Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/k2YI8WrEX_QVBPIvnVcvNtZpG0Y.roa
File: k2YI8WrEX_QVBPIvnVcvNtZpG0Y.roa (raw, json)
Hash identifier: dAGffOfWwQl5SWLAHNPA4itkQo3J6SpeVPbbZUZ61Cc=
Subject key identifier: 93:66:08:F1:6A:C4:5F:F4:15:04:F2:2F:9D:57:2F:36:D6:69:1B:46
Certificate issuer: /CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Certificate serial: 018CC56E0167C01E38700E6DE0340B854F54
Authority key identifier: 66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/k2YI8WrEX_QVBPIvnVcvNtZpG0Y.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 193.36.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:01:67:c0:1e:38:70:0e:6d:e0:34:0b:85:4f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66a832244d0e23f5f28b3a6def7afc01b22521c7
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=936608f16ac45ff41504f22f9d572f36d6691b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:31:5c:d4:39:5b:85:3c:f7:31:ec:fc:a9:
78:20:14:fd:94:e3:c6:a4:46:54:f6:bb:7a:3b:72:
59:5c:a4:2b:01:80:74:d9:5b:e8:a6:e4:5d:cf:49:
fb:16:ab:74:bb:90:64:55:6c:22:ca:05:d6:bf:77:
e3:6b:32:de:0b:b4:ff:be:16:14:39:d7:3e:f6:e5:
ea:98:3c:18:6b:08:a6:16:45:c7:52:c9:44:d7:71:
76:17:34:9f:21:bf:b6:6d:d1:be:ed:2f:d8:43:37:
dd:a1:84:f1:b9:b6:e3:e0:88:a2:5c:64:46:01:89:
16:82:89:06:d4:a2:cc:e8:74:1e:2c:64:1b:a4:16:
73:ef:f7:c2:66:a7:11:e9:62:e5:71:9c:9b:89:42:
b1:c4:ce:e8:49:e5:4d:81:7c:6f:b5:b3:e0:52:61:
7f:8c:9b:db:01:cf:2f:59:a4:4c:80:3a:02:e0:74:
9a:32:a6:f1:55:9b:5f:27:db:72:57:1b:69:3b:c4:
60:68:66:18:7d:90:6c:6c:f5:a9:cb:f5:fc:9d:2e:
85:21:83:8a:70:75:34:86:16:43:d9:47:db:c7:4b:
f3:9f:69:ad:e6:ec:52:72:1a:a0:48:b8:24:b7:b6:
b3:ca:d3:89:d8:9d:c2:34:ad:7a:2b:86:0f:65:4f:
4c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:08:F1:6A:C4:5F:F4:15:04:F2:2F:9D:57:2F:36:D6:69:1B:46
X509v3 Authority Key Identifier:
keyid:66:A8:32:24:4D:0E:23:F5:F2:8B:3A:6D:EF:7A:FC:01:B2:25:21:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZqgyJE0OI_Xyizpt73r8AbIlIcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/k2YI8WrEX_QVBPIvnVcvNtZpG0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f2ef06-2dd2-4a21-9ce9-defffa5f06e1/1/ZqgyJE0OI_Xyizpt73r8AbIlIcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.36.0/24
Signature Algorithm: sha256WithRSAEncryption
05:cd:04:83:1c:5d:7a:78:5a:95:74:d4:fc:a3:7a:97:75:b1:
a1:a4:f2:db:33:ac:d1:c5:39:74:52:77:87:ca:24:eb:a1:6e:
17:54:b8:44:bf:35:bd:fd:c0:e9:1e:50:cf:e1:e3:d2:26:3b:
c0:13:16:38:91:35:04:13:4e:26:ca:45:e8:b4:85:7e:7f:23:
39:61:54:1b:6d:35:ac:d0:10:c6:50:8f:01:6d:6a:a6:66:3c:
2e:3b:e9:2e:47:fe:2c:73:44:67:1b:01:42:7e:33:3d:df:12:
f9:ff:5b:24:8f:99:6b:e0:3d:a0:f4:78:9e:a5:5e:f6:32:76:
73:1e:89:e4:f7:ca:84:0e:2d:72:81:ea:c5:7d:ba:1c:f5:92:
94:63:07:a6:ae:29:06:e2:8d:10:31:82:e2:a6:5e:0b:2f:07:
62:8e:ce:26:4d:5e:06:a3:64:2d:ec:a8:ed:e3:9b:1e:01:3d:
36:f0:3d:e1:5a:57:d1:16:06:1e:a8:f8:64:04:53:c6:26:35:
ba:84:5d:a9:2a:62:97:71:d2:01:a4:00:a7:0d:a8:e9:f8:88:
4d:2a:23:d6:70:59:ba:d9:dd:64:72:35:cb:fe:c0:c1:64:4f:
41:c5:7b:c9:c6:c1:21:0d:47:77:d3:28:28:08:1e:f4:3c:8a:
b5:07:22:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbgFnwB44cA5t4DQLhU9UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2YTgzMjI0NGQwZTIzZjVmMjhiM2E2ZGVmN2FmYzAxYjIy
NTIxYzcwHhcNMjQwMTAxMTQyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzY2MDhmMTZhYzQ1ZmY0MTUwNGYyMmY5ZDU3MmYzNmQ2NjkxYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqccxXNQ5W4U89zHs/Kl4IBT9lOPG
pEZU9rt6O3JZXKQrAYB02VvopuRdz0n7Fqt0u5BkVWwiygXWv3fjazLeC7T/vhYU
Odc+9uXqmDwYawimFkXHUslE13F2FzSfIb+2bdG+7S/YQzfdoYTxubbj4IiiXGRG
AYkWgokG1KLM6HQeLGQbpBZz7/fCZqcR6WLlcZybiUKxxM7oSeVNgXxvtbPgUmF/
jJvbAc8vWaRMgDoC4HSaMqbxVZtfJ9tyVxtpO8RgaGYYfZBsbPWpy/X8nS6FIYOK
cHU0hhZD2Ufbx0vzn2mt5uxSchqgSLgkt7azytOJ2J3CNK16K4YPZU9MFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNmCPFqxF/0FQTyL51XLzbWaRtGMB8GA1UdIwQY
MBaAFGaoMiRNDiP18os6be96/AGyJSHHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTkt
ZGVmZmZhNWYwNmUxLzEvazJZSThXckVYX1FWQlBJdm5WY3ZOdFpwRzBZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mMmVmMDYtMmRkMi00YTIxLTljZTktZGVmZmZhNWYwNmUx
LzEvWnFneUpFME9JX1h5aXpwdDczcjhBYklsSWNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSQkMA0G
CSqGSIb3DQEBCwUAA4IBAQAFzQSDHF16eFqVdNT8o3qXdbGhpPLbM6zRxTl0UneH
yiTroW4XVLhEvzW9/cDpHlDP4ePSJjvAExY4kTUEE04mykXotIV+fyM5YVQbbTWs
0BDGUI8BbWqmZjwuO+kuR/4sc0RnGwFCfjM93xL5/1skj5lr4D2g9HiepV72MnZz
Honk98qEDi1ygerFfboc9ZKUYwemrikG4o0QMYLipl4LLwdijs4mTV4Go2Qt7Kjt
45seAT028D3hWlfRFgYeqPhkBFPGJjW6hF2pKmKXcdIBpACnDajp+IhNKiPWcFm6
2d1kcjXL/sDBZE9BxXvJxsEhDUd30ygoCB70PIq1ByKY
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:14:13 2024 by rpki-client on console-fra.rpki-client.org