Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/yXmRi6FFHcFwsBAl2TCEJBpV0IY.roa
File: yXmRi6FFHcFwsBAl2TCEJBpV0IY.roa (raw, json)
Hash identifier: xDd5W5lTPRejqAGXGQXuHkD1lapVfdwwx6YQefLxG3A=
Subject key identifier: C9:79:91:8B:A1:45:1D:C1:70:B0:10:25:D9:30:84:24:1A:55:D0:86
Certificate issuer: /CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Certificate serial: 018FE82FA53357B02A31DA7014A380F3058C
Authority key identifier: 11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/yXmRi6FFHcFwsBAl2TCEJBpV0IY.roa
Signing time: Wed 05 Jun 2024 11:36:27 +0000
ROA not before: Wed 05 Jun 2024 11:36:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216319
IP address blocks: 94.228.166.0/24 maxlen: 24
94.228.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e8:2f:a5:33:57:b0:2a:31:da:70:14:a3:80:f3:05:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117f9d55826b42486dfc84d35c1a63a5ce87507c
Validity
Not Before: Jun 5 11:36:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c979918ba1451dc170b01025d93084241a55d086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ae:60:6c:ff:6b:b3:67:fa:61:73:28:a6:34:
b3:fa:93:39:b6:b3:c1:5d:be:61:f1:af:34:87:fc:
ba:c1:5a:20:9c:26:af:22:fb:c0:a3:e8:8f:44:ef:
32:00:aa:ae:de:41:e3:fa:9e:fa:45:da:75:ce:f4:
19:db:f1:09:70:8f:d7:79:26:bd:e2:cd:16:08:9e:
c9:12:d8:eb:9f:87:1b:f2:e6:36:8b:42:3b:13:0a:
70:b9:3f:00:a7:1d:3f:d5:fa:0f:a7:32:1d:58:16:
0f:62:fa:12:45:11:40:57:ed:bf:3b:41:17:da:97:
47:2b:dd:8a:3d:e4:6e:24:13:43:f7:f7:24:d3:af:
9f:d0:12:82:b7:d2:41:5c:e9:95:29:7d:9a:8d:6d:
24:dd:d4:c2:e2:bf:c8:35:f5:db:b8:df:69:5e:50:
08:61:f5:3a:bb:f4:2c:e4:88:44:e5:51:47:8c:91:
36:48:a4:fb:9d:08:51:07:02:8c:c5:64:a2:e1:f2:
14:ac:f1:53:17:3e:78:6f:1b:b1:a3:f2:17:cb:22:
7c:18:54:43:94:7f:5f:23:26:37:49:71:a4:7b:08:
96:23:ee:16:df:c6:65:c8:96:ac:3d:7a:4f:0a:5f:
bb:07:79:09:e4:70:76:6d:cc:ec:9f:16:46:24:6a:
17:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:79:91:8B:A1:45:1D:C1:70:B0:10:25:D9:30:84:24:1A:55:D0:86
X509v3 Authority Key Identifier:
keyid:11:7F:9D:55:82:6B:42:48:6D:FC:84:D3:5C:1A:63:A5:CE:87:50:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EX-dVYJrQkht_ITTXBpjpc6HUHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/yXmRi6FFHcFwsBAl2TCEJBpV0IY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/eafc41-c358-4b51-9b1c-3fbbba9249cd/1/EX-dVYJrQkht_ITTXBpjpc6HUHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.228.166.0/24
