Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/yP1RQ16WBv3LXL4Pzf9NEvLm3GY.roa
File: yP1RQ16WBv3LXL4Pzf9NEvLm3GY.roa (raw, json)
Hash identifier: ZG98wHoUKXeNGLZHhRr9ZeU1aVGt8f5I6SZDKNTjGCk=
Subject key identifier: C8:FD:51:43:5E:96:06:FD:CB:5C:BE:0F:CD:FF:4D:12:F2:E6:DC:66
Certificate issuer: /CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Certificate serial: 0192B9B5DECC223AD5934957409E55066385
Authority key identifier: 0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/yP1RQ16WBv3LXL4Pzf9NEvLm3GY.roa
Signing time: Wed 23 Oct 2024 14:09:16 +0000
ROA not before: Wed 23 Oct 2024 14:09:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30058
IP address blocks: 185.66.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b9:b5:de:cc:22:3a:d5:93:49:57:40:9e:55:06:63:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c39d04ad83aac1de5a98cdf76240a97362c4ac6
Validity
Not Before: Oct 23 14:09:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8fd51435e9606fdcb5cbe0fcdff4d12f2e6dc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4b:70:c3:e6:c7:58:13:e2:2a:a9:31:b8:a3:
43:bc:e1:b3:e1:b6:c2:2e:78:00:77:d3:d6:a9:38:
22:86:a6:9f:c4:8e:82:21:f7:f8:9a:60:cf:80:82:
1f:21:b9:19:b0:ca:24:48:25:13:f8:6d:f2:b6:86:
fa:f6:bd:99:61:1a:2b:34:f1:e7:ab:be:ab:c5:7b:
d4:42:a3:bb:6b:32:68:fd:18:b2:2a:66:40:35:73:
e5:1b:79:6a:1f:43:d6:b6:ad:06:71:e4:f1:50:af:
97:13:30:d1:89:77:00:c6:61:20:43:0c:a9:45:7e:
53:2f:72:ff:ea:3e:b8:9c:4e:d4:22:d1:86:5f:a7:
b4:c1:2b:80:58:a0:c3:98:36:82:45:79:ea:34:f6:
3d:c5:39:35:ec:2c:4f:93:08:12:3c:93:a7:98:29:
1e:64:7d:bd:be:12:54:6a:14:e8:05:0f:87:45:c0:
73:52:10:ac:7f:88:fc:db:f5:45:23:44:d9:48:e5:
59:82:9a:24:05:7c:b6:97:50:53:17:a1:dd:17:71:
93:44:c4:ed:d4:ad:b3:38:37:1c:a3:07:27:c6:ff:
f9:85:24:7b:b3:5e:26:34:e3:75:f3:15:09:7f:2e:
19:20:22:0f:1f:d6:c0:65:f5:fd:87:d3:30:53:bc:
30:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FD:51:43:5E:96:06:FD:CB:5C:BE:0F:CD:FF:4D:12:F2:E6:DC:66
X509v3 Authority Key Identifier:
keyid:0C:39:D0:4A:D8:3A:AC:1D:E5:A9:8C:DF:76:24:0A:97:36:2C:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDnQStg6rB3lqYzfdiQKlzYsSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/yP1RQ16WBv3LXL4Pzf9NEvLm3GY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/1f1ade-e2e6-4d73-96a9-427429fcd74c/1/DDnQStg6rB3lqYzfdiQKlzYsSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.66.8.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:d5:2f:1d:d8:09:bd:35:da:27:dd:fb:20:e8:84:f0:0a:5d:
