Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/ypjKkH0fP4ystAVBrqq8hDcs4iE.roa
File: ypjKkH0fP4ystAVBrqq8hDcs4iE.roa (raw, json)
Hash identifier: CgiQvBL03vM7kBZsrdF8RgHAx97srDW0kc2XyJuBkBk=
Subject key identifier: CA:98:CA:90:7D:1F:3F:8C:AC:B4:05:41:AE:AA:BC:84:37:2C:E2:21
Certificate issuer: /CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Certificate serial: 018CC79458BDC96A85A08421987C3C028F04
Authority key identifier: B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/ypjKkH0fP4ystAVBrqq8hDcs4iE.roa
Signing time: Tue 02 Jan 2024 00:30:37 +0000
ROA not before: Tue 02 Jan 2024 00:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35830
IP address blocks: 79.110.28.0/24 maxlen: 24
79.110.31.0/24 maxlen: 24
91.204.14.0/23 maxlen: 23
185.14.194.0/24 maxlen: 24
185.89.100.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:58:bd:c9:6a:85:a0:84:21:98:7c:3c:02:8f:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b82e7b8068c4ae9ae4ca4c3a6b2096199a741ff2
Validity
Not Before: Jan 2 00:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca98ca907d1f3f8cacb40541aeaabc84372ce221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:b6:67:30:b9:d8:fa:9b:ff:c7:54:a7:7d:
1a:53:2a:f0:ec:bc:74:ef:c0:ac:40:c9:9e:52:95:
37:88:62:a5:a0:94:9e:08:99:1c:23:be:cc:0c:8b:
49:8d:0c:45:69:a0:53:71:c7:57:40:da:56:a9:d0:
c5:13:da:3c:73:cd:3b:db:8b:d3:ee:df:1a:10:fb:
19:27:36:ae:92:f7:9d:ec:75:2a:0e:22:dd:19:7c:
52:90:34:b1:8f:40:e4:10:a1:9b:9f:79:69:9a:ea:
68:b1:8e:c2:2d:b8:5c:7a:ec:ba:a4:5e:d2:db:d1:
95:30:9e:ea:41:76:1e:bc:e6:a2:f7:b4:2b:7d:c0:
38:3a:c1:5b:61:37:95:ac:c8:47:f5:c5:d4:cf:ed:
16:32:df:17:42:3f:1f:32:73:6a:cf:8f:7d:f1:34:
7d:d2:73:bc:2a:4d:67:30:08:96:82:83:b2:65:13:
c5:b2:3a:e0:0e:6d:c7:cb:ea:71:00:59:fe:dd:04:
e9:6d:05:dc:70:ef:72:b4:cd:81:60:17:f1:00:36:
9d:6d:76:32:b5:49:ea:59:95:34:05:dc:24:f0:0f:
11:5d:4f:12:86:7a:fc:db:5d:a2:3a:27:8e:38:41:
a3:2f:c6:15:2b:06:cc:59:54:03:3e:6b:36:21:85:
f6:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:98:CA:90:7D:1F:3F:8C:AC:B4:05:41:AE:AA:BC:84:37:2C:E2:21
X509v3 Authority Key Identifier:
keyid:B8:2E:7B:80:68:C4:AE:9A:E4:CA:4C:3A:6B:20:96:19:9A:74:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uC57gGjErprkykw6ayCWGZp0H_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/ypjKkH0fP4ystAVBrqq8hDcs4iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29c915-2cbc-4768-840c-aadfa9c06742/1/uC57gGjErprkykw6ayCWGZp0H_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.28.0/24
79.110.31.0/24
91.204.14.0/23
