Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/Yu0uzK8PWswoQ0qCw8lJIuYGv7E.roa
File: Yu0uzK8PWswoQ0qCw8lJIuYGv7E.roa (raw, json)
Hash identifier: aV9ijG5xbK2AlYOJNT1d1Ex2iHxCo5sGJvE+INOlCs8=
Subject key identifier: 62:ED:2E:CC:AF:0F:5A:CC:28:43:4A:82:C3:C9:49:22:E6:06:BF:B1
Certificate issuer: /CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Certificate serial: 0190D986590937FE8F4BFD7FB233A57FBB9F
Authority key identifier: AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/Yu0uzK8PWswoQ0qCw8lJIuYGv7E.roa
Signing time: Mon 22 Jul 2024 08:19:38 +0000
ROA not before: Mon 22 Jul 2024 08:19:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30962
IP address blocks: 193.200.128.0/24 maxlen: 24
2001:67c:208::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:d9:86:59:09:37:fe:8f:4b:fd:7f:b2:33:a5:7f:bb:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee1d3a425edbd9d8adad04106ab12d7c76ac132
Validity
Not Before: Jul 22 08:19:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62ed2eccaf0f5acc28434a82c3c94922e606bfb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:82:2a:39:5d:04:1a:27:2e:b1:2f:11:ff:
ca:9f:da:b9:cc:80:5d:60:6d:20:30:fe:ab:53:d4:
38:b8:8e:9e:f1:3b:9d:97:33:d7:16:13:ad:84:de:
e2:8c:6d:51:64:ac:6b:c8:97:20:d5:45:0f:b0:f9:
97:62:31:a0:cf:aa:58:58:93:31:c9:07:d9:d9:7c:
8f:78:6a:3e:55:b2:51:63:14:71:b0:be:00:b4:cd:
c6:77:7c:02:0d:be:f1:0d:75:bd:10:94:c4:9d:4d:
83:3e:dc:2a:43:98:42:a3:b0:cc:a4:3d:04:c9:bb:
2c:ff:a0:67:b8:02:cc:02:bc:3e:5d:a7:d6:12:ab:
5e:18:58:b4:d8:8f:61:b1:b2:04:de:6f:d5:39:de:
da:4d:c9:a8:af:d5:05:a4:f5:ab:1e:1e:45:74:5e:
8f:fb:7d:32:b5:d1:0e:b0:7e:80:81:ed:d5:13:e2:
94:43:3b:f2:73:91:1e:da:a9:a2:6a:1e:39:e0:c5:
06:a8:5d:c6:d3:fc:cc:c7:34:64:79:09:db:4f:a4:
bd:c7:b1:91:3b:d5:13:98:96:74:10:b4:a6:6d:27:
2b:da:5a:10:de:c9:99:c1:41:34:d7:73:a8:7b:2d:
4f:53:19:ee:50:d3:cd:ed:ab:05:03:7f:10:2f:f3:
d3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:ED:2E:CC:AF:0F:5A:CC:28:43:4A:82:C3:C9:49:22:E6:06:BF:B1
X509v3 Authority Key Identifier:
keyid:AE:E1:D3:A4:25:ED:BD:9D:8A:DA:D0:41:06:AB:12:D7:C7:6A:C1:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruHTpCXtvZ2K2tBBBqsS18dqwTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/Yu0uzK8PWswoQ0qCw8lJIuYGv7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/aca4ad-1df0-4797-9a90-fbe5fdcf0ed3/1/ruHTpCXtvZ2K2tBBBqsS18dqwTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.128.0/24
IPv6:
2001:67c:208::/48
Signature Algorithm: sha256WithRSAEncryption