f7:a7:2f:f9:a7:be:b0:d6:50:d4:04:9c:d3:22:3d:52:6f:16:
35:3a:ec:9f:6b:8c:51:33:16:63:63:46:27:db:94:ee:26:36:
c8:ac:1d:57:e8:7a:b2:84:3c:7b:29:19:81:2b:0a:bf:ac:7a:
92:9c:f4:f7:38:2d:a4:77:8e:01:2b:be:e8:b3:ec:58:6f:11:
a2:c9:19:7c:2c:28:89:91:c8:c6:f1:ef:e0:da:07:78:f8:dd:
c7:68:b8:6a:82:69:35:86:80:01:fc:b9:bc:d7:6c:ba:78:ca:
fc:29:4a:a4:50:e8:08:2f:dc:47:a3:3c:49:c5:84:fd:e6:d5:
04:a3:78:70:34:bb:5c:b4:60:ac:71:bb:5c:52:c5:1a:fa:fe:
3e:5c:c8:40:17:62:77:64:3c:2e:83:43:23:45:92:63:fd:74:
a0:37:08:f4:08:40:ab:25:9b:d9:10:3f:50:8d:2c:de:2a:d6:
88:f1:82:2a:fc:2d:29:1e:6f:bb:6c:94:60:19:18:46:b9:00:
c7:07:de:f1:13:02:75:80:c4:ed:ed:25:c2:90:54:82:7c:5a:
26:18:d6:25:31:59:56:bf:a2:3b:f5:f9:b7:42:73:0a:ad:7c:
57:a0:f1:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK5td7MIjrVk0lXQJ5VBmOFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzlkMDRhZDgzYWFjMWRlNWE5OGNkZjc2MjQwYTk3MzYy
YzRhYzYwHhcNMjQxMDIzMTQwOTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOGZkNTE0MzVlOTYwNmZkY2I1Y2JlMGZjZGZmNGQxMmYyZTZkYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEtww+bHWBPiKqkxuKNDvOGz4bbC
LngAd9PWqTgihqafxI6CIff4mmDPgIIfIbkZsMokSCUT+G3ytob69r2ZYRorNPHn
q76rxXvUQqO7azJo/RiyKmZANXPlG3lqH0PWtq0GceTxUK+XEzDRiXcAxmEgQwyp
RX5TL3L/6j64nE7UItGGX6e0wSuAWKDDmDaCRXnqNPY9xTk17CxPkwgSPJOnmCke
ZH29vhJUahToBQ+HRcBzUhCsf4j82/VFI0TZSOVZgpokBXy2l1BTF6HdF3GTRMTt
1K2zODccowcnxv/5hSR7s14mNON18xUJfy4ZICIPH9bAZfX9h9MwU7wwRwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMj9UUNelgb9y1y+D83/TRLy5txmMB8GA1UdIwQY
MBaAFAw50ErYOqwd5amM33YkCpc2LErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8xZjFhZGUtZTJlNi00ZDczLTk2YTkt
NDI3NDI5ZmNkNzRjLzEveVAxUlExNldCdjNMWEw0UHpmOU5FdkxtM0dZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8xZjFhZGUtZTJlNi00ZDczLTk2YTktNDI3NDI5ZmNkNzRj
LzEvRERuUVN0ZzZyQjNscVl6ZmRpUUtsellzU3NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUIIMA0G
CSqGSIb3DQEBCwUAA4IBAQBt1S8d2Am9Ndon3fsg6ITwCl33py/5p76w1lDUBJzT
Ij1SbxY1Ouyfa4xRMxZjY0Yn25TuJjbIrB1X6HqyhDx7KRmBKwq/rHqSnPT3OC2k
d44BK77os+xYbxGiyRl8LCiJkcjG8e/g2gd4+N3HaLhqgmk1hoAB/Lm812y6eMr8
KUqkUOgIL9xHozxJxYT95tUEo3hwNLtctGCscbtcUsUa+v4+XMhAF2J3ZDwug0Mj
RZJj/XSgNwj0CECrJZvZED9QjSzeKtaI8YIq/C0pHm+7bJRgGRhGuQDHB97xEwJ1
gMTt7SXCkFSCfFomGNYlMVlWv6I79fm3QnMKrXxXoPGU
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:12 2024 by rpki-client on console-ams.rpki-client.org