Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_EYnkplbcn8L_hvD7az_StqCf6E.roa
File: _EYnkplbcn8L_hvD7az_StqCf6E.roa (raw, json)
Hash identifier: 6upFjwA6MxtgjSZCWKNELNlMQ4bXzDotJU8h+vhmFLo=
Subject key identifier: FC:46:27:92:99:5B:72:7F:0B:FE:1B:C3:ED:AC:FF:4A:DA:82:7F:A1
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 0191D6E4134BDF8B8ADE5CF169C26C53027E
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_EYnkplbcn8L_hvD7az_StqCf6E.roa
Signing time: Mon 09 Sep 2024 13:05:56 +0000
ROA not before: Mon 09 Sep 2024 13:05:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61254
IP address blocks: 185.233.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:e4:13:4b:df:8b:8a:de:5c:f1:69:c2:6c:53:02:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Sep 9 13:05:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc462792995b727f0bfe1bc3edacff4ada827fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:70:52:c8:a5:e8:5c:f7:42:23:8e:68:64:d4:
ac:47:c2:c4:c9:3e:45:85:4b:f5:df:85:8b:84:6d:
5f:d5:89:e4:2c:24:82:9f:34:51:1b:e0:61:69:11:
05:5a:69:ec:6b:72:a4:ae:25:f9:cb:a1:bb:a4:31:
b9:e6:38:c8:f8:02:67:3d:63:36:4f:2d:1f:99:ad:
d8:80:80:9c:9b:c3:82:3c:1e:52:17:a1:75:58:58:
ee:ab:a3:90:29:e8:b3:d0:a5:ce:0e:b4:fc:f2:ed:
f6:68:02:9c:6e:25:af:51:c5:bd:27:e0:50:4f:7e:
06:1c:9a:c9:c0:33:11:21:ff:71:36:74:63:08:93:
4c:7c:9a:eb:06:7a:a8:d6:1c:57:b0:1c:7f:e4:ed:
eb:09:43:17:74:74:a7:4e:5b:16:90:17:86:de:5a:
bf:61:60:25:1c:5b:13:44:43:a8:04:75:cd:00:67:
1c:d2:03:62:60:79:82:59:1f:ae:45:4f:a0:df:f1:
6f:da:d8:f7:d1:d1:6b:62:fe:74:31:28:c6:a5:53:
23:bc:db:80:c1:65:b0:20:0e:28:9b:a1:c5:ef:82:
82:5e:7d:fc:2f:5c:3b:d0:ca:6b:55:2e:9b:46:9f:
80:09:a3:14:54:72:75:b7:62:0f:d5:bb:9c:b1:a1:
de:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:46:27:92:99:5B:72:7F:0B:FE:1B:C3:ED:AC:FF:4A:DA:82:7F:A1
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/_EYnkplbcn8L_hvD7az_StqCf6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.17.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:a6:4d:07:db:83:ab:b0:20:3d:c0:7f:15:18:60:46:fd:50:
cf:1f:43:c5:42:d9:3f:3f:87:58:08:81:0c:98:65:ba:02:72:
c6:46:6a:be:32:dd:a6:92:3e:4c:fb:f7:2d:d6:7d:ab:d5:17:
2a:0d:a5:b3:39:2c:da:c6:42:d2:36:6b:b7:22:56:ce:93:5d:
e8:20:f3:b8:1a:dc:77:14:64:d0:a4:74:5c:85:53:e7:65:7b:
60:98:e6:1e:f8:cc:45:19:70:37:be:42:2d:f2:83:f2:b1:e8:
d7:d2:7b:1a:a3:34:4e:16:b1:08:d5:02:6b:01:ac:81:f4:ae:
b6:dc:bb:39:97:02:8e:7e:1c:b9:4d:b2:77:0c:9b:d3:5b:15:
5a:91:98:cb:da:60:6c:dd:04:ce:9d:d7:de:d0:96:c0:f6:30:
d7:d7:12:e1:31:d0:5b:be:d9:52:c9:25:f4:b6:98:c9:ae:71:
d1:06:25:2f:a6:a5:59:27:25:47:5a:0e:a6:df:90:c0:73:ff:
3b:e1:13:42:7b:7f:ea:50:7b:fe:5b:f3:d6:5e:bd:43:63:0b:
1d:15:14:2c:78:7f:e9:70:92:8c:1d:4d:ac:c8:fd:59:7f:34:
95:1d:2f:39:c8:e3:09:6c:ad:eb:8d:fc:b7:af:0c:1a:a5:57:
c3:50:e2:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHW5BNL34uK3lzxacJsUwJ+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZDAzZjI5ODE4MGNjMTA5ZjE5ZDRiMTk5MmM3ZDcxYzU2
YzhkY2MwHhcNMjQwOTA5MTMwNTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzQ2Mjc5Mjk5NWI3MjdmMGJmZTFiYzNlZGFjZmY0YWRhODI3ZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7HBSyKXoXPdCI45oZNSsR8LEyT5F
hUv134WLhG1f1YnkLCSCnzRRG+BhaREFWmnsa3KkriX5y6G7pDG55jjI+AJnPWM2
Ty0fma3YgICcm8OCPB5SF6F1WFjuq6OQKeiz0KXODrT88u32aAKcbiWvUcW9J+BQ
T34GHJrJwDMRIf9xNnRjCJNMfJrrBnqo1hxXsBx/5O3rCUMXdHSnTlsWkBeG3lq/
YWAlHFsTREOoBHXNAGcc0gNiYHmCWR+uRU+g3/Fv2tj30dFrYv50MSjGpVMjvNuA
wWWwIA4om6HF74KCXn38L1w70MprVS6bRp+ACaMUVHJ1t2IP1bucsaHelQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPxGJ5KZW3J/C/4bw+2s/0ragn+hMB8GA1UdIwQY
MBaAFBfQPymBgMwQnxnUsZksfXHFbI3MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUt
OTE4YWM2NDYyNjc5LzEvX0VZbmtwbGJjbjhMX2h2RDdhel9TdHFDZjZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84MmUyNTMtMDE3Ny00YTIwLWJlZmUtOTE4YWM2NDYyNjc5
LzEvRjlBX0tZR0F6QkNmR2RTeG1TeDljY1ZzamN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuekRMA0G
CSqGSIb3DQEBCwUAA4IBAQDEpk0H24OrsCA9wH8VGGBG/VDPH0PFQtk/P4dYCIEM
mGW6AnLGRmq+Mt2mkj5M+/ct1n2r1RcqDaWzOSzaxkLSNmu3IlbOk13oIPO4Gtx3
FGTQpHRchVPnZXtgmOYe+MxFGXA3vkIt8oPysejX0nsaozROFrEI1QJrAayB9K62
3Ls5lwKOfhy5TbJ3DJvTWxVakZjL2mBs3QTOndfe0JbA9jDX1xLhMdBbvtlSySX0
tpjJrnHRBiUvpqVZJyVHWg6m35DAc/874RNCe3/qUHv+W/PWXr1DYwsdFRQseH/p
cJKMHU2syP1ZfzSVHS85yOMJbK3rjfy3rwwapVfDUOL9
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:51:01 2024 by rpki-client on console-fra.rpki-client.org