Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/7YOgDZ3N-JUEmEwyBnyCvN02rms.roa
File: 7YOgDZ3N-JUEmEwyBnyCvN02rms.roa (raw, json)
Hash identifier: /KaQ0iY9H0FYxCR3q1tOiTiZeUNcCWtkafzJ7AjzrQE=
Subject key identifier: ED:83:A0:0D:9D:CD:F8:95:04:98:4C:32:06:7C:82:BC:DD:36:AE:6B
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 018CC26CF0F746F9A3F1798A52E6F7F07D05
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/7YOgDZ3N-JUEmEwyBnyCvN02rms.roa
Signing time: Mon 01 Jan 2024 00:29:28 +0000
ROA not before: Mon 01 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12741
IP address blocks: 82.160.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:03:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f0:f7:46:f9:a3:f1:79:8a:52:e6:f7:f0:7d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed83a00d9dcdf89504984c32067c82bcdd36ae6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3e:8d:3e:f9:67:be:ac:1b:60:54:b8:03:53:
6a:e1:82:1a:e0:cf:a9:80:01:2c:b7:38:96:b1:ba:
33:ab:33:3b:27:35:1a:3a:96:1b:e2:3f:3c:cb:f3:
bc:95:b4:1f:55:a6:b1:b1:87:9c:92:3a:67:25:d2:
68:c0:da:c0:68:0c:c9:0f:28:5b:be:05:d0:47:59:
5f:69:00:26:30:88:34:59:4b:41:c5:7e:b1:2c:0e:
14:b3:b8:22:56:12:d8:f9:7e:f2:bb:33:c3:3f:87:
18:67:af:71:f4:39:4d:1a:22:9c:02:a8:ef:a8:82:
93:8f:47:2f:51:bd:1e:f0:fc:71:1e:58:8b:cc:a4:
c2:9c:04:90:65:7c:b5:f8:34:d9:85:e2:df:11:b5:
6c:66:4a:15:b7:7e:54:ac:f1:1d:c0:a6:52:1a:20:
c3:40:21:16:24:7d:98:7c:24:58:b1:8e:1f:6b:28:
1f:27:ef:92:93:22:ac:1c:12:bd:77:ee:f2:28:cf:
33:96:14:48:87:91:ab:98:40:bb:ec:b4:5f:4f:7b:
87:08:6e:93:89:12:6c:2e:86:88:74:3c:99:92:b3:
37:cf:43:15:7c:06:74:91:94:d1:3d:3d:12:b6:d1:
32:df:99:db:e3:5b:24:22:63:e8:80:16:32:99:a9:
1b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:83:A0:0D:9D:CD:F8:95:04:98:4C:32:06:7C:82:BC:DD:36:AE:6B
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/7YOgDZ3N-JUEmEwyBnyCvN02rms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.160.112.0/24
Signature Algorithm: sha256WithRSAEncryption
81:df:d9:d5:c7:c3:dc:d8:30:18:13:20:ce:f4:48:c9:b2:4f:
38:95:07:55:36:89:e8:31:73:8c:82:a8:3b:e5:33:81:cd:bd:
e2:3b:81:e1:dc:f6:dd:1c:fa:f6:a5:d1:4d:ff:f0:e6:4f:2c:
45:e2:3c:02:a4:5e:d1:61:b8:fd:d9:ad:f8:65:13:15:eb:65:
c6:87:1e:ac:ac:a4:29:28:b2:96:59:98:e6:b3:f2:e3:70:ae:
8b:90:5c:a3:fc:ac:2c:ea:cc:13:1e:c9:5e:02:ac:e3:e8:fd:
e6:b5:f4:33:03:81:44:a5:61:d7:8f:69:5e:cd:da:db:4f:c7:
55:cf:1c:ed:ba:6c:2a:1c:fc:20:f2:83:4d:6c:1e:4d:e8:38:
42:8e:98:33:a4:e7:96:22:ce:3b:98:84:a3:36:f3:6d:2f:7f:
6a:ca:d4:be:0a:1d:2d:57:1a:d7:f4:94:ac:18:75:95:b2:54:
50:2c:53:57:d5:5a:27:99:b5:37:d1:24:4b:2a:bc:4b:52:91:
48:f7:18:e3:dc:a6:38:a4:54:2b:88:c5:72:49:9f:13:0f:a9:
4f:c3:f5:4f:a8:2c:d4:e0:3b:a1:01:52:3f:1a:b9:10:88:15:
6e:95:10:5f:4e:73:87:f2:83:5d:1b:64:47:12:6f:01:42:c4:
67:11:df:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbPD3Rvmj8XmKUub38H0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTMwMWRjYzdmYWU0ZjdjZTAxZTQ5ODdhNzdjYjgyYTMz
NmFiZmYwHhcNMjQwMTAxMDAyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDgzYTAwZDlkY2RmODk1MDQ5ODRjMzIwNjdjODJiY2RkMzZhZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiT6NPvlnvqwbYFS4A1Nq4YIa4M+p
gAEstziWsbozqzM7JzUaOpYb4j88y/O8lbQfVaaxsYeckjpnJdJowNrAaAzJDyhb
vgXQR1lfaQAmMIg0WUtBxX6xLA4Us7giVhLY+X7yuzPDP4cYZ69x9DlNGiKcAqjv
qIKTj0cvUb0e8PxxHliLzKTCnASQZXy1+DTZheLfEbVsZkoVt35UrPEdwKZSGiDD
QCEWJH2YfCRYsY4faygfJ++SkyKsHBK9d+7yKM8zlhRIh5GrmEC77LRfT3uHCG6T
iRJsLoaIdDyZkrM3z0MVfAZ0kZTRPT0SttEy35nb41skImPogBYymakbiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO2DoA2dzfiVBJhMMgZ8grzdNq5rMB8GA1UdIwQY
MBaAFBeTAdzH+uT3zgHkmHp3y4KjNqv/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQt
YWZmOTJjMTZkOGUzLzEvN1lPZ0RaM04tSlVFbUV3eUJueUN2TjAycm1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9lZDc5NjMtNzJlYS00YzFkLWFkZGQtYWZmOTJjMTZkOGUz
LzEvRjVNQjNNZjY1UGZPQWVTWWVuZkxncU0ycV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUqBwMA0G
CSqGSIb3DQEBCwUAA4IBAQCB39nVx8Pc2DAYEyDO9EjJsk84lQdVNonoMXOMgqg7
5TOBzb3iO4Hh3PbdHPr2pdFN//DmTyxF4jwCpF7RYbj92a34ZRMV62XGhx6srKQp
KLKWWZjms/LjcK6LkFyj/Kws6swTHsleAqzj6P3mtfQzA4FEpWHXj2lezdrbT8dV
zxztumwqHPwg8oNNbB5N6DhCjpgzpOeWIs47mISjNvNtL39qytS+Ch0tVxrX9JSs
GHWVslRQLFNX1VonmbU30SRLKrxLUpFI9xjj3KY4pFQriMVySZ8TD6lPw/VPqCzU
4DuhAVI/GrkQiBVulRBfTnOH8oNdG2RHEm8BQsRnEd/B
-----END CERTIFICATE-----
Generated at Sun May 19 06:09:01 2024 by rpki-client on console-fra.rpki-client.org