Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/05YF7vGjRHkPfqPLpzydIrsn2yE.roa
File: 05YF7vGjRHkPfqPLpzydIrsn2yE.roa (raw, json)
Hash identifier: 2g7nud+m9XyNGfo88CwESv3rVifkJbEiIrb2ayXYeHI=
Subject key identifier: D3:96:05:EE:F1:A3:44:79:0F:7E:A3:CB:A7:3C:9D:22:BB:27:DB:21
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018CC86FF4D6027E6980A6E586C6559ED21F
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/05YF7vGjRHkPfqPLpzydIrsn2yE.roa
Signing time: Tue 02 Jan 2024 04:30:29 +0000
ROA not before: Tue 02 Jan 2024 04:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200967
IP address blocks: 213.14.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:f4:d6:02:7e:69:80:a6:e5:86:c6:55:9e:d2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 2 04:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d39605eef1a344790f7ea3cba73c9d22bb27db21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:45:94:95:f9:3e:90:5a:8b:0d:ae:4f:a8:
ac:41:f4:f6:ef:1b:12:c1:58:03:16:04:09:17:1d:
b5:d1:4c:0d:8c:aa:28:7d:e1:a4:c7:62:2e:2a:dc:
ad:bb:3c:d0:84:a8:62:81:4e:d1:b2:25:ef:b2:64:
76:c2:54:f8:73:81:c0:dd:59:09:a0:df:59:bf:e2:
8c:43:eb:66:aa:8b:b7:60:44:4a:e0:66:b8:9f:78:
01:8d:0a:b9:1d:2e:1b:82:6f:50:ac:92:72:a2:59:
4c:c3:36:cf:f3:8c:5c:5f:a3:02:95:b7:a8:54:de:
0a:a0:ec:31:04:81:5b:bc:5a:12:65:30:2d:fb:f4:
22:d6:93:7c:f0:19:ea:b9:36:7b:40:ec:a6:61:fb:
6e:08:85:47:16:c6:09:96:6b:ee:0a:4b:fa:23:e6:
06:78:b4:f7:1b:f2:15:8b:17:d9:fb:a1:23:fe:f0:
52:0c:d9:1b:1d:5e:47:fe:41:49:8d:46:fe:2b:67:
74:b7:7d:04:10:a0:82:c4:77:6c:4c:17:e7:d5:82:
c4:07:b7:42:18:9f:4a:6c:7c:72:30:a5:1d:cb:43:
1b:e5:c9:51:d5:ad:1f:10:73:80:ae:13:43:24:3f:
54:a7:18:47:3d:f6:fd:4a:16:a3:b9:d2:f2:98:d8:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:05:EE:F1:A3:44:79:0F:7E:A3:CB:A7:3C:9D:22:BB:27:DB:21
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/05YF7vGjRHkPfqPLpzydIrsn2yE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.14.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:fd:c5:cb:c5:86:a2:c1:d6:bf:e3:a4:85:fe:18:5f:5d:70:
4c:ce:ea:4d:d4:38:36:77:5a:3f:d2:8f:45:81:fd:ca:c4:08:
67:1d:81:db:31:43:f4:6e:7c:f0:72:38:00:6a:84:2b:3e:d4:
f2:13:c7:c3:bf:c6:cd:42:45:b0:57:b3:21:c4:ed:11:60:e8:
0f:9c:da:f0:1b:4d:0b:8c:52:e8:d0:f0:e4:9c:19:7a:be:b0:
df:96:28:50:15:f2:04:3e:2f:e8:d4:af:68:e6:e4:27:c1:34:
71:5d:0f:2f:56:d5:ba:d7:38:ab:af:4a:cf:e5:51:9b:0e:a7:
20:46:1f:fa:da:26:39:f5:4c:e4:51:21:d3:f6:6d:64:f0:79:
10:86:4b:8c:f4:eb:c1:35:ac:33:34:0f:e5:e6:0b:d8:44:00:
85:f1:5f:3a:f5:9b:b1:c5:59:76:50:90:85:c3:33:83:7b:1a:
21:7a:09:c5:12:45:ea:cc:b5:b6:36:d7:af:9f:63:c0:16:89:
ec:04:62:f8:06:60:6f:28:05:72:2d:9e:f0:95:11:c9:18:36:
dd:83:10:39:b7:e6:9c:f7:20:14:85:1e:64:f4:08:86:3e:e8:
3c:1c:f5:ab:f0:3e:56:4f:0a:1e:5a:78:c8:41:fe:09:e7:f0:
98:e2:92:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb/TWAn5pgKblhsZVntIfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNTljNDMyM2Y3NjdjZTRmZmM4NWRhYWQyMDhiOTBjMDRm
YmQzZTkwHhcNMjQwMTAyMDQzMDI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMzk2MDVlZWYxYTM0NDc5MGY3ZWEzY2JhNzNjOWQyMmJiMjdkYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupxFlJX5PpBaiw2uT6isQfT27xsS
wVgDFgQJFx210UwNjKoofeGkx2IuKtytuzzQhKhigU7RsiXvsmR2wlT4c4HA3VkJ
oN9Zv+KMQ+tmqou3YERK4Ga4n3gBjQq5HS4bgm9QrJJyollMwzbP84xcX6MClbeo
VN4KoOwxBIFbvFoSZTAt+/Qi1pN88BnquTZ7QOymYftuCIVHFsYJlmvuCkv6I+YG
eLT3G/IVixfZ+6Ej/vBSDNkbHV5H/kFJjUb+K2d0t30EEKCCxHdsTBfn1YLEB7dC
GJ9KbHxyMKUdy0Mb5clR1a0fEHOArhNDJD9UpxhHPfb9ShajudLymNglVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNOWBe7xo0R5D36jy6c8nSK7J9shMB8GA1UdIwQY
MBaAFI1ZxDI/dnzk/8hdqtIIuQwE+9PpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUt
ZjJiZTlmNmM2NjRjLzEvMDVZRjd2R2pSSGtQZnFQTHB6eWRJcnNuMnlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9mMDllY2YtZTgwNS00MTU4LWIzMTUtZjJiZTlmNmM2NjRj
LzEvalZuRU1qOTJmT1RfeUYycTBnaTVEQVQ3MC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Q7jMA0G
CSqGSIb3DQEBCwUAA4IBAQAt/cXLxYaiwda/46SF/hhfXXBMzupN1Dg2d1o/0o9F
gf3KxAhnHYHbMUP0bnzwcjgAaoQrPtTyE8fDv8bNQkWwV7MhxO0RYOgPnNrwG00L
jFLo0PDknBl6vrDflihQFfIEPi/o1K9o5uQnwTRxXQ8vVtW61zirr0rP5VGbDqcg
Rh/62iY59UzkUSHT9m1k8HkQhkuM9OvBNawzNA/l5gvYRACF8V869ZuxxVl2UJCF
wzODexohegnFEkXqzLW2Ntevn2PAFonsBGL4BmBvKAVyLZ7wlRHJGDbdgxA5t+ac
9yAUhR5k9AiGPug8HPWr8D5WTwoeWnjIQf4J5/CY4pKX
-----END CERTIFICATE-----
Generated at Mon Jun 17 12:23:13 2024 by rpki-client on console-ams.rpki-client.org