Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/YsXIwk0fFWlZqo3yrFImkijO6T4.roa
File: YsXIwk0fFWlZqo3yrFImkijO6T4.roa (raw, json)
Hash identifier: H8oWyurLKiJilEtS3SQcc0s7Z1TPR3ezW3x7WzywB60=
Subject key identifier: 62:C5:C8:C2:4D:1F:15:69:59:AA:8D:F2:AC:52:26:92:28:CE:E9:3E
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 019247524CCCD9436C9458267A2E05D24B6A
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/YsXIwk0fFWlZqo3yrFImkijO6T4.roa
Signing time: Tue 01 Oct 2024 09:03:48 +0000
ROA not before: Tue 01 Oct 2024 09:03:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210837
IP address blocks: 109.107.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:47:52:4c:cc:d9:43:6c:94:58:26:7a:2e:05:d2:4b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Oct 1 09:03:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62c5c8c24d1f156959aa8df2ac52269228cee93e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:96:c2:9e:f9:37:b3:99:ce:26:52:12:e5:
4d:74:50:ca:3e:9e:70:d8:dc:49:50:cd:65:50:99:
23:fe:26:ae:6a:f9:a5:b6:4e:c8:ca:6b:85:ed:6f:
8c:e4:93:70:ac:32:82:1e:60:a2:0e:2a:fe:fc:b2:
8b:c1:15:90:ca:87:b3:7d:25:30:1a:ab:0c:99:cf:
47:86:67:54:32:42:2d:3e:d5:cb:f8:40:81:51:4b:
a8:d5:60:35:ab:41:8b:2b:a7:e6:8e:9e:dc:d2:77:
ab:cf:af:68:6a:b6:f7:35:91:87:a4:ef:5e:cc:45:
d7:d4:6d:42:0c:d4:db:94:d0:95:e8:4d:5c:01:f8:
04:4d:5e:dd:46:5b:34:60:8c:c4:50:ce:57:f6:a0:
f4:44:2a:04:0e:a9:96:44:eb:4d:40:33:29:49:d1:
64:af:7e:49:de:18:c0:8f:c9:b1:ee:38:e6:21:b7:
ed:0b:f1:81:96:0c:15:57:a8:8e:10:97:c8:71:ff:
20:17:4f:6f:92:6e:cd:e8:63:3f:06:d8:ae:fc:c3:
7a:0a:84:22:2d:65:ed:b2:53:75:a5:5a:5d:6f:7b:
c1:05:75:11:cb:1b:b9:01:49:5d:6c:7a:01:91:66:
64:d9:af:10:f2:20:74:81:ad:7a:03:f3:32:0b:d5:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:C5:C8:C2:4D:1F:15:69:59:AA:8D:F2:AC:52:26:92:28:CE:E9:3E
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/YsXIwk0fFWlZqo3yrFImkijO6T4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.107.155.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:f6:d5:24:5f:d2:da:81:87:c8:b6:79:1c:72:e7:14:b1:15:
97:0f:a1:f8:e9:8e:a5:0f:e7:3c:06:1e:ff:9c:d7:cc:47:a4:
c7:55:b6:80:fb:27:c1:27:64:8d:be:90:50:39:af:a6:fb:84:
09:f1:8d:bc:8a:e7:85:89:e3:eb:ac:5b:37:08:fa:c6:39:9a:
00:14:c8:1b:3a:07:91:80:be:9a:8e:32:d2:dc:ef:12:e9:a6:
c2:2f:11:52:b7:b3:e3:fc:75:2c:10:5a:a9:fa:8f:e0:85:5a:
aa:8d:a7:83:7f:49:f9:0d:79:90:51:df:18:ec:cc:4a:ef:a3:
07:1b:f2:83:96:36:f7:10:42:04:47:79:08:3c:d0:1c:f8:ab:
13:16:aa:17:6e:52:7b:77:b9:25:23:f6:f8:19:5d:a2:a5:e1:
cb:bc:f0:97:77:c7:19:eb:93:3c:8e:0c:4e:ff:40:33:85:9c:
d9:62:22:25:7a:09:1e:e7:d0:02:5b:81:dc:60:43:19:99:ed:
1a:cc:6a:1c:9e:23:cc:d2:c6:fd:74:22:cd:77:b1:e9:a3:74:
ea:f9:f1:34:90:9e:43:97:cf:d5:22:e4:5e:11:ef:eb:b9:26:
78:90:02:e0:a1:bf:97:3f:da:ae:03:a8:86:36:7e:33:07:2c:
fe:7a:18:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJHUkzM2UNslFgmei4F0ktqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjQxMDAxMDkwMzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmM1YzhjMjRkMWYxNTY5NTlhYThkZjJhYzUyMjY5MjI4Y2VlOTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI+Wwp75N7OZziZSEuVNdFDKPp5w
2NxJUM1lUJkj/iauavmltk7IymuF7W+M5JNwrDKCHmCiDir+/LKLwRWQyoezfSUw
GqsMmc9HhmdUMkItPtXL+ECBUUuo1WA1q0GLK6fmjp7c0nerz69oarb3NZGHpO9e
zEXX1G1CDNTblNCV6E1cAfgETV7dRls0YIzEUM5X9qD0RCoEDqmWROtNQDMpSdFk
r35J3hjAj8mx7jjmIbftC/GBlgwVV6iOEJfIcf8gF09vkm7N6GM/Btiu/MN6CoQi
LWXtslN1pVpdb3vBBXURyxu5AUldbHoBkWZk2a8Q8iB0ga16A/MyC9Xk4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGLFyMJNHxVpWaqN8qxSJpIozuk+MB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvWXNYSXdrMGZGV2xacW8zeXJGSW1raWpPNlQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbWubMA0G
CSqGSIb3DQEBCwUAA4IBAQA89tUkX9LagYfItnkccucUsRWXD6H46Y6lD+c8Bh7/
nNfMR6THVbaA+yfBJ2SNvpBQOa+m+4QJ8Y28iueFiePrrFs3CPrGOZoAFMgbOgeR
gL6ajjLS3O8S6abCLxFSt7Pj/HUsEFqp+o/ghVqqjaeDf0n5DXmQUd8Y7MxK76MH
G/KDljb3EEIER3kIPNAc+KsTFqoXblJ7d7klI/b4GV2ipeHLvPCXd8cZ65M8jgxO
/0AzhZzZYiIlegke59ACW4HcYEMZme0azGocniPM0sb9dCLNd7Hpo3Tq+fE0kJ5D
l8/VIuReEe/ruSZ4kALgob+XP9quA6iGNn4zByz+ehhM
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:02:30 2024 by rpki-client on console-ams.rpki-client.org