Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/YGTQFN0IbNuChwGm1BTZVqce7f0.roa
File: YGTQFN0IbNuChwGm1BTZVqce7f0.roa (raw, json)
Hash identifier: lqRQAVfD8ph7SMfYcv4SfNPbE8/0fynThAZ+U/f55OI=
Subject key identifier: 60:64:D0:14:DD:08:6C:DB:82:87:01:A6:D4:14:D9:56:A7:1E:ED:FD
Certificate issuer: /CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Certificate serial: 018CC94E4FD392619D1DD2FCA155E2AA80F0
Authority key identifier: 11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/YGTQFN0IbNuChwGm1BTZVqce7f0.roa
Signing time: Tue 02 Jan 2024 08:33:21 +0000
ROA not before: Tue 02 Jan 2024 08:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.239.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4f:d3:92:61:9d:1d:d2:fc:a1:55:e2:aa:80:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11eecd71c193e4ac30ed03d0b9f05da101c603d2
Validity
Not Before: Jan 2 08:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6064d014dd086cdb828701a6d414d956a71eedfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:30:cf:c5:1f:77:f1:b7:3c:fd:29:c7:ac:1f:
1e:e9:a9:a1:3f:17:e9:99:91:b6:e8:94:2a:40:d0:
39:3b:9a:51:78:06:53:0f:cc:14:1f:7f:68:f2:4c:
f4:af:a9:03:6d:b5:69:5b:8b:3e:cc:2a:fc:4a:e9:
c8:c4:05:56:ac:f8:61:8e:fe:d7:87:29:52:83:66:
1d:c9:a6:01:20:ee:ba:06:08:5d:34:34:b5:3a:60:
19:ea:bb:23:d3:9a:ff:7a:a3:34:1f:57:b4:ea:e2:
0e:56:c3:33:ab:ce:d2:56:e1:5f:8b:c8:31:4e:d0:
88:62:f0:0b:dc:32:8c:eb:22:77:1b:01:dd:ad:67:
28:6d:df:30:50:2e:1b:ec:29:0c:2e:50:cb:8e:b1:
c3:1e:ed:c3:d2:18:31:23:f2:d3:92:4b:06:07:e6:
e3:28:1f:8b:02:81:37:d2:53:bd:00:3b:45:f0:62:
8a:d3:24:79:da:fb:17:a7:5d:54:d4:62:69:9d:44:
3e:c0:d7:cc:df:3f:31:72:60:0f:45:8a:cb:62:89:
f3:2b:12:91:17:75:c1:e2:d0:5a:08:d6:6c:fc:34:
ff:23:9e:5f:8a:3c:70:ff:bd:91:58:a8:3f:e2:8e:
4d:de:64:c4:41:10:79:64:1d:c3:a8:62:dc:3c:cf:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:64:D0:14:DD:08:6C:DB:82:87:01:A6:D4:14:D9:56:A7:1E:ED:FD
X509v3 Authority Key Identifier:
keyid:11:EE:CD:71:C1:93:E4:AC:30:ED:03:D0:B9:F0:5D:A1:01:C6:03:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ee7NccGT5Kww7QPQufBdoQHGA9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/YGTQFN0IbNuChwGm1BTZVqce7f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4fd95a-5157-4a1b-b868-138995c99b97/1/Ee7NccGT5Kww7QPQufBdoQHGA9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.140.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2f:b7:d2:02:14:25:ac:62:25:84:bd:28:cc:5a:72:48:8e:
3d:07:57:79:c8:65:d5:9f:40:b0:ce:02:85:6a:9c:cd:da:db:
8c:7c:2b:89:3d:43:1e:bd:fb:d0:3e:2e:3f:5e:4b:fe:b0:9e:
2a:1d:89:2c:2e:22:af:37:d8:58:c9:93:3c:e4:af:ac:d6:c9:
7d:cd:a5:d2:bf:54:a8:99:17:27:32:d0:7f:7c:42:1b:13:05:
f7:ca:44:c2:b7:db:15:73:22:1b:20:89:77:4c:9b:8e:ba:e1:
7c:cc:59:d4:5a:13:f1:1d:1e:b3:c7:6b:40:12:f2:33:f1:76:
29:ee:8f:2f:02:ff:28:62:77:3d:fe:28:d4:07:12:97:a2:97:
d9:1c:d8:a8:05:a3:fe:3f:23:a5:fa:b4:7d:39:b4:47:b5:50:
77:e9:18:40:5a:75:26:4c:03:33:44:de:36:71:8b:e9:45:10:
f9:3a:3d:22:98:89:c7:db:30:58:33:50:36:87:f4:47:44:96:
b9:33:bc:24:c8:11:d2:41:e0:c5:de:80:56:fe:81:da:77:af:
fe:c3:c8:e9:8b:5c:01:4c:a4:32:0f:a2:67:49:91:d4:8d:c2:
73:f7:18:98:43:a4:15:87:50:29:2f:17:b9:97:a5:57:2f:6e:
f1:ee:cc:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 19:04:17 2024 by rpki-client on console-ams.rpki-client.org