Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/YEuD5IYph5M7s1X2ISUtyaLAJlM.roa
File: YEuD5IYph5M7s1X2ISUtyaLAJlM.roa (raw, json)
Hash identifier: jsDi1dC381AomI4suIrD/+MfLQQ6hhqKQLm12M+0ca4=
Subject key identifier: 60:4B:83:E4:86:29:87:93:3B:B3:55:F6:21:25:2D:C9:A2:C0:26:53
Certificate issuer: /CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Certificate serial: 018CC9BC4008E3BD16A4B06A15543E30599B
Authority key identifier: F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/YEuD5IYph5M7s1X2ISUtyaLAJlM.roa
Signing time: Tue 02 Jan 2024 10:33:26 +0000
ROA not before: Tue 02 Jan 2024 10:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39448
IP address blocks: 178.238.50.0/24 maxlen: 24
80.68.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:40:08:e3:bd:16:a4:b0:6a:15:54:3e:30:59:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6eea10afacf3a9c26ea1b1ec488e955e4dfa06a
Validity
Not Before: Jan 2 10:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=604b83e4862987933bb355f621252dc9a2c02653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:64:48:df:7a:a0:d7:b0:7d:1f:9b:17:f9:
8f:37:25:2c:68:f3:db:fa:0f:b6:6e:19:a3:5b:2e:
da:ed:1f:50:e8:02:2f:1d:0f:cb:3d:cf:09:6c:06:
3f:b8:2e:9b:15:cf:e4:c5:7c:a5:b4:0c:c8:5a:4c:
ca:51:60:0f:b1:fb:08:18:a7:08:10:82:8c:8d:55:
b6:3f:f9:55:3f:76:45:9e:0d:72:49:14:bf:59:e7:
55:82:2d:0f:ca:36:7d:9f:f5:ad:9d:4e:4b:a1:64:
24:12:4e:8b:5c:15:5f:06:07:49:b1:a8:39:e0:2d:
ed:64:79:a5:9f:fa:d5:68:d5:db:e2:f4:8f:bb:a6:
8a:fa:8e:52:bf:de:65:82:88:fa:28:96:c1:cf:45:
78:10:8f:30:11:a2:a4:b4:2c:a5:d9:fe:44:24:0c:
c1:0c:94:2f:79:49:08:84:31:2c:9a:fa:d3:f4:6b:
78:8e:94:80:37:9a:84:ad:38:c0:85:88:5c:cc:06:
fd:07:27:51:11:83:ae:cf:ef:ff:52:c1:9a:bd:d6:
5e:79:c8:d1:ef:ef:08:04:92:87:b5:ed:a6:a0:f7:
67:dc:46:75:16:b6:66:22:a6:5c:98:60:86:dd:ba:
6e:d9:80:68:9e:81:32:2f:18:ab:d8:94:a0:e6:12:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4B:83:E4:86:29:87:93:3B:B3:55:F6:21:25:2D:C9:A2:C0:26:53
X509v3 Authority Key Identifier:
keyid:F6:EE:A1:0A:FA:CF:3A:9C:26:EA:1B:1E:C4:88:E9:55:E4:DF:A0:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9u6hCvrPOpwm6hsexIjpVeTfoGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/YEuD5IYph5M7s1X2ISUtyaLAJlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/6f5746-b406-4c05-9741-54d8f6b06b83/1/9u6hCvrPOpwm6hsexIjpVeTfoGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.68.176.0/24
178.238.50.0/24
