Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/ryttfzh_un5T7QhJESopWduc8Dw.roa
File: ryttfzh_un5T7QhJESopWduc8Dw.roa (raw, json)
Hash identifier: BJd4B9J6VTwnR+PQg4A26QR1oxM/LgOW7B/6WQzk39U=
Subject key identifier: AF:2B:6D:7F:38:7F:BA:7E:53:ED:08:49:11:2A:29:59:DB:9C:F0:3C
Certificate issuer: /CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Certificate serial: 0190B1BD0964DE1057A4D8206C7179D02335
Authority key identifier: A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/ryttfzh_un5T7QhJESopWduc8Dw.roa
Signing time: Sun 14 Jul 2024 14:54:34 +0000
ROA not before: Sun 14 Jul 2024 14:54:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201150
IP address blocks: 95.128.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.mft
rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b1:bd:09:64:de:10:57:a4:d8:20:6c:71:79:d0:23:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1695d5558241e04a872dc1346898f2cea70dfe7
Validity
Not Before: Jul 14 14:54:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af2b6d7f387fba7e53ed0849112a2959db9cf03c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6b:e5:f9:37:bd:bd:97:34:b6:f8:ff:de:d0:
12:c5:ec:50:8f:24:5d:1a:33:f5:24:55:83:d1:62:
b3:dd:b8:44:80:f0:f4:2b:d1:b4:3a:75:06:af:6c:
2c:93:dd:44:5d:36:f2:66:9b:11:68:1e:d5:43:33:
e7:fc:54:18:87:10:1f:70:ca:a7:81:f5:40:21:8f:
f8:d7:e2:33:94:a9:fc:f2:f4:91:0a:7a:94:45:69:
66:fc:d6:38:41:ff:e6:aa:0f:4b:73:8a:6e:9c:a7:
08:74:b3:d2:a1:dd:a7:d1:84:c9:59:a9:79:0d:84:
15:95:60:14:9f:2d:85:63:dd:0a:6c:8a:da:34:6d:
0c:fc:ce:77:1f:3c:ee:2a:de:df:be:82:67:1c:62:
52:c6:70:fb:60:95:b1:85:73:5d:b5:2c:b2:75:bb:
0e:0c:b6:94:40:2d:c3:e7:6f:6b:94:99:6d:76:dd:
f4:d9:46:68:0b:ff:1b:80:e0:7f:85:b6:60:63:57:
4e:e4:1c:3a:ab:e5:d0:61:26:80:76:78:81:47:de:
69:f2:ad:23:7d:28:a8:f9:a4:c7:be:45:35:bc:30:
7d:fb:b0:55:e2:a9:14:77:04:b3:e2:d5:2c:2d:57:
73:c1:9c:bd:4e:e7:91:2a:21:2c:5b:1e:bc:e2:61:
ec:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2B:6D:7F:38:7F:BA:7E:53:ED:08:49:11:2A:29:59:DB:9C:F0:3C
X509v3 Authority Key Identifier:
keyid:A1:69:5D:55:58:24:1E:04:A8:72:DC:13:46:89:8F:2C:EA:70:DF:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oWldVVgkHgSoctwTRomPLOpw3-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/ryttfzh_un5T7QhJESopWduc8Dw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/27ca7f-66b4-4bb1-9f5f-f5ba4fe2bf54/1/oWldVVgkHgSoctwTRomPLOpw3-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.197.0/24
