Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/yC3Kmebx6JK4SuSKJ2RZrJJ1g4Y.roa
File: yC3Kmebx6JK4SuSKJ2RZrJJ1g4Y.roa (raw, json)
Hash identifier: 22myZcMxlSLHqDBDHmUG5GN0PGlcVmlsUPaKkmbVLtg=
Subject key identifier: C8:2D:CA:99:E6:F1:E8:92:B8:4A:E4:8A:27:64:59:AC:92:75:83:86
Certificate issuer: /CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Certificate serial: 01925180CF517EEAE509EDA5DFD55701B0E1
Authority key identifier: AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/yC3Kmebx6JK4SuSKJ2RZrJJ1g4Y.roa
Signing time: Thu 03 Oct 2024 08:30:49 +0000
ROA not before: Thu 03 Oct 2024 08:30:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61207
IP address blocks: 212.16.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.mft
rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:80:cf:51:7e:ea:e5:09:ed:a5:df:d5:57:01:b0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af938503d72931626dcb8d1e946b2ae06a73d02e
Validity
Not Before: Oct 3 08:30:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c82dca99e6f1e892b84ae48a276459ac92758386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3f:0d:f6:ae:fa:81:be:2b:b5:47:27:d0:23:
66:88:61:e9:d7:a1:61:ef:1c:68:0a:a2:b6:ff:8a:
de:4a:f6:ca:52:ea:97:18:c3:b9:f0:50:3a:ac:f7:
fe:64:08:f3:2a:3d:5a:d1:e4:f3:7e:85:ff:07:7f:
2a:31:0a:8a:fa:d4:ec:80:19:55:08:34:9e:a3:a4:
60:75:97:a5:2f:63:9c:21:2c:6f:2c:89:2a:fc:99:
52:da:81:c8:37:bb:ac:98:8f:73:87:49:6f:a4:7e:
99:56:79:ac:5a:28:0d:a1:25:3a:72:dd:9f:eb:fd:
b2:f3:69:d3:3f:d5:5e:a5:35:b1:d9:58:be:84:94:
76:2f:0c:aa:23:bc:bb:2c:63:12:e0:e6:ea:3a:70:
b0:71:d5:a5:c9:3b:e6:56:10:68:5b:fd:0a:b7:06:
e4:ce:01:19:b4:e0:11:fb:c6:33:f5:74:d6:09:c6:
ae:94:36:e2:51:7c:48:e2:4c:cc:0c:12:1f:d4:83:
81:27:f1:b8:c8:03:2e:75:8f:a9:ca:c9:80:a9:d2:
a4:91:4f:ca:67:49:76:e1:d5:7c:53:96:e4:55:a9:
35:4f:d3:43:a3:39:81:f0:62:4b:ab:54:77:1d:33:
f1:df:07:30:e0:eb:f4:5a:f0:9a:bb:3b:07:cd:07:
b7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2D:CA:99:E6:F1:E8:92:B8:4A:E4:8A:27:64:59:AC:92:75:83:86
X509v3 Authority Key Identifier:
keyid:AF:93:85:03:D7:29:31:62:6D:CB:8D:1E:94:6B:2A:E0:6A:73:D0:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r5OFA9cpMWJty40elGsq4Gpz0C4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/yC3Kmebx6JK4SuSKJ2RZrJJ1g4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/7e6369-5adb-45cd-bd2f-3b8b0d1a59a9/1/r5OFA9cpMWJty40elGsq4Gpz0C4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.184.0/22
