Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/Ycn42c6N5YdkSmCBAV_CHfvZ8BM.roa
File: Ycn42c6N5YdkSmCBAV_CHfvZ8BM.roa (raw, json)
Hash identifier: E1uF2BRJvduJJb9G4zuJMEKUjFr/VlUkrtfriHY4y1U=
Subject key identifier: 61:C9:F8:D9:CE:8D:E5:87:64:4A:60:81:01:5F:C2:1D:FB:D9:F0:13
Certificate issuer: /CN=05eb12157317bec58fd41d92ff105b361864a6f2
Certificate serial: 018CC34906CA3DCDF106C91D873CB5F4A963
Authority key identifier: 05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/Ycn42c6N5YdkSmCBAV_CHfvZ8BM.roa
Signing time: Mon 01 Jan 2024 04:29:52 +0000
ROA not before: Mon 01 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56599
IP address blocks: 195.158.244.0/24 maxlen: 24
194.9.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Dec 2024 16:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:06:ca:3d:cd:f1:06:c9:1d:87:3c:b5:f4:a9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05eb12157317bec58fd41d92ff105b361864a6f2
Validity
Not Before: Jan 1 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61c9f8d9ce8de587644a6081015fc21dfbd9f013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:76:c4:8f:45:29:aa:dd:a1:15:74:67:4e:
c1:d2:d0:8b:d2:be:3d:bb:9e:f2:3b:d4:a0:7c:8b:
c9:c1:35:8e:94:80:6d:8e:12:62:62:47:9a:3e:72:
d9:13:e7:2a:ef:78:ac:08:53:5a:5e:58:26:bb:7a:
12:69:be:6b:31:7b:c4:99:aa:e9:91:d8:dc:ec:61:
6f:1f:0d:a8:b1:3d:d7:66:ee:bc:a2:fb:7d:39:0e:
38:0c:a2:3d:94:77:20:65:57:50:f6:aa:a0:05:ca:
ef:ad:07:d4:20:28:ac:22:94:37:1d:72:79:6f:50:
f9:7b:7f:b6:a8:51:48:9c:eb:42:cc:d3:07:0a:4d:
e6:53:d7:53:26:5f:b8:9b:3f:f5:74:48:bc:cc:4c:
ea:d8:69:38:7c:93:82:5e:a6:08:38:c4:b1:53:ce:
cd:4c:cc:3a:16:ac:11:2c:31:d5:c9:87:dc:bb:13:
26:4a:45:dc:bf:2c:25:51:83:96:45:eb:b4:2e:c8:
88:c1:64:56:07:34:1d:03:e0:23:7b:71:38:c7:dc:
42:a1:b0:bb:dd:0b:c9:64:0e:a7:84:ba:c4:3b:79:
0b:b7:aa:ba:47:62:2a:85:a8:f5:68:bb:9e:74:3a:
e4:d7:bb:ab:54:d9:17:f2:2b:e0:7f:ce:12:57:ef:
25:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C9:F8:D9:CE:8D:E5:87:64:4A:60:81:01:5F:C2:1D:FB:D9:F0:13
X509v3 Authority Key Identifier:
keyid:05:EB:12:15:73:17:BE:C5:8F:D4:1D:92:FF:10:5B:36:18:64:A6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BesSFXMXvsWP1B2S_xBbNhhkpvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/Ycn42c6N5YdkSmCBAV_CHfvZ8BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/20c842-b494-4db6-aa75-3dd36a29fa28/1/BesSFXMXvsWP1B2S_xBbNhhkpvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.42.0/23
