Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/73fP9ATQGi8EpwcHQJQ6E99XzPI.roa
File: 73fP9ATQGi8EpwcHQJQ6E99XzPI.roa (raw, json)
Hash identifier: DqOjgjmevhycjH731LS0yXX0RyDtREiADXpvVPQi43w=
Subject key identifier: EF:77:CF:F4:04:D0:1A:2F:04:A7:07:07:40:94:3A:13:DF:57:CC:F2
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018F526E6216FF6053221076E490F4E64F97
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/73fP9ATQGi8EpwcHQJQ6E99XzPI.roa
Signing time: Tue 07 May 2024 09:41:56 +0000
ROA not before: Tue 07 May 2024 09:41:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199614
IP address blocks: 45.89.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:6e:62:16:ff:60:53:22:10:76:e4:90:f4:e6:4f:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 7 09:41:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ef77cff404d01a2f04a7070740943a13df57ccf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f4:17:52:a9:d1:eb:a3:e8:75:79:73:8f:0c:
28:7f:5e:0e:01:ee:24:7e:c2:fa:2c:47:4b:07:5f:
50:78:47:ea:58:61:17:bd:cc:60:72:eb:5c:e1:cf:
b0:63:40:9a:86:e5:e7:14:c3:d9:13:8c:f8:82:3d:
f2:b3:2c:f9:7b:b7:60:e1:eb:72:dc:a2:61:b7:f6:
99:69:8c:2f:e8:8e:fc:3d:f9:ef:b6:f8:40:ec:6a:
ff:b9:65:b0:fb:f4:6f:86:17:29:c0:7f:08:5f:7a:
c1:17:55:ed:bc:1b:30:27:e3:e5:78:66:0a:64:b2:
af:61:86:bf:76:cb:8f:96:91:df:fb:a4:75:b6:bc:
b5:52:f1:71:70:6e:ac:ec:3c:ac:98:67:6d:75:e5:
e6:01:9d:7e:1f:7c:a3:90:2f:33:03:d5:f5:cf:c6:
12:98:f7:05:10:41:8f:27:5b:38:40:76:67:3c:89:
2e:fa:fd:a5:0d:b5:84:87:23:07:e9:2e:cd:08:9e:
69:22:63:38:53:63:3f:dc:40:1b:ae:53:cf:02:7d:
0b:7c:02:15:4d:d3:4c:61:58:ea:4b:9b:90:fb:9b:
a1:ee:b7:ae:e7:99:63:2e:97:22:66:2a:8b:4a:43:
45:0e:b0:d0:10:5b:ef:b3:10:64:e4:69:8c:5d:ab:
14:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:77:CF:F4:04:D0:1A:2F:04:A7:07:07:40:94:3A:13:DF:57:CC:F2
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/73fP9ATQGi8EpwcHQJQ6E99XzPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.99.0/24
Signature Algorithm: sha256WithRSAEncryption
08:cb:8b:d1:5a:ea:25:ab:a9:08:41:6d:a2:09:76:e5:cd:e4:
60:d9:21:53:0d:b5:e6:bd:f3:19:02:d1:fb:4e:e7:c4:1a:54:
99:c0:32:fc:5f:74:23:23:5d:fe:75:3f:b9:9a:29:49:1a:78:
c7:7b:c5:7b:e6:be:23:b9:18:fa:51:32:93:b6:33:56:cb:09:
66:a6:30:58:23:56:f7:39:b7:bc:73:34:90:32:60:f0:0a:c1:
03:4a:f9:d8:67:14:af:94:42:5c:b5:fb:19:75:e4:a9:4a:b4:
6b:2b:ae:8d:31:1e:e4:31:15:d9:72:23:89:f0:92:fe:9a:32:
b4:68:3b:2b:3a:c5:a1:3c:d5:b1:c1:67:76:b0:84:9e:4e:e6:
1a:9f:7a:b4:51:41:06:24:8d:d4:00:67:7e:25:9d:93:96:7b:
27:fa:9a:57:fe:1d:2c:fd:38:e8:42:b1:a5:5b:32:2a:d6:e6:
2f:9f:57:c7:44:9a:95:16:ca:e4:e6:81:21:a3:19:8d:ab:08:
99:ca:64:e5:fd:f8:99:98:10:03:4e:30:8f:ef:58:6e:5b:39:
6d:1c:7f:3d:89:45:b9:cb:cc:0f:51:84:a3:94:bf:23:dc:38:
b9:bc:a2:cf:1c:c0:10:6f:3c:2d:13:90:b6:6e:3c:0c:89:ee:
bc:40:71:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY9SbmIW/2BTIhB25JD05k+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyZmRiNjc2NTRkZjYxODRlN2Q2MGM0MTUwZWE5NTMzYzJj
Zjk3MDQwHhcNMjQwNTA3MDk0MTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjc3Y2ZmNDA0ZDAxYTJmMDRhNzA3MDc0MDk0M2ExM2RmNTdjY2YyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/QXUqnR66PodXlzjwwof14OAe4k
fsL6LEdLB19QeEfqWGEXvcxgcutc4c+wY0CahuXnFMPZE4z4gj3ysyz5e7dg4ety
3KJht/aZaYwv6I78PfnvtvhA7Gr/uWWw+/RvhhcpwH8IX3rBF1XtvBswJ+PleGYK
ZLKvYYa/dsuPlpHf+6R1try1UvFxcG6s7DysmGdtdeXmAZ1+H3yjkC8zA9X1z8YS
mPcFEEGPJ1s4QHZnPIku+v2lDbWEhyMH6S7NCJ5pImM4U2M/3EAbrlPPAn0LfAIV
TdNMYVjqS5uQ+5uh7reu55ljLpciZiqLSkNFDrDQEFvvsxBk5GmMXasUJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO93z/QE0BovBKcHB0CUOhPfV8zyMB8GA1UdIwQY
MBaAFGL9tnZU32GE59YMQVDqlTPCz5cEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTct
ZTg2MTIxYzU5NGRmLzEvNzNmUDlBVFFHaThFcHdjSFFKUTZFOTlYelBJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi83MDQwNzEtOGRjMC00ZWQ2LTk0NTctZTg2MTIxYzU5NGRm
LzEvWXYyMmRsVGZZWVRuMWd4QlVPcVZNOExQbHdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALVljMA0G
CSqGSIb3DQEBCwUAA4IBAQAIy4vRWuolq6kIQW2iCXblzeRg2SFTDbXmvfMZAtH7
TufEGlSZwDL8X3QjI13+dT+5milJGnjHe8V75r4juRj6UTKTtjNWywlmpjBYI1b3
Obe8czSQMmDwCsEDSvnYZxSvlEJctfsZdeSpSrRrK66NMR7kMRXZciOJ8JL+mjK0
aDsrOsWhPNWxwWd2sISeTuYan3q0UUEGJI3UAGd+JZ2Tlnsn+ppX/h0s/TjoQrGl
WzIq1uYvn1fHRJqVFsrk5oEhoxmNqwiZymTl/fiZmBADTjCP71huWzltHH89iUW5
y8wPUYSjlL8j3Di5vKLPHMAQbzwtE5C2bjwMie68QHHY
-----END CERTIFICATE-----
Generated at Fri Jun 7 23:24:40 2024 by rpki-client on console-ams.rpki-client.org