Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/cyWZPnFIJllS07ueVSDW_E86sqI.roa
File: cyWZPnFIJllS07ueVSDW_E86sqI.roa (raw, json)
Hash identifier: y7hc/ldS146o1SgPqHSVz9kQK7Js77G/wgxB62nN3rQ=
Subject key identifier: 73:25:99:3E:71:48:26:59:52:D3:BB:9E:55:20:D6:FC:4F:3A:B2:A2
Certificate issuer: /CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Certificate serial: 018CC80117C5313BE3901A69E70B1C682CF8
Authority key identifier: B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/cyWZPnFIJllS07ueVSDW_E86sqI.roa
Signing time: Tue 02 Jan 2024 02:29:24 +0000
ROA not before: Tue 02 Jan 2024 02:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12843
IP address blocks: 194.156.234.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:17:c5:31:3b:e3:90:1a:69:e7:0b:1c:68:2c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8943754e92345a8bbab3db2bc36d618e5ecc0e8
Validity
Not Before: Jan 2 02:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7325993e7148265952d3bb9e5520d6fc4f3ab2a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:2c:42:e0:1c:df:0a:b8:2f:72:7e:e1:3c:
00:06:73:94:bc:85:ef:10:80:1c:f7:c8:b8:c7:a2:
30:e5:15:c5:ac:43:ab:fe:84:15:0a:75:49:56:6a:
6e:9c:9c:93:9b:91:92:50:6b:9c:88:90:23:f8:d9:
32:9f:70:4c:ca:9d:96:70:82:d8:99:57:27:d0:02:
10:aa:ac:4b:ce:77:92:79:34:7c:1b:6b:35:7b:2e:
61:df:02:24:3f:3b:6b:46:be:d9:78:3d:4d:e3:09:
92:c8:8a:d4:3f:8d:b5:05:e3:b8:fe:29:82:fd:7d:
f2:cd:03:0d:14:f9:fb:bf:55:39:93:dc:da:e0:21:
aa:25:b9:81:7b:53:7e:d1:4c:cf:9c:0d:a6:b1:9e:
fb:11:11:f2:48:46:3d:46:13:03:70:eb:77:f4:09:
82:58:60:5c:85:d6:b5:88:d1:3d:e4:c6:09:9b:bc:
43:8d:ea:76:50:22:8d:2f:c3:71:61:48:d4:30:55:
45:d4:67:7f:df:82:c1:02:52:a8:f4:b3:bf:c4:07:
0d:10:94:f3:18:cb:76:51:75:a1:9d:d2:d1:9a:f5:
17:a1:c9:53:48:91:af:62:ce:f2:08:e4:01:07:f7:
75:ce:b1:a5:44:3e:e7:39:93:6d:9f:f2:46:8c:94:
24:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:25:99:3E:71:48:26:59:52:D3:BB:9E:55:20:D6:FC:4F:3A:B2:A2
X509v3 Authority Key Identifier:
keyid:B8:94:37:54:E9:23:45:A8:BB:AB:3D:B2:BC:36:D6:18:E5:EC:C0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJQ3VOkjRai7qz2yvDbWGOXswOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/cyWZPnFIJllS07ueVSDW_E86sqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/566ccf-04ee-4823-a7fc-3e6a14de2c47/1/uJQ3VOkjRai7qz2yvDbWGOXswOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.156.234.0/24
Signature Algorithm: sha256WithRSAEncryption
