aa:f3:79:08:29:86:ca:4f:13:e0:bf:9b:
67:df:32:87:37:0b:a6:83:68:1a:9b:ba:ad:01:10:
b5:74:75:af:10:5d:e2:80:2f:b8:07:b1:db:bc:85:
02:cf:10:5e:78:30:4f:79:0c:72:61:3e:b9:60:20:
55:c5:0b:0e:ef:1e:0b:64:a0:6d:04:ca:5e:70:08:
a1:04:95:58:ba:d9:54:35:ad:51:12:49:d7:8a:55:
4a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D4:91:89:FE:83:11:AF:09:B3:2C:F3:10:14:7F:31:E8:95:BF:82
X509v3 Authority Key Identifier:
keyid:33:B1:B3:13:96:08:3C:E9:ED:51:E4:62:89:8E:29:4E:D8:21:5A:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7GzE5YIPOntUeRiiY4pTtghWuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/YNSRif6DEa8JsyzzEBR_MeiVv4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/1cc1fa-28dd-44d4-98a0-33e61bd912ea/1/M7GzE5YIPOntUeRiiY4pTtghWuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.36.16.0/20
Signature Algorithm: sha256WithRSAEncryption
21:11:85:1a:49:e6:bc:a0:3b:0a:0f:55:50:97:be:26:48:92:
cf:16:0d:83:6f:dd:e8:9a:aa:2a:4d:99:a8:47:46:53:fe:78:
69:3e:8f:4d:79:97:16:9a:ae:ba:72:05:1c:03:9a:47:9a:b5:
0c:d0:1b:d3:f3:2e:cf:33:53:74:ad:b4:ed:ae:22:10:4c:01:
55:8c:db:eb:a1:0f:09:5d:10:a1:74:5e:99:3a:c1:4a:b8:ec:
5a:fd:a7:65:79:7b:1c:37:5c:d8:9f:22:be:ec:b8:57:b8:0f:
81:b6:e5:ef:4c:50:4b:0e:4e:82:ee:d8:93:55:d8:a6:c9:b5:
20:53:82:17:54:fd:84:c4:12:12:de:e6:da:52:51:49:75:2a:
aa:53:be:b7:e4:51:23:0e:85:fb:49:f1:ed:3c:a3:45:95:97:
b4:0c:23:13:ab:72:63:25:7e:a7:3c:db:6a:1f:30:a4:10:e6:
8a:c4:b6:aa:e4:f4:e5:73:35:0c:d4:e7:09:89:93:6f:cc:70:
cb:c2:47:fa:93:2b:92:68:9f:54:cc:11:3d:4a:e8:2e:db:76:
af:b5:7b:70:b1:11:14:91:4a:49:fd:25:97:28:d6:11:7a:87:
8f:12:5b:48:8d:d7:43:26:0d:4e:9a:d1:f2:fe:76:9e:51:ed:
50:8c:d7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 11:02:52 2024 by rpki-client on console-ams.rpki-client.org