Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MyYJSPUTSi-l3x04AKgUDuC_Pns.roa
File: MyYJSPUTSi-l3x04AKgUDuC_Pns.roa (raw, json)
Hash identifier: BwyMANuH3O+UjBhhHheGV7G9n+1FXow0Bu3mL4FbCKg=
Subject key identifier: 33:26:09:48:F5:13:4A:2F:A5:DF:1D:38:00:A8:14:0E:E0:BF:3E:7B
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA2958C1AFB924E74D056C937A370BA4
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MyYJSPUTSi-l3x04AKgUDuC_Pns.roa
Signing time: Tue 02 Jan 2024 12:32:36 +0000
ROA not before: Tue 02 Jan 2024 12:32:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199750
IP address blocks: 2a0e:8f02:2210::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:58:c1:af:b9:24:e7:4d:05:6c:93:7a:37:0b:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33260948f5134a2fa5df1d3800a8140ee0bf3e7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bb:aa:41:47:83:6b:40:c7:4f:05:ad:79:42:
90:05:c8:98:95:a8:9a:aa:18:79:52:2a:ff:c1:dc:
0d:0a:1e:af:f2:10:bb:fc:81:9d:ed:09:a0:d7:b5:
d8:d4:37:07:a8:6e:aa:e3:53:78:35:e4:f8:ec:30:
67:78:88:43:6a:68:3d:04:27:b0:ee:79:1d:40:34:
36:90:6c:c4:67:bc:5d:13:2a:18:fb:92:c8:70:12:
a3:1d:86:79:55:c1:1b:f7:c1:c0:64:1a:5f:e6:a4:
c5:2a:6a:5c:2b:31:4e:2a:8d:ca:27:7a:78:77:5b:
da:1e:47:5a:84:e3:3c:3a:07:4c:00:6e:f0:2f:4f:
07:f5:c7:0b:77:d9:81:5a:9c:2c:5e:53:05:28:50:
f5:c9:3c:25:47:7e:fb:4a:72:34:04:f5:b7:48:1b:
e8:89:e0:45:ef:48:41:11:ac:ad:4e:b5:d4:b2:e8:
82:9c:c6:6a:81:3e:46:1d:8d:33:5e:4a:f0:a8:92:
a8:17:29:4b:e5:84:a0:97:63:dd:a9:ff:3e:ba:19:
ee:9d:b1:3b:66:24:b7:20:e4:3f:da:66:2c:a3:b7:
f3:47:83:c9:fc:a8:90:42:26:43:b0:7c:50:f1:9c:
b7:c7:7a:3c:c9:73:e6:a6:df:19:10:5c:01:bf:12:
62:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:26:09:48:F5:13:4A:2F:A5:DF:1D:38:00:A8:14:0E:E0:BF:3E:7B
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/MyYJSPUTSi-l3x04AKgUDuC_Pns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2210::/44
Signature Algorithm: sha256WithRSAEncryption
7d:07:cf:21:27:91:6c:6d:bc:91:47:66:48:7b:9e:46:5e:7b:
72:ff:b9:ba:2e:ab:b3:7c:99:d8:ca:84:8d:95:45:95:97:29:
31:17:83:3f:63:fe:c5:67:6d:e6:36:e1:75:27:0f:8a:2a:34:
53:e4:6e:33:b5:2e:5b:7f:0d:54:cb:00:ff:ec:81:5a:62:6d:
ff:ac:8d:d2:fe:a9:09:b4:3b:8f:ec:0b:ac:d2:12:2f:d1:f2:
bd:6e:9e:46:37:88:b8:3f:16:46:2f:ef:d7:04:a7:dd:38:ed:
e8:87:f7:85:0e:3c:d9:61:5e:ab:bf:7e:1b:61:d7:25:a3:0a:
98:d9:ac:7c:27:27:fe:be:f4:38:59:20:1a:35:fd:a3:12:5e:
97:af:58:1f:7a:82:f4:5b:9a:38:9b:f2:af:0d:14:d7:8f:83:
df:56:58:e8:4b:0e:e9:8e:1b:fe:d6:0f:28:3a:bf:d0:35:91:
f2:8f:b5:86:94:c3:6b:5d:ab:7f:44:0c:d0:c0:ee:56:a6:97:
34:47:b7:51:9a:33:2e:5c:fa:5b:64:64:d0:2f:f6:c0:d4:1b:
0c:c1:16:2f:7d:19:b7:0b:65:06:de:d3:bd:be:eb:76:7b:25:
77:8f:12:1c:1a:f2:31:9b:c1:3d:e8:1f:be:83:3b:3b:c0:58:
28:7c:2a:2f
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzKKVjBr7kk500FbJN6NwukMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjQwMTAyMTIzMjM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzI2MDk0OGY1MTM0YTJmYTVkZjFkMzgwMGE4MTQwZWUwYmYzZTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLuqQUeDa0DHTwWteUKQBciYlaia
qhh5Uir/wdwNCh6v8hC7/IGd7Qmg17XY1DcHqG6q41N4NeT47DBneIhDamg9BCew
7nkdQDQ2kGzEZ7xdEyoY+5LIcBKjHYZ5VcEb98HAZBpf5qTFKmpcKzFOKo3KJ3p4
d1vaHkdahOM8OgdMAG7wL08H9ccLd9mBWpwsXlMFKFD1yTwlR377SnI0BPW3SBvo
ieBF70hBEaytTrXUsuiCnMZqgT5GHY0zXkrwqJKoFylL5YSgl2Pdqf8+uhnunbE7
ZiS3IOQ/2mYso7fzR4PJ/KiQQiZDsHxQ8Zy3x3o8yXPmpt8ZEFwBvxJibwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFDMmCUj1E0ovpd8dOACoFA7gvz57MB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvTXlZSlNQVVRTaS1sM3gwNEFLZ1VEdUNfUG5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6PAiIQ
MA0GCSqGSIb3DQEBCwUAA4IBAQB9B88hJ5FsbbyRR2ZIe55GXnty/7m6LquzfJnY
yoSNlUWVlykxF4M/Y/7FZ23mNuF1Jw+KKjRT5G4ztS5bfw1UywD/7IFaYm3/rI3S
/qkJtDuP7Aus0hIv0fK9bp5GN4i4PxZGL+/XBKfdOO3oh/eFDjzZYV6rv34bYdcl
owqY2ax8Jyf+vvQ4WSAaNf2jEl6Xr1gfeoL0W5o4m/KvDRTXj4PfVljoSw7pjhv+
1g8oOr/QNZHyj7WGlMNrXat/RAzQwO5Wppc0R7dRmjMuXPpbZGTQL/bA1BsMwRYv
fRm3C2UG3tO9vut2eyV3jxIcGvIxm8E96B++gzs7wFgofCov
-----END CERTIFICATE-----
Generated at Tue May 21 22:31:55 2024 by rpki-client on console-fra.rpki-client.org