Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/Yg6iJyNu_zvQV2x7kmzYbTREUF0.roa
File: Yg6iJyNu_zvQV2x7kmzYbTREUF0.roa (raw, json)
Hash identifier: UTlaqhYCoY+oHZ+seZylPNSakMy6I0P7yu/Ali0kir8=
Subject key identifier: 62:0E:A2:27:23:6E:FF:3B:D0:57:6C:7B:92:6C:D8:6D:34:44:50:5D
Certificate issuer: /CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Certificate serial: 018CC49344002F6208704C9985F122431916
Authority key identifier: E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/Yg6iJyNu_zvQV2x7kmzYbTREUF0.roa
Signing time: Mon 01 Jan 2024 10:30:34 +0000
ROA not before: Mon 01 Jan 2024 10:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47961
IP address blocks: 91.207.34.0/24 maxlen: 24
91.207.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.mft
rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:44:00:2f:62:08:70:4c:99:85:f1:22:43:19:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e68ce86d409e824376560fe3b1a168f2ba0082e3
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=620ea227236eff3bd0576c7b926cd86d3444505d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f4:4e:9f:90:05:9e:aa:2c:a2:7a:01:d6:ad:
8f:f9:37:77:9d:0d:55:84:33:63:db:ce:61:41:54:
5a:97:0b:8f:04:53:b6:63:f5:d4:b7:0b:b2:2b:5f:
90:6b:25:97:48:c8:75:15:d9:0d:75:71:f1:f3:e2:
d5:5e:46:c9:00:bf:c9:e9:8f:a0:93:71:e4:bc:0e:
f8:1c:a3:e5:c1:4b:6d:2e:5c:99:9a:d8:1c:e2:54:
ab:c1:4c:76:ec:78:bc:1f:d6:56:70:6c:b3:3f:6a:
19:2a:e5:46:fc:bd:46:eb:8d:7f:61:cf:ff:05:e6:
a9:44:bb:13:39:8e:25:18:5a:9d:18:37:4c:bf:c0:
df:fa:d1:bb:ab:61:63:c7:3f:2b:43:07:84:12:07:
b8:3f:7f:99:01:0b:fd:71:ee:c4:66:6c:32:47:76:
be:3c:c8:5b:08:cc:5c:85:e8:67:0e:ea:9b:80:f5:
e3:70:0e:46:53:f7:c1:f4:90:44:34:6d:5a:c3:0b:
7d:83:0e:81:cd:42:33:38:e8:da:4f:d0:cd:da:f9:
6f:b1:a1:73:88:a5:ca:ee:73:6a:d4:27:46:88:7b:
96:f6:95:ab:6a:85:46:ae:33:6d:d4:2f:09:a2:9a:
08:08:57:5c:2d:05:55:68:fd:ff:ed:3c:ad:93:09:
6d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0E:A2:27:23:6E:FF:3B:D0:57:6C:7B:92:6C:D8:6D:34:44:50:5D
X509v3 Authority Key Identifier:
keyid:E6:8C:E8:6D:40:9E:82:43:76:56:0F:E3:B1:A1:68:F2:BA:00:82:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5ozobUCegkN2Vg_jsaFo8roAguM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/Yg6iJyNu_zvQV2x7kmzYbTREUF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/235e61-42e4-4225-8fa6-0cadd847448b/1/5ozobUCegkN2Vg_jsaFo8roAguM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.34.0/23
