Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/YcwI2fZlMwxUA69CQFBEmIR733E.roa
File: YcwI2fZlMwxUA69CQFBEmIR733E.roa (raw, json)
Hash identifier: et8GDR6ngYKl0AZO8Wq7BvgLSkJvYviEhnike/pXqBE=
Subject key identifier: 61:CC:08:D9:F6:65:33:0C:54:03:AF:42:40:50:44:98:84:7B:DF:71
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 018CC649BF8E5DADE5A8873086ECFDD29078
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/YcwI2fZlMwxUA69CQFBEmIR733E.roa
Signing time: Mon 01 Jan 2024 18:29:31 +0000
ROA not before: Mon 01 Jan 2024 18:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204652
IP address blocks: 185.25.142.0/24 maxlen: 24
2a02:2339:c000::/34 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:bf:8e:5d:ad:e5:a8:87:30:86:ec:fd:d2:90:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Jan 1 18:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61cc08d9f665330c5403af4240504498847bdf71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8d:5a:4f:b8:ad:02:22:a5:13:11:ff:5a:0e:
14:ab:51:0b:fb:a4:a3:c4:9d:b7:9f:b7:3c:67:1a:
5e:b2:a0:6a:b2:61:7e:26:8b:7e:57:54:db:a0:38:
8a:ab:dd:7e:ae:58:ba:c5:d8:06:ee:34:16:55:a3:
6f:ea:65:2f:7a:d0:35:ba:10:a3:cd:f4:6b:ba:2b:
b8:7c:07:ac:52:46:f1:3c:93:c9:af:8f:c4:23:00:
26:94:fb:58:d0:36:8a:ad:02:c1:01:a3:f7:69:6a:
29:5c:b3:e0:80:14:cc:e3:d3:23:91:9c:d5:1b:9e:
a5:e1:0c:2f:5a:87:f0:0e:16:51:da:ab:d4:be:fa:
f0:8e:7f:28:3a:58:c0:5b:88:64:12:c4:90:7b:c7:
15:90:11:6b:12:6c:cd:e8:12:fc:e3:ab:3f:20:68:
4e:21:9a:65:75:02:a2:be:92:98:2e:76:82:0c:05:
87:16:33:67:c0:9f:50:bb:8d:be:59:0c:26:33:75:
5a:0c:bd:25:83:bc:1c:5a:55:3d:0e:cc:d7:07:ea:
eb:58:a6:11:95:66:88:25:4c:b6:96:95:bc:a9:0d:
be:72:45:23:64:b3:f0:86:89:61:ae:75:40:18:6c:
0c:d3:03:ac:5b:f2:77:e7:95:a1:2d:f9:0a:59:6b:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CC:08:D9:F6:65:33:0C:54:03:AF:42:40:50:44:98:84:7B:DF:71
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/YcwI2fZlMwxUA69CQFBEmIR733E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.142.0/24
IPv6:
2a02:2339:c000::/34
Signature Algorithm: sha256WithRSAEncryption
17:0f:4d:d7:14:dd:f1:de:62:50:c1:bf:3f:0f:3f:a3:d9:3c:
ba:33:89:68:3e:af:60:a9:10:c5:3e:fe:56:b8:bb:73:b9:9c:
83:34:6f:06:84:76:e5:05:26:7d:d6:bc:96:21:0a:8a:7a:28:
e7:e4:2e:44:7d:a0:51:a6:f9:24:56:90:a7:62:83:db:b9:b8:
f3:d1:ec:0a:67:1d:97:58:86:0b:21:f9:54:53:04:d9:01:55:
a7:3c:b5:e3:37:e7:a4:8f:4a:f3:5b:46:07:ce:ff:96:7b:23:
21:fd:d9:87:99:ab:11:58:9e:7b:d6:1d:9e:13:27:44:80:c6:
9b:ee:2f:b2:d4:7c:bd:f5:20:5b:e9:0d:7f:aa:8e:21:05:8e:
7c:f8:ed:98:50:54:b5:7f:6d:92:09:c3:39:c4:f6:b2:95:e8:
d2:d1:51:81:76:c1:32:a3:a6:c2:46:2f:91:a2:03:1f:31:a3:
06:c1:ca:e9:22:dc:74:8a:70:59:5a:f0:7e:a8:e5:5f:79:f0:
77:e1:fc:01:d4:c0:d8:00:8a:39:63:18:94:29:00:6d:41:96:
f0:97:fd:c7:2d:01:ec:02:90:83:66:fc:0e:41:83:cf:70:a4:
5b:ef:34:33:47:d5:f7:b0:a9:3a:28:fe:db:80:f7:54:df:a7:
d5:33:87:01
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAYzGSb+OXa3lqIcwhuz90pB4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl
NzUxNjQwHhcNMjQwMTAxMTgyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWNjMDhkOWY2NjUzMzBjNTQwM2FmNDI0MDUwNDQ5ODg0N2JkZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkY1aT7itAiKlExH/Wg4Uq1EL+6Sj
xJ23n7c8ZxpesqBqsmF+Jot+V1TboDiKq91+rli6xdgG7jQWVaNv6mUvetA1uhCj
zfRruiu4fAesUkbxPJPJr4/EIwAmlPtY0DaKrQLBAaP3aWopXLPggBTM49MjkZzV
G56l4QwvWofwDhZR2qvUvvrwjn8oOljAW4hkEsSQe8cVkBFrEmzN6BL846s/IGhO
IZpldQKivpKYLnaCDAWHFjNnwJ9Qu42+WQwmM3VaDL0lg7wcWlU9DszXB+rrWKYR
lWaIJUy2lpW8qQ2+ckUjZLPwholhrnVAGGwM0wOsW/J355WhLfkKWWvLtwIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFGHMCNn2ZTMMVAOvQkBQRJiEe99xMB8GA1UdIwQY
MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt
M2U1OWNlNDQ1YjFjLzEvWWN3STJmWmxNd3hVQTY5Q1FGQkVtSVI3MzNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj
LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAuRmOMA4E
AgACMAgDBgYqAiM5wDANBgkqhkiG9w0BAQsFAAOCAQEAFw9N1xTd8d5iUMG/Pw8/
o9k8ujOJaD6vYKkQxT7+Vri7c7mcgzRvBoR25QUmfda8liEKinoo5+QuRH2gUab5
JFaQp2KD27m489HsCmcdl1iGCyH5VFME2QFVpzy14zfnpI9K81tGB87/lnsjIf3Z
h5mrEViee9YdnhMnRIDGm+4vstR8vfUgW+kNf6qOIQWOfPjtmFBUtX9tkgnDOcT2
spXo0tFRgXbBMqOmwkYvkaIDHzGjBsHK6SLcdIpwWVrwfqjlX3nwd+H8AdTA2ACK
OWMYlCkAbUGW8Jf9xy0B7AKQg2b8DkGDz3CkW+80M0fV97CpOij+24D3VN+n1TOH
AQ==
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:49 2024 by rpki-client on console-fra.rpki-client.org