Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/YYcN7VDkhMikXJNuf_ycNmWBOk4.roa
File: YYcN7VDkhMikXJNuf_ycNmWBOk4.roa (raw, json)
Hash identifier: xxhkhgyTC5cbzs4ogaiOlMsjZQp6z/Pulckh7U+x2IE=
Subject key identifier: 61:87:0D:ED:50:E4:84:C8:A4:5C:93:6E:7F:FC:9C:36:65:81:3A:4E
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018CC7275EE0E109AEAAB577EED9432D28A6
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/YYcN7VDkhMikXJNuf_ycNmWBOk4.roa
Signing time: Mon 01 Jan 2024 22:31:35 +0000
ROA not before: Mon 01 Jan 2024 22:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48108
IP address blocks: 91.241.47.0/24 maxlen: 24
193.19.110.0/24 maxlen: 24
91.203.235.0/24 maxlen: 24
193.43.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5e:e0:e1:09:ae:aa:b5:77:ee:d9:43:2d:28:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 22:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61870ded50e484c8a45c936e7ffc9c3665813a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6a:d3:74:49:c0:18:f7:af:12:a9:a2:2b:09:
4f:37:48:b7:ce:0e:81:d6:8b:15:f7:5e:b3:81:1a:
80:3c:7a:52:ca:e8:dd:4e:30:a6:ae:c0:0c:df:79:
cb:9c:ad:c1:f6:10:51:18:40:9f:ec:f4:97:b6:30:
50:ef:7a:5a:6f:f8:6e:c5:d4:38:d3:38:ed:94:05:
97:78:e3:e5:73:97:a5:af:89:ef:b2:f2:f7:39:42:
ac:65:10:3e:83:58:c4:97:2f:81:44:f5:0d:49:15:
bc:1d:b1:46:5f:af:57:e3:89:07:e7:32:92:9e:ea:
d0:50:b6:c6:19:40:4a:aa:b5:b4:3e:be:e4:e7:6f:
20:83:e5:62:2d:b7:ab:88:7a:4e:4e:27:99:50:b0:
97:c8:5b:48:12:b8:2d:b6:0e:c2:01:24:81:c8:30:
4c:7e:11:ee:82:4f:00:56:ba:15:da:63:eb:24:3e:
0e:28:49:4c:28:c2:9c:7a:a5:55:f9:48:8d:4d:33:
84:85:70:17:40:67:1d:22:5b:0d:b3:68:a1:84:d6:
54:20:8e:94:e7:3d:6e:55:c5:2b:5f:40:a8:d0:08:
e9:fc:7f:21:d8:79:f0:2b:48:03:f6:15:6a:41:36:
fd:98:48:98:c8:21:9d:99:59:8b:28:a9:31:bd:f5:
d1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:87:0D:ED:50:E4:84:C8:A4:5C:93:6E:7F:FC:9C:36:65:81:3A:4E
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/YYcN7VDkhMikXJNuf_ycNmWBOk4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.235.0/24
91.241.47.0/24
193.19.110.0/24
193.43.248.0/24
Signature Algorithm: sha256WithRSAEncryption
98:ef:ea:fe:81:5c:e6:41:e7:d8:1e:d3:b3:73:ed:32:91:b0:
3b:48:20:fb:66:bf:b6:12:18:ce:78:da:7f:03:3a:07:c5:43:
c4:07:28:9e:7b:08:3d:07:7e:21:35:bc:6c:fc:66:51:42:5d:
98:d2:b6:af:0a:5f:39:b0:f7:fd:ab:c3:6a:b1:2c:f5:4e:e5:
ce:be:d2:6a:23:fa:8f:53:88:c8:e2:ae:23:9e:05:7e:c9:3a:
11:3a:4f:23:e3:44:e1:08:52:38:06:eb:93:af:cd:cd:f5:59:
bf:0f:ad:89:16:ec:e2:fe:b9:26:9c:09:6d:ab:c4:71:ee:cb:
99:5a:59:53:c3:a4:49:27:0f:07:26:0b:8d:28:5e:e9:dd:5f:
f7:97:0b:ff:1d:59:75:4c:54:36:50:8f:ec:49:44:c4:a1:c7:
65:bf:9c:3b:12:1c:a5:c3:1c:c9:65:1e:65:d4:2b:ce:60:e7:
41:bd:1c:d7:83:04:29:a0:27:38:ee:e9:56:17:79:12:74:d2:
fc:1d:96:26:37:09:76:ef:3c:19:04:81:42:e5:e6:65:5a:9a:
88:14:85:95:fe:c3:ac:a6:63:09:3f:22:4c:65:f9:8e:62:74:
f5:27:77:a8:2d:99:c7:83:47:2a:36:0f:03:43:20:e0:9f:fe:
90:df:e3:0d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzHJ17g4QmuqrV37tlDLSimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjQwMTAxMjIzMTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTg3MGRlZDUwZTQ4NGM4YTQ1YzkzNmU3ZmZjOWMzNjY1ODEzYTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmrTdEnAGPevEqmiKwlPN0i3zg6B
1osV916zgRqAPHpSyujdTjCmrsAM33nLnK3B9hBRGECf7PSXtjBQ73pab/huxdQ4
0zjtlAWXeOPlc5elr4nvsvL3OUKsZRA+g1jEly+BRPUNSRW8HbFGX69X44kH5zKS
nurQULbGGUBKqrW0Pr7k528gg+ViLberiHpOTieZULCXyFtIErgttg7CASSByDBM
fhHugk8AVroV2mPrJD4OKElMKMKceqVV+UiNTTOEhXAXQGcdIlsNs2ihhNZUII6U
5z1uVcUrX0Co0Ajp/H8h2HnwK0gD9hVqQTb9mEiYyCGdmVmLKKkxvfXR9wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFGGHDe1Q5ITIpFyTbn/8nDZlgTpOMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvWVljTjdWRGtoTWlrWEpOdWZfeWNObVdCT2s0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8vrAwQA
W/EvAwQAwRNuAwQAwSv4MA0GCSqGSIb3DQEBCwUAA4IBAQCY7+r+gVzmQefYHtOz
c+0ykbA7SCD7Zr+2EhjOeNp/AzoHxUPEByieewg9B34hNbxs/GZRQl2Y0ravCl85
sPf9q8NqsSz1TuXOvtJqI/qPU4jI4q4jngV+yToROk8j40ThCFI4BuuTr83N9Vm/
D62JFuzi/rkmnAltq8Rx7suZWllTw6RJJw8HJguNKF7p3V/3lwv/HVl1TFQ2UI/s
SUTEocdlv5w7EhylwxzJZR5l1CvOYOdBvRzXgwQpoCc47ulWF3kSdNL8HZYmNwl2
7zwZBIFC5eZlWpqIFIWV/sOspmMJPyJMZfmOYnT1J3eoLZnHg0cqNg8DQyDgn/6Q
3+MN
-----END CERTIFICATE-----
Generated at Mon May 20 12:16:08 2024 by rpki-client on console-fra.rpki-client.org