Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/yJaTd3auacSUdgRFCqoOvuQw5p8.roa
File: yJaTd3auacSUdgRFCqoOvuQw5p8.roa (raw, json)
Hash identifier: sIFQu/AXPg680FikaxA1Ly8IKILv9WECEYptQJA9K/s=
Subject key identifier: C8:96:93:77:76:AE:69:C4:94:76:04:45:0A:AA:0E:BE:E4:30:E6:9F
Certificate issuer: /CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Certificate serial: 018CCA2BD20099F6CD17A7580EB3E2E4D5D5
Authority key identifier: 08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/yJaTd3auacSUdgRFCqoOvuQw5p8.roa
Signing time: Tue 02 Jan 2024 12:35:18 +0000
ROA not before: Tue 02 Jan 2024 12:35:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49820
IP address blocks: 5.35.176.0/21 maxlen: 21
2a10:87c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.mft
rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:d2:00:99:f6:cd:17:a7:58:0e:b3:e2:e4:d5:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=089bbb09a5fbef6135c2d920bf27bb61f5c2e09d
Validity
Not Before: Jan 2 12:35:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c896937776ae69c4947604450aaa0ebee430e69f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:52:60:8b:57:48:4c:c1:1d:65:1c:dd:d8:24:
76:5c:58:7e:46:59:e8:f3:15:6f:bd:5c:10:6d:05:
93:ac:47:ee:d4:fe:5b:75:b2:7b:6c:9f:9e:5e:17:
26:60:24:7e:24:fd:40:7f:37:ee:c5:31:6e:fc:6d:
8a:36:ad:60:0e:fe:18:51:77:ae:e1:ec:e3:24:c0:
e9:ee:aa:98:3c:c4:8b:cd:4c:9c:28:1f:c4:3d:3a:
8f:d2:43:fc:82:19:bd:67:32:ea:54:6a:d9:54:3c:
8b:3c:74:fe:01:f8:21:41:d5:57:3f:48:af:08:b8:
a6:36:8c:8a:b8:2a:00:22:24:08:52:32:0e:5d:a0:
68:ae:be:32:29:0a:57:11:69:c6:f7:ba:e0:3d:ef:
2f:46:56:b6:79:bd:f3:dc:3d:e1:94:b2:e8:b5:43:
0f:af:e5:46:80:3d:53:8b:1a:ab:86:19:59:be:10:
cb:ab:51:f5:f7:c2:db:3c:29:66:a7:e2:84:03:c9:
5a:4d:87:6d:75:ef:37:09:51:7e:bd:31:be:d3:c4:
19:6d:72:d9:74:f6:9b:ef:18:c1:5c:f6:fb:a5:ac:
a2:78:90:86:c5:02:64:fd:3b:fb:30:ae:f2:b6:37:
d2:5a:e9:c7:c0:ab:0c:5d:2b:2b:a8:d6:61:85:eb:
30:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:96:93:77:76:AE:69:C4:94:76:04:45:0A:AA:0E:BE:E4:30:E6:9F
X509v3 Authority Key Identifier:
keyid:08:9B:BB:09:A5:FB:EF:61:35:C2:D9:20:BF:27:BB:61:F5:C2:E0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CJu7CaX772E1wtkgvye7YfXC4J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/yJaTd3auacSUdgRFCqoOvuQw5p8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/5ccb8f-5148-4706-a040-2f9b00fdc5d3/1/CJu7CaX772E1wtkgvye7YfXC4J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.35.176.0/21
IPv6:
