Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/Zyf8gWYgtJ-uYz5-PPYMWRnXmAI.roa
File: Zyf8gWYgtJ-uYz5-PPYMWRnXmAI.roa (raw, json)
Hash identifier: LU5blXsJR9zaB3oleAUfP/Q26rxLS938XhCl+GZUu4g=
Subject key identifier: 67:27:FC:81:66:20:B4:9F:AE:63:3E:7E:3C:F6:0C:59:19:D7:98:02
Certificate issuer: /CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Certificate serial: 018CC5012343513FCF785CFFB650F095D9DB
Authority key identifier: 61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/Zyf8gWYgtJ-uYz5-PPYMWRnXmAI.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51431
IP address blocks: 185.137.24.0/24 maxlen: 24
185.137.26.0/24 maxlen: 24
185.137.25.0/24 maxlen: 24
185.137.27.0/24 maxlen: 24
185.191.77.0/24 maxlen: 24
185.191.76.0/22 maxlen: 24
185.191.76.0/24 maxlen: 24
185.191.78.0/24 maxlen: 24
185.191.79.0/24 maxlen: 24
2a0c:99c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:23:43:51:3f:cf:78:5c:ff:b6:50:f0:95:d9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61ba0be7cce380e6bb74e3c5fcea081e9799ae54
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6727fc816620b49fae633e7e3cf60c5919d79802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:f2:74:c3:23:e4:c6:cd:e5:8a:58:5e:8a:
d9:2a:a4:9c:08:05:f1:c5:80:1b:c7:e8:97:60:d4:
a2:a0:4d:cc:a8:11:f4:75:11:d5:c4:d7:0b:2f:2c:
16:e2:b1:81:e7:0f:c2:13:31:c2:f9:54:da:ed:88:
81:dd:2d:ff:d8:a7:09:6f:c3:f2:ce:1b:e6:3a:4e:
c0:84:e8:1e:65:fd:be:c1:8d:ea:ce:ca:15:19:77:
ab:a4:92:b7:2e:ce:95:ee:35:2d:95:ea:51:76:99:
57:f0:c1:8c:50:a4:0f:c6:47:d8:9d:c8:bb:7a:e1:
5d:4a:35:2a:f6:c2:9b:57:c5:3a:c4:15:11:95:84:
c7:1c:e3:97:b0:bb:5c:55:4f:a9:ba:40:36:d0:58:
dc:76:49:91:b1:1e:2e:1e:16:af:b4:3e:6c:17:f2:
0f:91:12:46:f3:e8:79:fa:94:d1:e3:ed:f3:f6:57:
60:6d:53:99:e7:ba:11:45:db:42:1f:47:64:17:a3:
7e:16:97:39:e2:76:c3:ba:ff:f9:0d:a9:a3:0e:c6:
03:7d:27:31:7c:a7:dc:a0:44:6f:93:d0:f0:82:66:
ee:10:a4:5f:1b:97:69:ba:31:9e:72:bd:1c:96:e2:
4e:ab:ce:01:a3:33:b0:97:8c:3c:5c:21:73:06:f5:
51:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:27:FC:81:66:20:B4:9F:AE:63:3E:7E:3C:F6:0C:59:19:D7:98:02
X509v3 Authority Key Identifier:
keyid:61:BA:0B:E7:CC:E3:80:E6:BB:74:E3:C5:FC:EA:08:1E:97:99:AE:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YboL58zjgOa7dOPF_OoIHpeZrlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/Zyf8gWYgtJ-uYz5-PPYMWRnXmAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/a2e37d-4ba5-4165-9fd2-210d482a4b93/1/YboL58zjgOa7dOPF_OoIHpeZrlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.24.0/22
