Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/RYIPtWVXSSza31HEB8r_uZmgeTI.roa
File: RYIPtWVXSSza31HEB8r_uZmgeTI.roa (raw, json)
Hash identifier: 42kcuynvlcrgmsVZFXRCGdLIO5CNKUaxgM8+2Wb840c=
Subject key identifier: 45:82:0F:B5:65:57:49:2C:DA:DF:51:C4:07:CA:FF:B9:99:A0:79:32
Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Certificate serial: 018CC34907A3B47F4D3C31A0042D3BD0EAED
Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/RYIPtWVXSSza31HEB8r_uZmgeTI.roa
Signing time: Mon 01 Jan 2024 04:29:52 +0000
ROA not before: Mon 01 Jan 2024 04:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206409
IP address blocks: 90.158.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:07:a3:b4:7f:4d:3c:31:a0:04:2d:3b:d0:ea:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3
Validity
Not Before: Jan 1 04:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=45820fb56557492cdadf51c407caffb999a07932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:83:63:3b:d4:37:9d:98:4e:68:1e:17:d9:
48:81:8e:60:05:9b:c3:6b:d3:c2:9f:b5:4c:5a:c5:
2d:23:68:99:e6:22:04:cb:d7:86:b5:57:71:3b:25:
1a:f9:c4:30:cc:57:e2:8f:b9:0e:2b:16:6b:09:55:
8b:97:c1:57:c4:35:d1:8e:ed:4c:f5:22:9b:c3:7a:
00:15:0b:f2:0f:e4:4e:51:d4:16:4b:38:b3:53:64:
30:f0:5f:dc:9b:2b:0b:7a:7d:0f:1e:1b:f4:73:06:
db:d8:ca:3b:e5:ab:83:38:9d:cb:44:fe:44:81:b2:
39:c4:18:f2:90:ed:40:19:e6:04:94:69:96:12:6a:
66:b0:f8:f4:b9:54:bf:39:b1:56:4b:93:72:c3:2c:
62:85:d2:9c:c2:cc:44:c3:2b:e2:ca:97:96:86:45:
44:a4:32:a9:b3:75:bf:2a:80:4c:98:4e:49:c1:03:
7e:6b:14:9f:0c:3b:7d:09:22:aa:ee:73:4c:b1:5b:
71:df:44:77:f9:d4:06:2b:b9:9d:2d:58:b8:51:64:
23:37:0e:32:05:20:26:af:28:4e:54:0e:29:4a:75:
b5:d4:75:5e:4a:62:7d:f0:da:89:a8:9d:72:f2:e0:
83:84:37:06:e5:d7:dd:bf:ce:20:f7:0a:c4:e4:ca:
d3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:82:0F:B5:65:57:49:2C:DA:DF:51:C4:07:CA:FF:B9:99:A0:79:32
X509v3 Authority Key Identifier:
keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/RYIPtWVXSSza31HEB8r_uZmgeTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.158.17.0/24
Signature Algorithm: sha256WithRSAEncryption
85:44:92:4c:f1:9d:16:01:c4:60:b4:d0:bc:e1:d7:40:fc:95:
b7:44:ee:47:ce:32:ee:1d:df:cf:3a:db:3c:9b:86:60:b3:c7:
2a:c1:09:a1:5f:f4:cc:3b:1f:27:4e:af:88:24:10:85:0f:d5:
54:03:87:a1:c3:ff:ea:93:ee:e8:d5:27:bd:67:ff:b4:63:e2:
06:b8:00:29:27:6a:eb:18:31:e6:c3:76:22:87:62:26:5d:fb:
8f:48:d0:e4:85:97:aa:f0:88:c7:82:86:cf:da:a7:5e:2c:15:
ca:e6:49:8c:6f:20:cd:a8:58:a9:6e:aa:3a:7d:5a:12:36:c8:
4b:8b:0f:76:c2:ed:2a:b5:89:db:d5:d5:65:54:df:82:84:bd:
da:fb:8a:47:fb:09:ab:6f:d7:99:6d:3a:c4:5a:c4:86:35:aa:
2f:f4:7c:15:34:52:5c:20:5a:d4:69:2e:ff:51:dd:b4:d7:c8:
60:91:46:2e:14:a0:b2:0e:d6:af:23:80:8f:20:6b:c1:ae:61:
6e:2a:47:3c:ed:e7:91:c0:96:78:e9:a2:7a:28:90:f5:7f:68:
d7:9b:14:2b:16:d8:bb:44:cf:a7:72:b9:f3:9d:35:1e:30:cc:
47:07:9f:8e:3a:c2:5f:56:76:ef:ca:a4:43:a3:fa:80:eb:16:
d9:bf:bd:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSQejtH9NPDGgBC070OrtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx
ZjlkZDMwHhcNMjQwMTAxMDQyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTgyMGZiNTY1NTc0OTJjZGFkZjUxYzQwN2NhZmZiOTk5YTA3OTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFKDYzvUN52YTmgeF9lIgY5gBZvD
a9PCn7VMWsUtI2iZ5iIEy9eGtVdxOyUa+cQwzFfij7kOKxZrCVWLl8FXxDXRju1M
9SKbw3oAFQvyD+ROUdQWSzizU2Qw8F/cmysLen0PHhv0cwbb2Mo75auDOJ3LRP5E
gbI5xBjykO1AGeYElGmWEmpmsPj0uVS/ObFWS5NywyxihdKcwsxEwyviypeWhkVE
pDKps3W/KoBMmE5JwQN+axSfDDt9CSKq7nNMsVtx30R3+dQGK7mdLVi4UWQjNw4y
BSAmryhOVA4pSnW11HVeSmJ98NqJqJ1y8uCDhDcG5dfdv84g9wrE5MrT+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEWCD7VlV0ks2t9RxAfK/7mZoHkyMB8GA1UdIwQY
MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt
MzJhYTY3MzFjMjkxLzEvUllJUHRXVlhTU3phMzFIRUI4cl91Wm1nZVRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx
LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWp4RMA0G
CSqGSIb3DQEBCwUAA4IBAQCFRJJM8Z0WAcRgtNC84ddA/JW3RO5HzjLuHd/POts8
m4Zgs8cqwQmhX/TMOx8nTq+IJBCFD9VUA4ehw//qk+7o1Se9Z/+0Y+IGuAApJ2rr
GDHmw3Yih2ImXfuPSNDkhZeq8IjHgobP2qdeLBXK5kmMbyDNqFipbqo6fVoSNshL
iw92wu0qtYnb1dVlVN+ChL3a+4pH+wmrb9eZbTrEWsSGNaov9HwVNFJcIFrUaS7/
Ud2018hgkUYuFKCyDtavI4CPIGvBrmFuKkc87eeRwJZ46aJ6KJD1f2jXmxQrFti7
RM+ncrnznTUeMMxHB5+OOsJfVnbvyqRDo/qA6xbZv707
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:49:14 2024 by rpki-client on console-fra.rpki-client.org