94.228.170.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:1c:c0:29:52:26:bb:15:e4:dd:62:e5:02:e0:b7:bd:d2:5d:
7e:bf:be:c0:e6:7a:41:ad:c1:c3:b1:da:37:f0:df:ca:31:0a:
27:3f:b8:1f:f3:f5:3a:ff:04:f9:7f:3f:cd:9f:c0:42:d5:63:
a4:89:02:38:db:18:07:6a:a2:dc:92:6a:51:79:3d:69:78:21:
b8:40:4c:16:1f:a8:c4:15:d1:cc:bb:89:46:ac:06:c7:bc:75:
89:a7:d6:ad:55:70:ad:1e:ae:e2:de:87:0d:9b:74:0d:73:74:
74:d0:20:a0:0a:13:6a:39:f7:45:4b:e6:40:76:ac:c8:49:6b:
f8:ec:6f:e5:4b:86:31:e4:37:7c:2c:5e:af:30:a7:ba:b4:fe:
c4:07:44:24:e9:f6:66:ed:76:3d:52:0f:2c:d4:6c:1f:65:27:
4f:ef:d2:aa:43:34:0c:37:26:b3:60:63:a3:d9:69:79:de:3c:
d6:c9:d8:d5:53:31:8d:5d:c8:11:59:b2:cf:22:02:9d:90:1f:
48:99:bf:8b:be:02:40:34:e4:c1:2a:d1:7d:92:28:22:99:68:
53:62:3d:ad:5a:64:73:85:b2:06:66:e9:18:3d:ea:84:e8:e5:
7b:b6:52:0f:dd:04:12:2e:51:bd:62:dd:12:4f:2b:28:f3:7d:
af:c2:7e:bc
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/oL6UzV7AqMdpwFKOA8wWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExN2Y5ZDU1ODI2YjQyNDg2ZGZjODRkMzVjMWE2M2E1Y2U4
NzUwN2MwHhcNMjQwNjA1MTEzNjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTc5OTE4YmExNDUxZGMxNzBiMDEwMjVkOTMwODQyNDFhNTVkMDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6a5gbP9rs2f6YXMopjSz+pM5trPB
Xb5h8a80h/y6wVognCavIvvAo+iPRO8yAKqu3kHj+p76Rdp1zvQZ2/EJcI/XeSa9
4s0WCJ7JEtjrn4cb8uY2i0I7EwpwuT8Apx0/1foPpzIdWBYPYvoSRRFAV+2/O0EX
2pdHK92KPeRuJBND9/ck06+f0BKCt9JBXOmVKX2ajW0k3dTC4r/INfXbuN9pXlAI
YfU6u/Qs5IhE5VFHjJE2SKT7nQhRBwKMxWSi4fIUrPFTFz54bxuxo/IXyyJ8GFRD
lH9fIyY3SXGkewiWI+4W38ZlyJasPXpPCl+7B3kJ5HB2bczsnxZGJGoXEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMl5kYuhRR3BcLAQJdkwhCQaVdCGMB8GA1UdIwQY
MBaAFBF/nVWCa0JIbfyE01waY6XOh1B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMt
M2ZiYmJhOTI0OWNkLzEveVhtUmk2RkZIY0Z3c0JBbDJUQ0VKQnBWMElZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lYWZjNDEtYzM1OC00YjUxLTliMWMtM2ZiYmJhOTI0OWNk
LzEvRVgtZFZZSnJRa2h0X0lUVFhCcGpwYzZIVUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAXuSmAwQA
XuSqMA0GCSqGSIb3DQEBCwUAA4IBAQC6HMApUia7FeTdYuUC4Le90l1+v77A5npB
rcHDsdo38N/KMQonP7gf8/U6/wT5fz/Nn8BC1WOkiQI42xgHaqLckmpReT1peCG4
QEwWH6jEFdHMu4lGrAbHvHWJp9atVXCtHq7i3ocNm3QNc3R00CCgChNqOfdFS+ZA
dqzISWv47G/lS4Yx5Dd8LF6vMKe6tP7EB0Qk6fZm7XY9Ug8s1GwfZSdP79KqQzQM
NyazYGOj2Wl53jzWydjVUzGNXcgRWbLPIgKdkB9Imb+LvgJANOTBKtF9kigimWhT
Yj2tWmRzhbIGZukYPeqE6OV7tlIP3QQSLlG9Yt0STyso832vwn68
-----END CERTIFICATE-----
Generated at Thu Jun 20 11:38:31 2024 by rpki-client on console-fra.rpki-client.org