Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/YB7ue_BCyqpGwU2JA2Asj_44NjY.roa
File: YB7ue_BCyqpGwU2JA2Asj_44NjY.roa (raw, json)
Hash identifier: Q9TuJ2ywhn6QpmgagotpSS09bcX6fm24UjcF7fWIqhs=
Subject key identifier: 60:1E:EE:7B:F0:42:CA:AA:46:C1:4D:89:03:60:2C:8F:FE:38:36:36
Certificate issuer: /CN=d2de05d3ca750dd5c27eebfa5539c20b7d2829cf
Certificate serial: 018E6600B13E897EB44CB993AABC482F0159
Authority key identifier: D2:DE:05:D3:CA:75:0D:D5:C2:7E:EB:FA:55:39:C2:0B:7D:28:29:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0t4F08p1DdXCfuv6VTnCC30oKc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/YB7ue_BCyqpGwU2JA2Asj_44NjY.roa
Signing time: Fri 22 Mar 2024 11:51:45 +0000
ROA not before: Fri 22 Mar 2024 11:51:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202658
IP address blocks: 185.157.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/0t4F08p1DdXCfuv6VTnCC30oKc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/0t4F08p1DdXCfuv6VTnCC30oKc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0t4F08p1DdXCfuv6VTnCC30oKc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:00:b1:3e:89:7e:b4:4c:b9:93:aa:bc:48:2f:01:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2de05d3ca750dd5c27eebfa5539c20b7d2829cf
Validity
Not Before: Mar 22 11:51:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=601eee7bf042caaa46c14d8903602c8ffe383636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:95:69:aa:b4:b7:9e:ad:9f:87:8c:db:31:
bb:6f:32:29:84:50:b3:0b:51:18:bb:30:6b:1b:1e:
61:24:a1:8d:ab:6d:33:b0:a2:22:f0:79:52:a0:01:
2e:8b:8c:98:b2:57:58:64:4c:cb:58:a9:31:5d:5b:
9e:b4:9c:b8:6d:75:5d:18:51:80:76:56:f8:e1:d9:
6f:97:5e:73:7d:09:9e:1d:79:3f:01:ab:4f:a2:19:
ac:eb:b1:cc:96:cc:b2:8b:9a:ff:23:24:64:f3:27:
28:71:c1:92:2d:17:b4:c1:53:5e:8d:f6:7d:eb:f0:
3e:aa:07:d8:b5:04:30:6f:ad:f1:ae:a3:e8:94:38:
fa:b2:5f:9a:c8:62:8d:d3:40:bf:8b:f8:2f:f7:68:
f2:a5:15:8a:87:49:86:68:f9:9e:19:94:41:e1:b2:
11:99:75:63:ec:72:15:cb:a0:5a:a6:07:e0:c3:0e:
49:5f:69:5a:f7:8a:44:3a:52:8f:3f:f0:50:14:8c:
5f:dc:35:8f:2e:71:be:e9:09:22:43:fb:91:e6:db:
6e:85:aa:fa:7a:c4:15:74:81:c7:81:a2:7e:84:36:
d3:7a:2e:d2:c7:f1:47:2b:17:ae:dc:76:6b:de:d0:
83:bb:4a:4f:25:2a:4b:9d:13:38:f7:5d:e8:c8:95:
ec:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:1E:EE:7B:F0:42:CA:AA:46:C1:4D:89:03:60:2C:8F:FE:38:36:36
X509v3 Authority Key Identifier:
keyid:D2:DE:05:D3:CA:75:0D:D5:C2:7E:EB:FA:55:39:C2:0B:7D:28:29:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0t4F08p1DdXCfuv6VTnCC30oKc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/YB7ue_BCyqpGwU2JA2Asj_44NjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1a325-8eac-45a2-b576-dd2125abcf5d/1/0t4F08p1DdXCfuv6VTnCC30oKc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.184.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:77:9c:22:9a:ab:b6:48:bf:bb:98:66:f6:b0:cf:56:43:26:
96:d7:80:10:c2:77:93:6e:3b:18:c2:7e:d9:0b:96:b5:7d:d5:
bf:13:07:9b:46:13:65:e5:ae:de:ed:82:3a:bf:24:91:df:9f:
f0:33:d5:6f:07:3a:b5:a6:95:9b:c8:11:f4:23:f9:b7:0d:b5:
05:07:ab:a1:dd:49:3b:b6:bb:e8:f3:41:c1:ca:23:8c:90:77:
2a:e6:76:a4:f9:3b:4d:8e:73:19:3b:86:c7:d1:f0:08:f8:56:
a2:bb:0b:b8:cb:b7:cc:eb:b1:cd:e5:07:55:86:54:59:53:e3:
8b:9f:c7:4e:ac:be:d1:97:2e:8f:fa:bb:9f:e0:b0:99:19:e9:
41:68:b3:42:bc:2c:55:3b:26:67:67:1b:f0:24:e5:54:13:8f:
f0:59:a4:53:cb:84:9c:40:82:c7:da:76:20:41:59:ab:2c:d2:
d5:1c:38:2f:97:f0:96:5d:a1:06:c8:33:e5:be:65:a2:d6:7e:
80:c9:c8:48:34:06:20:40:93:c8:a6:85:2d:17:91:95:06:7b:
14:b3:71:47:d9:da:60:d8:24:5b:e5:c5:27:6b:c1:58:18:21:
c2:1a:c7:eb:76:5c:5d:c6:b8:a8:e0:29:09:6c:55:27:0e:ea:
f8:4b:81:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 22:01:11 2024 by rpki-client on console-ams.rpki-client.org