Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/YZRilsQK11U1nxRRprDVh_BcJ9U.roa
File: YZRilsQK11U1nxRRprDVh_BcJ9U.roa (raw, json)
Hash identifier: DO/JuQNvjqFZDbFfXsEm8GEfjXXmw//ORkWfkBhx+Uw=
Subject key identifier: 61:94:62:96:C4:0A:D7:55:35:9F:14:51:A6:B0:D5:87:F0:5C:27:D5
Certificate issuer: /CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Certificate serial: 018CC42528FE97A59F5E8E17BC87D0F3E643
Authority key identifier: 99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/YZRilsQK11U1nxRRprDVh_BcJ9U.roa
Signing time: Mon 01 Jan 2024 08:30:18 +0000
ROA not before: Mon 01 Jan 2024 08:30:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199483
IP address blocks: 185.167.0.0/22 maxlen: 24
185.221.88.0/22 maxlen: 24
185.15.24.0/22 maxlen: 24
193.164.151.0/24 maxlen: 24
31.14.0.0/22 maxlen: 24
91.209.103.0/24 maxlen: 24
2a02:f840::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:28:fe:97:a5:9f:5e:8e:17:bc:87:d0:f3:e6:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9907c7b89656dd339cb98fb7c2b0371c5926a641
Validity
Not Before: Jan 1 08:30:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61946296c40ad755359f1451a6b0d587f05c27d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:aa:c9:7d:77:77:71:10:ef:3f:60:04:ff:dc:
59:79:ba:ff:87:27:92:e1:31:7b:8d:29:33:ac:4c:
51:b3:00:6a:4d:f6:0b:fc:58:2c:8e:50:d6:75:6a:
d4:00:62:8b:c8:ce:37:bc:6b:18:84:79:e9:89:5c:
85:3c:4c:1a:d3:0c:69:63:03:a3:1a:b9:8f:ce:5e:
54:c6:d7:c1:e4:bc:71:1d:61:74:ea:24:a9:fb:9c:
92:fc:d0:d4:c6:90:b5:bc:d5:06:c0:d6:71:a3:38:
c7:55:e5:3d:6c:2c:32:ce:d9:a3:99:0a:5e:d5:b8:
61:cc:cf:e8:2e:f6:ec:b5:9c:d5:81:47:99:d7:f2:
84:3b:84:e3:39:2d:6a:68:4f:a0:1b:42:c9:16:b4:
de:e3:da:9c:18:d3:23:7e:34:e0:c4:c7:16:24:ba:
7c:c0:84:2f:e8:9b:7f:61:48:d7:9f:e9:2a:df:c7:
15:e8:d2:da:76:62:26:da:77:de:03:0c:69:3d:32:
ee:43:99:7f:e6:ef:65:6e:77:de:db:a9:a5:8f:73:
f6:99:15:e3:d4:54:d5:44:c1:e8:27:ca:7b:d5:bb:
bd:c7:19:05:ac:04:c3:f0:3d:81:72:ac:84:04:0b:
20:6f:67:fb:24:82:77:3e:21:18:98:3c:b2:3f:a4:
4a:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:94:62:96:C4:0A:D7:55:35:9F:14:51:A6:B0:D5:87:F0:5C:27:D5
X509v3 Authority Key Identifier:
keyid:99:07:C7:B8:96:56:DD:33:9C:B9:8F:B7:C2:B0:37:1C:59:26:A6:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQfHuJZW3TOcuY-3wrA3HFkmpkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/YZRilsQK11U1nxRRprDVh_BcJ9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7dd289-6cb5-4371-846c-93dec735f717/1/mQfHuJZW3TOcuY-3wrA3HFkmpkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.0.0/22
91.209.103.0/24
185.15.24.0/22