00:f7:5a:82:54:78:58:d1:82:fe:17:2f:9c:42:10:7d:31:e8:
76:0a:64:72:75:4b:8f:52:88:e1:81:05:17:30:dc:f2:93:a4:
04:10:bc:14:e5:27:2f:fa:6a:17:4e:ec:8a:cc:f0:66:6f:92:
0f:b3:b1:5f:6f:e8:99:08:61:cd:ad:4e:6c:61:04:94:e5:fb:
f8:8d:ca:2e:23:e3:2b:8b:3c:e6:2b:39:fd:81:03:a5:c7:8f:
7c:95:48:fc:6d:13:e7:31:03:07:56:47:6d:ca:d3:fb:70:5e:
31:46:4a:e4:be:8c:f7:ed:57:c7:9b:fd:5d:ed:ab:f6:0e:f5:
30:cc:54:30:22:7c:e0:a6:61:e8:9b:a5:2e:25:f2:9d:ce:2f:
96:3c:9f:63:e2:27:77:35:96:0a:2c:61:4e:d3:39:64:08:dd:
5e:1a:35:6d:82:76:22:a9:1b:49:87:96:cb:2d:04:4c:6c:fb:
c0:33:f2:91:cc:0f:e8:6a:c9:19:15:44:c7:59:98:6e:71:f2:
f7:0d:f2:5a:6a:c1:18:fb:63:be:ed:5e:a3:f9:6d:df:bc:fd:
a7:52:aa:bb:d1:ef:10:40:cf:d3:ff:20:65:f6:f5:88:83:0e:
6f:ec:ec:27:e1:bf:d1:41:7b:a4:71:88:52:67:71:c4:c3:5c:
8d:9a:65:68
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZDZhlkJN/6PS/1/sjOlf7ufMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTFkM2E0MjVlZGJkOWQ4YWRhZDA0MTA2YWIxMmQ3Yzc2
YWMxMzIwHhcNMjQwNzIyMDgxOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MmVkMmVjY2FmMGY1YWNjMjg0MzRhODJjM2M5NDkyMmU2MDZiZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwIiCKjldBBonLrEvEf/Kn9q5zIBd
YG0gMP6rU9Q4uI6e8TudlzPXFhOthN7ijG1RZKxryJcg1UUPsPmXYjGgz6pYWJMx
yQfZ2XyPeGo+VbJRYxRxsL4AtM3Gd3wCDb7xDXW9EJTEnU2DPtwqQ5hCo7DMpD0E
ybss/6BnuALMArw+XafWEqteGFi02I9hsbIE3m/VOd7aTcmor9UFpPWrHh5FdF6P
+30ytdEOsH6Age3VE+KUQzvyc5Ee2qmiah454MUGqF3G0/zMxzRkeQnbT6S9x7GR
O9UTmJZ0ELSmbScr2loQ3smZwUE013Ooey1PUxnuUNPN7asFA38QL/PTQQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFGLtLsyvD1rMKENKgsPJSSLmBr+xMB8GA1UdIwQY
MBaAFK7h06Ql7b2ditrQQQarEtfHasEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVIVHBDWHR2WjJLMnRCQkJxc1MxOGRxd1RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9hY2E0YWQtMWRmMC00Nzk3LTlhOTAt
ZmJlNWZkY2YwZWQzLzEvWXUwdXpLOFBXc3dvUTBxQ3c4bEpJdVlHdjdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9hY2E0YWQtMWRmMC00Nzk3LTlhOTAtZmJlNWZkY2YwZWQz
LzEvcnVIVHBDWHR2WjJLMnRCQkJxc1MxOGRxd1RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwciAMA8E
AgACMAkDBwAgAQZ8AggwDQYJKoZIhvcNAQELBQADggEBAAD3WoJUeFjRgv4XL5xC
EH0x6HYKZHJ1S49SiOGBBRcw3PKTpAQQvBTlJy/6ahdO7IrM8GZvkg+zsV9v6JkI
Yc2tTmxhBJTl+/iNyi4j4yuLPOYrOf2BA6XHj3yVSPxtE+cxAwdWR23K0/twXjFG
SuS+jPftV8eb/V3tq/YO9TDMVDAifOCmYeibpS4l8p3OL5Y8n2PiJ3c1lgosYU7T
OWQI3V4aNW2CdiKpG0mHlsstBExs+8Az8pHMD+hqyRkVRMdZmG5x8vcN8lpqwRj7
Y77tXqP5bd+8/adSqrvR7xBAz9P/IGX29YiDDm/s7Cfhv9FBe6RxiFJnccTDXI2a
ZWg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:10 2024 by rpki-client on console-fra.rpki-client.org