Signature Algorithm: sha256WithRSAEncryption
94:98:06:01:10:d0:72:f7:6b:23:d0:ce:06:a5:ed:a4:57:b1:
58:44:98:ff:2a:74:7a:20:b6:82:f8:af:cd:92:b8:c2:10:c2:
10:fd:dd:e4:05:3a:a5:6f:64:a4:9d:1c:fb:cd:3c:d0:65:8c:
15:33:15:fb:ba:fb:30:a1:81:8d:66:0c:6c:81:75:02:98:bf:
f7:69:ee:0d:a5:17:dc:8f:fe:44:d4:e4:2f:77:b6:5e:f9:9c:
dd:4a:a9:9c:11:f6:65:aa:b0:30:3b:cc:b0:0c:da:ec:01:2b:
f5:58:67:9c:34:5b:eb:36:af:6c:3d:ee:11:c6:94:ce:fc:0e:
b6:7f:55:33:a1:d4:08:c5:3d:b9:16:91:23:10:ae:6a:b4:ac:
5d:6b:df:87:90:1f:ae:dd:8a:65:3f:78:60:a9:05:d5:51:66:
2b:73:61:4c:11:58:f4:f6:cb:c3:88:c5:96:47:bb:af:4f:22:
41:02:02:3c:c0:af:79:19:88:53:be:58:f7:6d:e0:65:49:43:
49:b2:e0:1b:fe:ab:b0:e1:04:da:e2:78:de:e7:06:13:e6:23:
b9:76:7c:0d:47:b9:1f:47:74:7b:99:74:3c:b6:50:94:b9:84:
00:6d:d7:18:f0:f3:a3:a8:79:7f:90:d6:a5:51:52:ed:55:75:
4b:0b:d7:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk0QAL2IIcEyZhfEiQxkWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2OGNlODZkNDA5ZTgyNDM3NjU2MGZlM2IxYTE2OGYyYmEw
MDgyZTMwHhcNMjQwMTAxMTAzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MjBlYTIyNzIzNmVmZjNiZDA1NzZjN2I5MjZjZDg2ZDM0NDQ1MDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPROn5AFnqosonoB1q2P+Td3nQ1V
hDNj285hQVRalwuPBFO2Y/XUtwuyK1+QayWXSMh1FdkNdXHx8+LVXkbJAL/J6Y+g
k3HkvA74HKPlwUttLlyZmtgc4lSrwUx27Hi8H9ZWcGyzP2oZKuVG/L1G641/Yc//
BeapRLsTOY4lGFqdGDdMv8Df+tG7q2Fjxz8rQweEEge4P3+ZAQv9ce7EZmwyR3a+
PMhbCMxchehnDuqbgPXjcA5GU/fB9JBENG1awwt9gw6BzUIzOOjaT9DN2vlvsaFz
iKXK7nNq1CdGiHuW9pWraoVGrjNt1C8JopoICFdcLQVVaP3/7TytkwltgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGIOoicjbv870Fdse5Js2G00RFBdMB8GA1UdIwQY
MBaAFOaM6G1AnoJDdlYP47GhaPK6AILjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYt
MGNhZGQ4NDc0NDhiLzEvWWc2aUp5TnVfenZRVjJ4N2ttelliVFJFVUYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8yMzVlNjEtNDJlNC00MjI1LThmYTYtMGNhZGQ4NDc0NDhi
LzEvNW96b2JVQ2Vna04yVmdfanNhRm84cm9BZ3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW88iMA0G
CSqGSIb3DQEBCwUAA4IBAQCUmAYBENBy92sj0M4Gpe2kV7FYRJj/KnR6ILaC+K/N
krjCEMIQ/d3kBTqlb2SknRz7zTzQZYwVMxX7uvswoYGNZgxsgXUCmL/3ae4NpRfc
j/5E1OQvd7Ze+ZzdSqmcEfZlqrAwO8ywDNrsASv1WGecNFvrNq9sPe4RxpTO/A62
f1UzodQIxT25FpEjEK5qtKxda9+HkB+u3YplP3hgqQXVUWYrc2FMEVj09svDiMWW
R7uvTyJBAgI8wK95GYhTvlj3beBlSUNJsuAb/quw4QTa4nje5wYT5iO5dnwNR7kf
R3R7mXQ8tlCUuYQAbdcY8POjqHl/kNalUVLtVXVLC9cd
-----END CERTIFICATE-----
Generated at Sun May 19 06:14:38 2024 by rpki-client on console-fra.rpki-client.org