40:32:30:3e:e6:4f:3e:a2:bc:28:80:ed:8c:4e:e0:b9:bb:f0:
08:cd:40:63:88:37:0c:55:d2:41:01:4a:a3:04:c5:76:0f:63:
b4:7d:1e:21:6a:f6:bb:d7:09:3a:01:13:bc:38:5c:6d:7c:0b:
6a:fa:f1:80:a9:a3:e5:14:dc:40:88:6e:0f:b9:fd:0e:a4:44:
f8:9c:c1:c2:6a:90:e9:6e:5b:ce:d9:43:db:3e:8f:93:93:d0:
41:95:42:1f:17:52:6c:5f:8c:6d:2c:0c:80:a2:c3:24:19:67:
06:d3:fa:b8:bf:84:97:66:58:d8:f3:ba:54:a2:b8:7d:7b:16:
b9:9f:57:44:ab:aa:02:6f:de:c5:1c:c4:94:98:85:8a:71:40:
0b:ab:1b:a5:d3:48:ad:3d:74:71:0b:dd:6a:67:37:f2:b7:0e:
03:e5:d5:dd:56:fe:30:18:ea:70:d8:60:75:a3:95:eb:58:9c:
3f:f1:62:0e:8d:26:29:3a:7e:8f:cd:1a:6c:ef:46:ba:b0:b1:
c6:d7:68:73:9c:31:58:51:81:0d:37:d3:c7:f1:f6:d0:d7:f9:
19:6c:c5:d9:c9:ed:73:5c:12:5b:d1:6b:ce:a6:8c:5a:70:3a:
3b:e6:f6:ca:c4:31:17:a9:50:9e:82:43:a9:7b:61:ff:75:fd:
9b:82:00:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIARfFMTvjkBpp5wscaCz4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OTQzNzU0ZTkyMzQ1YThiYmFiM2RiMmJjMzZkNjE4ZTVl
Y2MwZTgwHhcNMjQwMTAyMDIyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzI1OTkzZTcxNDgyNjU5NTJkM2JiOWU1NTIwZDZmYzRmM2FiMmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi0sQuAc3wq4L3J+4TwABnOUvIXv
EIAc98i4x6Iw5RXFrEOr/oQVCnVJVmpunJyTm5GSUGuciJAj+Nkyn3BMyp2WcILY
mVcn0AIQqqxLzneSeTR8G2s1ey5h3wIkPztrRr7ZeD1N4wmSyIrUP421BeO4/imC
/X3yzQMNFPn7v1U5k9za4CGqJbmBe1N+0UzPnA2msZ77ERHySEY9RhMDcOt39AmC
WGBchda1iNE95MYJm7xDjep2UCKNL8NxYUjUMFVF1Gd/34LBAlKo9LO/xAcNEJTz
GMt2UXWhndLRmvUXoclTSJGvYs7yCOQBB/d1zrGlRD7nOZNtn/JGjJQkmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHMlmT5xSCZZUtO7nlUg1vxPOrKiMB8GA1UdIwQY
MBaAFLiUN1TpI0Wou6s9srw21hjl7MDoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi81NjZjY2YtMDRlZS00ODIzLWE3ZmMt
M2U2YTE0ZGUyYzQ3LzEvY3lXWlBuRklKbGxTMDd1ZVZTRFdfRTg2c3FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi81NjZjY2YtMDRlZS00ODIzLWE3ZmMtM2U2YTE0ZGUyYzQ3
LzEvdUpRM1ZPa2pSYWk3cXoyeXZEYldHT1hzd09nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpzqMA0G
CSqGSIb3DQEBCwUAA4IBAQBAMjA+5k8+orwogO2MTuC5u/AIzUBjiDcMVdJBAUqj
BMV2D2O0fR4hava71wk6ARO8OFxtfAtq+vGAqaPlFNxAiG4Puf0OpET4nMHCapDp
blvO2UPbPo+Tk9BBlUIfF1JsX4xtLAyAosMkGWcG0/q4v4SXZljY87pUorh9exa5
n1dEq6oCb97FHMSUmIWKcUALqxul00itPXRxC91qZzfytw4D5dXdVv4wGOpw2GB1
o5XrWJw/8WIOjSYpOn6PzRps70a6sLHG12hznDFYUYENN9PH8fbQ1/kZbMXZye1z
XBJb0WvOpoxacDo75vbKxDEXqVCegkOpe2H/df2bggC9
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:15:26 2024 by rpki-client on console-fra.rpki-client.org