Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8ty9xCSkSrt5biDetM7k2B8TCXA.roa
File: 8ty9xCSkSrt5biDetM7k2B8TCXA.roa (raw, json)
Hash identifier: XJ92Q9XXloqAJzkH09S60BgCNEgezW+6olBvA1yVqPU=
Subject key identifier: F2:DC:BD:C4:24:A4:4A:BB:79:6E:20:DE:B4:CE:E4:D8:1F:13:09:70
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFAF010A880DFFF2397EB58258EE52
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8ty9xCSkSrt5biDetM7k2B8TCXA.roa
Signing time: Tue 02 Jan 2024 06:32:31 +0000
ROA not before: Tue 02 Jan 2024 06:32:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399029
IP address blocks: 193.107.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:af:01:0a:88:0d:ff:f2:39:7e:b5:82:58:ee:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2dcbdc424a44abb796e20deb4cee4d81f130970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:69:b0:57:25:06:29:75:12:fd:bb:25:3a:8b:
41:ea:df:0d:dd:eb:f6:00:0a:59:2e:3c:4e:f4:82:
b3:1f:d7:0e:5e:2c:87:2f:fa:24:37:dd:bf:0d:47:
db:1f:59:fd:8f:08:01:88:26:ff:e7:97:18:f1:f4:
a0:4e:b5:f6:40:7f:a4:57:60:84:36:4f:3e:0c:05:
43:67:5b:81:f1:13:89:50:b7:83:3b:21:08:d2:92:
2e:c9:4c:ab:f7:0d:eb:9e:8e:2c:44:14:8e:9f:ad:
a3:51:0d:d1:5d:84:09:3f:ad:e9:05:05:0f:d5:cf:
63:0f:a1:26:0e:b2:29:fd:df:bd:5d:d5:0d:3c:cc:
67:56:3c:7d:ce:0d:50:13:c9:a6:d0:6a:0e:51:cf:
2d:4b:33:3b:ad:a4:7f:d6:2d:25:95:8f:f2:9c:43:
77:4a:de:62:5c:0a:df:ca:5b:28:88:02:21:48:00:
45:7b:7b:a9:8e:08:3d:33:55:cc:92:2d:b8:72:e6:
8c:05:9d:10:e7:c8:5a:ed:61:bc:81:49:75:7d:23:
37:1a:dd:b3:73:88:5c:ee:57:de:c6:75:b3:70:c1:
a7:6e:0e:49:2f:39:a9:92:69:28:8c:ab:4d:da:ef:
49:3e:2a:02:87:88:a6:31:a2:95:bf:b2:73:32:5b:
99:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:DC:BD:C4:24:A4:4A:BB:79:6E:20:DE:B4:CE:E4:D8:1F:13:09:70
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/8ty9xCSkSrt5biDetM7k2B8TCXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.217.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:af:5b:c2:63:42:a2:bb:3b:f2:cd:58:12:da:7d:6f:c6:48:
e1:2c:f9:5c:61:13:83:97:a5:af:0c:2c:00:2b:d4:eb:40:1a:
76:03:29:44:92:ac:50:cc:57:8a:14:00:77:84:99:17:2c:ea:
d6:5a:08:55:68:1e:e3:5f:8d:c7:7d:77:b4:08:89:de:cf:5b:
fc:91:0f:b4:a8:aa:e9:fd:14:f9:83:d7:a9:75:1e:24:4f:56:
cd:ef:81:86:c6:95:cd:42:0e:64:45:06:42:68:29:5e:9d:a5:
32:af:c3:99:9c:58:58:5f:40:f8:a3:1f:19:0d:4e:eb:d9:d3:
6a:63:1e:c5:ec:f2:5b:0d:fe:f6:51:08:b6:e7:6f:de:f8:2b:
de:89:85:6a:cd:18:76:d8:dc:65:7f:2f:ee:49:76:b4:59:e8:
c3:1e:99:30:2b:a9:3b:c0:f2:99:79:5a:72:35:36:98:a1:08:
ef:54:ee:b0:9e:43:bb:6f:da:dc:9f:20:9d:1f:eb:d7:db:b0:
b7:64:db:41:5b:a9:a0:86:32:b4:55:b0:3e:fc:03:2f:3d:c0:
39:c3:c8:93:a8:27:97:0d:b4:2d:eb:b6:18:c2:b9:32:c8:3a:
df:44:6b:e2:f0:70:a0:cf:de:b7:9f:dc:d7:e6:56:20:ce:68:
88:1a:9d:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI368BCogN//I5frWCWO5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwMTAyMDYzMjMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmRjYmRjNDI0YTQ0YWJiNzk2ZTIwZGViNGNlZTRkODFmMTMwOTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWmwVyUGKXUS/bslOotB6t8N3ev2
AApZLjxO9IKzH9cOXiyHL/okN92/DUfbH1n9jwgBiCb/55cY8fSgTrX2QH+kV2CE
Nk8+DAVDZ1uB8ROJULeDOyEI0pIuyUyr9w3rno4sRBSOn62jUQ3RXYQJP63pBQUP
1c9jD6EmDrIp/d+9XdUNPMxnVjx9zg1QE8mm0GoOUc8tSzM7raR/1i0llY/ynEN3
St5iXArfylsoiAIhSABFe3upjgg9M1XMki24cuaMBZ0Q58ha7WG8gUl1fSM3Gt2z
c4hc7lfexnWzcMGnbg5JLzmpkmkojKtN2u9JPioCh4imMaKVv7JzMluZHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPLcvcQkpEq7eW4g3rTO5NgfEwlwMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvOHR5OXhDU2tTcnQ1YmlEZXRNN2syQjhUQ1hBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWvZMA0G
CSqGSIb3DQEBCwUAA4IBAQCjr1vCY0KiuzvyzVgS2n1vxkjhLPlcYRODl6WvDCwA
K9TrQBp2AylEkqxQzFeKFAB3hJkXLOrWWghVaB7jX43HfXe0CInez1v8kQ+0qKrp
/RT5g9epdR4kT1bN74GGxpXNQg5kRQZCaClenaUyr8OZnFhYX0D4ox8ZDU7r2dNq
Yx7F7PJbDf72UQi252/e+CveiYVqzRh22Nxlfy/uSXa0WejDHpkwK6k7wPKZeVpy
NTaYoQjvVO6wnkO7b9rcnyCdH+vX27C3ZNtBW6mghjK0VbA+/AMvPcA5w8iTqCeX
DbQt67YYwrkyyDrfRGvi8HCgz963n9zX5lYgzmiIGp1U
-----END CERTIFICATE-----
Generated at Mon May 6 23:36:44 2024 by rpki-client on console-fra.rpki-client.org