Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ykk9j9fwP2Hi8vvbonEiI9CNHMY.roa
File: ykk9j9fwP2Hi8vvbonEiI9CNHMY.roa (raw, json)
Hash identifier: TIOR4iaR78hVRCFQ8nULFa0id1zARL4i1iPuG46gxJE=
Subject key identifier: CA:49:3D:8F:D7:F0:3F:61:E2:F2:FB:DB:A2:71:22:23:D0:8D:1C:C6
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB265238ABD0F9FCF1A012CB003287
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ykk9j9fwP2Hi8vvbonEiI9CNHMY.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8474
IP address blocks: 195.138.96.0/19 maxlen: 24
194.50.200.0/23 maxlen: 24
194.50.206.0/23 maxlen: 24
195.138.105.0/24 maxlen: 24
195.138.106.0/24 maxlen: 24
195.138.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 03:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:26:52:38:ab:d0:f9:fc:f1:a0:12:cb:00:32:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca493d8fd7f03f61e2f2fbdba2712223d08d1cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ca:56:ec:37:50:b2:21:ba:4c:55:20:d8:4d:
0d:46:e5:42:49:1c:58:cf:42:c8:c3:8a:33:37:56:
64:12:73:3d:82:3c:dc:28:5e:30:27:92:fd:18:6a:
27:8b:51:6d:d1:14:12:cc:f0:96:e1:ad:c4:ae:3f:
18:34:be:00:4a:f3:a9:7c:0b:41:b1:37:cf:c2:bf:
ac:a3:9e:e4:27:76:89:3f:e9:a3:76:df:0b:ee:a5:
c0:53:ee:00:ae:eb:9f:84:31:56:12:e8:50:6e:e4:
d0:36:2a:e2:d0:7a:9a:73:06:10:ad:b9:8c:78:8a:
8f:34:dd:08:f2:38:4e:c9:72:20:ed:6c:f9:fa:c2:
13:6d:f8:83:a5:3c:9b:01:0f:12:5f:a1:19:11:b3:
91:61:74:be:9c:28:36:d2:d6:b8:62:f1:be:da:46:
9e:e7:9e:63:58:45:bc:d5:06:b7:c7:8b:6a:a8:1d:
1c:a2:aa:6e:6a:f0:e1:12:57:49:ec:16:21:11:56:
4d:8d:48:ff:12:8e:8b:b5:ee:72:98:ec:90:1b:c2:
e6:a3:43:66:26:5c:14:0c:b5:58:a7:73:2f:43:4b:
36:52:c8:5d:49:ab:cb:13:42:31:62:6c:84:76:b8:
0e:df:61:4f:6a:27:e0:04:df:b2:ce:99:bf:1d:b8:
6d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:49:3D:8F:D7:F0:3F:61:E2:F2:FB:DB:A2:71:22:23:D0:8D:1C:C6
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/ykk9j9fwP2Hi8vvbonEiI9CNHMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.200.0/23
194.50.206.0/23
195.138.96.0/19
Signature Algorithm: sha256WithRSAEncryption
38:6e:49:30:e6:aa:62:fe:c2:f2:79:22:96:e9:7f:98:5f:8d:
0f:09:ce:8d:6a:7c:b1:a7:06:65:db:0f:96:38:dd:12:9e:4f:
bb:dc:28:f5:5d:fa:17:fd:cb:9c:9d:e1:78:ca:1f:9f:c9:47:
b0:d3:a4:67:8f:4a:3f:8b:23:07:3f:f2:47:5a:ab:31:d8:f7:
03:f2:bf:bc:f1:c9:5b:e6:51:9f:40:c0:34:d1:40:61:98:f4:
e0:d0:88:12:2a:a8:55:b9:5c:df:ff:1d:3f:c8:5b:17:13:ff:
5a:1e:2d:2b:ff:e3:02:e6:91:4d:d7:14:b1:00:bf:2c:e7:33:
20:03:0b:51:93:9a:a5:49:22:48:ec:e6:4e:de:0f:ec:7d:51:
bc:b7:03:0e:12:bf:16:09:c2:a7:08:aa:08:48:5b:af:e8:e6:
ce:b2:51:8c:e3:72:90:20:1c:a6:f2:79:f4:0c:fc:9b:8e:90:
76:4c:18:57:1a:83:4e:19:03:1f:24:56:68:90:22:ab:87:a1:
72:ba:c6:7e:b0:5c:db:6d:b3:8b:e1:7b:0d:95:92:2a:b6:7f:
56:d5:1d:0a:67:ad:c3:71:04:b3:c0:02:d9:d4:d2:91:02:19:
bc:39:e3:ca:89:00:3a:9d:99:33:a8:8d:4a:44:45:e7:72:ef:
62:ba:92:36
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzC2yZSOKvQ+fzxoBLLADKHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjQwMTAxMDIyOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTQ5M2Q4ZmQ3ZjAzZjYxZTJmMmZiZGJhMjcxMjIyM2QwOGQxY2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocpW7DdQsiG6TFUg2E0NRuVCSRxY
z0LIw4ozN1ZkEnM9gjzcKF4wJ5L9GGoni1Ft0RQSzPCW4a3Erj8YNL4ASvOpfAtB
sTfPwr+so57kJ3aJP+mjdt8L7qXAU+4AruufhDFWEuhQbuTQNiri0HqacwYQrbmM
eIqPNN0I8jhOyXIg7Wz5+sITbfiDpTybAQ8SX6EZEbORYXS+nCg20ta4YvG+2kae
555jWEW81Qa3x4tqqB0coqpuavDhEldJ7BYhEVZNjUj/Eo6Lte5ymOyQG8Lmo0Nm
JlwUDLVYp3MvQ0s2UshdSavLE0IxYmyEdrgO32FPaifgBN+yzpm/HbhtrwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMpJPY/X8D9h4vL726JxIiPQjRzGMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEveWtrOWo5ZndQMkhpOHZ2Ym9uRWlJOUNOSE1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBwjLIAwQB
wjLOAwQFw4pgMA0GCSqGSIb3DQEBCwUAA4IBAQA4bkkw5qpi/sLyeSKW6X+YX40P
Cc6NanyxpwZl2w+WON0Snk+73Cj1XfoX/cucneF4yh+fyUew06Rnj0o/iyMHP/JH
Wqsx2PcD8r+88clb5lGfQMA00UBhmPTg0IgSKqhVuVzf/x0/yFsXE/9aHi0r/+MC
5pFN1xSxAL8s5zMgAwtRk5qlSSJI7OZO3g/sfVG8twMOEr8WCcKnCKoISFuv6ObO
slGM43KQIBym8nn0DPybjpB2TBhXGoNOGQMfJFZokCKrh6FyusZ+sFzbbbOL4XsN
lZIqtn9W1R0KZ63DcQSzwALZ1NKRAhm8OePKiQA6nZkzqI1KREXncu9iupI2
-----END CERTIFICATE-----
Generated at Sat May 4 08:46:23 2024 by rpki-client on console-fra.rpki-client.org