Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/yYRI6BUhqgDZz5u0dJFeC8_JsLc.roa
File: yYRI6BUhqgDZz5u0dJFeC8_JsLc.roa (raw, json)
Hash identifier: U+U8tf9vZhdcK8bLOth+Aggy7OkQi7vrWiwbxf2jVJw=
Subject key identifier: C9:84:48:E8:15:21:AA:00:D9:CF:9B:B4:74:91:5E:0B:CF:C9:B0:B7
Certificate issuer: /CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Certificate serial: 0192FAFE96E246385BB0148D41A03B4D90DA
Authority key identifier: FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/yYRI6BUhqgDZz5u0dJFeC8_JsLc.roa
Signing time: Tue 05 Nov 2024 06:24:01 +0000
ROA not before: Tue 05 Nov 2024 06:24:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 212.87.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:fa:fe:96:e2:46:38:5b:b0:14:8d:41:a0:3b:4d:90:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff82309a6814678ad72e3f31a4fe0272f40bd986
Validity
Not Before: Nov 5 06:24:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c98448e81521aa00d9cf9bb474915e0bcfc9b0b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:91:05:89:9b:78:5f:88:71:bf:23:08:d9:c1:
10:5d:dc:8b:37:23:26:a7:f2:8f:30:e9:20:ca:c6:
7c:63:c9:28:ad:e2:b8:f3:3f:ca:13:2a:2c:8e:d6:
de:21:db:3c:9e:8e:09:85:94:85:f5:ef:ce:37:8d:
8a:42:82:1d:1b:b9:be:d0:2f:40:2e:44:cb:07:92:
a2:78:a2:98:12:cc:4c:d7:e2:42:4e:b6:d2:48:e2:
a0:57:39:99:f1:0a:04:26:6e:0a:1a:72:8e:b0:3f:
90:c2:2b:d4:b8:db:f7:89:20:84:a4:30:af:56:42:
cc:64:0b:41:c1:4c:a2:c4:31:24:ab:0e:3b:49:b6:
61:75:6d:0a:4a:ad:40:f5:1e:37:5f:b9:de:d6:8f:
44:c7:5d:29:35:5c:37:64:94:8d:0c:c2:e7:f2:18:
b1:8d:f8:95:a1:5b:3e:cd:d3:5f:48:03:6e:7a:f5:
2d:f2:a4:9a:b4:0e:f3:a3:b3:2b:dd:dc:84:59:9a:
87:c8:fe:60:27:c8:4f:27:7a:0b:7e:b1:1c:93:60:
59:7b:64:cc:a1:d4:98:79:1c:52:95:e3:f1:e1:be:
ed:fa:a8:86:5e:7b:30:86:47:dc:a0:21:54:1e:2b:
09:72:e8:29:c9:0e:a8:09:48:7f:0e:43:ce:49:c2:
bf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:84:48:E8:15:21:AA:00:D9:CF:9B:B4:74:91:5E:0B:CF:C9:B0:B7
X509v3 Authority Key Identifier:
keyid:FF:82:30:9A:68:14:67:8A:D7:2E:3F:31:A4:FE:02:72:F4:0B:D9:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/yYRI6BUhqgDZz5u0dJFeC8_JsLc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/9fa83d-b2a3-45e4-8499-f525816402bd/1/_4IwmmgUZ4rXLj8xpP4CcvQL2YY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.87.201.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:65:ad:e2:ea:84:ba:f1:ae:d1:3e:da:d6:c6:a8:d4:69:f3:
1e:b7:40:62:27:60:f8:45:a2:bf:86:a2:9f:af:09:4a:8d:10:
0b:b7:f9:82:7a:b6:34:cc:20:3f:5e:cf:49:6e:c9:3a:93:61:
44:3f:a7:77:50:8d:6b:79:43:9f:d7:0c:9b:d3:4b:9d:7c:ef:
9b:9e:6e:e2:c8:2d:af:1e:a8:95:ae:b1:e5:e8:e1:a6:4c:34:
fe:a9:6b:ba:be:6f:4c:4d:7d:a2:90:db:d6:8c:2d:49:5e:a5:
4b:81:45:8e:b6:6c:c5:6e:a4:e5:b4:62:a9:09:62:80:2f:7b:
74:d8:68:38:fb:0b:c2:ed:f0:83:f0:e3:04:40:6d:1a:7e:06:
41:af:99:5f:b5:87:e9:73:36:b2:22:ca:43:82:5e:a1:9b:02:
35:c0:90:4b:30:10:f7:47:0a:24:e3:1e:bb:99:cf:24:95:bd:
98:ee:3f:ce:08:75:97:96:36:44:b1:2e:dd:79:4f:5a:bc:08:
7f:11:07:72:5d:2b:15:6d:4f:9c:32:8c:fb:b0:e7:b8:24:82:
20:05:f8:d0:40:5c:8d:91:d3:07:25:73:14:92:99:30:07:d3:
cc:b1:20:bd:a1:79:3b:ed:8d:70:02:a1:b2:a6:9e:67:c4:7f:
e4:d6:bd:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZL6/pbiRjhbsBSNQaA7TZDaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmODIzMDlhNjgxNDY3OGFkNzJlM2YzMWE0ZmUwMjcyZjQw
YmQ5ODYwHhcNMjQxMTA1MDYyNDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTg0NDhlODE1MjFhYTAwZDljZjliYjQ3NDkxNWUwYmNmYzliMGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJEFiZt4X4hxvyMI2cEQXdyLNyMm
p/KPMOkgysZ8Y8koreK48z/KEyosjtbeIds8no4JhZSF9e/ON42KQoIdG7m+0C9A
LkTLB5KieKKYEsxM1+JCTrbSSOKgVzmZ8QoEJm4KGnKOsD+QwivUuNv3iSCEpDCv
VkLMZAtBwUyixDEkqw47SbZhdW0KSq1A9R43X7ne1o9Ex10pNVw3ZJSNDMLn8hix
jfiVoVs+zdNfSANuevUt8qSatA7zo7Mr3dyEWZqHyP5gJ8hPJ3oLfrEck2BZe2TM
odSYeRxSlePx4b7t+qiGXnswhkfcoCFUHisJcugpyQ6oCUh/DkPOScK/owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMmESOgVIaoA2c+btHSRXgvPybC3MB8GA1UdIwQY
MBaAFP+CMJpoFGeK1y4/MaT+AnL0C9mGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTkt
ZjUyNTgxNjQwMmJkLzEveVlSSTZCVWhxZ0RaejV1MGRKRmVDOF9Kc0xjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC85ZmE4M2QtYjJhMy00NWU0LTg0OTktZjUyNTgxNjQwMmJk
LzEvXzRJd21tZ1VaNHJYTGo4eHBQNENjdlFMMllZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1FfJMA0G
CSqGSIb3DQEBCwUAA4IBAQCiZa3i6oS68a7RPtrWxqjUafMet0BiJ2D4RaK/hqKf
rwlKjRALt/mCerY0zCA/Xs9Jbsk6k2FEP6d3UI1reUOf1wyb00udfO+bnm7iyC2v
HqiVrrHl6OGmTDT+qWu6vm9MTX2ikNvWjC1JXqVLgUWOtmzFbqTltGKpCWKAL3t0
2Gg4+wvC7fCD8OMEQG0afgZBr5lftYfpczayIspDgl6hmwI1wJBLMBD3Rwok4x67
mc8klb2Y7j/OCHWXljZEsS7deU9avAh/EQdyXSsVbU+cMoz7sOe4JIIgBfjQQFyN
kdMHJXMUkpkwB9PMsSC9oXk77Y1wAqGypp5nxH/k1r2/
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:37:57 2024 by rpki-client on console-fra.rpki-client.org