Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/yAqrrJkki7RjzFjWkrqQUQadtgo.roa
File: yAqrrJkki7RjzFjWkrqQUQadtgo.roa (raw, json)
Hash identifier: BG9ubE4VajJBAcDzviVGT3zInd0VWyov5YEOzcWEjBs=
Subject key identifier: C8:0A:AB:AC:99:24:8B:B4:63:CC:58:D6:92:BA:90:51:06:9D:B6:0A
Certificate issuer: /CN=38879a78a58a485ccd8970f0432db8f3d771725b
Certificate serial: 018CC2DAFCF469050852D433A15C79E88AF9
Authority key identifier: 38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/yAqrrJkki7RjzFjWkrqQUQadtgo.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207006
IP address blocks: 185.196.232.0/22 maxlen: 24
2a0a:73c0::/29 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.mft
rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fc:f4:69:05:08:52:d4:33:a1:5c:79:e8:8a:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38879a78a58a485ccd8970f0432db8f3d771725b
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c80aabac99248bb463cc58d692ba9051069db60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f1:54:f7:3a:73:95:6f:c3:01:85:d4:c5:46:
68:3e:7d:65:8c:10:1c:51:f3:cc:cc:34:da:53:ac:
67:3b:51:b8:fd:af:61:96:23:ea:40:64:cc:8d:71:
8d:88:1c:5d:2d:c6:58:f1:ef:61:3b:cf:34:29:b7:
41:f3:89:f9:11:f8:90:05:a2:8d:dd:6f:8c:d0:5e:
b7:11:b6:41:7d:38:da:79:00:00:97:e8:23:da:6a:
b3:cd:2a:b7:46:e6:97:33:c7:83:3b:74:78:18:4c:
c6:71:2d:bf:fb:3a:06:40:ce:ef:c9:e9:c1:fb:b2:
55:88:e7:94:fb:75:7e:aa:69:0a:63:a9:d9:c0:50:
18:de:4d:b5:9d:32:7d:66:a3:a8:fc:12:f5:bb:42:
40:00:cf:13:7e:8c:91:d4:74:a3:68:31:34:27:61:
9e:c8:30:6c:6a:25:e4:85:db:27:5b:52:e4:33:1d:
f2:03:fd:08:4b:93:20:7d:19:e4:15:75:10:5c:83:
8e:64:9d:86:40:fc:44:db:ab:a9:94:38:f5:2a:02:
c4:3c:d9:aa:3e:ea:85:88:a4:b2:3f:e3:e4:07:9f:
42:9c:e4:8f:00:e6:44:8a:8f:eb:c7:f4:07:68:51:
33:4f:f3:a6:a9:13:c1:b9:5b:75:64:ec:6a:f3:8d:
e4:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0A:AB:AC:99:24:8B:B4:63:CC:58:D6:92:BA:90:51:06:9D:B6:0A
X509v3 Authority Key Identifier:
keyid:38:87:9A:78:A5:8A:48:5C:CD:89:70:F0:43:2D:B8:F3:D7:71:72:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OIeaeKWKSFzNiXDwQy2489dxcls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/yAqrrJkki7RjzFjWkrqQUQadtgo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c38797-d7fa-4a57-9f83-a16a34c46f30/1/OIeaeKWKSFzNiXDwQy2489dxcls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.196.232.0/22
IPv6:
2a0a:73c0::/29
Signature Algorithm: sha256WithRSAEncryption
