Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/YGcn0-iWEs_yDLVzFSInFBMOWqQ.roa
File: YGcn0-iWEs_yDLVzFSInFBMOWqQ.roa (raw, json)
Hash identifier: Vl1BbJg/j2XxlzC/pWK9ViaOAj8ZubJjBdnqyuL1vjc=
Subject key identifier: 60:67:27:D3:E8:96:12:CF:F2:0C:B5:73:15:22:27:14:13:0E:5A:A4
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 018CC3B6A15367B0B11D158CBD7A5FFF0196
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/YGcn0-iWEs_yDLVzFSInFBMOWqQ.roa
Signing time: Mon 01 Jan 2024 06:29:35 +0000
ROA not before: Mon 01 Jan 2024 06:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29259
IP address blocks: 84.11.255.0/24 maxlen: 24
83.170.0.0/18 maxlen: 18
84.11.0.0/16 maxlen: 16
195.158.212.0/22 maxlen: 24
2001:1b10::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a1:53:67:b0:b1:1d:15:8c:bd:7a:5f:ff:01:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Jan 1 06:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=606727d3e89612cff20cb57315222714130e5aa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:15:84:d7:1d:20:3a:1c:1c:59:4d:b1:92:
fb:b9:d8:44:79:11:d4:a0:73:d6:14:9b:63:e2:83:
cc:5e:8f:13:9e:fb:0f:f2:d0:22:e5:da:6d:38:59:
b5:b8:56:e0:9a:75:91:60:1e:95:ce:5e:66:20:de:
ab:91:f5:e5:e7:07:8d:c2:0a:59:82:b6:2f:28:21:
4b:f2:08:69:cc:c8:9f:0b:d4:ff:11:30:99:d0:14:
1f:b0:5a:a5:16:e4:18:63:83:f7:8f:68:6a:bd:24:
72:cb:f8:88:78:d5:22:e5:3f:e6:fa:f4:e3:c0:57:
4a:44:2f:a0:d9:ce:39:a3:bb:77:3d:df:2d:aa:9d:
33:eb:aa:93:a0:ed:8d:e7:b3:df:70:19:8c:a3:7a:
1d:31:ff:83:5c:ae:3a:ee:f2:0e:38:29:6e:68:80:
dc:e0:82:cc:68:ba:ac:29:2f:0f:11:95:c0:52:56:
68:b9:a1:9e:40:b5:4c:95:f8:33:d6:e1:8a:37:be:
82:e2:d7:f7:ba:76:d7:0b:c6:3d:dd:ea:31:3b:af:
a3:38:68:1c:a2:2a:9a:47:d0:86:c7:ed:6f:bb:0f:
44:db:e4:f0:e2:2b:12:1e:29:b3:1b:aa:46:f7:ef:
13:d1:be:c0:c8:89:83:1d:38:40:93:10:18:8c:67:
1c:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:67:27:D3:E8:96:12:CF:F2:0C:B5:73:15:22:27:14:13:0E:5A:A4
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/YGcn0-iWEs_yDLVzFSInFBMOWqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.170.0.0/18
84.11.0.0/16
195.158.212.0/22
IPv6:
2001:1b10::/32
Signature Algorithm: sha256WithRSAEncryption
37:2f:ba:fd:3a:da:b7:4b:ef:21:28:5c:07:83:6e:48:40:44:
f7:42:ed:55:3a:52:a2:5c:72:ed:51:ee:10:17:f0:8a:cb:0c:
6f:01:4a:6f:d5:4d:2d:77:3d:74:8d:43:17:72:64:12:56:92:
26:99:e4:84:8e:ec:2a:68:a0:8d:f9:ef:b6:9e:ce:5f:74:0b:
47:bf:5a:3a:d7:71:f9:1c:31:60:a5:7f:8d:92:46:cb:f1:27:
a3:6a:c3:c0:36:6e:ea:49:f4:67:51:1d:ed:a5:a9:f0:2a:2d:
4b:5e:6e:1c:c0:61:48:50:aa:7a:d2:62:1c:b1:f6:dc:1d:0d:
8e:0c:ae:f8:35:8d:d0:16:d9:92:2f:64:1e:d8:78:d7:9a:ed:
44:4c:c1:58:f5:60:fd:26:83:3b:62:94:04:38:eb:8f:20:38:
2f:af:31:4b:5a:22:01:ed:f4:48:d6:79:7f:cb:2d:49:e6:0b:
db:11:b8:46:57:4d:0c:5d:45:a6:cc:cb:ed:fa:5f:38:70:a9:
57:dc:3d:86:8e:4a:bc:d3:76:08:1d:1a:5c:a9:b7:12:27:4a:
29:87:42:4e:ac:71:91:cc:76:6b:f3:ed:87:fd:f0:50:10:2d:
61:8e:60:a2:ed:73:65:49:75:e0:65:19:c9:ae:e7:37:33:9a:
27:40:23:ff
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAYzDtqFTZ7CxHRWMvXpf/wGWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwYTI0OWVhZGViMmE5MjhmZTBjMmU3NWM5MTgyNDhiNWEx
YTI4YjkwHhcNMjQwMTAxMDYyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MDY3MjdkM2U4OTYxMmNmZjIwY2I1NzMxNTIyMjcxNDEzMGU1YWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEwVhNcdIDocHFlNsZL7udhEeRHU
oHPWFJtj4oPMXo8TnvsP8tAi5dptOFm1uFbgmnWRYB6Vzl5mIN6rkfXl5weNwgpZ
grYvKCFL8ghpzMifC9T/ETCZ0BQfsFqlFuQYY4P3j2hqvSRyy/iIeNUi5T/m+vTj
wFdKRC+g2c45o7t3Pd8tqp0z66qToO2N57PfcBmMo3odMf+DXK467vIOOCluaIDc
4ILMaLqsKS8PEZXAUlZouaGeQLVMlfgz1uGKN76C4tf3unbXC8Y93eoxO6+jOGgc
oiqaR9CGx+1vuw9E2+Tw4isSHimzG6pG9+8T0b7AyImDHThAkxAYjGccrQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFGBnJ9PolhLP8gy1cxUiJxQTDlqkMB8GA1UdIwQY
MBaAFECiSeresqko/gwudckYJItaGii5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAt
ODMzMGU3ZTMyZTE5LzEvWUdjbjAtaVdFc195RExWekZTSW5GQk1PV3FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hZTU0ODgtMTE5ZC00MGFhLWFlNDAtODMzMGU3ZTMyZTE5
LzEvUUtKSjZ0NnlxU2otREM1MXlSZ2tpMW9hS0xrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAXBAIAATARAwQGU6oAAwMA
VAsDBALDntQwDQQCAAIwBwMFACABGxAwDQYJKoZIhvcNAQELBQADggEBADcvuv06
2rdL7yEoXAeDbkhARPdC7VU6UqJccu1R7hAX8IrLDG8BSm/VTS13PXSNQxdyZBJW
kiaZ5ISO7CpooI3577aezl90C0e/WjrXcfkcMWClf42SRsvxJ6Nqw8A2bupJ9GdR
He2lqfAqLUtebhzAYUhQqnrSYhyx9twdDY4Mrvg1jdAW2ZIvZB7YeNea7URMwVj1
YP0mgztilAQ4648gOC+vMUtaIgHt9EjWeX/LLUnmC9sRuEZXTQxdRabMy+36Xzhw
qVfcPYaOSrzTdggdGlyptxInSimHQk6scZHMdmvz7Yf98FAQLWGOYKLtc2VJdeBl
Gcmu5zczmidAI/8=
-----END CERTIFICATE-----
Generated at Thu May 23 03:50:05 2024 by rpki-client on console-fra.rpki-client.org