185.191.76.0/22
IPv6:
2a0c:99c0::/29
Signature Algorithm: sha256WithRSAEncryption
79:89:be:78:30:93:d6:65:30:0e:f0:a2:2d:71:f8:69:fd:93:
64:65:c2:11:fd:62:d4:46:8a:05:71:32:d4:31:32:87:ce:c3:
67:ee:64:18:c9:4c:2c:28:15:c7:ee:2f:19:d9:13:04:4a:08:
be:34:90:91:9a:a0:da:84:2f:da:31:d3:64:61:0d:50:34:06:
11:de:c0:88:96:2d:48:86:80:ca:41:9e:4b:24:66:55:3b:5a:
99:3c:51:8e:a6:8f:43:39:cf:e8:d2:23:81:ac:26:47:3e:47:
1d:56:a4:1e:41:31:37:e4:0e:69:2d:76:a8:ce:fc:7f:d0:30:
41:ab:d2:40:60:8f:a8:e3:f0:e1:49:ad:48:06:34:b9:b7:3b:
2a:fa:df:b5:4b:85:86:8c:2f:cb:3a:03:7d:2c:bd:a3:52:6a:
29:9d:94:8c:cf:9e:19:89:a3:2e:0a:b0:4a:59:5f:e1:de:74:
dc:e1:5d:cd:72:48:2e:d1:03:7c:79:8c:a9:1c:86:8e:76:ab:
cc:67:31:54:92:a0:1a:bb:b1:99:be:37:20:0c:60:0a:04:ed:
47:00:f4:c1:91:0c:85:0c:58:79:ae:4f:99:42:af:e2:7b:ed:
6a:d9:b3:62:ea:a0:47:40:d5:9e:4b:4b:df:4d:d9:01:da:3f:
b3:f8:ee:f3
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzFASNDUT/PeFz/tlDwldnbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYmEwYmU3Y2NlMzgwZTZiYjc0ZTNjNWZjZWEwODFlOTc5
OWFlNTQwHhcNMjQwMTAxMTIzMDM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NzI3ZmM4MTY2MjBiNDlmYWU2MzNlN2UzY2Y2MGM1OTE5ZDc5ODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIzydMMj5MbN5YpYXorZKqScCAXx
xYAbx+iXYNSioE3MqBH0dRHVxNcLLywW4rGB5w/CEzHC+VTa7YiB3S3/2KcJb8Py
zhvmOk7AhOgeZf2+wY3qzsoVGXerpJK3Ls6V7jUtlepRdplX8MGMUKQPxkfYnci7
euFdSjUq9sKbV8U6xBURlYTHHOOXsLtcVU+pukA20FjcdkmRsR4uHhavtD5sF/IP
kRJG8+h5+pTR4+3z9ldgbVOZ57oRRdtCH0dkF6N+Fpc54nbDuv/5DamjDsYDfScx
fKfcoERvk9DwgmbuEKRfG5dpujGecr0cluJOq84BozOwl4w8XCFzBvVRIwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFGcn/IFmILSfrmM+fjz2DFkZ15gCMB8GA1UdIwQY
MBaAFGG6C+fM44Dmu3TjxfzqCB6Xma5UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDIt
MjEwZDQ4MmE0YjkzLzEvWnlmOGdXWWd0Si11WXo1LVBQWU1XUm5YbUFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS9hMmUzN2QtNGJhNS00MTY1LTlmZDItMjEwZDQ4MmE0Yjkz
LzEvWWJvTDU4empnT2E3ZE9QRl9Pb0lIcGVacmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCuYkYAwQC
ub9MMA0EAgACMAcDBQMqDJnAMA0GCSqGSIb3DQEBCwUAA4IBAQB5ib54MJPWZTAO
8KItcfhp/ZNkZcIR/WLURooFcTLUMTKHzsNn7mQYyUwsKBXH7i8Z2RMESgi+NJCR
mqDahC/aMdNkYQ1QNAYR3sCIli1IhoDKQZ5LJGZVO1qZPFGOpo9DOc/o0iOBrCZH
PkcdVqQeQTE35A5pLXaozvx/0DBBq9JAYI+o4/DhSa1IBjS5tzsq+t+1S4WGjC/L
OgN9LL2jUmopnZSMz54ZiaMuCrBKWV/h3nTc4V3Nckgu0QN8eYypHIaOdqvMZzFU
kqAau7GZvjcgDGAKBO1HAPTBkQyFDFh5rk+ZQq/ie+1q2bNi6qBHQNWeS0vfTdkB
2j+z+O7z
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:45:39 2024 by rpki-client on console-ams.rpki-client.org