Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/YS_tSOsEUDVDRbjEHrcV-W_KMUw.roa
File: YS_tSOsEUDVDRbjEHrcV-W_KMUw.roa (raw, json)
Hash identifier: S18WkD2hGK8kdWx18Yaqvr+7XDhj2s4G4BB+SE6NyCk=
Subject key identifier: 61:2F:ED:48:EB:04:50:35:43:45:B8:C4:1E:B7:15:F9:6F:CA:31:4C
Certificate issuer: /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial: 018CC2DABF517F0803B2B268A4811FDCA187
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/YS_tSOsEUDVDRbjEHrcV-W_KMUw.roa
Signing time: Mon 01 Jan 2024 02:29:24 +0000
ROA not before: Mon 01 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35453
IP address blocks: 45.67.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:bf:51:7f:08:03:b2:b2:68:a4:81:1f:dc:a1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Validity
Not Before: Jan 1 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=612fed48eb0450354345b8c41eb715f96fca314c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:38:3c:16:c6:2e:22:5a:63:da:53:0f:eb:a9:
92:f9:f8:d5:a2:38:2a:39:f3:ff:7c:7a:35:53:91:
3c:7e:15:4c:19:9a:cb:b8:da:f7:83:71:25:b0:02:
93:ca:65:5b:f6:23:5f:2d:5b:45:2b:23:b7:9d:30:
9a:fe:8a:b6:2c:20:e4:0a:42:67:fb:aa:2b:03:ed:
e0:7f:fe:82:bf:a7:5a:1d:16:05:92:04:58:11:a6:
7d:6e:e2:d6:7b:1c:cb:3d:25:89:a2:18:6b:b3:89:
7e:6a:78:10:53:8c:45:d7:98:b3:f7:17:63:f1:fa:
f0:cb:08:9c:15:9f:19:6d:62:cc:44:2a:06:82:43:
41:af:bd:05:a2:27:55:b9:b3:d0:9f:5c:fb:b5:f5:
be:0f:87:0a:8a:cf:8d:c7:50:d9:d5:4e:b7:42:a5:
e8:95:56:87:22:d7:d8:77:90:29:57:4a:66:f1:80:
45:0c:2d:c5:1c:bb:d7:66:40:fb:12:43:a9:2f:a1:
fb:8a:0c:15:2d:66:fe:92:b9:56:35:e3:84:88:86:
31:96:42:4d:da:75:60:89:89:ff:e8:01:0c:06:d3:
5e:98:b1:29:c6:60:b4:ae:6b:92:65:18:4a:6d:18:
c4:09:a8:c0:c6:0a:48:cb:d1:2d:21:6d:5f:41:75:
02:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2F:ED:48:EB:04:50:35:43:45:B8:C4:1E:B7:15:F9:6F:CA:31:4C
X509v3 Authority Key Identifier:
keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/YS_tSOsEUDVDRbjEHrcV-W_KMUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.64.0/22
Signature Algorithm: sha256WithRSAEncryption
90:b3:9b:58:9a:2b:42:d6:d9:77:ef:5a:ef:65:82:22:dc:75:
9c:bd:4c:68:b9:b6:bd:86:44:53:72:31:c5:e3:47:12:10:09:
64:bc:d8:ee:0e:0f:5c:2a:88:c8:05:25:c3:54:c0:94:f4:e9:
db:4a:ef:cc:ab:87:5d:79:a3:eb:5f:69:cf:cb:5d:f1:87:b4:
ef:0d:6b:17:43:cb:42:ba:91:5b:18:e4:36:e8:5b:4b:9b:5c:
76:b2:f2:83:af:59:52:76:fa:3f:11:1b:f0:1c:3d:bc:2f:29:
66:5b:4d:0a:9d:00:ce:4f:2f:f9:59:98:d6:1e:ba:55:32:b6:
ab:29:6b:b1:84:39:db:75:60:41:43:46:42:48:b2:8b:40:7b:
25:d5:1f:38:43:6e:14:b5:83:58:27:08:d0:8c:80:7f:56:95:
d6:3c:6e:d2:e9:60:0f:9c:47:dd:7f:f9:86:87:1f:94:13:a0:
d1:a4:89:0a:c8:ae:dd:2e:46:69:b2:f0:ca:41:95:a2:66:83:
10:9e:05:25:f0:fe:48:9a:10:41:d0:35:eb:31:7e:f2:e4:fc:
1d:a6:ba:01:a9:f7:63:bf:60:ac:ae:8c:73:db:cf:43:85:75:
0d:b4:35:f1:50:09:c8:58:9a:2d:41:17:cc:22:ad:6b:51:6e:
f4:3e:88:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2r9RfwgDsrJopIEf3KGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWYxMTE1MGNlNWZlOWY3MGYzNmM5ODA2NzQ3YmI2ODJi
MWNhMjEwHhcNMjQwMTAxMDIyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTJmZWQ0OGViMDQ1MDM1NDM0NWI4YzQxZWI3MTVmOTZmY2EzMTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDg8FsYuIlpj2lMP66mS+fjVojgq
OfP/fHo1U5E8fhVMGZrLuNr3g3ElsAKTymVb9iNfLVtFKyO3nTCa/oq2LCDkCkJn
+6orA+3gf/6Cv6daHRYFkgRYEaZ9buLWexzLPSWJohhrs4l+angQU4xF15iz9xdj
8frwywicFZ8ZbWLMRCoGgkNBr70FoidVubPQn1z7tfW+D4cKis+Nx1DZ1U63QqXo
lVaHItfYd5ApV0pm8YBFDC3FHLvXZkD7EkOpL6H7igwVLWb+krlWNeOEiIYxlkJN
2nVgiYn/6AEMBtNemLEpxmC0rmuSZRhKbRjECajAxgpIy9EtIW1fQXUCLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGEv7UjrBFA1Q0W4xB63FflvyjFMMB8GA1UdIwQY
MBaAFEyvERUM5f6fcPNsmAZ0e7aCscohMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEs4UkZRemxfcDl3ODJ5WUJuUjd0b0t4eWlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9mMzY5NWMtZTM0MC00ZTJmLWFmZWIt
NmI5NWQzYzg5YzkxLzEvWVNfdFNPc0VVRFZEUmJqRUhyY1YtV19LTVV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9mMzY5NWMtZTM0MC00ZTJmLWFmZWItNmI5NWQzYzg5Yzkx
LzEvVEs4UkZRemxfcDl3ODJ5WUJuUjd0b0t4eWlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLUNAMA0G
CSqGSIb3DQEBCwUAA4IBAQCQs5tYmitC1tl371rvZYIi3HWcvUxouba9hkRTcjHF
40cSEAlkvNjuDg9cKojIBSXDVMCU9OnbSu/Mq4ddeaPrX2nPy13xh7TvDWsXQ8tC
upFbGOQ26FtLm1x2svKDr1lSdvo/ERvwHD28LylmW00KnQDOTy/5WZjWHrpVMrar
KWuxhDnbdWBBQ0ZCSLKLQHsl1R84Q24UtYNYJwjQjIB/VpXWPG7S6WAPnEfdf/mG
hx+UE6DRpIkKyK7dLkZpsvDKQZWiZoMQngUl8P5ImhBB0DXrMX7y5PwdproBqfdj
v2Csroxz289DhXUNtDXxUAnIWJotQRfMIq1rUW70PojQ
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:55:15 2024 by rpki-client on console-fra.rpki-client.org