05:73:63:52:38:5e:28:32:c7:fd:5e:af:36:be:ab:b7:53:48:
93:20:c1:5c:07:c2:b2:53:2b:ee:a0:54:a7:6d:97:e5:21:1b:
a3:28:f9:38:6c:66:a4:5c:78:80:8b:f7:4e:af:cf:ec:a1:b2:
48:f2:6c:8a:75:07:9a:90:fa:00:6b:64:96:bc:2b:8e:8f:76:
87:14:74:34:37:6f:07:df:ae:44:ea:8e:cf:fb:15:d4:fb:56:
56:68:92:b2:b8:e9:56:f7:a9:98:b9:f8:4a:14:65:f5:30:79:
09:66:19:f0:bb:dc:35:ae:16:74:be:37:df:77:f7:96:93:7a:
17:da:79:b6:83:42:60:80:58:d2:14:cc:5c:6f:a1:a3:c5:3a:
94:df:e9:c6:a7:13:19:89:2f:02:c2:d8:d9:ca:07:0f:85:b2:
62:12:8e:b2:b2:db:56:af:1b:7f:e2:de:d1:89:f8:6f:04:49:
ea:7a:53:3c:aa:5a:a2:9e:e0:4e:6a:1d:98:de:90:fa:32:6c:
b4:ad:3f:83:a8:86:b6:2e:cd:73:f8:de:d0:41:b5:51:b4:e1:
e5:86:13:2a:04:3f:ab:66:ef:79:dc:e0:24:bc:98:5b:8d:76:
6f:af:67:d5:7c:fc:4c:12:1e:0d:94:ec:72:fa:8a:4c:b3:d1:
ef:72:da:d6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzC2vz0aQUIUtQzoVx56Ir5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4ODc5YTc4YTU4YTQ4NWNjZDg5NzBmMDQzMmRiOGYzZDc3
MTcyNWIwHhcNMjQwMTAxMDIyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODBhYWJhYzk5MjQ4YmI0NjNjYzU4ZDY5MmJhOTA1MTA2OWRiNjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PFU9zpzlW/DAYXUxUZoPn1ljBAc
UfPMzDTaU6xnO1G4/a9hliPqQGTMjXGNiBxdLcZY8e9hO880KbdB84n5EfiQBaKN
3W+M0F63EbZBfTjaeQAAl+gj2mqzzSq3RuaXM8eDO3R4GEzGcS2/+zoGQM7vyenB
+7JViOeU+3V+qmkKY6nZwFAY3k21nTJ9ZqOo/BL1u0JAAM8TfoyR1HSjaDE0J2Ge
yDBsaiXkhdsnW1LkMx3yA/0IS5MgfRnkFXUQXIOOZJ2GQPxE26uplDj1KgLEPNmq
PuqFiKSyP+PkB59CnOSPAOZEio/rx/QHaFEzT/OmqRPBuVt1ZOxq843kdQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFMgKq6yZJIu0Y8xY1pK6kFEGnbYKMB8GA1UdIwQY
MBaAFDiHmnilikhczYlw8EMtuPPXcXJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMt
YTE2YTM0YzQ2ZjMwLzEveUFxcnJKa2tpN1JqekZqV2tycVFVUWFkdGdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jMzg3OTctZDdmYS00YTU3LTlmODMtYTE2YTM0YzQ2ZjMw
LzEvT0llYWVLV0tTRnpOaVhEd1F5MjQ4OWR4Y2xzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCucToMA0E
AgACMAcDBQMqCnPAMA0GCSqGSIb3DQEBCwUAA4IBAQAFc2NSOF4oMsf9Xq82vqu3
U0iTIMFcB8KyUyvuoFSnbZflIRujKPk4bGakXHiAi/dOr8/sobJI8myKdQeakPoA
a2SWvCuOj3aHFHQ0N28H365E6o7P+xXU+1ZWaJKyuOlW96mYufhKFGX1MHkJZhnw
u9w1rhZ0vjffd/eWk3oX2nm2g0JggFjSFMxcb6GjxTqU3+nGpxMZiS8CwtjZygcP
hbJiEo6ysttWrxt/4t7RifhvBEnqelM8qlqinuBOah2Y3pD6Mmy0rT+DqIa2Ls1z
+N7QQbVRtOHlhhMqBD+rZu953OAkvJhbjXZvr2fVfPxMEh4NlOxy+opMs9HvctrW
-----END CERTIFICATE-----
Generated at Sat Jun 8 01:59:42 2024 by rpki-client on console-fra.rpki-client.org