Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/Y0KBcsCNAi5RccIGBrFbLkM5T54.roa
File: Y0KBcsCNAi5RccIGBrFbLkM5T54.roa (raw, json)
Hash identifier: NvYthpub3WoBw+3y0gP61w72qKDf1gP2s/VCqfrDD6M=
Subject key identifier: 63:42:81:72:C0:8D:02:2E:51:71:C2:06:06:B1:5B:2E:43:39:4F:9E
Certificate issuer: /CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Certificate serial: 018CC2DAE42028E7A19C1EE7180CFCCA2BA1
Authority key identifier: 40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/Y0KBcsCNAi5RccIGBrFbLkM5T54.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56514
IP address blocks: 109.95.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 05:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e4:20:28:e7:a1:9c:1e:e7:18:0c:fc:ca:2b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=408af485b4fd0f03717cd4a709ef11c61d3ef46e
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63428172c08d022e5171c20606b15b2e43394f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8b:99:1f:f0:6f:b3:09:78:a6:83:bc:2f:ee:
89:50:28:27:60:3a:dc:91:e0:8d:67:f9:7c:4c:22:
04:5c:d5:96:44:b1:83:fa:d1:8f:a7:aa:c2:b0:39:
0f:c5:92:02:f4:e9:ca:9a:a4:49:4c:3f:a6:9a:c0:
f9:e8:26:51:e4:91:00:85:5d:55:55:88:fb:4f:b1:
d7:72:d3:bf:f8:b0:db:a0:8a:e6:ad:2b:8a:b0:9a:
f2:74:83:4f:01:e7:0a:63:48:02:70:26:3c:b6:ec:
9f:d4:70:b8:4a:8c:96:ca:c4:19:ce:4c:e9:09:e7:
e6:43:a0:1b:a9:f5:8c:ce:23:8a:56:37:ba:db:fc:
1f:77:dd:4f:fd:73:5a:d2:91:d5:5d:15:86:d1:cb:
96:7b:8f:6e:aa:23:68:75:32:ba:c9:ce:0d:63:86:
ab:db:e6:ad:01:fa:1c:1a:3d:72:3f:f0:ae:02:dc:
88:ac:79:ca:1f:3a:7e:c4:42:30:88:2e:0e:66:62:
40:28:c0:f8:ed:67:44:e8:83:2e:1c:db:31:8c:97:
ad:3c:7a:5e:6e:d7:27:26:5a:76:a6:21:78:8f:3c:
b8:22:14:44:7f:50:ac:97:1d:ee:22:6c:a8:40:f0:
03:97:1b:6f:f7:09:e8:e2:03:59:5d:5f:2c:34:ce:
8c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:42:81:72:C0:8D:02:2E:51:71:C2:06:06:B1:5B:2E:43:39:4F:9E
X509v3 Authority Key Identifier:
keyid:40:8A:F4:85:B4:FD:0F:03:71:7C:D4:A7:09:EF:11:C6:1D:3E:F4:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/Y0KBcsCNAi5RccIGBrFbLkM5T54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e1171c-5270-49cd-9379-b95b08a23ae1/1/QIr0hbT9DwNxfNSnCe8Rxh0-9G4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.95.15.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:04:03:2d:14:69:09:f8:ef:fa:76:f7:47:9a:3f:01:26:d2:
25:1b:05:7a:44:3b:5e:32:40:58:d8:e6:e6:23:24:0e:9f:f1:
7a:a3:b8:8c:12:f2:f2:42:7e:59:6f:3a:ea:0e:c4:ce:0f:ab:
f8:11:33:68:ed:08:92:99:9c:9c:48:35:e5:ee:af:32:eb:03:
52:4a:45:60:55:e3:06:da:ab:54:c4:fd:fb:be:ca:d4:ab:27:
a8:20:4b:7b:57:b5:a0:d7:e4:02:3a:9e:e6:a9:cb:f3:c3:20:
14:95:ac:c8:b8:87:52:c3:99:43:28:a6:63:25:25:f1:62:b9:
21:51:ea:98:9a:bd:31:8d:03:e6:bb:24:00:93:d0:8f:d9:80:
5e:ad:ab:2b:90:f8:2f:90:b4:84:a9:98:c3:c2:ea:0d:48:93:
58:23:a7:c6:44:fe:a2:d1:65:6a:74:77:02:58:bc:9e:2b:25:
c0:82:e2:09:ba:f5:3e:a8:be:b3:d9:ef:19:c2:9c:77:aa:8a:
96:a9:16:7e:e6:d4:a8:96:59:24:4e:15:38:a0:06:81:13:40:
95:dc:43:61:9a:a1:9e:13:cc:0e:a6:0e:0d:a2:18:d1:1b:7d:
6f:9b:b7:6b:db:d6:2d:f2:ea:bf:20:f5:42:12:67:70:57:fb:
2b:ad:a2:4f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2uQgKOehnB7nGAz8yiuhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwOGFmNDg1YjRmZDBmMDM3MTdjZDRhNzA5ZWYxMWM2MWQz
ZWY0NmUwHhcNMjQwMTAxMDIyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzQyODE3MmMwOGQwMjJlNTE3MWMyMDYwNmIxNWIyZTQzMzk0ZjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4uZH/Bvswl4poO8L+6JUCgnYDrc
keCNZ/l8TCIEXNWWRLGD+tGPp6rCsDkPxZIC9OnKmqRJTD+mmsD56CZR5JEAhV1V
VYj7T7HXctO/+LDboIrmrSuKsJrydINPAecKY0gCcCY8tuyf1HC4SoyWysQZzkzp
CefmQ6AbqfWMziOKVje62/wfd91P/XNa0pHVXRWG0cuWe49uqiNodTK6yc4NY4ar
2+atAfocGj1yP/CuAtyIrHnKHzp+xEIwiC4OZmJAKMD47WdE6IMuHNsxjJetPHpe
btcnJlp2piF4jzy4IhREf1Cslx3uImyoQPADlxtv9wno4gNZXV8sNM6MPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGNCgXLAjQIuUXHCBgaxWy5DOU+eMB8GA1UdIwQY
MBaAFECK9IW0/Q8DcXzUpwnvEcYdPvRuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzkt
Yjk1YjA4YTIzYWUxLzEvWTBLQmNzQ05BaTVSY2NJR0JyRmJMa001VDU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9lMTE3MWMtNTI3MC00OWNkLTkzNzktYjk1YjA4YTIzYWUx
LzEvUUlyMGhiVDlEd054Zk5TbkNlOFJ4aDAtOUc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbV8PMA0G
CSqGSIb3DQEBCwUAA4IBAQAcBAMtFGkJ+O/6dvdHmj8BJtIlGwV6RDteMkBY2Obm
IyQOn/F6o7iMEvLyQn5ZbzrqDsTOD6v4ETNo7QiSmZycSDXl7q8y6wNSSkVgVeMG
2qtUxP37vsrUqyeoIEt7V7Wg1+QCOp7mqcvzwyAUlazIuIdSw5lDKKZjJSXxYrkh
UeqYmr0xjQPmuyQAk9CP2YBerasrkPgvkLSEqZjDwuoNSJNYI6fGRP6i0WVqdHcC
WLyeKyXAguIJuvU+qL6z2e8Zwpx3qoqWqRZ+5tSollkkThU4oAaBE0CV3ENhmqGe
E8wOpg4NohjRG31vm7dr29Yt8uq/IPVCEmdwV/srraJP
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:48:31 2024 by rpki-client on console-fra.rpki-client.org