Signature Algorithm: sha256WithRSAEncryption
56:d0:e5:e2:24:a2:1c:84:ee:79:f0:6d:62:42:4f:8d:13:03:
ee:ee:34:82:a7:a2:35:69:7a:6b:23:f4:4e:d3:a2:8c:d8:56:
ff:a1:b1:00:e9:ab:a7:96:eb:48:3e:a8:58:d0:e5:68:62:6e:
a8:ae:51:a7:89:7d:6c:fb:59:6f:33:7b:9a:1b:f5:9d:69:0e:
fe:b6:10:80:60:7b:01:58:e8:1a:66:0d:a5:61:59:36:6d:14:
e6:fd:55:83:98:ce:2e:ba:ae:76:b6:4e:7a:7b:be:fc:bf:7c:
1b:b3:0c:f7:4d:f6:6d:cf:a6:1c:cb:e6:67:f4:b9:ee:70:3a:
ff:ae:e5:69:98:9f:66:3e:c5:f7:e2:d8:99:e1:d3:70:68:17:
d9:88:1f:82:33:3d:98:d1:d3:34:f2:7b:9a:3e:14:30:45:16:
96:fa:82:7a:7e:0b:36:fb:f5:fe:86:0b:d9:c5:5d:a5:71:6d:
ee:ed:d1:ff:19:59:12:57:5e:63:34:62:dd:6b:49:c1:f1:05:
22:b7:d6:d6:ce:0b:17:24:d0:ec:7a:2b:70:d5:ec:cb:96:47:
94:3d:bb:71:a7:23:3d:f3:f8:8a:76:e4:88:6b:89:5d:3c:d4:
66:5f:be:31:7e:ef:ba:e8:b4:91:68:42:f8:98:4f:58:2c:96:
71:39:02:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJRgM9RfurlCe2l39VXAbDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOTM4NTAzZDcyOTMxNjI2ZGNiOGQxZTk0NmIyYWUwNmE3
M2QwMmUwHhcNMjQxMDAzMDgzMDQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODJkY2E5OWU2ZjFlODkyYjg0YWU0OGEyNzY0NTlhYzkyNzU4Mzg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT8N9q76gb4rtUcn0CNmiGHp16Fh
7xxoCqK2/4reSvbKUuqXGMO58FA6rPf+ZAjzKj1a0eTzfoX/B38qMQqK+tTsgBlV
CDSeo6RgdZelL2OcISxvLIkq/JlS2oHIN7usmI9zh0lvpH6ZVnmsWigNoSU6ct2f
6/2y82nTP9VepTWx2Vi+hJR2LwyqI7y7LGMS4ObqOnCwcdWlyTvmVhBoW/0Ktwbk
zgEZtOAR+8Yz9XTWCcaulDbiUXxI4kzMDBIf1IOBJ/G4yAMudY+pysmAqdKkkU/K
Z0l24dV8U5bkVak1T9NDozmB8GJLq1R3HTPx3wcw4Ov0WvCauzsHzQe3IQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMgtypnm8eiSuErkiidkWaySdYOGMB8GA1UdIwQY
MBaAFK+ThQPXKTFibcuNHpRrKuBqc9AuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYt
M2I4YjBkMWE1OWE5LzEveUMzS21lYng2Sks0U3VTS0oyUlpySkoxZzRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi83ZTYzNjktNWFkYi00NWNkLWJkMmYtM2I4YjBkMWE1OWE5
LzEvcjVPRkE5Y3BNV0p0eTQwZWxHc3E0R3B6MEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1BC4MA0G
CSqGSIb3DQEBCwUAA4IBAQBW0OXiJKIchO558G1iQk+NEwPu7jSCp6I1aXprI/RO
06KM2Fb/obEA6aunlutIPqhY0OVoYm6orlGniX1s+1lvM3uaG/WdaQ7+thCAYHsB
WOgaZg2lYVk2bRTm/VWDmM4uuq52tk56e778v3wbswz3TfZtz6Ycy+Zn9LnucDr/
ruVpmJ9mPsX34tiZ4dNwaBfZiB+CMz2Y0dM08nuaPhQwRRaW+oJ6fgs2+/X+hgvZ
xV2lcW3u7dH/GVkSV15jNGLda0nB8QUit9bWzgsXJNDseitw1ezLlkeUPbtxpyM9
8/iKduSIa4ldPNRmX74xfu+66LSRaEL4mE9YLJZxOQKq
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:42 2024 by rpki-client on console-fra.rpki-client.org