185.167.0.0/22
185.221.88.0/22
193.164.151.0/24
IPv6:
2a02:f840::/29
Signature Algorithm: sha256WithRSAEncryption
16:1f:9a:3b:5a:58:8a:b3:fa:6b:c1:05:80:a6:96:c9:4d:0f:
a9:c6:57:1c:5a:6b:cf:5c:42:be:8f:ce:e1:f2:aa:c1:3d:d9:
3c:52:92:5a:5e:2a:8d:c3:b4:62:79:07:84:79:c4:52:a7:2a:
44:d7:a0:36:0f:65:b5:09:ef:e0:b3:a3:0d:11:0f:5e:59:00:
90:fd:13:28:4f:3b:d2:2d:1e:7c:fd:b0:14:56:94:e6:ad:72:
ce:21:4c:be:16:a2:9c:3f:74:d8:6f:73:54:68:e9:a1:d6:1c:
19:1c:05:59:7c:80:79:aa:d3:f4:7f:95:55:a4:a9:6f:7b:67:
09:61:7b:c0:28:4d:b4:c2:f1:a9:b7:55:df:f1:62:3d:c6:65:
55:f2:44:92:b6:f6:c2:ed:6b:23:07:88:30:bf:8c:18:d9:de:
01:74:3d:08:09:c8:6b:e6:10:19:be:a3:15:b6:b5:35:c2:0c:
90:9c:41:dd:8f:02:53:45:47:84:20:b6:19:3e:c7:23:10:ac:
43:ea:5e:73:a9:c7:6f:f4:48:4e:a0:5a:ec:7b:3f:72:0b:02:
6c:99:a8:11:c6:89:11:1d:05:13:69:ba:66:19:74:8b:be:2d:
23:f2:c6:d4:d7:81:60:5c:05:76:53:57:c8:c0:89:12:67:7e:
8b:00:61:3c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAYzEJSj+l6WfXo4XvIfQ8+ZDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDdjN2I4OTY1NmRkMzM5Y2I5OGZiN2MyYjAzNzFjNTky
NmE2NDEwHhcNMjQwMTAxMDgzMDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTk0NjI5NmM0MGFkNzU1MzU5ZjE0NTFhNmIwZDU4N2YwNWMyN2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KrJfXd3cRDvP2AE/9xZebr/hyeS
4TF7jSkzrExRswBqTfYL/FgsjlDWdWrUAGKLyM43vGsYhHnpiVyFPEwa0wxpYwOj
GrmPzl5UxtfB5LxxHWF06iSp+5yS/NDUxpC1vNUGwNZxozjHVeU9bCwyztmjmQpe
1bhhzM/oLvbstZzVgUeZ1/KEO4TjOS1qaE+gG0LJFrTe49qcGNMjfjTgxMcWJLp8
wIQv6Jt/YUjXn+kq38cV6NLadmIm2nfeAwxpPTLuQ5l/5u9lbnfe26mlj3P2mRXj
1FTVRMHoJ8p71bu9xxkFrATD8D2BcqyEBAsgb2f7JIJ3PiEYmDyyP6RKEQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFGGUYpbECtdVNZ8UUaaw1YfwXCfVMB8GA1UdIwQY
MBaAFJkHx7iWVt0znLmPt8KwNxxZJqZBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMt
OTNkZWM3MzVmNzE3LzEvWVpSaWxzUUsxMVUxbnhSUnByRFZoX0JjSjlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS83ZGQyODktNmNiNS00MzcxLTg0NmMtOTNkZWM3MzVmNzE3
LzEvbVFmSHVKWlczVE9jdVktM3dyQTNIRmttcGtFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCHw4AAwQA
W9FnAwQCuQ8YAwQCuacAAwQCud1YAwQAwaSXMA0EAgACMAcDBQMqAvhAMA0GCSqG
SIb3DQEBCwUAA4IBAQAWH5o7WliKs/prwQWAppbJTQ+pxlccWmvPXEK+j87h8qrB
Pdk8UpJaXiqNw7RieQeEecRSpypE16A2D2W1Ce/gs6MNEQ9eWQCQ/RMoTzvSLR58
/bAUVpTmrXLOIUy+FqKcP3TYb3NUaOmh1hwZHAVZfIB5qtP0f5VVpKlve2cJYXvA
KE20wvGpt1Xf8WI9xmVV8kSStvbC7WsjB4gwv4wY2d4BdD0ICchr5hAZvqMVtrU1
wgyQnEHdjwJTRUeEILYZPscjEKxD6l5zqcdv9EhOoFrsez9yCwJsmagRxokRHQUT
abpmGXSLvi0j8sbU14FgXAV2U1fIwIkSZ36LAGE8
-----END CERTIFICATE-----
Generated at Fri Jun 7 21:07:44 2024 by rpki-client on console-fra.rpki-client.org