195.158.244.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:ed:14:a0:f3:62:f5:1e:47:fd:c6:85:fb:8d:38:62:29:e4:
ce:89:f2:b4:0a:e5:ac:0d:37:be:30:d0:7c:d9:ff:d9:83:ee:
bd:49:93:9b:b9:26:d4:da:70:4f:06:7d:a4:ef:d2:18:b3:de:
ee:48:ae:f5:30:96:81:cf:4c:16:25:4d:d2:e1:57:c5:92:3d:
d1:a4:71:78:67:70:fe:14:19:82:60:d4:08:0a:7f:05:aa:3b:
81:7a:51:86:64:73:dc:4d:ac:47:55:9a:4e:97:b4:e9:03:e6:
d7:bb:b4:78:02:ef:e8:66:e3:ab:ce:f0:7b:dc:bf:03:6e:f6:
74:8c:51:e7:c1:fd:27:5c:3a:34:b4:df:59:79:7f:f5:a0:39:
94:78:68:fb:d5:27:70:2f:11:53:f7:40:39:04:a4:4c:5e:cb:
2e:30:6a:b4:02:fb:64:d7:5a:72:55:00:a0:ea:6e:05:91:9b:
4b:d7:e5:4a:50:1c:dd:d7:72:14:10:01:29:2c:c1:92:21:9b:
ad:8c:31:7c:67:e5:4d:f2:96:ef:2a:27:5e:34:2f:db:fe:2c:
d1:28:e1:8d:49:97:d0:36:1e:12:f0:7b:3a:75:48:f7:d1:a4:
f9:d1:81:ad:1b:83:3b:16:78:b1:56:8e:9e:11:cc:24:06:60:
6e:d1:78:7f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDSQbKPc3xBskdhzy19KljMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1ZWIxMjE1NzMxN2JlYzU4ZmQ0MWQ5MmZmMTA1YjM2MTg2
NGE2ZjIwHhcNMjQwMTAxMDQyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MWM5ZjhkOWNlOGRlNTg3NjQ0YTYwODEwMTVmYzIxZGZiZDlmMDEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZd2xI9FKardoRV0Z07B0tCL0r49
u57yO9SgfIvJwTWOlIBtjhJiYkeaPnLZE+cq73isCFNaXlgmu3oSab5rMXvEmarp
kdjc7GFvHw2osT3XZu68ovt9OQ44DKI9lHcgZVdQ9qqgBcrvrQfUICisIpQ3HXJ5
b1D5e3+2qFFInOtCzNMHCk3mU9dTJl+4mz/1dEi8zEzq2Gk4fJOCXqYIOMSxU87N
TMw6FqwRLDHVyYfcuxMmSkXcvywlUYOWReu0LsiIwWRWBzQdA+Aje3E4x9xCobC7
3QvJZA6nhLrEO3kLt6q6R2Iqhaj1aLuedDrk17urVNkX8ivgf84SV+8lJwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGHJ+NnOjeWHZEpggQFfwh372fATMB8GA1UdIwQY
MBaAFAXrEhVzF77Fj9Qdkv8QWzYYZKbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUt
M2RkMzZhMjlmYTI4LzEvWWNuNDJjNk41WWRrU21DQkFWX0NIZnZaOEJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMGM4NDItYjQ5NC00ZGI2LWFhNzUtM2RkMzZhMjlmYTI4
LzEvQmVzU0ZYTVh2c1dQMUIyU194QmJOaGhrcHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwgkqAwQA
w570MA0GCSqGSIb3DQEBCwUAA4IBAQAK7RSg82L1Hkf9xoX7jThiKeTOifK0CuWs
DTe+MNB82f/Zg+69SZObuSbU2nBPBn2k79IYs97uSK71MJaBz0wWJU3S4VfFkj3R
pHF4Z3D+FBmCYNQICn8FqjuBelGGZHPcTaxHVZpOl7TpA+bXu7R4Au/oZuOrzvB7
3L8DbvZ0jFHnwf0nXDo0tN9ZeX/1oDmUeGj71SdwLxFT90A5BKRMXssuMGq0Avtk
11pyVQCg6m4FkZtL1+VKUBzd13IUEAEpLMGSIZutjDF8Z+VN8pbvKideNC/b/izR
KOGNSZfQNh4S8Hs6dUj30aT50YGtG4M7FnixVo6eEcwkBmBu0Xh/
-----END CERTIFICATE-----
Generated at Fri Dec 27 20:38:28 2024 by rpki-client on console-fra.rpki-client.org