Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/YQaxTK7FAj_2FFDFWnq-j0TF5R8.roa
File: YQaxTK7FAj_2FFDFWnq-j0TF5R8.roa (raw, json)
Hash identifier: J+sfrqDRaIaNCnrB/qidc2XHG3Pcd1LgS59q0souwmY=
Subject key identifier: 61:06:B1:4C:AE:C5:02:3F:F6:14:50:C5:5A:7A:BE:8F:44:C5:E5:1F
Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Certificate serial: 0194236970EFBC936949C8B57FC095C394D1
Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/YQaxTK7FAj_2FFDFWnq-j0TF5R8.roa
Signing time: Wed 01 Jan 2025 19:48:20 +0000
ROA not before: Wed 01 Jan 2025 19:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199653
IP address blocks: 89.36.212.0/22 maxlen: 24
89.38.148.0/22 maxlen: 24
89.40.112.0/22 maxlen: 24
94.177.232.0/21 maxlen: 24
94.177.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 22:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:70:ef:bc:93:69:49:c8:b5:7f:c0:95:c3:94:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c
Validity
Not Before: Jan 1 19:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6106b14caec5023ff61450c55a7abe8f44c5e51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:1d:c1:f9:1a:84:be:2d:37:39:1c:d1:08:
2b:ec:d7:67:13:3e:93:89:6b:3a:f4:1f:94:22:89:
7d:b0:00:91:e2:d8:81:79:33:14:cb:ad:2e:d1:d2:
73:0a:7f:fc:aa:f7:52:ba:43:0f:b0:a3:61:d1:f4:
32:35:25:c9:73:51:45:a1:16:b3:33:c5:89:70:ae:
3a:06:18:d6:93:17:c5:cb:3a:06:e4:07:b8:96:cd:
dc:44:15:bc:7f:c5:f5:9d:69:1a:5b:81:c7:fc:ce:
7e:57:69:25:b3:c1:d5:73:01:4b:f1:de:b2:80:88:
63:64:8c:18:d5:50:e7:a2:0a:4c:79:9e:01:e2:39:
99:f1:1e:3f:0b:86:0c:07:af:53:22:27:c7:37:56:
68:4f:80:16:e1:6f:a5:da:7b:4c:87:e4:07:bc:e4:
68:2a:c5:86:68:0a:fa:c0:1a:86:71:1a:18:b3:60:
88:5a:a2:98:17:c6:e5:3f:d5:da:82:a6:92:7c:d5:
4d:b0:7b:68:9a:0d:c2:dc:1f:ba:51:e6:26:be:54:
dc:5b:52:b6:cf:9a:2d:aa:4d:fb:28:49:d0:65:ea:
e0:4a:88:a5:05:ce:5f:0d:d5:4e:c2:94:4c:bf:85:
b5:c1:e0:35:cb:1e:e1:76:7d:3a:70:8e:99:11:c0:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:06:B1:4C:AE:C5:02:3F:F6:14:50:C5:5A:7A:BE:8F:44:C5:E5:1F
X509v3 Authority Key Identifier:
keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/YQaxTK7FAj_2FFDFWnq-j0TF5R8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.212.0/22
89.38.148.0/22
89.40.112.0/22
94.177.232.0-94.177.243.255
Signature Algorithm: sha256WithRSAEncryption
a3:ec:2a:51:8d:4b:b0:6e:cd:71:ee:5a:85:37:cc:5f:27:88:
35:b8:4d:54:09:05:27:46:8a:91:2d:0b:bb:8e:6f:ab:fc:43:
a4:fc:77:4c:a7:48:5a:14:df:33:e3:26:f4:48:16:c5:05:7d:
c0:16:19:13:e0:e6:ad:7a:a5:35:54:bf:a9:ca:69:f4:80:4f:
c0:f4:94:63:c7:fb:9f:26:01:b6:01:74:49:5f:9d:7a:ec:0c:
9d:8c:f7:ec:83:75:5d:97:2a:85:eb:da:4d:56:93:26:c1:9d:
e5:f8:7a:c0:22:66:4b:e9:59:b4:7b:2e:98:e0:99:d7:b5:04:
3a:57:f6:cd:a6:07:b8:bc:79:e0:2f:34:0a:08:0c:31:6c:6c:
cd:8a:c8:8e:15:be:2f:ab:64:fa:0b:d2:fc:3a:4e:07:3d:e0:
05:d4:fd:25:5e:c7:59:19:42:05:5b:d3:0a:5a:bc:8b:ef:1e:
d9:0c:0b:f1:5b:fa:0d:6c:fe:d6:ec:16:e8:87:64:2f:d9:e9:
35:6f:f9:93:b3:dc:bb:fc:40:3a:7f:64:31:cc:9b:a4:db:f9:
a1:21:b3:9b:c8:36:99:5b:30:10:f9:06:c6:1e:68:36:11:d6:
d0:70:22:7e:77:b4:fd:7d:fd:46:9f:be:dd:49:6f:72:1c:60:
6e:5b:ef:24
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQjaXDvvJNpSci1f8CVw5TRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5
Mzg2MWMwHhcNMjUwMTAxMTk0ODIwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTA2YjE0Y2FlYzUwMjNmZjYxNDUwYzU1YTdhYmU4ZjQ0YzVlNTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw48dwfkahL4tNzkc0Qgr7NdnEz6T
iWs69B+UIol9sACR4tiBeTMUy60u0dJzCn/8qvdSukMPsKNh0fQyNSXJc1FFoRaz
M8WJcK46BhjWkxfFyzoG5Ae4ls3cRBW8f8X1nWkaW4HH/M5+V2kls8HVcwFL8d6y
gIhjZIwY1VDnogpMeZ4B4jmZ8R4/C4YMB69TIifHN1ZoT4AW4W+l2ntMh+QHvORo
KsWGaAr6wBqGcRoYs2CIWqKYF8blP9XagqaSfNVNsHtomg3C3B+6UeYmvlTcW1K2
z5otqk37KEnQZergSoilBc5fDdVOwpRMv4W1weA1yx7hdn06cI6ZEcBw/wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFGEGsUyuxQI/9hRQxVp6vo9ExeUfMB8GA1UdIwQY
MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt
ODQyNjk0MTJkNTYxLzEvWVFheFRLN0ZBal8yRkZERlducS1qMFRGNVI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx
LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQCWSTUAwQC
WSaUAwQCWShwMAwDBANesegDBAJesfAwDQYJKoZIhvcNAQELBQADggEBAKPsKlGN
S7BuzXHuWoU3zF8niDW4TVQJBSdGipEtC7uOb6v8Q6T8d0ynSFoU3zPjJvRIFsUF
fcAWGRPg5q16pTVUv6nKafSAT8D0lGPH+58mAbYBdElfnXrsDJ2M9+yDdV2XKoXr
2k1WkybBneX4esAiZkvpWbR7Lpjgmde1BDpX9s2mB7i8eeAvNAoIDDFsbM2KyI4V
vi+rZPoL0vw6Tgc94AXU/SVex1kZQgVb0wpavIvvHtkMC/Fb+g1s/tbsFuiHZC/Z
6TVv+ZOz3Lv8QDp/ZDHMm6Tb+aEhs5vINplbMBD5BsYeaDYR1tBwIn53tP19/Uaf
vt1Jb3IcYG5b7yQ=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:32:15 2025 by rpki-client