185.14.194.0/24
185.89.100.0/23
Signature Algorithm: sha256WithRSAEncryption
88:79:dc:cf:31:5e:af:20:fd:24:cd:66:31:e9:6b:59:ab:e8:
ba:d2:43:92:8a:42:92:71:cc:7d:cb:53:86:f4:3c:58:76:f7:
b9:45:fd:2e:d0:37:16:f8:71:a1:44:c3:9c:5e:ee:9b:72:c9:
27:92:d2:21:13:74:ac:6d:0b:be:7d:05:ff:ec:ed:75:58:d0:
65:13:40:f2:68:07:fa:78:b2:4e:63:49:42:56:d6:13:69:29:
65:d2:4e:a3:84:67:92:e9:f9:d4:e8:c6:01:8d:4a:fa:be:f1:
d9:0a:76:4b:7c:fa:9b:52:01:c3:08:86:13:d4:56:a1:89:ab:
50:4b:7f:96:b3:7f:9d:5e:72:33:d5:ce:5e:10:c0:d2:56:e4:
35:b4:a9:05:fa:a8:7e:13:f7:95:49:c9:d1:a9:66:dc:e0:b1:
cb:a1:ed:d3:93:f4:5e:86:7f:2c:a7:34:8e:ad:d2:66:11:6c:
b8:e0:0d:15:b7:8d:34:60:ba:ef:11:69:55:6c:48:6b:d8:e6:
50:b4:8f:e4:0c:6b:f8:4d:39:5d:09:e6:27:71:09:6c:a9:c9:
24:91:2c:1a:5b:0a:3a:a3:47:99:da:05:d0:05:3e:ae:8f:a8:
24:9e:35:0f:2b:34:ef:c2:1f:7e:18:bc:63:70:3d:97:6a:c3:
96:7f:81:26
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzHlFi9yWqFoIQhmHw8Ao8EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4MmU3YjgwNjhjNGFlOWFlNGNhNGMzYTZiMjA5NjE5OWE3
NDFmZjIwHhcNMjQwMTAyMDAzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTk4Y2E5MDdkMWYzZjhjYWNiNDA1NDFhZWFhYmM4NDM3MmNlMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/K2ZzC52Pqb/8dUp30aUyrw7Lx0
78CsQMmeUpU3iGKloJSeCJkcI77MDItJjQxFaaBTccdXQNpWqdDFE9o8c80724vT
7t8aEPsZJzaukved7HUqDiLdGXxSkDSxj0DkEKGbn3lpmuposY7CLbhceuy6pF7S
29GVMJ7qQXYevOai97QrfcA4OsFbYTeVrMhH9cXUz+0WMt8XQj8fMnNqz4998TR9
0nO8Kk1nMAiWgoOyZRPFsjrgDm3Hy+pxAFn+3QTpbQXccO9ytM2BYBfxADadbXYy
tUnqWZU0Bdwk8A8RXU8Shnr8212iOieOOEGjL8YVKwbMWVQDPms2IYX2RQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMqYypB9Hz+MrLQFQa6qvIQ3LOIhMB8GA1UdIwQY
MBaAFLgue4BoxK6a5MpMOmsglhmadB/yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMt
YWFkZmE5YzA2NzQyLzEveXBqS2tIMGZQNHlzdEFWQnJxcThoRGNzNGlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8yOWM5MTUtMmNiYy00NzY4LTg0MGMtYWFkZmE5YzA2NzQy
LzEvdUM1N2dHakVycHJreWt3NmF5Q1dHWnAwSF9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAT24cAwQA
T24fAwQBW8wOAwQAuQ7CAwQBuVlkMA0GCSqGSIb3DQEBCwUAA4IBAQCIedzPMV6v
IP0kzWYx6WtZq+i60kOSikKSccx9y1OG9DxYdve5Rf0u0DcW+HGhRMOcXu6bcskn
ktIhE3SsbQu+fQX/7O11WNBlE0DyaAf6eLJOY0lCVtYTaSll0k6jhGeS6fnU6MYB
jUr6vvHZCnZLfPqbUgHDCIYT1FahiatQS3+Ws3+dXnIz1c5eEMDSVuQ1tKkF+qh+
E/eVScnRqWbc4LHLoe3Tk/Rehn8spzSOrdJmEWy44A0Vt400YLrvEWlVbEhr2OZQ
tI/kDGv4TTldCeYncQlsqckkkSwaWwo6o0eZ2gXQBT6uj6gknjUPKzTvwh9+GLxj
cD2XasOWf4Em
-----END CERTIFICATE-----
Generated at Fri Jun 7 16:42:10 2024 by rpki-client on console-ams.rpki-client.org