Signature Algorithm: sha256WithRSAEncryption
13:30:12:a2:90:5c:6b:4f:7a:da:d9:be:6f:6d:58:45:8d:56:
67:da:ca:8a:c6:f3:15:74:5c:43:dc:68:ca:9e:a8:d4:51:89:
59:5a:e2:64:06:d0:07:1f:15:8d:74:f7:79:af:e1:34:20:b4:
80:67:b3:7f:aa:ee:9c:65:e9:9d:ff:19:e9:c9:fd:ae:d7:81:
bd:18:85:8f:ed:b9:1c:1f:b2:11:40:7c:8e:0a:9b:15:cc:8a:
bd:45:97:0c:52:6b:4b:26:dc:22:c0:8a:03:28:1c:2e:ba:ab:
0b:64:9c:bb:26:01:12:27:85:6c:8b:d4:fa:71:80:e6:dd:5d:
31:b6:70:32:90:5e:d0:a5:3b:20:09:bc:4f:06:a9:4d:31:bb:
c2:b6:13:ff:c6:8d:97:0b:42:7d:a3:31:48:e4:00:2b:31:f8:
0e:98:ce:12:f9:4a:91:e5:bc:a5:74:63:7f:b2:e1:38:6a:67:
66:5c:e3:2c:ed:3f:74:ee:f4:aa:e7:d6:c1:f8:e4:40:15:63:
7c:6a:15:31:ac:5b:61:67:3d:c8:b6:92:93:dc:b1:08:de:0c:
fe:7f:69:e9:4b:7a:ba:86:d6:72:10:e0:f3:15:76:53:37:cb:
60:69:e4:11:1a:cf:0d:d0:3d:0a:d8:ca:d8:9f:ce:1a:ad:2f:
ed:eb:0d:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCxvQlk3hBXpNggbHF50CM1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExNjk1ZDU1NTgyNDFlMDRhODcyZGMxMzQ2ODk4ZjJjZWE3
MGRmZTcwHhcNMjQwNzE0MTQ1NDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjJiNmQ3ZjM4N2ZiYTdlNTNlZDA4NDkxMTJhMjk1OWRiOWNmMDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2vl+Te9vZc0tvj/3tASxexQjyRd
GjP1JFWD0WKz3bhEgPD0K9G0OnUGr2wsk91EXTbyZpsRaB7VQzPn/FQYhxAfcMqn
gfVAIY/41+IzlKn88vSRCnqURWlm/NY4Qf/mqg9Lc4punKcIdLPSod2n0YTJWal5
DYQVlWAUny2FY90KbIraNG0M/M53HzzuKt7fvoJnHGJSxnD7YJWxhXNdtSyydbsO
DLaUQC3D529rlJltdt302UZoC/8bgOB/hbZgY1dO5Bw6q+XQYSaAdniBR95p8q0j
fSio+aTHvkU1vDB9+7BV4qkUdwSz4tUsLVdzwZy9TueRKiEsWx684mHsZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK8rbX84f7p+U+0ISREqKVnbnPA8MB8GA1UdIwQY
MBaAFKFpXVVYJB4EqHLcE0aJjyzqcN/nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYt
ZjViYTRmZTJiZjU0LzEvcnl0dGZ6aF91bjVUN1FoSkVTb3BXZHVjOER3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC8yN2NhN2YtNjZiNC00YmIxLTlmNWYtZjViYTRmZTJiZjU0
LzEvb1dsZFZWZ2tIZ1NvY3R3VFJvbVBMT3B3My1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX4DFMA0G
CSqGSIb3DQEBCwUAA4IBAQATMBKikFxrT3ra2b5vbVhFjVZn2sqKxvMVdFxD3GjK
nqjUUYlZWuJkBtAHHxWNdPd5r+E0ILSAZ7N/qu6cZemd/xnpyf2u14G9GIWP7bkc
H7IRQHyOCpsVzIq9RZcMUmtLJtwiwIoDKBwuuqsLZJy7JgESJ4Vsi9T6cYDm3V0x
tnAykF7QpTsgCbxPBqlNMbvCthP/xo2XC0J9ozFI5AArMfgOmM4S+UqR5byldGN/
suE4amdmXOMs7T907vSq59bB+ORAFWN8ahUxrFthZz3ItpKT3LEI3gz+f2npS3q6
htZyEODzFXZTN8tgaeQRGs8N0D0K2MrYn84arS/t6w0J
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:21:49 2024 by rpki-client on console-fra.rpki-client.org