Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/yaLE9HprcRN1g5oZ9S75Tblqpss.roa
File: yaLE9HprcRN1g5oZ9S75Tblqpss.roa (raw, json)
Hash identifier: ODAu97GcvWqgHhbdNB2RrkX1OVE0JJ7kBaT0Zybbp5M=
Subject key identifier: C9:A2:C4:F4:7A:6B:71:13:75:83:9A:19:F5:2E:F9:4D:B9:6A:A6:CB
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 018ED21618119AC004C046EC9C808215A584
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/yaLE9HprcRN1g5oZ9S75Tblqpss.roa
Signing time: Fri 12 Apr 2024 11:34:07 +0000
ROA not before: Fri 12 Apr 2024 11:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210423
IP address blocks: 84.232.35.0/24 maxlen: 24
84.236.234.0/23 maxlen: 23
94.24.46.0/23 maxlen: 23
95.178.112.0/22 maxlen: 22
95.178.112.0/23 maxlen: 23
95.178.114.0/23 maxlen: 23
217.61.80.0/24 maxlen: 24
217.61.81.0/24 maxlen: 24
217.61.82.0/24 maxlen: 24
217.61.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:d2:16:18:11:9a:c0:04:c0:46:ec:9c:80:82:15:a5:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Apr 12 11:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9a2c4f47a6b711375839a19f52ef94db96aa6cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:e0:c9:14:70:25:82:a4:6a:27:c7:af:ab:
cb:4d:e6:0e:48:7a:02:dd:3a:ab:f1:fc:cc:7f:52:
09:b8:85:73:74:a5:9f:9f:96:73:8b:9a:f9:cf:e7:
72:cc:65:a5:8d:96:9a:2b:39:d6:f9:be:6d:69:3e:
ea:a1:96:28:a4:79:76:92:67:8d:5b:dd:a8:b7:86:
14:3d:f9:bb:a1:08:1e:32:0f:74:1e:b2:3f:6b:08:
7e:f6:26:42:b3:95:c7:3e:cd:26:82:92:0d:af:e2:
66:fe:94:55:b8:4f:3f:fe:94:3d:cf:52:61:5e:63:
8b:0f:7d:e2:94:e8:9e:8c:69:82:f3:d1:40:f1:5c:
ee:0b:d1:41:0b:de:55:ab:12:12:87:0a:61:ce:b0:
21:3b:fd:3c:b2:58:64:17:cd:4b:b2:48:0d:ce:d8:
5a:6c:e0:26:1b:3d:c9:0b:50:4d:4f:31:6a:6e:fb:
c8:fa:e5:a5:cd:ff:a0:37:ff:b8:60:ea:e8:b9:50:
75:32:5b:03:d0:02:a8:3e:cd:ff:91:7e:80:5e:52:
e6:59:1f:ad:2f:b5:e4:c5:2d:a1:8c:d4:11:fd:b9:
d9:aa:b4:ae:15:00:24:16:48:60:38:77:1c:2b:b3:
9c:94:84:74:6c:26:04:20:b8:2e:f5:7a:9a:94:57:
87:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A2:C4:F4:7A:6B:71:13:75:83:9A:19:F5:2E:F9:4D:B9:6A:A6:CB
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/yaLE9HprcRN1g5oZ9S75Tblqpss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.35.0/24
84.236.234.0/23
94.24.46.0/23
95.178.112.0/22
217.61.80.0/22
Signature Algorithm: sha256WithRSAEncryption
84:b7:56:f9:e8:c7:83:06:4c:c5:c7:6d:03:20:f8:87:8d:32:
16:9f:b6:d5:91:48:57:ae:bd:9e:aa:2b:a2:cc:4d:84:69:3b:
e5:8f:af:69:af:d6:d0:7c:3e:be:e5:ca:b6:78:8d:65:91:69:
53:d3:34:e4:55:ce:02:50:ee:53:44:c5:b7:3e:cc:68:71:7c:
5c:86:e6:8d:14:25:76:60:4f:5f:42:5a:9c:1a:b5:02:ed:ce:
a0:62:a6:a5:f5:f8:12:d5:e2:3c:1f:1d:b2:0e:63:b7:e0:65:
14:9c:8e:e5:04:72:4a:23:e7:ef:d1:d6:95:5d:11:80:38:7c:
38:e4:cb:4c:ee:95:8b:72:04:d5:0c:7e:3c:e9:62:4d:c1:17:
2d:31:af:da:90:24:c8:c5:89:c5:cc:4c:7f:57:91:cd:fc:68:
e6:97:fb:de:48:b1:ad:09:d5:39:d9:40:88:bb:9b:03:05:55:
ef:72:81:9a:1a:f8:da:1b:7e:02:79:0e:a1:46:e1:34:1f:9d:
79:c0:5d:ae:80:b8:c0:d5:9b:15:52:28:f0:55:e1:0c:41:3d:
74:91:22:5e:53:92:7d:df:37:8c:5f:63:cb:2a:3e:4f:c0:20:
a2:c7:24:ee:eb:6b:d9:bc:3d:af:c9:b1:50:f6:47:98:d2:40:
c8:3c:f9:f4
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAY7SFhgRmsAEwEbsnICCFaWEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjQwNDEyMTEzNDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWEyYzRmNDdhNmI3MTEzNzU4MzlhMTlmNTJlZjk0ZGI5NmFhNmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwovgyRRwJYKkaifHr6vLTeYOSHoC
3Tqr8fzMf1IJuIVzdKWfn5Zzi5r5z+dyzGWljZaaKznW+b5taT7qoZYopHl2kmeN
W92ot4YUPfm7oQgeMg90HrI/awh+9iZCs5XHPs0mgpINr+Jm/pRVuE8//pQ9z1Jh
XmOLD33ilOiejGmC89FA8VzuC9FBC95VqxIShwphzrAhO/08slhkF81LskgNztha
bOAmGz3JC1BNTzFqbvvI+uWlzf+gN/+4YOrouVB1MlsD0AKoPs3/kX6AXlLmWR+t
L7XkxS2hjNQR/bnZqrSuFQAkFkhgOHccK7OclIR0bCYEILgu9XqalFeHEQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMmixPR6a3ETdYOaGfUu+U25aqbLMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEveWFMRTlIcHJjUk4xZzVvWjlTNzVUYmxxcHNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAVOgjAwQB
VOzqAwQBXhguAwQCX7JwAwQC2T1QMA0GCSqGSIb3DQEBCwUAA4IBAQCEt1b56MeD
BkzFx20DIPiHjTIWn7bVkUhXrr2eqiuizE2EaTvlj69pr9bQfD6+5cq2eI1lkWlT
0zTkVc4CUO5TRMW3PsxocXxchuaNFCV2YE9fQlqcGrUC7c6gYqal9fgS1eI8Hx2y
DmO34GUUnI7lBHJKI+fv0daVXRGAOHw45MtM7pWLcgTVDH486WJNwRctMa/akCTI
xYnFzEx/V5HN/Gjml/veSLGtCdU52UCIu5sDBVXvcoGaGvjaG34CeQ6hRuE0H515
wF2ugLjA1ZsVUijwVeEMQT10kSJeU5J93zeMX2PLKj5PwCCixyTu62vZvD2vybFQ
9keY0kDIPPn0
-----END CERTIFICATE-----
Generated at Thu May 23 03:07:58 2024 by rpki-client on console-ams.rpki-client.org