Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/yF2BJQw9sbUSbFyDkEFG__ojil0.roa
File: yF2BJQw9sbUSbFyDkEFG__ojil0.roa (raw, json)
Hash identifier: feoWKBcQIV8z/YcU/pC5DIObz0fqKESmO4btxruJ4rc=
Subject key identifier: C8:5D:81:25:0C:3D:B1:B5:12:6C:5C:83:90:41:46:FF:FA:23:8A:5D
Certificate issuer: /CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Certificate serial: 018CC86EFD8214A20FC155F0433F9D7D0DCA
Authority key identifier: E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/yF2BJQw9sbUSbFyDkEFG__ojil0.roa
Signing time: Tue 02 Jan 2024 04:29:26 +0000
ROA not before: Tue 02 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8767
IP address blocks: 2.56.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.mft
rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:fd:82:14:a2:0f:c1:55:f0:43:3f:9d:7d:0d:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e79ef19c273deded19cef6b36839b3ceb01edefd
Validity
Not Before: Jan 2 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c85d81250c3db1b5126c5c83904146fffa238a5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:f6:1e:96:ed:34:01:91:c1:1f:f1:69:e7:
52:35:55:67:68:d5:37:bf:a2:c0:2f:10:82:21:0d:
eb:1d:e5:36:f9:38:8e:b3:7d:bc:ae:64:c7:8c:90:
99:d9:bb:4b:de:75:28:a9:7c:d1:5a:5a:7e:29:05:
52:ad:e9:3d:fe:52:f1:eb:ec:ac:6f:fe:cd:de:16:
00:2f:bd:00:d3:4a:5e:19:c0:8b:6c:96:63:c3:6e:
a9:c1:59:cc:af:d6:75:c8:f5:30:19:3b:2b:1d:75:
06:a7:ba:5a:44:78:08:d3:fd:8e:48:7d:2f:d6:ce:
79:c4:48:11:aa:40:fc:a8:ff:8b:6a:2e:40:cc:e7:
72:8f:d2:3a:ee:05:0b:ca:a9:89:d5:cb:23:67:25:
8b:61:72:f2:fa:7d:c0:7b:4d:63:d9:6f:6a:21:c1:
dc:4e:cd:6e:8f:6e:2c:9f:48:5f:b3:3d:4a:e4:d2:
89:20:6d:b4:ca:c4:e7:f0:7e:ca:dc:dc:3d:40:79:
ad:07:7d:0c:2e:37:7e:07:18:16:0e:70:44:77:6e:
d4:91:c1:18:49:66:e5:e4:7c:62:0d:70:6a:8a:d4:
94:47:9f:51:b6:0b:34:1e:8f:04:57:57:01:3e:3d:
e2:17:bb:51:8f:15:19:7b:09:e6:12:50:a2:55:81:
d5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5D:81:25:0C:3D:B1:B5:12:6C:5C:83:90:41:46:FF:FA:23:8A:5D
X509v3 Authority Key Identifier:
keyid:E7:9E:F1:9C:27:3D:ED:ED:19:CE:F6:B3:68:39:B3:CE:B0:1E:DE:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/557xnCc97e0ZzvazaDmzzrAe3v0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/yF2BJQw9sbUSbFyDkEFG__ojil0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/3dde8d-bc09-47eb-8b5e-d9b72ed7cb4d/1/557xnCc97e0ZzvazaDmzzrAe3v0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.135.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:06:e7:1f:06:06:0b:19:49:1f:a9:93:ca:6b:ea:7a:57:48:
7e:d3:d6:01:0b:4d:45:be:89:ce:19:f7:1a:e0:34:94:5a:a6:
d7:f9:1e:de:86:7e:5a:1d:d2:f4:05:60:da:e0:2b:e2:3f:3c:
7a:cb:22:d6:59:02:13:74:bb:1a:ab:8d:90:de:9b:87:b1:63:
93:2d:b9:05:85:64:09:f1:2c:8a:10:c9:48:1f:d9:25:3c:1b:
98:d8:b5:f9:c8:04:9a:6a:b5:ff:57:5d:7a:ff:4e:b8:3f:75:
80:48:02:85:8f:3d:f3:b5:68:d7:d7:72:55:4f:66:8e:cb:e9:
f7:0b:b7:fa:ea:d5:25:39:2e:40:07:d6:6b:65:4c:27:1c:f3:
93:d4:f3:42:5d:95:a2:bc:06:20:43:94:1e:fc:e6:8d:ed:9d:
15:22:f8:21:6e:4a:e7:bb:8b:e6:33:10:8a:4c:1e:79:63:01:
da:7c:7f:c6:65:16:76:28:8d:ff:c2:99:68:8a:91:16:df:66:
45:b7:34:87:3f:91:f5:1e:23:05:7c:86:d7:68:03:0b:d4:73:
6a:b6:65:be:22:c5:f3:04:ea:b6:a3:b9:4b:79:a4:50:80:87:
58:83:f1:8b:38:2d:96:dc:57:4c:1c:fb:d9:65:02:09:c0:49:
dc:be:06:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbv2CFKIPwVXwQz+dfQ3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3OWVmMTljMjczZGVkZWQxOWNlZjZiMzY4MzliM2NlYjAx
ZWRlZmQwHhcNMjQwMTAyMDQyOTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODVkODEyNTBjM2RiMWI1MTI2YzVjODM5MDQxNDZmZmZhMjM4YTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIL2HpbtNAGRwR/xaedSNVVnaNU3
v6LALxCCIQ3rHeU2+TiOs328rmTHjJCZ2btL3nUoqXzRWlp+KQVSrek9/lLx6+ys
b/7N3hYAL70A00peGcCLbJZjw26pwVnMr9Z1yPUwGTsrHXUGp7paRHgI0/2OSH0v
1s55xEgRqkD8qP+Lai5AzOdyj9I67gULyqmJ1csjZyWLYXLy+n3Ae01j2W9qIcHc
Ts1uj24sn0hfsz1K5NKJIG20ysTn8H7K3Nw9QHmtB30MLjd+BxgWDnBEd27UkcEY
SWbl5HxiDXBqitSUR59Rtgs0Ho8EV1cBPj3iF7tRjxUZewnmElCiVYHVtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhdgSUMPbG1Emxcg5BBRv/6I4pdMB8GA1UdIwQY
MBaAFOee8ZwnPe3tGc72s2g5s86wHt79MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUt
ZDliNzJlZDdjYjRkLzEveUYyQkpRdzlzYlVTYkZ5RGtFRkdfX29qaWwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zZGRlOGQtYmMwOS00N2ViLThiNWUtZDliNzJlZDdjYjRk
LzEvNTU3eG5DYzk3ZTBaenZhemFEbXp6ckFlM3YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAAjiHMA0G
CSqGSIb3DQEBCwUAA4IBAQAOBucfBgYLGUkfqZPKa+p6V0h+09YBC01FvonOGfca
4DSUWqbX+R7ehn5aHdL0BWDa4CviPzx6yyLWWQITdLsaq42Q3puHsWOTLbkFhWQJ
8SyKEMlIH9klPBuY2LX5yASaarX/V116/064P3WASAKFjz3ztWjX13JVT2aOy+n3
C7f66tUlOS5AB9ZrZUwnHPOT1PNCXZWivAYgQ5Qe/OaN7Z0VIvghbkrnu4vmMxCK
TB55YwHafH/GZRZ2KI3/wploipEW32ZFtzSHP5H1HiMFfIbXaAML1HNqtmW+IsXz
BOq2o7lLeaRQgIdYg/GLOC2W3FdMHPvZZQIJwEncvgY8
-----END CERTIFICATE-----
Generated at Fri May 17 09:07:05 2024 by rpki-client on console-fra.rpki-client.org