Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/YyoIMiUWtZBjGayR0fZhMP9MTPA.roa
File: YyoIMiUWtZBjGayR0fZhMP9MTPA.roa (raw, json)
Hash identifier: ovtX6StzpEyaNiuWoVioAsQnieqjZLVYJaqH1vcx+tU=
Subject key identifier: 63:2A:08:32:25:16:B5:90:63:19:AC:91:D1:F6:61:30:FF:4C:4C:F0
Certificate issuer: /CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Certificate serial: 018E74CD24E78F46EA40EB589425779A9BB7
Authority key identifier: 21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/YyoIMiUWtZBjGayR0fZhMP9MTPA.roa
Signing time: Mon 25 Mar 2024 08:49:45 +0000
ROA not before: Mon 25 Mar 2024 08:49:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.201.57.0/24 maxlen: 24
185.201.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:cd:24:e7:8f:46:ea:40:eb:58:94:25:77:9a:9b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=216ebab4f46f254d95f4965b84a8cf24196b9c95
Validity
Not Before: Mar 25 08:49:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=632a08322516b5906319ac91d1f66130ff4c4cf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e1:c6:d7:54:fa:0a:33:0a:7a:2a:5f:37:dc:
67:31:6a:9d:12:23:e3:79:87:86:65:0b:eb:f6:3e:
68:38:44:9a:cc:ae:d7:c3:77:13:f6:32:1a:e3:27:
fe:70:e3:da:e6:bc:a8:be:32:ff:95:b3:21:3f:cb:
83:9b:f2:51:72:f2:02:e0:42:fd:a1:d8:55:48:e5:
0b:60:2e:98:ac:d8:36:30:9c:32:39:2a:e2:52:73:
be:13:6e:30:a6:6f:2e:f2:c1:9d:bd:77:f0:75:d5:
11:0d:81:74:70:0f:0f:26:b3:d4:65:aa:62:1f:a5:
ee:fc:3a:9c:94:83:be:0a:3d:cb:48:84:6a:5c:37:
aa:f5:cb:16:b3:7f:54:f1:38:ab:c7:d1:1e:46:61:
a3:4c:c6:91:ce:75:4e:c5:04:37:f5:a2:65:b8:c1:
7b:97:9c:c9:ac:ad:7f:b4:47:5e:cd:30:9a:54:ab:
21:99:7a:4b:ff:fd:32:c4:85:5c:77:c0:a0:04:8d:
b8:11:80:e6:26:ec:d5:22:c6:e4:5c:02:85:18:44:
a3:03:a1:f3:d2:bf:00:ce:a3:5a:59:89:b1:f3:c2:
77:8d:f5:d3:d2:42:59:4f:28:18:b5:0b:26:3f:c3:
3f:cf:af:d9:3d:3f:78:34:e9:bc:85:2e:a8:0d:eb:
7b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2A:08:32:25:16:B5:90:63:19:AC:91:D1:F6:61:30:FF:4C:4C:F0
X509v3 Authority Key Identifier:
keyid:21:6E:BA:B4:F4:6F:25:4D:95:F4:96:5B:84:A8:CF:24:19:6B:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IW66tPRvJU2V9JZbhKjPJBlrnJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/YyoIMiUWtZBjGayR0fZhMP9MTPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/6d8a2c-e228-4d40-8d90-dec20ddc73aa/1/IW66tPRvJU2V9JZbhKjPJBlrnJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.201.57.0-185.201.58.255
Signature Algorithm: sha256WithRSAEncryption
15:d5:d1:af:c8:6a:97:2a:30:fa:8b:24:8e:53:66:e1:51:4d:
4f:dd:93:83:82:40:eb:90:5f:c7:45:51:4d:b5:87:12:9a:e5:
d5:97:6d:5e:94:2c:29:e6:2e:7d:47:13:3c:96:8b:c2:fb:43:
08:21:f9:eb:6a:90:e3:fe:b0:76:eb:51:31:6c:d2:27:d6:92:
7f:41:c1:52:55:59:aa:08:b7:da:b5:0d:3f:70:76:02:c3:96:
d5:fb:b6:a0:28:0b:7c:5f:7d:f0:1a:39:f5:84:ab:52:f3:48:
54:2f:4d:25:53:b1:f8:53:4e:98:a1:8f:50:18:5c:ba:7c:6d:
a6:ab:fa:7c:4b:8b:ba:e9:f9:c7:e1:e3:8e:88:be:62:e7:a9:
ba:41:7d:71:62:9d:a1:3e:41:bb:e0:48:0b:f5:df:b4:b9:8d:
8f:7f:6f:2d:f8:36:b7:f1:10:92:05:49:3c:f0:16:34:63:5e:
b9:db:51:5c:5a:bd:5a:b9:6a:51:92:92:f7:83:7e:a4:3b:9f:
90:84:d3:99:11:94:de:e2:d3:d7:27:8a:1c:21:96:b6:5e:72:
85:3d:13:fb:30:75:2f:23:7f:ca:25:da:2b:84:b0:a6:98:8f:
18:22:2d:73:c0:9e:08:cd:5e:d3:ee:b9:79:86:66:84:1d:04:
b4:cc:33:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:07:51 2024 by rpki-client on console-ams.rpki-client.org