Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/YQp7DKZbd0rL5UzUPkjRqi65dNw.roa
File: YQp7DKZbd0rL5UzUPkjRqi65dNw.roa (raw, json)
Hash identifier: tQVLSpKLzxbP3Fopq5GiEjtcwkQxfYFx388rT6jBf5U=
Subject key identifier: 61:0A:7B:0C:A6:5B:77:4A:CB:E5:4C:D4:3E:48:D1:AA:2E:B9:74:DC
Certificate issuer: /CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Certificate serial: 018CC50154C61E8336258FEBA4C1DA5A01DE
Authority key identifier: 26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/YQp7DKZbd0rL5UzUPkjRqi65dNw.roa
Signing time: Mon 01 Jan 2024 12:30:47 +0000
ROA not before: Mon 01 Jan 2024 12:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64396
IP address blocks: 185.167.80.0/22 maxlen: 24
2a0b:5200::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:54:c6:1e:83:36:25:8f:eb:a4:c1:da:5a:01:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2698a5754dee9eef6f224562cb8239ac8bdb05b8
Validity
Not Before: Jan 1 12:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=610a7b0ca65b774acbe54cd43e48d1aa2eb974dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7b:1e:88:2a:61:01:41:d9:03:b9:2d:4f:ce:
0f:f4:b4:bb:22:ae:a8:de:c7:b0:fb:ba:76:29:0b:
90:d1:06:a1:8e:30:21:57:de:1c:af:09:55:46:7e:
a2:94:ee:1b:70:c1:37:86:ee:a9:9d:5a:54:10:db:
90:c3:6a:63:9e:40:7f:12:16:84:36:2f:24:1a:8e:
3d:e3:5a:23:87:11:9f:15:74:66:37:17:6b:e9:90:
15:e5:80:90:fb:e6:ef:5e:16:32:d2:b8:2d:66:53:
75:7a:00:e2:49:f5:ca:7d:a4:ff:13:34:a3:db:11:
1f:da:de:ae:7e:cc:92:46:15:f0:bc:c8:ba:a4:e4:
7d:d9:1d:8f:5e:69:92:ea:b8:32:0d:ed:db:c6:0d:
c2:47:7c:f8:9a:cd:14:9f:bb:b2:15:23:28:fc:4e:
23:60:cc:68:57:61:ff:c9:c4:5d:b9:ee:89:5c:a2:
d4:98:10:f1:7b:66:ab:95:f2:76:e6:24:5c:f0:eb:
15:3a:ca:05:64:8a:4a:42:0d:f0:7d:62:b4:d8:2e:
6a:c7:61:1a:36:5d:e9:83:e8:83:88:5c:bf:2b:0f:
4e:40:f7:f7:57:57:75:b6:00:67:46:a4:81:ae:45:
c9:1b:ab:c6:e1:7e:10:9a:7e:f3:8b:95:72:dd:74:
f7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0A:7B:0C:A6:5B:77:4A:CB:E5:4C:D4:3E:48:D1:AA:2E:B9:74:DC
X509v3 Authority Key Identifier:
keyid:26:98:A5:75:4D:EE:9E:EF:6F:22:45:62:CB:82:39:AC:8B:DB:05:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JpildU3unu9vIkViy4I5rIvbBbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/YQp7DKZbd0rL5UzUPkjRqi65dNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7b8b6f-e44c-49cb-8c93-0f08559d7d18/1/JpildU3unu9vIkViy4I5rIvbBbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.80.0/22
IPv6:
2a0b:5200::/29
Signature Algorithm: sha256WithRSAEncryption
1f:d1:14:81:39:88:1b:27:07:04:df:07:8f:e2:d2:d4:f5:d8:
