Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/ydp4IekY2oJNPzfS78n2BXCuQ9Y.roa
File: ydp4IekY2oJNPzfS78n2BXCuQ9Y.roa (raw, json)
Hash identifier: FS6wyLyxeB80Gc3/Xwus6uyrmwpFSUj66EIvGOyonEw=
Subject key identifier: C9:DA:78:21:E9:18:DA:82:4D:3F:37:D2:EF:C9:F6:05:70:AE:43:D6
Certificate issuer: /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial: 018CC8DF35BB2A53A041963173D27826751E
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/ydp4IekY2oJNPzfS78n2BXCuQ9Y.roa
Signing time: Tue 02 Jan 2024 06:32:00 +0000
ROA not before: Tue 02 Jan 2024 06:32:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216130
IP address blocks: 147.234.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:35:bb:2a:53:a0:41:96:31:73:d2:78:26:75:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Validity
Not Before: Jan 2 06:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9da7821e918da824d3f37d2efc9f60570ae43d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:61:60:96:4c:7a:1a:e3:e9:f6:4a:fe:7e:72:
00:99:7c:41:78:7f:1e:6b:ad:51:fb:60:05:32:5e:
0c:72:15:d7:a1:db:35:ee:9f:66:4c:2b:07:a9:38:
70:0f:43:d4:2c:07:20:89:50:d8:8c:de:33:b3:81:
09:26:2b:07:fe:bd:16:33:0c:88:2f:8d:b3:35:b7:
a0:dc:80:9d:9b:3b:c7:3e:c6:bd:51:2c:01:94:df:
8a:02:a9:1e:d4:6d:80:c9:c5:73:a6:b8:3e:a4:61:
f6:ea:90:31:85:ed:80:3b:80:bb:05:1b:42:21:20:
1b:c0:b9:f5:65:55:ae:61:03:80:c8:5c:af:1c:c6:
24:72:70:9e:82:4d:17:a7:ed:67:64:eb:c1:a6:41:
4d:bb:1d:3b:1d:28:87:32:b6:e9:cc:a3:d3:24:85:
dc:ce:b2:ec:94:f3:46:96:70:27:bc:eb:7d:84:5c:
19:2b:c7:7c:56:d0:51:b9:4b:f3:4c:30:a2:6f:b4:
0c:b6:7a:5d:7a:ae:b7:7b:0a:8b:81:44:97:82:06:
a5:8e:84:07:50:37:b1:84:97:a1:58:08:2b:34:be:
70:bf:9d:17:04:84:dd:15:49:ad:ea:3a:0d:b9:fa:
41:06:12:a4:2b:45:3a:15:b1:c5:c5:32:d2:9b:42:
fb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DA:78:21:E9:18:DA:82:4D:3F:37:D2:EF:C9:F6:05:70:AE:43:D6
X509v3 Authority Key Identifier:
keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/ydp4IekY2oJNPzfS78n2BXCuQ9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.234.27.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:4a:31:a5:f2:07:3d:b7:33:51:60:88:05:fc:64:cf:47:76:
f2:3f:28:f1:aa:ba:a5:ad:76:02:19:38:c1:98:8f:93:89:3e:
6e:19:37:3d:ab:c9:29:1c:c2:11:2f:18:39:ef:ed:8e:a1:ec:
c7:47:f9:84:a4:bd:66:74:60:de:37:4c:7e:dc:b6:bd:37:72:
14:00:c1:f1:ed:6f:0b:3d:e1:5d:84:7d:c4:42:fe:df:58:39:
4e:f2:c0:27:76:84:ec:9f:33:1b:4d:75:53:89:c2:c4:73:0c:
30:23:40:58:a8:6b:ee:8c:44:6d:27:e1:a3:de:cc:2f:39:9b:
8e:42:bc:de:0c:f3:51:42:25:e1:4d:5d:50:73:ad:fb:cb:d0:
31:87:93:cd:16:14:c7:97:eb:27:89:8e:1a:3a:d2:80:1f:c4:
65:63:24:69:69:35:19:e4:9d:97:84:70:a0:22:1a:73:87:26:
fb:7d:c9:b7:46:ca:d5:e9:85:77:f0:33:9b:62:be:37:75:ad:
2f:99:a8:f0:d6:62:d8:e3:dd:49:a8:d1:56:9d:f7:f0:a5:04:
cd:2f:bc:6c:0c:37:7e:50:ef:80:a7:5a:66:fe:79:30:ca:38:
fd:0c:1c:16:f8:9f:a9:ec:fa:e2:20:21:8d:45:7a:d1:95:09:
f4:a4:8d:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3zW7KlOgQZYxc9J4JnUeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYmFkNzRlN2Y2YzA5NDlhMjczNmE1NzQ3ODQ5NmQ3ZDhi
NDUwZTYwHhcNMjQwMTAyMDYzMjAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOWRhNzgyMWU5MThkYTgyNGQzZjM3ZDJlZmM5ZjYwNTcwYWU0M2Q2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWFglkx6GuPp9kr+fnIAmXxBeH8e
a61R+2AFMl4MchXXods17p9mTCsHqThwD0PULAcgiVDYjN4zs4EJJisH/r0WMwyI
L42zNbeg3ICdmzvHPsa9USwBlN+KAqke1G2AycVzprg+pGH26pAxhe2AO4C7BRtC
ISAbwLn1ZVWuYQOAyFyvHMYkcnCegk0Xp+1nZOvBpkFNux07HSiHMrbpzKPTJIXc
zrLslPNGlnAnvOt9hFwZK8d8VtBRuUvzTDCib7QMtnpdeq63ewqLgUSXggaljoQH
UDexhJehWAgrNL5wv50XBITdFUmt6joNufpBBhKkK0U6FbHFxTLSm0L78wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMnaeCHpGNqCTT830u/J9gVwrkPWMB8GA1UdIwQY
MBaAFCG6105/bAlJonNqV0eEltfYtFDmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQt
NDQzMzIyOWE4NDczLzEveWRwNElla1kyb0pOUHpmUzc4bjJCWEN1UTlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC84ZGRjMzgtN2ExYS00OTA2LWE4ZWQtNDQzMzIyOWE4NDcz
LzEvSWJyWFRuOXNDVW1pYzJwWFI0U1cxOWkwVU9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk+obMA0G
CSqGSIb3DQEBCwUAA4IBAQB9SjGl8gc9tzNRYIgF/GTPR3byPyjxqrqlrXYCGTjB
mI+TiT5uGTc9q8kpHMIRLxg57+2OoezHR/mEpL1mdGDeN0x+3La9N3IUAMHx7W8L
PeFdhH3EQv7fWDlO8sAndoTsnzMbTXVTicLEcwwwI0BYqGvujERtJ+Gj3swvOZuO
QrzeDPNRQiXhTV1Qc637y9Axh5PNFhTHl+sniY4aOtKAH8RlYyRpaTUZ5J2XhHCg
Ihpzhyb7fcm3RsrV6YV38DObYr43da0vmajw1mLY491JqNFWnffwpQTNL7xsDDd+
UO+Ap1pm/nkwyjj9DBwW+J+p7PriICGNRXrRlQn0pI06
-----END CERTIFICATE-----
Generated at Sun May 19 14:14:28 2024 by rpki-client on console-fra.rpki-client.org