Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/yio-NRG8O-iQMumeZwQcBGw91NQ.roa
File: yio-NRG8O-iQMumeZwQcBGw91NQ.roa (raw, json)
Hash identifier: SElkl2oCUJ5kwOVSjmWGtIuWY0MT8tJZMaJq5oRjP0s=
Subject key identifier: CA:2A:3E:35:11:BC:3B:E8:90:32:E9:9E:67:04:1C:04:6C:3D:D4:D4
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 018CC64B68A44A150A90724B186EF6D9CA7D
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/yio-NRG8O-iQMumeZwQcBGw91NQ.roa
Signing time: Mon 01 Jan 2024 18:31:19 +0000
ROA not before: Mon 01 Jan 2024 18:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211579
IP address blocks: 2a0e:46c4:2400::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:68:a4:4a:15:0a:90:72:4b:18:6e:f6:d9:ca:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 18:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca2a3e3511bc3be89032e99e67041c046c3dd4d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:82:b7:c7:62:17:87:17:63:fc:a7:5c:36:0e:
7d:a0:06:84:4d:e2:2f:1d:68:95:ad:e6:97:30:c6:
d2:f8:f0:89:f5:3b:90:0b:80:4f:9d:38:e5:19:ee:
73:4c:2a:f5:4c:a4:3a:49:72:fb:3a:8e:1c:d5:d6:
fe:c3:03:1c:61:86:7b:9e:63:c1:03:82:ad:cd:f8:
8f:75:6d:97:aa:35:52:b4:3a:8a:73:95:41:8a:c4:
d0:d4:08:6c:df:5f:9d:87:15:f7:f2:d2:f4:16:75:
53:b1:8e:24:6f:da:41:cc:8e:63:41:7c:2c:fe:04:
21:32:5a:ba:d0:2f:85:8d:2b:ca:83:ab:43:9a:c2:
3b:c6:57:58:e7:bc:b6:8f:c2:0b:99:fc:e8:37:80:
45:1e:27:14:7c:d9:b5:f6:ab:52:04:b0:42:03:02:
3a:8a:f4:d7:2e:f6:4c:04:2c:a7:d3:f6:99:a1:04:
a0:5e:71:18:d7:db:4a:94:71:13:8f:7a:74:e5:bc:
c7:76:d2:c4:53:98:28:fd:a2:83:ad:80:92:83:40:
f1:e1:d1:a7:7a:36:45:fa:73:f4:49:42:2b:c5:c4:
8d:0c:78:cb:ef:b4:a3:13:0f:a6:d0:47:0c:53:5f:
20:c2:c0:e8:41:bd:ec:5f:13:2f:0f:e8:76:81:5c:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:2A:3E:35:11:BC:3B:E8:90:32:E9:9E:67:04:1C:04:6C:3D:D4:D4
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/yio-NRG8O-iQMumeZwQcBGw91NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:2400::/40
Signature Algorithm: sha256WithRSAEncryption
1f:4e:cc:cf:dc:82:2b:b8:cc:c1:18:ef:5c:11:e1:dd:3d:ce:
1e:db:db:fd:7c:ca:26:cb:6b:75:c2:ba:74:29:3a:b2:62:59:
b0:61:06:69:44:42:c9:b4:14:c4:fd:5c:6b:a7:76:32:9c:7d:
c5:09:09:c6:62:95:a6:42:15:74:ba:29:35:6c:2c:05:c2:b5:
69:b2:98:39:32:a7:bf:04:21:4b:a8:94:fb:d2:14:d5:2a:b4:
ee:c1:6e:9c:da:15:1d:68:d8:e8:03:75:b6:40:78:25:4c:dc:
86:9b:9c:26:0b:92:29:1a:76:65:03:3c:58:bf:60:f7:d1:43:
03:39:34:4a:b1:74:d9:ba:06:f7:07:4b:89:24:ac:56:29:0a:
25:f1:67:50:34:63:e8:58:0d:1d:01:20:63:85:c6:8e:72:6d:
c2:07:c7:5c:e1:ca:08:4b:9e:7c:a9:cc:fb:e8:df:22:ee:30:
96:c0:32:ce:ae:d8:c3:d4:25:db:88:1e:19:4a:40:86:aa:b0:
7a:90:e4:4b:a5:c5:ca:77:3b:4e:5a:08:58:da:b3:06:5e:3e:
64:be:8a:4b:93:62:c7:9b:7c:d9:87:86:86:96:ff:7d:9c:2b:
e6:e9:ed:93:b9:85:61:6d:7f:89:a8:ad:e5:c5:92:9b:fb:8f:
a4:4d:5d:52
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzGS2ikShUKkHJLGG722cp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MGU1NDUwZDE0ODY3ODBhYmE1NGYwNDVlYzQ4MDJmMTlm
MGI0ZjcwHhcNMjQwMTAxMTgzMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTJhM2UzNTExYmMzYmU4OTAzMmU5OWU2NzA0MWMwNDZjM2RkNGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIK3x2IXhxdj/KdcNg59oAaETeIv
HWiVreaXMMbS+PCJ9TuQC4BPnTjlGe5zTCr1TKQ6SXL7Oo4c1db+wwMcYYZ7nmPB
A4KtzfiPdW2XqjVStDqKc5VBisTQ1Ahs31+dhxX38tL0FnVTsY4kb9pBzI5jQXws
/gQhMlq60C+FjSvKg6tDmsI7xldY57y2j8ILmfzoN4BFHicUfNm19qtSBLBCAwI6
ivTXLvZMBCyn0/aZoQSgXnEY19tKlHETj3p05bzHdtLEU5go/aKDrYCSg0Dx4dGn
ejZF+nP0SUIrxcSNDHjL77SjEw+m0EcMU18gwsDoQb3sXxMvD+h2gVzVXwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMoqPjURvDvokDLpnmcEHARsPdTUMB8GA1UdIwQY
MBaAFDcOVFDRSGeAq6VPBF7EgC8Z8LT3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgt
ODU4ZGNlNTdmY2RiLzEveWlvLU5SRzhPLWlRTXVtZVp3UWNCR3c5MU5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9mMGY3MGMtMDZlNy00MWFjLWEyYjgtODU4ZGNlNTdmY2Ri
LzEvTnc1VVVORklaNENycFU4RVhzU0FMeG53dFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKg5GxCQw
DQYJKoZIhvcNAQELBQADggEBAB9OzM/cgiu4zMEY71wR4d09zh7b2/18yibLa3XC
unQpOrJiWbBhBmlEQsm0FMT9XGundjKcfcUJCcZilaZCFXS6KTVsLAXCtWmymDky
p78EIUuolPvSFNUqtO7BbpzaFR1o2OgDdbZAeCVM3IabnCYLkikadmUDPFi/YPfR
QwM5NEqxdNm6BvcHS4kkrFYpCiXxZ1A0Y+hYDR0BIGOFxo5ybcIHx1zhyghLnnyp
zPvo3yLuMJbAMs6u2MPUJduIHhlKQIaqsHqQ5Eulxcp3O05aCFjaswZePmS+ikuT
YsebfNmHhoaW/32cK+bp7ZO5hWFtf4moreXFkpv7j6RNXVI=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:14:12 2024 by rpki-client on console-ams.rpki-client.org