Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/yQ8CKc0PTD8P3v8KYdwk3TOyphw.roa
File: yQ8CKc0PTD8P3v8KYdwk3TOyphw.roa (raw, json)
Hash identifier: NiW7wCKxMrY9DunPIcmI1w4ycFmnKD4LQ3sXgubpIhg=
Subject key identifier: C9:0F:02:29:CD:0F:4C:3F:0F:DE:FF:0A:61:DC:24:DD:33:B2:A6:1C
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 018FF91A16B022DC2CE542D0A473B291600D
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/yQ8CKc0PTD8P3v8KYdwk3TOyphw.roa
Signing time: Sat 08 Jun 2024 18:26:27 +0000
ROA not before: Sat 08 Jun 2024 18:26:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208964
IP address blocks: 193.28.243.0/24 maxlen: 24
194.124.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f9:1a:16:b0:22:dc:2c:e5:42:d0:a4:73:b2:91:60:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Jun 8 18:26:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c90f0229cd0f4c3f0fdeff0a61dc24dd33b2a61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6f:b5:b3:6f:ca:65:1c:fa:03:ac:99:1e:d6:
ac:97:85:3d:f2:ea:8c:ae:a2:fc:a4:8a:6d:f0:82:
b8:c9:6d:ae:6a:54:97:e4:72:93:61:53:7f:6f:d2:
fd:d9:35:2b:63:85:34:0e:28:8a:93:d2:56:d9:07:
f4:ca:56:72:1d:d6:da:80:24:22:3a:df:9c:99:ea:
23:8b:65:83:da:89:26:71:b0:d8:15:e6:83:e8:16:
51:c6:b0:93:95:58:29:1a:83:d9:13:06:bd:03:a8:
78:f7:ed:f5:df:cf:62:3c:d0:dd:79:c2:1e:6a:ec:
b0:84:13:e9:5b:b1:ec:de:1a:b8:0b:de:10:56:f7:
f8:b5:1a:72:a6:c9:44:6c:70:78:c5:25:5a:4c:5c:
63:ec:52:ec:b0:de:76:f4:cf:2b:a7:d1:55:c2:44:
d3:6e:6b:78:66:13:1a:7c:6f:00:2b:71:99:b4:da:
9e:3b:2c:38:18:4a:5d:e6:22:12:ea:ff:66:de:35:
79:f7:c9:eb:0c:24:c9:91:1a:8c:ac:99:33:79:07:
05:2d:71:70:3f:af:08:63:79:87:d1:5a:1d:d2:d0:
4d:7e:91:6e:e0:c5:2f:05:bc:e6:7f:0d:a9:42:84:
c5:af:5a:d1:51:e7:ee:d5:d3:fb:6f:67:63:ae:99:
55:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0F:02:29:CD:0F:4C:3F:0F:DE:FF:0A:61:DC:24:DD:33:B2:A6:1C
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/yQ8CKc0PTD8P3v8KYdwk3TOyphw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.243.0/24
194.124.62.0/24
Signature Algorithm: sha256WithRSAEncryption
84:fd:ff:a3:53:33:69:c3:93:ad:da:a6:6f:c2:8c:00:68:77:
19:9c:b0:85:58:c9:b9:e3:2c:22:99:63:6d:7f:66:f6:3d:7c:
0f:a0:38:cf:53:f9:b6:9d:2f:f3:5b:58:78:12:90:84:9d:79:
75:d6:2d:cc:d6:2b:62:4c:df:46:81:56:c2:9a:82:ce:cd:88:
32:30:b7:eb:6d:cd:0c:c8:af:81:78:58:ad:80:2d:6e:ac:b1:
4e:14:6b:cc:c6:b1:9a:8e:79:d7:35:16:80:99:75:69:2a:81:
14:56:99:83:85:50:3a:18:40:ac:08:1a:f0:ad:5f:e7:1a:0b:
fa:0b:04:b1:57:12:8c:6b:58:46:0a:37:30:33:bd:53:25:ed:
c9:b2:15:ff:61:09:9d:da:51:e7:1f:67:06:9f:f2:83:8f:c2:
cb:ee:e6:ab:0a:09:ee:4f:97:58:98:97:bf:da:cc:bc:ef:92:
fd:80:f3:e1:7f:0c:e2:e8:ce:d4:d3:55:e3:87:4f:b1:81:da:
26:81:3d:36:48:60:aa:c2:1d:3e:5c:8f:56:98:70:c2:d7:cd:
c8:5d:fe:38:68:60:6c:70:a1:43:1f:ed:3e:15:3a:42:6c:3c:
99:ad:7a:74:bf:a2:7a:42:b4:fe:e4:fc:d4:1f:db:ff:17:de:
b1:4b:f0:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/5GhawItws5ULQpHOykWANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5ZDBkODU2NzY0YTNmZWU2NGJlMTRmMGE0OWY1OWE2ODY1
Mjg1ZDEwHhcNMjQwNjA4MTgyNjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTBmMDIyOWNkMGY0YzNmMGZkZWZmMGE2MWRjMjRkZDMzYjJhNjFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtG+1s2/KZRz6A6yZHtasl4U98uqM
rqL8pIpt8IK4yW2ualSX5HKTYVN/b9L92TUrY4U0DiiKk9JW2Qf0ylZyHdbagCQi
Ot+cmeoji2WD2okmcbDYFeaD6BZRxrCTlVgpGoPZEwa9A6h49+31389iPNDdecIe
auywhBPpW7Hs3hq4C94QVvf4tRpypslEbHB4xSVaTFxj7FLssN529M8rp9FVwkTT
bmt4ZhMafG8AK3GZtNqeOyw4GEpd5iIS6v9m3jV598nrDCTJkRqMrJkzeQcFLXFw
P68IY3mH0Vod0tBNfpFu4MUvBbzmfw2pQoTFr1rRUefu1dP7b2djrplVUQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMkPAinND0w/D97/CmHcJN0zsqYcMB8GA1UdIwQY
MBaAFHnQ2FZ2Sj/uZL4U8KSfWaaGUoXRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMt
ZjJiYjY5ZTc1ZTc0LzEveVE4Q0tjMFBURDhQM3Y4S1lkd2szVE95cGh3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80M2UzMDktNzVjNS00ZjQwLTlkYjMtZjJiYjY5ZTc1ZTc0
LzEvZWREWVZuWktQLTVrdmhUd3BKOVpwb1pTaGRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwRzzAwQA
wnw+MA0GCSqGSIb3DQEBCwUAA4IBAQCE/f+jUzNpw5Ot2qZvwowAaHcZnLCFWMm5
4ywimWNtf2b2PXwPoDjPU/m2nS/zW1h4EpCEnXl11i3M1itiTN9GgVbCmoLOzYgy
MLfrbc0MyK+BeFitgC1urLFOFGvMxrGajnnXNRaAmXVpKoEUVpmDhVA6GECsCBrw
rV/nGgv6CwSxVxKMa1hGCjcwM71TJe3JshX/YQmd2lHnH2cGn/KDj8LL7uarCgnu
T5dYmJe/2sy875L9gPPhfwzi6M7U01Xjh0+xgdomgT02SGCqwh0+XI9WmHDC183I
Xf44aGBscKFDH+0+FTpCbDyZrXp0v6J6QrT+5PzUH9v/F96xS/Ak
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:28:38 2024 by rpki-client on console-ams.rpki-client.org