Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/KyYiRo7RHiwZrsqhZpXSbAy5RXo.roa
File: KyYiRo7RHiwZrsqhZpXSbAy5RXo.roa (raw, json)
Hash identifier: AdUjn8GYQyP+wwRlmN4yJ2QUQnUP0WNgkwao4vGombo=
Subject key identifier: 2B:26:22:46:8E:D1:1E:2C:19:AE:CA:A1:66:95:D2:6C:0C:B9:45:7A
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 018EC335E46C5FCCF5F0AF3A40A889431133
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/KyYiRo7RHiwZrsqhZpXSbAy5RXo.roa
Signing time: Tue 09 Apr 2024 14:14:32 +0000
ROA not before: Tue 09 Apr 2024 14:14:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210625
IP address blocks: 2a0c:ab07:2000::/36 maxlen: 36
2a0c:ab07:8000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c3:35:e4:6c:5f:cc:f5:f0:af:3a:40:a8:89:43:11:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Apr 9 14:14:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b2622468ed11e2c19aecaa16695d26c0cb9457a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:39:c0:10:e9:08:ef:12:69:a8:c2:95:00:ca:
4f:47:77:bc:20:30:f8:06:90:a0:ca:91:3b:67:b8:
d7:89:b1:3b:22:bb:3d:49:e9:b8:e5:3b:c4:b7:2e:
5a:47:30:80:3e:4b:01:7e:b4:f3:e5:95:c8:c4:49:
f0:94:7f:fc:a5:c6:02:54:aa:c2:86:17:d5:1b:22:
4b:1e:8f:94:89:5d:cb:55:37:5b:78:c9:81:7b:c8:
1f:0d:aa:98:b7:f4:fd:b2:77:17:0d:67:81:aa:92:
f2:c7:33:1d:ed:7c:18:c8:a4:9d:cc:47:68:d0:b3:
e9:8e:66:04:ef:65:29:59:63:3f:29:a3:73:19:91:
18:9d:ce:74:ce:ab:5b:d4:05:65:db:49:71:ee:e8:
cc:c3:de:4d:ae:58:61:e6:d5:bf:8c:a9:88:71:3b:
34:af:34:6f:d4:00:57:66:02:05:53:fd:4b:37:e4:
82:d4:17:9f:ba:af:52:6e:49:f6:35:ab:5e:1f:52:
6a:41:2d:b9:5d:2c:bf:a1:d4:13:4f:87:ad:c6:7b:
5e:1a:c9:29:5d:36:38:c7:a7:71:70:90:d2:73:4a:
a8:40:15:14:f3:b9:3a:bc:a3:01:db:84:4e:59:4f:
2d:69:ce:83:9d:ca:1d:a4:27:e1:d7:8b:ae:b0:89:
68:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:26:22:46:8E:D1:1E:2C:19:AE:CA:A1:66:95:D2:6C:0C:B9:45:7A
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/KyYiRo7RHiwZrsqhZpXSbAy5RXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:ab07:2000::/36
2a0c:ab07:8000::/36
Signature Algorithm: sha256WithRSAEncryption
e0:c9:b0:e1:a2:28:aa:ba:69:72:10:0b:7c:2c:22:67:53:ce:
fe:da:3a:12:05:b9:5c:60:7e:2c:7d:24:a0:7f:73:41:83:87:
4b:6f:2f:ab:93:ec:0f:9f:8d:47:b0:73:21:c5:23:66:d6:dc:
2b:53:68:8f:05:28:50:4a:53:fa:31:fd:41:7d:97:3a:7e:7e:
ba:fc:f7:ac:94:c4:7e:a4:bd:8b:52:30:be:50:bd:35:5a:ca:
33:3a:58:28:27:47:64:2a:72:0b:a7:a6:7c:eb:fb:0f:08:ef:
b8:f2:33:08:ca:52:d6:a6:ac:aa:05:28:75:67:6b:cb:0b:81:
25:2a:5a:4b:33:2a:47:13:c6:ae:90:c7:60:bc:b9:d8:44:5e:
c5:58:17:4c:0c:50:64:50:d7:9d:5f:bc:38:5f:97:6d:0f:b5:
18:cb:2e:31:cb:97:ad:ae:d3:71:0c:17:64:8e:c7:c4:d3:2f:
c7:dd:52:8d:0e:40:93:f9:93:68:86:45:ad:d7:71:3a:ad:be:
a4:4d:3e:e9:a8:fd:0a:10:30:ea:fd:82:da:d7:7b:95:ea:7b:
c6:3e:2b:13:1e:29:a5:7a:5b:bd:ec:fb:95:32:4f:c0:8e:e1:
d7:5c:e8:8b:65:3b:f5:90:5b:84:a4:c4:8e:57:a9:5a:0d:54:
d1:cf:e3:6e
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgISAY7DNeRsX8z18K86QKiJQxEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjQwNDA5MTQxNDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjI2MjI0NjhlZDExZTJjMTlhZWNhYTE2Njk1ZDI2YzBjYjk0NTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkznAEOkI7xJpqMKVAMpPR3e8IDD4
BpCgypE7Z7jXibE7Irs9Sem45TvEty5aRzCAPksBfrTz5ZXIxEnwlH/8pcYCVKrC
hhfVGyJLHo+UiV3LVTdbeMmBe8gfDaqYt/T9sncXDWeBqpLyxzMd7XwYyKSdzEdo
0LPpjmYE72UpWWM/KaNzGZEYnc50zqtb1AVl20lx7ujMw95Nrlhh5tW/jKmIcTs0
rzRv1ABXZgIFU/1LN+SC1Befuq9Sbkn2NateH1JqQS25XSy/odQTT4etxnteGskp
XTY4x6dxcJDSc0qoQBUU87k6vKMB24ROWU8tac6DncodpCfh14uusIlojwIDAQAB
o4ICEzCCAg8wHQYDVR0OBBYEFCsmIkaO0R4sGa7KoWaV0mwMuUV6MB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvS3lZaVJvN1JIaXdacnNxaFpwWFNiQXk1UlhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCkGCCsGAQUFBwEHAQH/BBowGDAWBAIAAjAQAwYEKgyrByAD
BgQqDKsHgDANBgkqhkiG9w0BAQsFAAOCAQEA4Mmw4aIoqrppchALfCwiZ1PO/to6
EgW5XGB+LH0koH9zQYOHS28vq5PsD5+NR7BzIcUjZtbcK1NojwUoUEpT+jH9QX2X
On5+uvz3rJTEfqS9i1IwvlC9NVrKMzpYKCdHZCpyC6emfOv7DwjvuPIzCMpS1qas
qgUodWdrywuBJSpaSzMqRxPGrpDHYLy52ERexVgXTAxQZFDXnV+8OF+XbQ+1GMsu
McuXra7TcQwXZI7HxNMvx91SjQ5Ak/mTaIZFrddxOq2+pE0+6aj9ChAw6v2C2td7
lep7xj4rEx4ppXpbvez7lTJPwI7h11zoi2U79ZBbhKTEjlepWg1U0c/jbg==
-----END CERTIFICATE-----
Generated at Mon May 6 23:28:47 2024 by rpki-client on console-fra.rpki-client.org