Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/DyRU9eHMmrK-nY7B9WjeGwC9Qrc.roa
File: DyRU9eHMmrK-nY7B9WjeGwC9Qrc.roa (raw, json)
Hash identifier: nzjUsEiVvMoMI8aruo1II9GRWrtzHmHQ3vUCWORQ7HM=
Subject key identifier: 0F:24:54:F5:E1:CC:9A:B2:BE:9D:8E:C1:F5:68:DE:1B:00:BD:42:B7
Certificate issuer: /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial: 018CC6B7BB2166FD516851344CC9FEB0B43D
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/DyRU9eHMmrK-nY7B9WjeGwC9Qrc.roa
Signing time: Mon 01 Jan 2024 20:29:38 +0000
ROA not before: Mon 01 Jan 2024 20:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15836
IP address blocks: 5.32.168.0/21 maxlen: 24
185.46.60.0/22 maxlen: 24
212.28.64.0/19 maxlen: 24
87.255.64.0/19 maxlen: 24
217.26.160.0/20 maxlen: 24
2a03:a80::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 04:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:bb:21:66:fd:51:68:51:34:4c:c9:fe:b0:b4:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
Validity
Not Before: Jan 1 20:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f2454f5e1cc9ab2be9d8ec1f568de1b00bd42b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:43:71:7e:3d:ec:ac:93:61:d9:6c:f8:31:b5:
86:db:ec:c5:03:b6:e9:0d:89:7a:05:f5:ed:99:93:
d7:ae:dc:ef:34:b6:68:f6:ec:d9:a1:7f:b3:ec:9a:
2e:cd:07:9e:64:9d:8e:77:38:84:8a:d9:d8:fb:8a:
09:2d:04:d7:6b:63:07:ed:e3:06:ca:1a:7d:ad:99:
15:89:d1:d7:ed:6c:ec:f8:38:1a:ab:81:20:85:7e:
4f:75:c9:e7:00:71:30:e7:99:0a:07:ac:16:25:78:
1e:3e:79:fa:1c:81:73:a2:4c:28:51:7a:20:69:6e:
5b:88:26:0d:96:83:48:32:2e:eb:da:74:cc:fb:f7:
80:37:1c:50:d9:90:11:0c:aa:4b:96:d4:bc:9c:9e:
69:ce:cc:cb:4d:6b:d9:21:20:bb:ad:8e:ee:0e:f8:
04:e9:4b:c1:26:80:b1:96:38:a3:29:a8:04:1d:fc:
21:e2:fa:dd:c5:91:bc:de:47:e8:43:0e:3b:95:6d:
71:e7:8e:e2:1f:15:05:74:24:d4:9d:fd:d2:ec:d9:
14:fc:cc:c1:82:48:b2:c1:6b:79:c7:c6:79:d5:ee:
77:9b:00:1a:3d:ce:1b:6f:02:d3:13:d3:36:d6:ee:
cd:40:dc:a3:e4:26:1a:bf:46:a0:c4:e7:cb:11:25:
2f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:24:54:F5:E1:CC:9A:B2:BE:9D:8E:C1:F5:68:DE:1B:00:BD:42:B7
X509v3 Authority Key Identifier:
keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/DyRU9eHMmrK-nY7B9WjeGwC9Qrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.32.168.0/21
87.255.64.0/19
185.46.60.0/22
212.28.64.0/19
217.26.160.0/20
IPv6:
2a03:a80::/32
Signature Algorithm: sha256WithRSAEncryption
1d:f9:21:0d:f6:6c:ce:0f:29:a6:52:71:a8:70:d5:8a:e5:3d:
87:8c:81:98:be:e2:4e:c4:0b:9d:8f:b7:39:b8:1c:56:cb:22:
