Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/YqmWa96IcanbHKzq4-U5y_5uzTk.roa
File: YqmWa96IcanbHKzq4-U5y_5uzTk.roa (raw, json)
Hash identifier: p39kp28PyDoylZGWVenjkBwMqiTXE2C2OaOQDkVfOUw=
Subject key identifier: 62:A9:96:6B:DE:88:71:A9:DB:1C:AC:EA:E3:E5:39:CB:FE:6E:CD:39
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 018E3389AF976B0C12434CE02D0F00787B8B
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/YqmWa96IcanbHKzq4-U5y_5uzTk.roa
Signing time: Tue 12 Mar 2024 16:40:45 +0000
ROA not before: Tue 12 Mar 2024 16:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398395
IP address blocks: 185.187.155.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:33:89:af:97:6b:0c:12:43:4c:e0:2d:0f:00:78:7b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Mar 12 16:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62a9966bde8871a9db1caceae3e539cbfe6ecd39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:55:c3:18:15:53:79:38:44:fe:84:41:89:
7a:40:0c:4b:31:8b:c5:36:3b:62:ff:04:87:62:40:
1c:e4:34:4f:79:60:fe:20:42:de:52:b6:45:83:af:
a8:de:1c:2e:cc:9d:74:13:04:d2:1c:e4:08:cb:4d:
02:d3:04:bc:ee:d1:5a:d7:c3:af:e8:4f:e1:bb:3e:
42:3c:ed:dc:68:7e:95:dc:ac:53:66:7b:8e:3f:25:
86:a4:11:ee:d5:3b:e2:e2:22:1f:28:ec:eb:28:9f:
68:45:59:54:29:35:f3:7c:7d:5d:00:0d:d2:85:60:
76:d9:59:80:dd:b0:c6:a1:f0:da:d0:79:29:b0:bb:
51:9e:7b:5d:89:42:2e:3c:b1:04:94:57:2c:40:a5:
33:0b:67:03:43:50:8a:12:11:78:00:10:d8:76:16:
cc:d9:04:a7:bd:5d:a1:79:f1:dc:35:04:7a:ef:5c:
6d:a4:47:b2:ef:d8:cc:9b:88:de:88:da:bb:ca:ab:
8a:65:2d:65:f4:5c:29:d8:93:24:44:35:db:0c:14:
f4:e4:32:96:f7:56:3f:d5:2c:1c:b8:1e:a2:51:8e:
3f:65:be:e4:35:65:60:39:d9:59:19:36:4c:13:3e:
09:3d:6e:af:86:ea:57:76:6f:1d:4d:db:b2:e8:53:
a1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:A9:96:6B:DE:88:71:A9:DB:1C:AC:EA:E3:E5:39:CB:FE:6E:CD:39
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/YqmWa96IcanbHKzq4-U5y_5uzTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.155.0/24
Signature Algorithm: sha256WithRSAEncryption
59:49:f3:9e:03:f0:f2:51:94:2a:16:5f:ec:53:a7:46:34:09:
7a:40:20:66:a8:d3:51:48:6d:81:0b:f5:c6:0e:9b:cb:c2:d7:
20:da:5c:16:2f:bd:2c:f9:5c:ec:63:d5:5f:62:0f:6c:12:42:
04:b1:09:55:c3:e7:bb:b8:4d:e8:55:b7:bc:68:ef:6e:9d:0a:
fb:c9:e1:23:81:f5:79:f0:b3:6c:36:c8:95:b5:4d:78:88:16:
fa:82:ae:9d:49:be:c0:8b:68:c7:ca:21:13:04:a0:b8:b8:8a:
b7:8d:5b:c9:8e:ce:7c:71:76:98:34:f8:7a:d0:f7:78:c2:41:
34:ab:8b:8c:fc:28:ca:b6:8b:17:67:20:49:ba:8e:ac:ae:72:
e3:50:dc:bf:b0:88:ac:ab:6c:56:56:14:ca:ee:bc:6b:49:4c:
1b:3d:9e:5a:7e:82:1f:d5:23:ee:dd:b2:88:c7:f1:5b:3a:0e:
11:c0:b7:02:ec:8c:1b:f7:49:0a:51:06:96:00:d0:01:cc:d8:
93:96:d9:78:25:6f:f3:bf:6c:df:c6:b7:81:81:6b:05:d7:02:
92:95:42:6d:47:70:7b:ce:74:1e:4b:8a:47:26:38:a4:3a:27:
55:48:fd:4b:b5:d8:fd:76:a0:68:fe:83:69:52:86:17:c9:2e:
a8:af:57:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4zia+XawwSQ0zgLQ8AeHuLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyMjgzNDhlOTA1NDk3M2Q3YTVmODE5M2JkNGU1YzQ0ZjY3
Mzk5ZTEwHhcNMjQwMzEyMTY0MDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmE5OTY2YmRlODg3MWE5ZGIxY2FjZWFlM2U1MzljYmZlNmVjZDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFNVwxgVU3k4RP6EQYl6QAxLMYvF
Njti/wSHYkAc5DRPeWD+IELeUrZFg6+o3hwuzJ10EwTSHOQIy00C0wS87tFa18Ov
6E/huz5CPO3caH6V3KxTZnuOPyWGpBHu1Tvi4iIfKOzrKJ9oRVlUKTXzfH1dAA3S
hWB22VmA3bDGofDa0HkpsLtRnntdiUIuPLEElFcsQKUzC2cDQ1CKEhF4ABDYdhbM
2QSnvV2hefHcNQR671xtpEey79jMm4jeiNq7yquKZS1l9Fwp2JMkRDXbDBT05DKW
91Y/1SwcuB6iUY4/Zb7kNWVgOdlZGTZMEz4JPW6vhupXdm8dTduy6FOhawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGKplmveiHGp2xys6uPlOcv+bs05MB8GA1UdIwQY
MBaAFMIoNI6QVJc9el+Bk71OXET2c5nhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMt
ZTg4ZmZmODJkNTUzLzEvWXFtV2E5NkljYW5iSEt6cTQtVTV5XzV1elRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9mMTY3OTQtOTFhZC00OTg0LTljNmMtZTg4ZmZmODJkNTUz
LzEvd2lnMGpwQlVsejE2WDRHVHZVNWNSUFp6bWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAububMA0G
CSqGSIb3DQEBCwUAA4IBAQBZSfOeA/DyUZQqFl/sU6dGNAl6QCBmqNNRSG2BC/XG
DpvLwtcg2lwWL70s+VzsY9VfYg9sEkIEsQlVw+e7uE3oVbe8aO9unQr7yeEjgfV5
8LNsNsiVtU14iBb6gq6dSb7Ai2jHyiETBKC4uIq3jVvJjs58cXaYNPh60Pd4wkE0
q4uM/CjKtosXZyBJuo6srnLjUNy/sIisq2xWVhTK7rxrSUwbPZ5afoIf1SPu3bKI
x/FbOg4RwLcC7Iwb90kKUQaWANABzNiTltl4JW/zv2zfxreBgWsF1wKSlUJtR3B7
znQeS4pHJjikOidVSP1Ltdj9dqBo/oNpUoYXyS6or1de
-----END CERTIFICATE-----
Generated at Fri May 3 20:44:34 2024 by rpki-client on console-fra.rpki-client.org