Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/YPtN1B3M3SQn4MPVGdMZZt64FSo.roa
File: YPtN1B3M3SQn4MPVGdMZZt64FSo.roa (raw, json)
Hash identifier: IXTXt0yoxdA9qTWi5e8w8gHgvqwQq5aR6SW3axxbT84=
Subject key identifier: 60:FB:4D:D4:1D:CC:DD:24:27:E0:C3:D5:19:D3:19:66:DE:B8:15:2A
Certificate issuer: /CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Certificate serial: 018DA28C051469F01207BD51318F91CF6079
Authority key identifier: 0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/YPtN1B3M3SQn4MPVGdMZZt64FSo.roa
Signing time: Tue 13 Feb 2024 12:58:21 +0000
ROA not before: Tue 13 Feb 2024 12:58:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15395
IP address blocks: 193.142.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:8c:05:14:69:f0:12:07:bd:51:31:8f:91:cf:60:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf3bcfa0ba82d93d14f85587027a7e773511a61
Validity
Not Before: Feb 13 12:58:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60fb4dd41dccdd2427e0c3d519d31966deb8152a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:9e:3c:73:c1:f5:ad:bf:89:c7:36:f0:9d:27:
46:50:40:e2:67:cc:d1:1a:67:4c:f8:bc:30:f7:21:
3c:5f:31:a4:6a:47:f6:f3:a0:c2:38:b5:f8:0f:8d:
68:9e:bd:87:1d:a1:e1:46:0d:a7:b4:6c:27:ff:cd:
5b:38:9a:8b:2c:10:e5:77:65:a3:f7:46:df:b3:c4:
96:73:03:78:8e:62:18:44:53:c8:b2:89:4a:28:2a:
dd:c1:78:90:3c:7b:07:b6:42:ee:94:dc:2a:b0:34:
c2:72:e4:aa:85:c6:5f:82:b2:9e:30:58:80:1f:b9:
f0:a3:15:a4:92:13:f5:cf:dc:8b:ab:21:2a:b9:c4:
64:02:3f:dc:5c:cb:89:d5:91:28:82:6c:12:a8:e4:
b4:8d:f9:9b:e7:2e:92:50:5c:f3:a2:d9:51:ea:4a:
d3:63:8d:24:10:c2:ed:e6:c0:ca:41:b4:9f:44:05:
b6:3f:68:d9:6b:ec:f1:dd:f8:78:19:c4:8a:c3:3d:
3f:f7:6d:83:2c:2d:8e:c3:fd:70:38:94:b3:df:f9:
4b:bd:8f:db:f9:b5:00:b4:b4:da:a0:d5:a1:bc:79:
c3:23:1a:68:1b:d2:03:14:1b:4c:9c:24:47:4a:74:
f6:ee:25:57:0b:13:1e:b9:97:d1:a2:90:6c:05:36:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FB:4D:D4:1D:CC:DD:24:27:E0:C3:D5:19:D3:19:66:DE:B8:15:2A
X509v3 Authority Key Identifier:
keyid:0B:F3:BC:FA:0B:A8:2D:93:D1:4F:85:58:70:27:A7:E7:73:51:1A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_O8-guoLZPRT4VYcCen53NRGmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/YPtN1B3M3SQn4MPVGdMZZt64FSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/6d45c9-b2ca-40b7-80fe-a633125b7e23/1/C_O8-guoLZPRT4VYcCen53NRGmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.244.0/24
Signature Algorithm: sha256WithRSAEncryption
