Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RCyTUweWm1R_nC96-tXLmDI66-I.roa
File: RCyTUweWm1R_nC96-tXLmDI66-I.roa (raw, json)
Hash identifier: 20dhuDy/hYEPCxiKQFesApBpJ7fUSlusAFAiLSGKcEU=
Subject key identifier: 44:2C:93:53:07:96:9B:54:7F:9C:2F:7A:FA:D5:CB:98:32:3A:EB:E2
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01916B5F2638896C52977C4D1426B70B2F82
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RCyTUweWm1R_nC96-tXLmDI66-I.roa
Signing time: Mon 19 Aug 2024 16:01:23 +0000
ROA not before: Mon 19 Aug 2024 16:01:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214588
IP address blocks: 78.135.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6b:5f:26:38:89:6c:52:97:7c:4d:14:26:b7:0b:2f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Aug 19 16:01:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=442c935307969b547f9c2f7afad5cb98323aebe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ff:c2:09:87:7c:de:29:19:1b:e6:66:4c:b6:
9a:a7:46:96:96:58:18:85:da:50:3e:48:3b:30:dd:
71:22:a5:65:00:37:de:db:a7:71:be:ef:03:3d:11:
4a:7a:06:10:1b:a8:d9:51:af:ce:aa:dc:60:e2:a4:
9d:bf:a8:5e:fc:cb:2f:7d:d5:f3:71:a9:c1:35:33:
9f:9b:51:6f:ee:71:fb:01:46:ca:de:7e:b1:b9:bf:
92:8d:10:f8:87:85:bf:4e:1f:9e:1c:4f:70:fa:f0:
69:63:8b:49:7a:1c:4e:44:3c:10:6a:a0:31:b0:d8:
07:49:cb:60:da:14:dc:14:02:2f:06:2d:67:a3:09:
1a:c2:df:34:ad:bc:48:bc:2c:92:54:1d:bd:e5:72:
cd:97:f2:22:46:76:4a:e1:79:ee:c2:f8:f2:da:09:
5b:e9:20:f4:94:63:1f:7c:87:ac:3c:e5:5e:96:d5:
9c:ad:a8:a4:33:5d:dd:b9:63:3f:6a:cd:e3:6b:5a:
b8:f3:8d:49:2b:88:7c:e2:9c:73:94:d2:96:85:15:
73:c7:43:b0:69:70:f7:53:3a:7d:c4:3e:17:e2:c2:
23:bd:c2:29:e3:c3:9e:fb:9e:02:81:4c:75:92:78:
07:54:30:45:8c:a9:ae:96:74:64:b2:9b:23:b2:39:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2C:93:53:07:96:9B:54:7F:9C:2F:7A:FA:D5:CB:98:32:3A:EB:E2
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/RCyTUweWm1R_nC96-tXLmDI66-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.96.0/24
Signature Algorithm: sha256WithRSAEncryption
82:6a:12:e4:86:c9:44:4a:da:85:43:f8:7a:49:f6:3e:e7:2a:
d6:4c:3e:9f:89:4f:d4:d6:1e:93:e9:75:d0:6d:86:93:bb:19:
82:2f:68:7d:13:b0:9f:8e:9e:a8:09:ab:e5:44:41:5c:85:4b:
f6:57:b7:03:05:42:9a:9b:89:09:28:65:c9:77:75:40:04:f4:
e8:21:d2:3a:32:97:22:df:23:ac:9b:a0:c1:87:9f:32:da:c7:
38:f7:11:86:89:2b:1a:d1:76:3b:12:cb:0e:82:5d:ed:1e:90:
cf:54:e0:db:9d:0b:2c:16:81:a7:f1:e6:27:6b:9b:3c:a1:20:
7a:03:27:7a:2a:df:69:e7:2c:48:93:03:a1:b8:d9:f6:fd:15:
83:c8:e0:aa:46:98:6c:ff:bb:16:ae:66:57:d9:e9:dd:12:17:
be:ff:92:89:d5:01:fa:6c:fb:f8:5d:85:77:a3:ea:14:9e:25:
32:0a:ef:a8:4b:80:a9:d2:5f:cd:ea:f1:9c:1b:91:9a:fb:d7:
6a:2b:3a:69:4b:9e:19:27:23:fc:e1:6d:c8:8d:89:1f:32:55:
8e:46:fb:36:22:28:3d:6e:dc:5b:fd:62:b5:46:1a:5f:b0:01:
0e:2a:bd:91:cd:b2:e4:e8:e4:02:c6:65:d6:aa:d0:ad:85:ce:
bc:eb:e9:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFrXyY4iWxSl3xNFCa3Cy+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwODE5MTYwMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDJjOTM1MzA3OTY5YjU0N2Y5YzJmN2FmYWQ1Y2I5ODMyM2FlYmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP/CCYd83ikZG+ZmTLaap0aWllgY
hdpQPkg7MN1xIqVlADfe26dxvu8DPRFKegYQG6jZUa/Oqtxg4qSdv6he/MsvfdXz
canBNTOfm1Fv7nH7AUbK3n6xub+SjRD4h4W/Th+eHE9w+vBpY4tJehxORDwQaqAx
sNgHSctg2hTcFAIvBi1nowkawt80rbxIvCySVB295XLNl/IiRnZK4Xnuwvjy2glb
6SD0lGMffIesPOVeltWcraikM13duWM/as3ja1q4841JK4h84pxzlNKWhRVzx0Ow
aXD3Uzp9xD4X4sIjvcIp48Oe+54CgUx1kngHVDBFjKmulnRkspsjsjlhqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQsk1MHlptUf5wvevrVy5gyOuviMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvUkN5VFV3ZVdtMVJfbkM5Ni10WExtREk2Ni1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodgMA0G
CSqGSIb3DQEBCwUAA4IBAQCCahLkhslEStqFQ/h6SfY+5yrWTD6fiU/U1h6T6XXQ
bYaTuxmCL2h9E7Cfjp6oCavlREFchUv2V7cDBUKam4kJKGXJd3VABPToIdI6Mpci
3yOsm6DBh58y2sc49xGGiSsa0XY7EssOgl3tHpDPVODbnQssFoGn8eYna5s8oSB6
Ayd6Kt9p5yxIkwOhuNn2/RWDyOCqRphs/7sWrmZX2endEhe+/5KJ1QH6bPv4XYV3
o+oUniUyCu+oS4Cp0l/N6vGcG5Ga+9dqKzppS54ZJyP84W3IjYkfMlWORvs2Iig9
btxb/WK1RhpfsAEOKr2RzbLk6OQCxmXWqtCthc686+ls
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:39:12 2024 by rpki-client on console-ams.rpki-client.org