Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/2YJOY-n9NwKwcqzLt0551H97vj4.roa
File: 2YJOY-n9NwKwcqzLt0551H97vj4.roa (raw, json)
Hash identifier: b+JBLHOtv9483D7e4lUPnnrEHklP5VSLIeYVjmq/9R0=
Subject key identifier: D9:82:4E:63:E9:FD:37:02:B0:72:AC:CB:B7:4E:79:D4:7F:7B:BE:3E
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018CC86F515DF8C081A6CAD539B5E4ED38FE
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/2YJOY-n9NwKwcqzLt0551H97vj4.roa
Signing time: Tue 02 Jan 2024 04:29:47 +0000
ROA not before: Tue 02 Jan 2024 04:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34882
IP address blocks: 80.66.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 02:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:51:5d:f8:c0:81:a6:ca:d5:39:b5:e4:ed:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Jan 2 04:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9824e63e9fd3702b072accbb74e79d47f7bbe3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c1:83:a0:5f:d6:ae:a0:52:29:96:21:be:e6:
36:d3:df:ad:7e:23:38:48:4f:a7:03:de:66:4b:3a:
e5:42:67:d0:43:f3:cd:a6:eb:b5:23:cc:08:d2:d7:
af:08:ab:02:9a:ab:47:a6:be:50:57:17:7a:11:b0:
45:2d:4c:4b:0c:87:33:96:a0:94:03:b8:d1:a3:26:
7f:b2:57:cd:3b:b1:b0:5e:56:43:c2:44:42:a5:44:
cb:d5:4f:3f:58:3e:b3:26:15:c1:63:28:fb:37:4b:
e3:3e:41:b6:f1:23:f4:16:4c:0f:43:40:c0:b6:98:
57:85:d5:93:1c:92:eb:d9:74:d0:37:b5:b5:9b:16:
99:32:66:7a:3a:5a:ca:82:88:97:c8:82:b5:f3:de:
13:b9:7d:fb:c3:cd:89:de:27:ed:63:88:cc:77:9c:
65:56:7b:3c:1d:81:9b:51:d3:b3:ce:61:1e:a1:b2:
12:20:61:4c:e8:d9:40:fd:76:0d:d5:ca:2c:78:77:
51:cd:aa:bf:2d:ce:28:00:53:30:81:26:fb:db:65:
28:e1:47:2b:92:e8:e3:b8:7f:29:bd:d7:59:07:4f:
c5:64:8f:c8:bb:3f:0c:03:ab:f8:28:83:ef:7b:13:
a4:4b:a6:5b:17:ed:b4:bc:92:91:da:7a:0a:1f:b9:
17:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:82:4E:63:E9:FD:37:02:B0:72:AC:CB:B7:4E:79:D4:7F:7B:BE:3E
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/2YJOY-n9NwKwcqzLt0551H97vj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.66.70.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:82:b5:27:15:a1:40:39:0a:69:ee:d1:fd:48:67:b1:bd:9d:
23:4b:3c:d0:91:22:c7:d5:93:06:86:2c:0d:7b:8d:a3:79:4f:
91:f3:b9:3c:73:37:cd:00:ac:e3:5e:8d:91:a1:54:3e:9e:c0:
dc:3c:ec:6d:d7:e2:ea:5a:8c:18:8e:20:67:9a:b8:ea:73:de:
17:0f:94:e9:08:50:f1:92:06:d2:74:37:b2:59:05:0c:8c:b3:
81:bc:e2:7b:d1:63:81:0e:c8:0e:a1:4a:15:77:ff:7b:de:5c:
38:4a:dd:5a:a4:56:96:50:b4:63:12:54:6b:8f:bd:b4:e1:82:
9a:b1:2f:65:0e:e6:ec:37:d8:4f:76:21:7a:a2:47:8d:98:d6:
63:50:2f:b7:fb:83:bb:99:67:c9:1c:47:53:b8:51:02:82:9f:
09:21:1c:f2:60:f3:17:4e:72:7d:7b:dc:dd:7d:80:b9:d0:42:
8a:64:8d:19:0a:23:03:74:c9:58:2e:a8:a0:1f:13:49:04:ca:
1c:2d:ee:83:10:6c:1a:0f:41:0e:a4:47:3c:28:cd:18:14:fb:
6b:70:42:c3:df:6c:a0:3a:f1:2c:8b:9d:7e:56:47:6b:fb:c9:
88:be:1c:78:f2:9a:f2:e5:d1:93:8c:0a:51:32:28:dc:71:1c:
66:75:1c:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb1Fd+MCBpsrVObXk7Tj+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjQwMTAyMDQyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTgyNGU2M2U5ZmQzNzAyYjA3MmFjY2JiNzRlNzlkNDdmN2JiZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8GDoF/WrqBSKZYhvuY209+tfiM4
SE+nA95mSzrlQmfQQ/PNpuu1I8wI0tevCKsCmqtHpr5QVxd6EbBFLUxLDIczlqCU
A7jRoyZ/slfNO7GwXlZDwkRCpUTL1U8/WD6zJhXBYyj7N0vjPkG28SP0FkwPQ0DA
tphXhdWTHJLr2XTQN7W1mxaZMmZ6OlrKgoiXyIK1894TuX37w82J3iftY4jMd5xl
Vns8HYGbUdOzzmEeobISIGFM6NlA/XYN1coseHdRzaq/Lc4oAFMwgSb722Uo4Ucr
kujjuH8pvddZB0/FZI/Iuz8MA6v4KIPvexOkS6ZbF+20vJKR2noKH7kXqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNmCTmPp/TcCsHKsy7dOedR/e74+MB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvMllKT1ktbjlOd0t3Y3F6THQwNTUxSDk3dmo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEJGMA0G
CSqGSIb3DQEBCwUAA4IBAQA8grUnFaFAOQpp7tH9SGexvZ0jSzzQkSLH1ZMGhiwN
e42jeU+R87k8czfNAKzjXo2RoVQ+nsDcPOxt1+LqWowYjiBnmrjqc94XD5TpCFDx
kgbSdDeyWQUMjLOBvOJ70WOBDsgOoUoVd/973lw4St1apFaWULRjElRrj7204YKa
sS9lDubsN9hPdiF6okeNmNZjUC+3+4O7mWfJHEdTuFECgp8JIRzyYPMXTnJ9e9zd
fYC50EKKZI0ZCiMDdMlYLqigHxNJBMocLe6DEGwaD0EOpEc8KM0YFPtrcELD32yg
OvEsi51+Vkdr+8mIvhx48pry5dGTjApRMijccRxmdRy3
-----END CERTIFICATE-----
Generated at Sat May 25 07:20:27 2024 by rpki-client on console-fra.rpki-client.org