Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ympTUiKOIBW6Q0XAq8B7t8GyWwk.roa
File: ympTUiKOIBW6Q0XAq8B7t8GyWwk.roa (raw, json)
Hash identifier: V/HmVtNKYNaJ4krux03lC3O5KBKK6mWFkkqdC7tUjDA=
Subject key identifier: CA:6A:53:52:22:8E:20:15:BA:43:45:C0:AB:C0:7B:B7:C1:B2:5B:09
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 018CC94E41F188B7A5A4AB59693E80F053F4
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ympTUiKOIBW6Q0XAq8B7t8GyWwk.roa
Signing time: Tue 02 Jan 2024 08:33:18 +0000
ROA not before: Tue 02 Jan 2024 08:33:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212508
IP address blocks: 152.89.254.0/24 maxlen: 24
152.89.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:41:f1:88:b7:a5:a4:ab:59:69:3e:80:f0:53:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 2 08:33:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca6a5352228e2015ba4345c0abc07bb7c1b25b09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9d:fe:de:1b:10:0f:1f:d0:f7:a3:08:f9:32:
bc:e1:0d:d6:9d:24:31:8c:84:8e:b9:bc:38:3d:5d:
2f:71:95:a8:42:f9:b4:1b:9d:6c:03:1f:3b:a4:cb:
b3:a5:6d:2e:12:c5:81:64:6a:4d:b0:b5:f7:2e:5d:
69:8b:e1:c2:82:62:b5:67:49:77:70:92:65:3e:d7:
cd:f9:f7:a3:61:4d:c8:8b:39:52:89:f2:d8:32:ef:
ae:92:e5:a7:10:e5:67:a2:7b:78:9a:63:86:41:31:
b0:e7:9b:99:a0:78:35:88:73:86:6c:dd:fe:e5:65:
69:4c:5a:4a:3c:0f:2e:4c:a9:56:52:2e:d2:2d:0d:
4b:1d:2e:e4:fb:68:c7:54:3e:5b:7b:26:c2:0c:b5:
21:04:2e:13:80:88:27:91:1a:01:44:a7:13:5b:c6:
85:88:96:cc:3c:07:5a:41:fc:84:bf:e7:ce:99:1a:
74:81:e0:d0:bd:dd:65:ac:0f:40:c0:dd:02:5b:23:
26:45:91:e0:79:3d:3d:60:5b:8f:2e:d4:2a:f4:1c:
88:82:c8:ea:66:9a:e0:bb:42:14:fd:b6:6d:42:a8:
e0:57:b7:4f:36:3b:5c:d5:44:bd:92:76:75:95:ef:
74:a4:7a:fc:89:51:c5:55:09:5d:1a:f1:8e:6f:cd:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:6A:53:52:22:8E:20:15:BA:43:45:C0:AB:C0:7B:B7:C1:B2:5B:09
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/ympTUiKOIBW6Q0XAq8B7t8GyWwk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.254.0/23
Signature Algorithm: sha256WithRSAEncryption
2e:e3:85:22:2d:c5:f7:72:37:23:64:2e:66:7e:bc:80:2d:9f:
b7:cb:7b:55:f5:a8:30:86:36:b4:cf:7e:28:a6:60:88:5f:28:
80:e0:9f:2f:e9:3e:4f:4b:35:cf:d0:49:65:6e:40:ba:a7:d4:
9c:6f:ee:5a:e2:52:ea:3b:5d:49:ed:2b:f2:6e:8d:4a:d9:66:
57:7c:fa:e1:8d:97:a0:10:39:94:85:5b:61:5f:9f:09:a6:86:
ce:69:d3:ee:47:f5:e3:d1:1f:07:bf:7c:fd:5f:f5:ef:ae:41:
c0:93:fe:60:f9:7e:c3:c5:de:69:ea:00:f2:f6:4c:94:3f:27:
e7:7f:24:3e:32:f3:7a:ee:02:08:b9:dc:6e:ca:d8:d1:50:33:
be:f6:15:7a:a5:be:c2:92:c8:69:a7:bf:51:1f:98:09:8f:a9:
0a:e3:89:92:5a:1e:e1:7b:d3:60:3b:1c:98:62:44:82:43:ae:
9d:ee:0b:aa:f8:b8:08:9c:8a:bd:58:4f:06:21:63:32:a1:4f:
12:9f:23:a6:d9:45:99:83:89:b8:cc:b9:dc:3f:5a:ef:02:80:
99:65:58:4a:72:8e:04:66:71:ce:a8:f6:00:f3:11:25:b7:98:
0c:78:6e:f3:2d:f9:63:6e:f7:e6:ad:f5:47:a6:69:df:5a:af:
2b:21:f5:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTkHxiLelpKtZaT6A8FP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiMDQxNWJmYzQzYjM4ZTljZmQxYTEyOTk1MjAyZTg3NjM3
NTJmZGUwHhcNMjQwMTAyMDgzMzE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTZhNTM1MjIyOGUyMDE1YmE0MzQ1YzBhYmMwN2JiN2MxYjI1YjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp3+3hsQDx/Q96MI+TK84Q3WnSQx
jISOubw4PV0vcZWoQvm0G51sAx87pMuzpW0uEsWBZGpNsLX3Ll1pi+HCgmK1Z0l3
cJJlPtfN+fejYU3IizlSifLYMu+ukuWnEOVnont4mmOGQTGw55uZoHg1iHOGbN3+
5WVpTFpKPA8uTKlWUi7SLQ1LHS7k+2jHVD5beybCDLUhBC4TgIgnkRoBRKcTW8aF
iJbMPAdaQfyEv+fOmRp0geDQvd1lrA9AwN0CWyMmRZHgeT09YFuPLtQq9ByIgsjq
Zprgu0IU/bZtQqjgV7dPNjtc1US9knZ1le90pHr8iVHFVQldGvGOb82F/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMpqU1IijiAVukNFwKvAe7fBslsJMB8GA1UdIwQY
MBaAFBsEFb/EOzjpz9GhKZUgLodjdS/eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1Nzgt
YTNjYTBkYjgzMjU0LzEveW1wVFVpS09JQlc2UTBYQXE4Qjd0OEd5V3drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wOTQwODEtOGFlYi00MmJmLWE1NzgtYTNjYTBkYjgzMjU0
LzEvR3dRVnY4UTdPT25QMGFFcGxTQXVoMk4xTDk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBmFn+MA0G
CSqGSIb3DQEBCwUAA4IBAQAu44UiLcX3cjcjZC5mfryALZ+3y3tV9agwhja0z34o
pmCIXyiA4J8v6T5PSzXP0EllbkC6p9Scb+5a4lLqO11J7Svybo1K2WZXfPrhjZeg
EDmUhVthX58JpobOadPuR/Xj0R8Hv3z9X/XvrkHAk/5g+X7Dxd5p6gDy9kyUPyfn
fyQ+MvN67gIIudxuytjRUDO+9hV6pb7Ckshpp79RH5gJj6kK44mSWh7he9NgOxyY
YkSCQ66d7guq+LgInIq9WE8GIWMyoU8SnyOm2UWZg4m4zLncP1rvAoCZZVhKco4E
ZnHOqPYA8xElt5gMeG7zLfljbvfmrfVHpmnfWq8rIfWR
-----END CERTIFICATE-----
Generated at Sun May 19 14:00:35 2024 by rpki-client on console-fra.rpki-client.org