2a10:87c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:2d:f1:b6:b1:0f:cd:ca:6c:9c:8b:3f:a6:e6:72:04:70:79:
a9:53:7c:1b:a3:d4:74:01:da:ea:a2:13:d1:05:2e:cf:7b:22:
91:d8:83:23:d9:b9:cb:43:c9:2c:92:8f:ff:c9:0a:7c:01:70:
97:7e:e4:5c:cb:7e:96:7d:d4:5d:b6:3c:1f:82:1d:49:98:43:
04:1a:28:37:0c:73:7d:0e:aa:7f:5f:f2:1f:34:f5:60:05:1b:
70:fd:85:a6:79:05:fa:4f:a8:80:ab:30:cd:a2:b6:8c:65:2b:
8b:3e:1d:80:18:aa:68:ad:e6:2d:c6:ac:85:9a:55:ee:88:44:
d9:77:50:35:c2:e0:a8:50:cd:d3:8f:64:dc:76:f2:e1:1f:e5:
40:01:dc:7c:67:c2:fc:15:f4:c2:87:7f:69:b5:d2:f3:89:5d:
7a:b2:81:a9:ab:fe:b4:b2:08:4e:71:3f:27:80:4b:ba:d4:c0:
87:af:ba:86:a0:43:a5:e7:ca:b1:b4:7d:8e:a1:c5:1b:32:77:
fb:33:28:33:e6:aa:a6:e3:ec:9b:16:0a:6b:07:28:eb:5b:82:
b9:b7:da:fe:7e:1c:4f:a3:9a:be:d3:75:07:22:c9:bf:85:05:
61:74:71:22:c0:b7:a4:bb:4d:70:8a:82:d4:45:9a:0a:ec:c6:
72:79:ba:23
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzKK9IAmfbNF6dYDrPi5NXVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4OWJiYjA5YTVmYmVmNjEzNWMyZDkyMGJmMjdiYjYxZjVj
MmUwOWQwHhcNMjQwMTAyMTIzNTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODk2OTM3Nzc2YWU2OWM0OTQ3NjA0NDUwYWFhMGViZWU0MzBlNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVJgi1dITMEdZRzd2CR2XFh+Rlno
8xVvvVwQbQWTrEfu1P5bdbJ7bJ+eXhcmYCR+JP1AfzfuxTFu/G2KNq1gDv4YUXeu
4ezjJMDp7qqYPMSLzUycKB/EPTqP0kP8ghm9ZzLqVGrZVDyLPHT+AfghQdVXP0iv
CLimNoyKuCoAIiQIUjIOXaBorr4yKQpXEWnG97rgPe8vRla2eb3z3D3hlLLotUMP
r+VGgD1TixqrhhlZvhDLq1H198LbPClmp+KEA8laTYdtde83CVF+vTG+08QZbXLZ
dPab7xjBXPb7payieJCGxQJk/Tv7MK7ytjfSWunHwKsMXSsrqNZhheswpwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMiWk3d2rmnElHYERQqqDr7kMOafMB8GA1UdIwQY
MBaAFAibuwml++9hNcLZIL8nu2H1wuCdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAt
MmY5YjAwZmRjNWQzLzEveUphVGQzYXVhY1NVZGdSRkNxb092dVF3NXA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC81Y2NiOGYtNTE0OC00NzA2LWEwNDAtMmY5YjAwZmRjNWQz
LzEvQ0p1N0NhWDc3MkUxd3RrZ3Z5ZTdZZlhDNEowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDBSOwMA0E
AgACMAcDBQMqEIfAMA0GCSqGSIb3DQEBCwUAA4IBAQCKLfG2sQ/Nymyciz+m5nIE
cHmpU3wbo9R0AdrqohPRBS7PeyKR2IMj2bnLQ8ksko//yQp8AXCXfuRcy36WfdRd
tjwfgh1JmEMEGig3DHN9Dqp/X/IfNPVgBRtw/YWmeQX6T6iAqzDNoraMZSuLPh2A
GKporeYtxqyFmlXuiETZd1A1wuCoUM3Tj2TcdvLhH+VAAdx8Z8L8FfTCh39ptdLz
iV16soGpq/60sghOcT8ngEu61MCHr7qGoEOl58qxtH2OocUbMnf7Mygz5qqm4+yb
FgprByjrW4K5t9r+fhxPo5q+03UHIsm/hQVhdHEiwLeku01wioLURZoK7MZyeboj
-----END CERTIFICATE-----
Generated at Wed May 15 16:15:03 2024 by rpki-client on console-ams.rpki-client.org