Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/yOXTCotS61qj0hRsHJ6DRzbWn78.roa
File: yOXTCotS61qj0hRsHJ6DRzbWn78.roa (raw, json)
Hash identifier: e8CnwmZpglLytJ5EhLo5pd75T0iOYkagC7maFD/N978=
Subject key identifier: C8:E5:D3:0A:8B:52:EB:5A:A3:D2:14:6C:1C:9E:83:47:36:D6:9F:BF
Certificate issuer: /CN=72e6826c8628489db041fe78c09ef28b5421e45c
Certificate serial: 018CC794B4EA91648D63F7DC60B7BE1AAFB7
Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/yOXTCotS61qj0hRsHJ6DRzbWn78.roa
Signing time: Tue 02 Jan 2024 00:31:00 +0000
ROA not before: Tue 02 Jan 2024 00:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34385
IP address blocks: 31.47.200.0/21 maxlen: 21
217.28.192.0/20 maxlen: 20
2a02:24f8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:b4:ea:91:64:8d:63:f7:dc:60:b7:be:1a:af:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c
Validity
Not Before: Jan 2 00:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8e5d30a8b52eb5aa3d2146c1c9e834736d69fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:f0:45:a3:33:d5:85:45:01:b8:55:8d:d0:
36:a7:14:0e:fd:db:2c:85:aa:01:b7:77:06:76:64:
c2:84:4b:cf:5f:9e:25:e2:17:82:c9:cc:1c:b4:b9:
9c:7b:9e:d8:4b:c8:97:9e:57:22:df:77:b7:f4:9b:
49:72:11:d8:ba:37:99:05:a4:47:f8:db:78:77:70:
d8:c6:94:20:de:b5:82:1e:29:c4:2b:84:ed:e1:83:
ee:be:22:2a:23:06:b5:4c:82:fd:1b:14:c6:91:8d:
c2:14:55:d0:1b:08:92:9f:98:26:66:98:e5:e2:e5:
b6:ed:49:0d:af:4a:02:76:b1:23:dd:7a:0e:b2:dd:
fc:5b:69:76:6d:a8:40:1b:41:94:3d:41:3c:9d:f0:
57:f9:87:c2:9a:28:d5:ac:38:e9:2c:c0:02:b5:e0:
2c:c1:73:96:6e:b3:44:e6:da:42:3a:06:c7:2b:e5:
c7:94:cc:fb:a5:0b:81:7c:18:55:bc:80:10:7c:80:
b3:01:67:a9:21:33:a1:14:68:e6:5c:58:db:02:a2:
63:ba:ac:4c:49:4b:4d:85:b2:20:d8:50:3f:b2:4f:
21:62:d6:f2:65:e7:14:46:ba:74:fa:ce:03:49:27:
66:83:47:19:4b:50:c5:3e:6e:dd:1f:82:dc:77:92:
1d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:E5:D3:0A:8B:52:EB:5A:A3:D2:14:6C:1C:9E:83:47:36:D6:9F:BF
X509v3 Authority Key Identifier:
keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/yOXTCotS61qj0hRsHJ6DRzbWn78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.200.0/21
217.28.192.0/20
IPv6:
2a02:24f8::/32
Signature Algorithm: sha256WithRSAEncryption
31:24:23:c8:a7:e3:38:13:ce:75:2b:91:cc:73:59:94:67:9e:
b9:ac:b0:fb:62:09:08:77:49:f0:2f:8a:cd:62:8f:53:07:24:
