Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YPX_rsaLG5hDBEQJ4OE37weXcn8.roa
File: YPX_rsaLG5hDBEQJ4OE37weXcn8.roa (raw, json)
Hash identifier: TyeQDSHbjyk417zki27RIQ4oD0TSoazBg2bjSLU8Z9U=
Subject key identifier: 60:F5:FF:AE:C6:8B:1B:98:43:04:44:09:E0:E1:37:EF:07:97:72:7F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748772C6E4A33F829784816A3AA5694
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YPX_rsaLG5hDBEQJ4OE37weXcn8.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206170
IP address blocks: 192.36.176.0/24 maxlen: 24
192.71.246.0/24 maxlen: 24
192.121.140.0/24 maxlen: 24
192.121.182.0/24 maxlen: 24
192.165.9.0/24 maxlen: 24
194.14.207.0/24 maxlen: 24
194.68.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:77:2c:6e:4a:33:f8:29:78:48:16:a3:aa:56:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=60f5ffaec68b1b9843044409e0e137ef0797727f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:e6:88:82:b3:7a:06:fe:6e:c1:2b:9d:0d:
3a:96:05:57:a7:2f:fd:5b:b9:7f:2f:97:03:c4:a7:
43:77:f5:e4:94:bf:1a:29:e5:e5:7c:75:b6:2f:16:
f6:bb:2a:05:71:01:a4:b7:04:74:33:e8:3c:ae:df:
b9:af:5f:4e:b3:1a:ac:cc:73:5b:7a:03:16:7b:c6:
d5:3b:0d:c6:fe:1e:3e:95:89:38:9a:aa:49:a2:8f:
a0:08:87:89:71:fa:b3:6d:8b:6d:6c:e0:d0:10:ab:
9b:2f:7a:f2:93:0d:62:90:2a:ef:a0:a5:d9:47:49:
4a:21:98:8a:c9:67:79:2f:a5:59:76:d3:7a:62:01:
36:14:19:f3:d3:2b:a8:71:4c:6b:c0:07:87:7d:91:
3b:4b:3e:b0:e0:b1:e6:91:65:25:a3:43:47:bb:49:
4a:92:08:d3:78:30:e2:0a:0f:18:5c:a7:0b:d9:7f:
0c:67:cb:89:a4:21:68:fd:78:f0:53:c8:86:90:b9:
d1:b2:56:4c:c6:b2:4f:cb:49:83:b5:27:0c:d7:c5:
c5:01:32:b6:d1:d3:5e:b4:c9:21:17:ea:35:f2:0c:
b2:10:0f:87:9e:ff:d7:09:14:ac:df:4f:65:b6:32:
c2:50:e6:1e:8d:76:df:c9:74:d4:92:da:f4:65:b9:
e5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:F5:FF:AE:C6:8B:1B:98:43:04:44:09:E0:E1:37:EF:07:97:72:7F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YPX_rsaLG5hDBEQJ4OE37weXcn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.176.0/24
192.71.246.0/24
192.121.140.0/24
192.121.182.0/24
192.165.9.0/24
194.14.207.0/24
194.68.59.0/24
Signature Algorithm: sha256WithRSAEncryption
84:ff:91:3a:dd:41:7e:97:de:d3:fe:83:9c:ef:2d:c3:8d:b0:
3e:4b:6a:f1:b9:6d:9f:14:32:29:7c:41:20:6c:56:c6:35:3f:
10:f0:60:7b:13:65:77:f8:8a:da:8a:e9:20:f8:eb:b9:c9:22:
7e:94:26:c8:2f:53:87:52:55:30:f9:83:44:f9:80:68:d0:73:
aa:49:ee:a4:ae:0f:87:88:5d:17:02:eb:7a:1e:fa:fd:07:76:
2c:6e:46:d7:8a:43:cf:7e:2e:ec:a6:92:95:8b:ea:55:ad:24:
64:ea:0e:ca:eb:d9:b5:f5:3b:fe:b9:38:40:2b:3f:10:8e:c3:
9f:61:e5:3d:f8:e8:bf:4f:47:68:32:70:e6:8a:58:15:54:ef:
4c:78:87:90:3b:ab:5c:8f:e2:af:c8:0c:89:e3:4e:28:c4:ab:
a4:5b:86:dd:c7:f2:f1:bd:26:38:1c:25:43:a4:91:c3:a0:4f:
e7:a9:46:82:3f:e7:9c:9e:34:f8:b9:a2:ca:a2:b0:2d:49:f3:
c5:58:e2:07:85:9c:07:0c:e8:12:df:f6:81:14:46:88:83:24:
e1:b4:76:d9:cc:bc:84:0c:2b:65:01:dd:87:7b:bf:14:3d:1d:
24:03:64:b4:f8:4a:da:20:b4:84:74:50:9a:95:34:0c:5f:08:
d5:e9:c9:eb
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZQnSHcsbkoz+Cl4SBajqlaUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGY1ZmZhZWM2OGIxYjk4NDMwNDQ0MDllMGUxMzdlZjA3OTc3MjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM3miIKzegb+bsErnQ06lgVXpy/9
W7l/L5cDxKdDd/XklL8aKeXlfHW2Lxb2uyoFcQGktwR0M+g8rt+5r19OsxqszHNb
egMWe8bVOw3G/h4+lYk4mqpJoo+gCIeJcfqzbYttbODQEKubL3rykw1ikCrvoKXZ
R0lKIZiKyWd5L6VZdtN6YgE2FBnz0yuocUxrwAeHfZE7Sz6w4LHmkWUlo0NHu0lK
kgjTeDDiCg8YXKcL2X8MZ8uJpCFo/XjwU8iGkLnRslZMxrJPy0mDtScM18XFATK2
0dNetMkhF+o18gyyEA+Hnv/XCRSs309ltjLCUOYejXbfyXTUktr0ZbnlQwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFGD1/67GixuYQwRECeDhN+8Hl3J/MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvWVBYX3JzYUxHNWhEQkVRSjRPRTM3d2VYY244LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQAwCSwAwQA
wEf2AwQAwHmMAwQAwHm2AwQAwKUJAwQAwg7PAwQAwkQ7MA0GCSqGSIb3DQEBCwUA
A4IBAQCE/5E63UF+l97T/oOc7y3DjbA+S2rxuW2fFDIpfEEgbFbGNT8Q8GB7E2V3
+Iraiukg+Ou5ySJ+lCbIL1OHUlUw+YNE+YBo0HOqSe6krg+HiF0XAut6Hvr9B3Ys
bkbXikPPfi7sppKVi+pVrSRk6g7K69m19Tv+uThAKz8QjsOfYeU9+Oi/T0doMnDm
ilgVVO9MeIeQO6tcj+KvyAyJ404oxKukW4bdx/LxvSY4HCVDpJHDoE/nqUaCP+ec
njT4uaLKorAtSfPFWOIHhZwHDOgS3/aBFEaIgyThtHbZzLyEDCtlAd2He78UPR0k
A2S0+EraILSEdFCalTQMXwjV6cnr
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:21 2025 by rpki-client