Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Yp7EBAmlkKH7bPzqAkMy6rq1_bo.roa
File: Yp7EBAmlkKH7bPzqAkMy6rq1_bo.roa (raw, json)
Hash identifier: xdG+sVG0/DGgaqxrwr8jqGYsJR7aUx/7rySJ1x18K4s=
Subject key identifier: 62:9E:C4:04:09:A5:90:A1:FB:6C:FC:EA:02:43:32:EA:BA:B5:FD:BA
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 018CC42491919FD6BADC7BC1ABB4ECC5AF43
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Yp7EBAmlkKH7bPzqAkMy6rq1_bo.roa
Signing time: Mon 01 Jan 2024 08:29:39 +0000
ROA not before: Mon 01 Jan 2024 08:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57207
IP address blocks: 95.140.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:91:91:9f:d6:ba:dc:7b:c1:ab:b4:ec:c5:af:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jan 1 08:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=629ec40409a590a1fb6cfcea024332eabab5fdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:ba:ab:82:49:6d:e4:e0:d4:d0:04:fa:47:
33:18:f5:05:33:4f:29:27:43:59:39:69:de:c3:c8:
62:e5:9e:a8:e9:72:5c:2e:9e:d4:c8:ce:15:2f:8a:
30:fe:b4:c1:7e:44:08:48:38:8b:f1:e6:ca:35:11:
b4:54:52:f0:52:35:49:cb:17:b8:91:08:79:92:dd:
d6:8d:58:16:b5:06:ff:62:e8:f1:41:b8:b3:49:63:
7c:b4:fe:ce:f0:c6:04:73:ae:6b:95:df:f3:76:8c:
27:e8:80:df:57:bc:0c:78:8a:70:7c:42:66:42:94:
64:1f:51:2d:5d:d2:46:50:12:d3:47:66:84:44:98:
a1:56:06:47:b8:e2:67:71:52:5e:6b:5e:37:75:5a:
d7:60:d6:c7:f6:66:d2:7c:0e:04:31:95:2d:d3:95:
db:3a:8d:04:d2:17:90:86:d1:e5:9c:c1:83:14:99:
30:b3:9d:f5:c0:74:b6:1f:af:91:57:3a:4a:16:49:
b3:dd:b2:a6:23:fc:7e:38:8f:fb:62:1e:9b:bc:82:
d0:8f:1c:76:41:30:c1:7c:d3:2e:50:57:bf:42:dc:
71:d9:bc:66:03:7d:52:d7:cf:82:36:cc:cd:84:bd:
ef:39:0b:d2:2c:04:bd:1b:a2:80:e2:94:0f:74:df:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:9E:C4:04:09:A5:90:A1:FB:6C:FC:EA:02:43:32:EA:BA:B5:FD:BA
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Yp7EBAmlkKH7bPzqAkMy6rq1_bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.122.0/24
Signature Algorithm: sha256WithRSAEncryption
83:0f:1d:8e:ce:db:61:34:a6:86:e0:2f:ed:f9:fa:55:50:ae:
10:81:86:19:e5:c0:79:b5:d6:e5:1b:a5:4c:d2:fd:a8:b0:ad:
d2:9e:4d:06:12:1f:c4:2b:57:60:05:97:fd:ae:a2:70:2e:ae:
35:c3:3f:4d:28:81:98:1a:8e:b3:57:a9:2f:ce:1c:ce:72:2d:
f4:df:14:b1:97:b4:64:e0:05:79:34:f9:39:70:48:81:07:93:
82:03:96:5a:8f:7a:77:2e:e1:bf:15:4f:99:f4:f8:be:ef:66:
b8:5c:db:19:45:4b:76:4f:b5:17:47:17:fb:ed:8d:37:f0:e8:
a1:f0:05:ce:e6:62:a3:d6:c3:72:28:71:3f:20:88:7d:d2:17:
78:b7:dc:c8:d4:57:e6:c3:d2:16:96:e5:dc:12:1c:7d:49:b4:
3c:12:4d:ec:2c:c0:6d:bc:1c:f4:e0:a4:17:3a:85:7c:b8:1c:
70:ce:29:6a:d4:95:9c:f4:a7:0a:2d:4b:9e:1c:59:d1:e6:e8:
f2:1b:d8:af:6a:d7:44:0a:5b:b7:2d:bc:59:d2:6e:e5:c6:85:
e1:a6:c7:d3:23:d0:7c:b4:da:d5:59:9d:6f:bf:2e:af:05:93:
83:05:a3:67:0d:0e:74:ff:bd:8e:04:52:77:a4:d4:7f:0f:ae:
ca:98:43:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJJGRn9a63HvBq7Tsxa9DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjQwMTAxMDgyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjllYzQwNDA5YTU5MGExZmI2Y2ZjZWEwMjQzMzJlYWJhYjVmZGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9y6q4JJbeTg1NAE+kczGPUFM08p
J0NZOWnew8hi5Z6o6XJcLp7UyM4VL4ow/rTBfkQISDiL8ebKNRG0VFLwUjVJyxe4
kQh5kt3WjVgWtQb/YujxQbizSWN8tP7O8MYEc65rld/zdown6IDfV7wMeIpwfEJm
QpRkH1EtXdJGUBLTR2aERJihVgZHuOJncVJea143dVrXYNbH9mbSfA4EMZUt05Xb
Oo0E0heQhtHlnMGDFJkws531wHS2H6+RVzpKFkmz3bKmI/x+OI/7Yh6bvILQjxx2
QTDBfNMuUFe/Qtxx2bxmA31S18+CNszNhL3vOQvSLAS9G6KA4pQPdN/67QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGKexAQJpZCh+2z86gJDMuq6tf26MB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvWXA3RUJBbWxrS0g3YlB6cUFrTXk2cnExX2JvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4x6MA0G
CSqGSIb3DQEBCwUAA4IBAQCDDx2OztthNKaG4C/t+fpVUK4QgYYZ5cB5tdblG6VM
0v2osK3Snk0GEh/EK1dgBZf9rqJwLq41wz9NKIGYGo6zV6kvzhzOci303xSxl7Rk
4AV5NPk5cEiBB5OCA5Zaj3p3LuG/FU+Z9Pi+72a4XNsZRUt2T7UXRxf77Y038Oih
8AXO5mKj1sNyKHE/IIh90hd4t9zI1Ffmw9IWluXcEhx9SbQ8Ek3sLMBtvBz04KQX
OoV8uBxwzilq1JWc9KcKLUueHFnR5ujyG9ivatdEClu3LbxZ0m7lxoXhpsfTI9B8
tNrVWZ1vvy6vBZODBaNnDQ50/72OBFJ3pNR/D67KmEM6
-----END CERTIFICATE-----
Generated at Sun Jun 2 07:07:33 2024 by rpki-client on console-fra.rpki-client.org