c8:6a:73:38:20:26:6b:54:99:77:50:5d:41:14:1a:cd:8c:90:
ef:28:e9:d6:f6:01:05:2c:28:8c:b0:2e:52:58:f0:a5:2a:56:
0a:77:34:bc:27:66:c8:d2:83:a0:61:3e:75:09:a4:20:57:23:
3e:ab:53:9d:fb:e9:61:f2:52:79:18:6a:f8:5d:5f:d5:79:5b:
d1:a5:b7:be:1a:76:5c:0d:31:1f:cd:67:5b:be:72:b6:1d:79:
c5:aa:8f:c3:57:d0:29:6b:a7:54:0f:f5:ad:12:73:66:53:02:
00:4b:bc:8a:64:6e:18:77:c2:ce:bc:50:b2:99:5a:9d:3f:86:
c4:9d:0a:af:42:6f:95:31:63:cc:0b:c1:f1:cd:d1:99:46:7d:
17:84:8a:1b:45:41:d0:09:44:78:c8:c7:e2:76:76:b1:64:9d:
d0:07:1f:aa:ad:e2:55:bc:f2:d7:1b:59:b6:fe:7b:01:ed:53:
16:7e:44:2f:19:4b:f4:64:8a:08:0b:5e:45:e9:e7:5c:08:b8:
87:23:97:3b:78:43:8f:6b:fc:95:96:0e:47:65:d7:c8:92:44:
e6:74:f1:7d
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzHlLTqkWSNY/fcYLe+Gq+3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTY4MjZjODYyODQ4OWRiMDQxZmU3OGMwOWVmMjhiNTQy
MWU0NWMwHhcNMjQwMTAyMDAzMTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGU1ZDMwYThiNTJlYjVhYTNkMjE0NmMxYzllODM0NzM2ZDY5ZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlefwRaMz1YVFAbhVjdA2pxQO/dss
haoBt3cGdmTChEvPX54l4heCycwctLmce57YS8iXnlci33e39JtJchHYujeZBaRH
+Nt4d3DYxpQg3rWCHinEK4Tt4YPuviIqIwa1TIL9GxTGkY3CFFXQGwiSn5gmZpjl
4uW27UkNr0oCdrEj3XoOst38W2l2bahAG0GUPUE8nfBX+YfCmijVrDjpLMACteAs
wXOWbrNE5tpCOgbHK+XHlMz7pQuBfBhVvIAQfICzAWepITOhFGjmXFjbAqJjuqxM
SUtNhbIg2FA/sk8hYtbyZecURrp0+s4DSSdmg0cZS1DFPm7dH4Lcd5IdxQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFMjl0wqLUutao9IUbByeg0c21p+/MB8GA1UdIwQY
MBaAFHLmgmyGKEidsEH+eMCe8otUIeRcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEt
OTc1YWQwM2Q4OGU2LzEveU9YVENvdFM2MXFqMGhSc0hKNkRSemJXbjc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8wYTc4MjYtNmRiMC00NjYyLTkwMWEtOTc1YWQwM2Q4OGU2
LzEvY3VhQ2JJWW9TSjJ3UWY1NHdKN3lpMVFoNUZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDHy/IAwQE
2RzAMA0EAgACMAcDBQAqAiT4MA0GCSqGSIb3DQEBCwUAA4IBAQAxJCPIp+M4E851
K5HMc1mUZ565rLD7YgkId0nwL4rNYo9TByTIanM4ICZrVJl3UF1BFBrNjJDvKOnW
9gEFLCiMsC5SWPClKlYKdzS8J2bI0oOgYT51CaQgVyM+q1Od++lh8lJ5GGr4XV/V
eVvRpbe+GnZcDTEfzWdbvnK2HXnFqo/DV9Apa6dUD/WtEnNmUwIAS7yKZG4Yd8LO
vFCymVqdP4bEnQqvQm+VMWPMC8HxzdGZRn0XhIobRUHQCUR4yMfidnaxZJ3QBx+q
reJVvPLXG1m2/nsB7VMWfkQvGUv0ZIoIC15F6edcCLiHI5c7eEOPa/yVlg5HZdfI
kkTmdPF9
-----END CERTIFICATE-----
Generated at Sun Jun 23 01:47:01 2024 by rpki-client on console-ams.rpki-client.org