Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yysseowpvN5M29KgO12jAYLuV-w.roa
File: yysseowpvN5M29KgO12jAYLuV-w.roa (raw, json)
Hash identifier: W8eS3qjDPKxiL5FfKV/FVDEHkueJsm3G9qHNqxinvFc=
Subject key identifier: CB:2B:2C:7A:8C:29:BC:DE:4C:DB:D2:A0:3B:5D:A3:01:82:EE:57:EC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018E3223EF4C23437D30E9AD89DF35E4F905
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yysseowpvN5M29KgO12jAYLuV-w.roa
Signing time: Tue 12 Mar 2024 10:09:59 +0000
ROA not before: Tue 12 Mar 2024 10:09:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52041
IP address blocks: 87.121.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:32:23:ef:4c:23:43:7d:30:e9:ad:89:df:35:e4:f9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Mar 12 10:09:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb2b2c7a8c29bcde4cdbd2a03b5da30182ee57ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ba:67:cc:cd:35:19:63:e0:04:3d:d2:c7:d1:
e5:2e:d9:4f:e8:05:c2:3c:37:98:24:c2:7c:ab:88:
b3:15:f2:5d:60:73:3d:20:78:bc:a1:49:75:c4:c1:
0f:a6:a7:41:dc:2a:02:1a:fe:3e:37:0c:27:ab:9d:
2b:e4:06:35:5f:64:be:3a:7a:64:46:b2:99:80:9c:
e3:32:b3:8b:88:79:2a:42:f8:17:cf:69:91:92:11:
f1:d7:22:fd:a0:db:a6:69:00:96:ad:d7:9b:f9:42:
38:af:94:d6:1d:9f:fb:06:1f:fd:05:92:9c:7d:96:
30:c4:9d:e2:90:c7:cc:59:e6:50:98:69:a1:01:78:
93:31:e9:4a:6b:17:9c:20:20:db:fd:58:99:43:5f:
a9:ba:e6:6d:18:00:b0:ce:a5:ea:df:d4:be:37:b4:
d3:84:ae:ec:f3:8b:d1:76:94:ce:9e:ff:0a:f8:b5:
5a:1d:e3:49:a7:16:fc:45:2f:20:58:2b:1c:39:b4:
50:d5:e5:7c:57:24:57:f8:63:11:2c:91:0b:2a:fa:
c1:1d:20:75:a6:43:5f:bc:53:12:1b:23:db:52:6e:
d6:1a:11:ea:96:14:ac:69:4e:18:ee:39:f1:a4:22:
24:4c:10:ee:f8:b1:02:bc:fd:9b:ab:1e:26:26:5f:
aa:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2B:2C:7A:8C:29:BC:DE:4C:DB:D2:A0:3B:5D:A3:01:82:EE:57:EC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/yysseowpvN5M29KgO12jAYLuV-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.44.0/24
Signature Algorithm: sha256WithRSAEncryption
16:54:eb:1c:5c:6c:c5:d7:8c:f2:db:b4:e7:8e:44:01:7d:82:
96:1a:3c:fe:3e:10:55:6c:40:5d:fd:c2:f2:0b:cb:ae:e6:01:
00:1e:be:e1:8b:ff:59:21:0d:6c:69:6e:f0:dc:82:77:9c:3b:
da:2e:dc:71:cf:ed:b4:e6:77:ce:12:e5:bf:61:e7:72:f0:f5:
67:83:cb:1f:89:da:38:44:3f:e8:86:85:ff:3f:d3:9f:ce:ff:
05:1e:54:1d:27:84:b7:c8:56:14:60:4d:ef:fc:47:f3:76:60:
59:73:ae:b9:5f:cd:84:50:68:2c:22:ff:40:b6:b7:e9:53:da:
cf:4f:33:86:98:65:5a:2d:c3:50:e6:13:45:dc:54:90:9c:b6:
a0:60:f1:2c:ad:bb:8f:d6:b1:a9:41:d5:07:ba:61:cf:98:3a:
38:83:d3:a9:3a:76:df:7b:5e:17:dd:fe:d6:6e:26:6d:34:ea:
66:15:83:28:e1:14:d6:e4:97:6c:26:30:c7:de:38:9d:37:56:
89:d8:03:1b:9d:ce:b1:c4:3f:94:b7:df:3b:8e:42:90:39:d3:
6a:25:d4:27:d3:41:3b:06:ec:7e:8d:41:fe:17:73:65:61:75:
5c:b4:0f:6b:00:7d:30:5e:ab:9f:4d:52:37:e7:b9:07:88:f0:
d6:5c:74:f0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4yI+9MI0N9MOmtid815PkFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMzEyMTAwOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjJiMmM3YThjMjliY2RlNGNkYmQyYTAzYjVkYTMwMTgyZWU1N2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7pnzM01GWPgBD3Sx9HlLtlP6AXC
PDeYJMJ8q4izFfJdYHM9IHi8oUl1xMEPpqdB3CoCGv4+Nwwnq50r5AY1X2S+Onpk
RrKZgJzjMrOLiHkqQvgXz2mRkhHx1yL9oNumaQCWrdeb+UI4r5TWHZ/7Bh/9BZKc
fZYwxJ3ikMfMWeZQmGmhAXiTMelKaxecICDb/ViZQ1+puuZtGACwzqXq39S+N7TT
hK7s84vRdpTOnv8K+LVaHeNJpxb8RS8gWCscObRQ1eV8VyRX+GMRLJELKvrBHSB1
pkNfvFMSGyPbUm7WGhHqlhSsaU4Y7jnxpCIkTBDu+LECvP2bqx4mJl+qIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMsrLHqMKbzeTNvSoDtdowGC7lfsMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEveXlzc2Vvd3B2TjVNMjlLZ08xMmpBWUx1Vi13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV3ksMA0G
CSqGSIb3DQEBCwUAA4IBAQAWVOscXGzF14zy27TnjkQBfYKWGjz+PhBVbEBd/cLy
C8uu5gEAHr7hi/9ZIQ1saW7w3IJ3nDvaLtxxz+205nfOEuW/Yedy8PVng8sfido4
RD/ohoX/P9Ofzv8FHlQdJ4S3yFYUYE3v/EfzdmBZc665X82EUGgsIv9AtrfpU9rP
TzOGmGVaLcNQ5hNF3FSQnLagYPEsrbuP1rGpQdUHumHPmDo4g9OpOnbfe14X3f7W
biZtNOpmFYMo4RTW5JdsJjDH3jidN1aJ2AMbnc6xxD+Ut987jkKQOdNqJdQn00E7
Bux+jUH+F3NlYXVctA9rAH0wXqufTVI357kHiPDWXHTw
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:47:48 2024 by rpki-client on console-fra.rpki-client.org