4e:cb:78:1b:be:1d:7a:76:34:ce:86:28:08:76:c1:fc:1e:67:
17:0d:96:f1:18:6f:de:ad:d4:df:bd:48:36:31:41:40:03:36:
4e:81:00:80:68:ab:26:4f:14:4a:34:9c:7c:a5:f7:66:01:de:
40:1f:73:cc:e9:c6:75:3e:08:c9:25:54:a0:67:0b:b9:c4:8e:
47:45:26:cc:e4:f9:f0:8c:13:6e:45:5b:40:23:f4:76:ae:46:
dd:ea:eb:e2:97:db:85:97:32:5a:e9:84:7b:42:45:74:5d:39:
f1:80:83:4c:d9:73:6e:b3:d6:1d:c5:92:f3:2a:f9:a7:5b:b8:
0f:07:d8:b3:97:2a:8e:e7:c5:df:b8:a4:d2:7c:6d:b8:0f:ec:
6c:ec:2b:a8:b4:d1:7f:35:e4:c2:59:b7:41:37:25:f9:66:8d:
37:ac:fc:06:b2:e8:d4:c8:0d:ec:f2:7f:6b:ae:99:fa:39:12:
ee:43:c4:69:68:f6:36:60:d9:be:94:79:aa:3e:49:3a:4d:e8:
d5:93:4a:c0:38:7c:1f:f0:25:3e:7a:03:c0:92:10:c6:ba:b2:
9b:b9:58:50:a6:8c:1f:4e:d6:33:54:72:26:e0:11:b3:1f:b6:
8c:9a:22:eb
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzFAVTGHoM2JY/rpMHaWgHeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2OThhNTc1NGRlZTllZWY2ZjIyNDU2MmNiODIzOWFjOGJk
YjA1YjgwHhcNMjQwMTAxMTIzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTBhN2IwY2E2NWI3NzRhY2JlNTRjZDQzZTQ4ZDFhYTJlYjk3NGRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz3seiCphAUHZA7ktT84P9LS7Iq6o
3sew+7p2KQuQ0QahjjAhV94crwlVRn6ilO4bcME3hu6pnVpUENuQw2pjnkB/EhaE
Ni8kGo4941ojhxGfFXRmNxdr6ZAV5YCQ++bvXhYy0rgtZlN1egDiSfXKfaT/EzSj
2xEf2t6ufsySRhXwvMi6pOR92R2PXmmS6rgyDe3bxg3CR3z4ms0Un7uyFSMo/E4j
YMxoV2H/ycRdue6JXKLUmBDxe2arlfJ25iRc8OsVOsoFZIpKQg3wfWK02C5qx2Ea
Nl3pg+iDiFy/Kw9OQPf3V1d1tgBnRqSBrkXJG6vG4X4Qmn7zi5Vy3XT32QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGEKewymW3dKy+VM1D5I0aouuXTcMB8GA1UdIwQY
MBaAFCaYpXVN7p7vbyJFYsuCOayL2wW4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSnBpbGRVM3VudTl2SWtWaXk0STVySXZiQmJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YjhiNmYtZTQ0Yy00OWNiLThjOTMt
MGYwODU1OWQ3ZDE4LzEvWVFwN0RLWmJkMHJMNVV6VVBralJxaTY1ZE53LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YjhiNmYtZTQ0Yy00OWNiLThjOTMtMGYwODU1OWQ3ZDE4
LzEvSnBpbGRVM3VudTl2SWtWaXk0STVySXZiQmJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuadQMA0E
AgACMAcDBQMqC1IAMA0GCSqGSIb3DQEBCwUAA4IBAQAf0RSBOYgbJwcE3weP4tLU
9dhOy3gbvh16djTOhigIdsH8HmcXDZbxGG/erdTfvUg2MUFAAzZOgQCAaKsmTxRK
NJx8pfdmAd5AH3PM6cZ1PgjJJVSgZwu5xI5HRSbM5PnwjBNuRVtAI/R2rkbd6uvi
l9uFlzJa6YR7QkV0XTnxgINM2XNus9YdxZLzKvmnW7gPB9izlyqO58XfuKTSfG24
D+xs7CuotNF/NeTCWbdBNyX5Zo03rPwGsujUyA3s8n9rrpn6ORLuQ8RpaPY2YNm+
lHmqPkk6TejVk0rAOHwf8CU+egPAkhDGurKbuVhQpowfTtYzVHIm4BGzH7aMmiLr
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:53:54 2024 by rpki-client on console-fra.rpki-client.org