be:8b:7c:68:9c:9a:c5:77:9b:53:86:8c:ab:b8:9a:ba:66:e5:
30:c3:b0:72:16:4f:f4:f8:ef:33:5a:b5:f2:76:f5:49:f7:77:
5f:91:8c:34:54:56:9d:23:f1:35:0c:aa:70:00:36:52:0d:cb:
77:35:5a:9b:23:ae:c0:8b:33:6a:0e:84:93:d7:86:34:80:7d:
d9:23:c8:84:54:22:92:5f:1d:86:e7:2a:26:8c:1c:8b:34:3e:
b0:b1:89:ae:ab:87:56:85:37:25:7e:57:ee:1b:71:61:2b:b4:
c4:a2:49:9f:7d:1c:94:0a:9b:9c:1d:90:cc:47:87:47:e8:f0:
37:87:96:fe:0f:ec:db:77:c6:74:9d:5b:8e:95:37:85:25:2d:
cb:6c:4d:96:6b:8b:bb:25:8c:1b:04:9f:a9:02:86:62:37:2e:
01:83:14:7a:76:a1:94:31:33:05:2f:17:c9:7e:cc:20:8a:da:
0d:a9:fb:e4:06:86:4f:31:13:21:22:81:4d:90:ca:fa:a3:09:
bd:30:7e:17:0e:87:31:d0:82:1c:e7:82:35:df:d1:e9:23:52:
08:ca:18:bd
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgISAYzGt7shZv1RaFE0TMn+sLQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NzQyNzI1ODYyYjkwYmRhNDUxMGEwMmU4MDRmZWYzYWQx
MTQyZGMwHhcNMjQwMTAxMjAyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjI0NTRmNWUxY2M5YWIyYmU5ZDhlYzFmNTY4ZGUxYjAwYmQ0MmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0Nxfj3srJNh2Wz4MbWG2+zFA7bp
DYl6BfXtmZPXrtzvNLZo9uzZoX+z7JouzQeeZJ2OdziEitnY+4oJLQTXa2MH7eMG
yhp9rZkVidHX7Wzs+Dgaq4EghX5PdcnnAHEw55kKB6wWJXgePnn6HIFzokwoUXog
aW5biCYNloNIMi7r2nTM+/eANxxQ2ZARDKpLltS8nJ5pzszLTWvZISC7rY7uDvgE
6UvBJoCxljijKagEHfwh4vrdxZG83kfoQw47lW1x547iHxUFdCTUnf3S7NkU/MzB
gkiywWt5x8Z51e53mwAaPc4bbwLTE9M21u7NQNyj5CYav0agxOfLESUvpwIDAQAB
o4ICMDCCAiwwHQYDVR0OBBYEFA8kVPXhzJqyvp2OwfVo3hsAvUK3MB8GA1UdIwQY
MBaAFPd0JyWGK5C9pFEKAugE/vOtEULcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTNRbkpZWXJrTDJrVVFvQzZBVC04NjBSUXR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84ZTdlMzAtYzJiOC00NTkxLThjZmUt
N2I4ZTlkMzM1Y2E4LzEvRHlSVTllSE1tckstblk3QjlXamVHd0M5UXJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84ZTdlMzAtYzJiOC00NTkxLThjZmUtN2I4ZTlkMzM1Y2E4
LzEvOTNRbkpZWXJrTDJrVVFvQzZBVC04NjBSUXR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQDBSCoAwQF
V/9AAwQCuS48AwQF1BxAAwQE2RqgMA0EAgACMAcDBQAqAwqAMA0GCSqGSIb3DQEB
CwUAA4IBAQAd+SEN9mzODymmUnGocNWK5T2HjIGYvuJOxAudj7c5uBxWyyK+i3xo
nJrFd5tThoyruJq6ZuUww7ByFk/0+O8zWrXydvVJ93dfkYw0VFadI/E1DKpwADZS
Dct3NVqbI67AizNqDoST14Y0gH3ZI8iEVCKSXx2G5yomjByLND6wsYmuq4dWhTcl
flfuG3FhK7TEokmffRyUCpucHZDMR4dH6PA3h5b+D+zbd8Z0nVuOlTeFJS3LbE2W
a4u7JYwbBJ+pAoZiNy4BgxR6dqGUMTMFLxfJfswgitoNqfvkBoZPMRMhIoFNkMr6
owm9MH4XDocx0IIc54I139HpI1IIyhi9
-----END CERTIFICATE-----
Generated at Sat May 25 07:19:08 2024 by rpki-client on console-fra.rpki-client.org