Signature Algorithm: sha256WithRSAEncryption
82:14:0e:08:ed:5b:b3:1d:72:44:eb:bf:78:e4:e5:36:7b:dc:
ee:0f:a5:02:4b:3f:6f:ac:21:d8:43:a2:05:e4:25:01:70:ce:
d2:95:15:81:63:f3:54:dc:09:8a:c4:df:93:2b:96:b7:da:f9:
86:70:c3:a2:a4:e0:85:08:50:72:2e:42:fb:f5:19:bb:7b:e9:
28:b3:4d:4e:e5:46:5b:77:ae:c8:aa:82:ef:5c:6b:14:a9:f7:
60:b9:78:df:bf:d1:39:34:64:39:cd:f5:fd:49:0b:13:c4:fc:
8e:e5:7c:e5:e0:0f:31:9c:2e:d3:7f:29:77:6e:0a:a0:54:cd:
ce:dc:46:2e:1c:77:f9:2c:83:47:85:21:0e:74:c8:ae:93:4e:
98:dc:4e:46:9e:f3:2e:59:13:be:b8:c7:45:a1:95:82:9b:cb:
ce:ba:fa:26:72:b7:aa:21:a0:68:20:5e:2e:2a:ed:6b:e6:1c:
95:70:0e:ec:21:58:8c:74:a0:aa:c2:18:27:3e:c4:a0:92:12:
58:12:08:2c:7f:1f:d8:7b:2a:a9:8c:a1:be:f7:16:f5:42:6d:
3d:9d:d0:be:e7:1c:de:29:b0:42:93:91:97:4f:30:22:59:76:
f5:59:0e:a4:cb:9f:59:52:85:ba:5d:cd:14:2b:69:af:a6:7d:
e0:e8:53:99
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJvEAI470WpLBqFVQ+MFmbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2ZWVhMTBhZmFjZjNhOWMyNmVhMWIxZWM0ODhlOTU1ZTRk
ZmEwNmEwHhcNMjQwMTAyMTAzMzI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDRiODNlNDg2Mjk4NzkzM2JiMzU1ZjYyMTI1MmRjOWEyYzAyNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszlkSN96oNewfR+bF/mPNyUsaPPb
+g+2bhmjWy7a7R9Q6AIvHQ/LPc8JbAY/uC6bFc/kxXyltAzIWkzKUWAPsfsIGKcI
EIKMjVW2P/lVP3ZFng1ySRS/WedVgi0PyjZ9n/WtnU5LoWQkEk6LXBVfBgdJsag5
4C3tZHmln/rVaNXb4vSPu6aK+o5Sv95lgoj6KJbBz0V4EI8wEaKktCyl2f5EJAzB
DJQveUkIhDEsmvrT9Gt4jpSAN5qErTjAhYhczAb9BydREYOuz+//UsGavdZeecjR
7+8IBJKHte2moPdn3EZ1FrZmIqZcmGCG3bpu2YBonoEyLxir2JSg5hKFRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGBLg+SGKYeTO7NV9iElLcmiwCZTMB8GA1UdIwQY
MBaAFPbuoQr6zzqcJuobHsSI6VXk36BqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEt
NTRkOGY2YjA2YjgzLzEvWUV1RDVJWXBoNU03czFYMklTVXR5YUxBSmxNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS82ZjU3NDYtYjQwNi00YzA1LTk3NDEtNTRkOGY2YjA2Yjgz
LzEvOXU2aEN2clBPcHdtNmhzZXhJanBWZVRmb0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUESwAwQA
su4yMA0GCSqGSIb3DQEBCwUAA4IBAQCCFA4I7VuzHXJE67945OU2e9zuD6UCSz9v
rCHYQ6IF5CUBcM7SlRWBY/NU3AmKxN+TK5a32vmGcMOipOCFCFByLkL79Rm7e+ko
s01O5UZbd67IqoLvXGsUqfdguXjfv9E5NGQ5zfX9SQsTxPyO5Xzl4A8xnC7Tfyl3
bgqgVM3O3EYuHHf5LINHhSEOdMiuk06Y3E5GnvMuWRO+uMdFoZWCm8vOuvomcreq
IaBoIF4uKu1r5hyVcA7sIViMdKCqwhgnPsSgkhJYEggsfx/YeyqpjKG+9xb1Qm09
ndC+5xzeKbBCk5GXTzAiWXb1WQ6ky59ZUoW6Xc0UK2mvpn3g6FOZ
-----END CERTIFICATE-----
Generated at Mon Jun 17 07:26:16 2024 by rpki-client on console-ams.rpki-client.org