59:26:d8:e2:e5:8e:b0:da:16:49:d9:99:54:77:1b:3d:d8:c5:
fd:cf:78:a2:9b:16:62:be:93:2e:3a:66:54:40:67:ee:43:cb:
3e:27:2a:b7:63:ea:cd:f0:ff:b3:ec:f1:0d:b8:8a:bc:f9:28:
f3:40:64:ea:53:b3:5d:24:0f:ec:b3:f0:ea:a0:f0:5e:fd:8b:
05:0f:c6:58:9d:04:b1:63:ea:22:1a:d1:01:1c:4e:23:95:ac:
6c:87:d5:2e:8b:be:3f:94:ac:51:79:fd:4b:a8:3e:9f:9b:0e:
99:26:8e:35:f9:04:a6:77:ff:a2:c4:36:b8:fc:e2:27:73:6c:
77:14:6b:37:90:88:7f:8e:e1:0f:88:e5:37:22:3c:cf:e4:40:
a1:df:95:8d:ca:3e:46:75:85:bd:52:ac:bb:b3:9b:2f:2a:0a:
a2:fe:5d:ce:a3:44:45:10:2d:c1:74:0c:19:2d:db:3d:0c:ae:
fe:4b:08:61:c5:15:e1:26:60:67:33:86:cd:8d:2d:c2:cb:1a:
85:37:66:74:36:ac:d9:54:0d:4d:2e:bd:60:51:ae:f5:be:ee:
3b:e9:3b:0f:df:6a:11:0b:b0:e1:f3:d6:90:28:8b:0c:e6:49:
5a:79:ac:b1:19:01:99:de:48:bc:b0:5e:9e:4d:58:87:c4:1b:
b9:04:b3:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2ijAUUafASB71RMY+Rz2B5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiZjNiY2ZhMGJhODJkOTNkMTRmODU1ODcwMjdhN2U3NzM1
MTFhNjEwHhcNMjQwMjEzMTI1ODIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MGZiNGRkNDFkY2NkZDI0MjdlMGMzZDUxOWQzMTk2NmRlYjgxNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwp48c8H1rb+JxzbwnSdGUEDiZ8zR
GmdM+Lww9yE8XzGkakf286DCOLX4D41onr2HHaHhRg2ntGwn/81bOJqLLBDld2Wj
90bfs8SWcwN4jmIYRFPIsolKKCrdwXiQPHsHtkLulNwqsDTCcuSqhcZfgrKeMFiA
H7nwoxWkkhP1z9yLqyEqucRkAj/cXMuJ1ZEogmwSqOS0jfmb5y6SUFzzotlR6krT
Y40kEMLt5sDKQbSfRAW2P2jZa+zx3fh4GcSKwz0/922DLC2Ow/1wOJSz3/lLvY/b
+bUAtLTaoNWhvHnDIxpoG9IDFBtMnCRHSnT27iVXCxMeuZfRopBsBTZqOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGD7TdQdzN0kJ+DD1RnTGWbeuBUqMB8GA1UdIwQY
MBaAFAvzvPoLqC2T0U+FWHAnp+dzURphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUt
YTYzMzEyNWI3ZTIzLzEvWVB0TjFCM00zU1FuNE1QVkdkTVpadDY0RlNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny82ZDQ1YzktYjJjYS00MGI3LTgwZmUtYTYzMzEyNWI3ZTIz
LzEvQ19POC1ndW9MWlBSVDRWWWNDZW41M05SR21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY70MA0G
CSqGSIb3DQEBCwUAA4IBAQBZJtji5Y6w2hZJ2ZlUdxs92MX9z3iimxZivpMuOmZU
QGfuQ8s+Jyq3Y+rN8P+z7PENuIq8+SjzQGTqU7NdJA/ss/DqoPBe/YsFD8ZYnQSx
Y+oiGtEBHE4jlaxsh9Uui74/lKxRef1LqD6fmw6ZJo41+QSmd/+ixDa4/OInc2x3
FGs3kIh/juEPiOU3IjzP5ECh35WNyj5GdYW9Uqy7s5svKgqi/l3Oo0RFEC3BdAwZ
Lds9DK7+SwhhxRXhJmBnM4bNjS3CyxqFN2Z0NqzZVA1NLr1gUa71vu476TsP32oR
C7Dh89aQKIsM5klaeayxGQGZ3ki8sF6eTViHxBu5BLNf
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:34:09 2024 by rpki-client on console-fra.rpki-client.org