Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/_YT8pZJLv87SHC5tkFB70HPxmrE.roa
File: _YT8pZJLv87SHC5tkFB70HPxmrE.roa (raw, json)
Hash identifier: +Gzcyn2Pt4yaZ3ceiK7rN+wdtvZg5MDAceFkxl9bufw=
Subject key identifier: FD:84:FC:A5:92:4B:BF:CE:D2:1C:2E:6D:90:50:7B:D0:73:F1:9A:B1
Certificate issuer: /CN=37518d180923a7f3c00653ec12bc702b95aab907
Certificate serial: 018CC348A9F5780930A1BEB0350B86B6A091
Authority key identifier: 37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/_YT8pZJLv87SHC5tkFB70HPxmrE.roa
Signing time: Mon 01 Jan 2024 04:29:28 +0000
ROA not before: Mon 01 Jan 2024 04:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48811
IP address blocks: 193.255.70.0/23 maxlen: 23
193.255.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a9:f5:78:09:30:a1:be:b0:35:0b:86:b6:a0:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37518d180923a7f3c00653ec12bc702b95aab907
Validity
Not Before: Jan 1 04:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd84fca5924bbfced21c2e6d90507bd073f19ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:30:4c:5e:d7:1c:13:fa:1f:46:21:9c:6a:41:
52:cf:45:3d:90:c0:74:59:4b:24:8b:16:07:72:c2:
7e:37:70:cf:d7:e0:4b:df:a5:30:5f:1a:53:df:5f:
5a:62:2a:80:3e:da:a9:7a:4d:6a:bf:d9:88:83:f4:
65:37:66:93:ac:3c:8b:07:f8:8e:b3:6c:b2:61:8f:
20:6b:1a:98:51:97:19:84:59:31:46:ff:3e:b2:cb:
a0:05:80:21:cd:87:f5:a7:a7:9d:e2:bc:fa:51:d2:
8c:cc:fb:43:ec:51:4b:d9:e4:f3:43:90:48:d3:8a:
48:b0:34:54:2e:c8:cc:28:9a:11:21:a8:aa:21:8b:
d5:45:52:2d:b3:ee:1d:68:fd:d1:0b:90:61:5f:a3:
2f:df:a7:50:49:04:f3:04:f7:d2:b0:59:a8:05:b7:
4e:ba:1a:da:d6:c0:e4:25:af:77:89:55:7d:3b:d1:
1c:04:d3:da:28:74:86:3a:05:ac:b2:cc:d8:7f:d2:
d7:5b:5b:35:8a:ff:47:57:a9:bc:71:69:cd:2d:6b:
7b:83:9b:90:04:eb:af:0e:11:47:10:35:2d:8f:14:
49:a2:d3:48:00:ad:3d:ff:2d:47:be:02:16:61:63:
01:73:85:d7:17:25:bb:b3:be:cc:05:26:a0:aa:75:
02:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:84:FC:A5:92:4B:BF:CE:D2:1C:2E:6D:90:50:7B:D0:73:F1:9A:B1
X509v3 Authority Key Identifier:
keyid:37:51:8D:18:09:23:A7:F3:C0:06:53:EC:12:BC:70:2B:95:AA:B9:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1GNGAkjp_PABlPsErxwK5WquQc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/_YT8pZJLv87SHC5tkFB70HPxmrE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f80ef3-9f0b-4bd1-8018-59671920fb60/1/N1GNGAkjp_PABlPsErxwK5WquQc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.255.70.0-193.255.72.255
Signature Algorithm: sha256WithRSAEncryption
7f:f8:29:84:17:99:9a:f2:3a:07:d9:8e:4c:81:d9:ea:e1:2b:
e6:1c:91:61:8e:59:38:cf:74:e3:8b:c9:34:63:1d:c3:c9:d5:
5a:36:d3:ff:cd:7b:24:69:e4:a8:b4:06:46:2c:1f:f0:be:98:
49:aa:bc:fa:30:82:75:33:8c:29:db:c3:f3:a7:83:69:2d:05:
a8:69:0a:93:5b:63:b7:25:cb:09:fd:45:2c:c5:56:0c:d4:9c:
a0:4e:b7:d0:3a:29:7c:58:d2:5e:4a:c6:c0:01:80:99:ab:31:
fd:14:fe:f6:d6:e1:a4:70:fd:9f:7c:e5:dc:53:50:3b:75:44:
54:03:af:60:93:87:80:0e:65:60:68:f9:74:83:54:1c:43:5b:
71:68:56:70:3d:4b:01:9a:86:69:d1:c8:20:e9:ed:21:50:fa:
dc:af:90:51:34:1a:47:df:25:42:f4:55:57:9d:2c:08:13:91:
ec:c5:48:32:b8:5e:f8:7c:87:42:a5:2d:2d:d7:5e:45:b9:25:
c6:3a:97:bb:fd:07:05:02:ac:7d:e1:d9:4a:4e:89:fd:83:b9:
24:b0:52:11:0d:0a:e6:c5:54:7e:ac:25:13:8c:76:da:8d:f0:
68:56:57:d3:4c:21:bd:59:df:a8:b9:68:fb:53:21:d9:ab:93:
ab:18:13:05
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzDSKn1eAkwob6wNQuGtqCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTE4ZDE4MDkyM2E3ZjNjMDA2NTNlYzEyYmM3MDJiOTVh
YWI5MDcwHhcNMjQwMTAxMDQyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDg0ZmNhNTkyNGJiZmNlZDIxYzJlNmQ5MDUwN2JkMDczZjE5YWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizBMXtccE/ofRiGcakFSz0U9kMB0
WUskixYHcsJ+N3DP1+BL36UwXxpT319aYiqAPtqpek1qv9mIg/RlN2aTrDyLB/iO
s2yyYY8gaxqYUZcZhFkxRv8+ssugBYAhzYf1p6ed4rz6UdKMzPtD7FFL2eTzQ5BI
04pIsDRULsjMKJoRIaiqIYvVRVIts+4daP3RC5BhX6Mv36dQSQTzBPfSsFmoBbdO
uhra1sDkJa93iVV9O9EcBNPaKHSGOgWssszYf9LXW1s1iv9HV6m8cWnNLWt7g5uQ
BOuvDhFHEDUtjxRJotNIAK09/y1HvgIWYWMBc4XXFyW7s77MBSagqnUCfQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFP2E/KWSS7/O0hwubZBQe9Bz8ZqxMB8GA1UdIwQY
MBaAFDdRjRgJI6fzwAZT7BK8cCuVqrkHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgt
NTk2NzE5MjBmYjYwLzEvX1lUOHBaSkx2ODdTSEM1dGtGQjcwSFB4bXJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mODBlZjMtOWYwYi00YmQxLTgwMTgtNTk2NzE5MjBmYjYw
LzEvTjFHTkdBa2pwX1BBQmxQc0VyeHdLNVdxdVFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHB/0YD
BADB/0gwDQYJKoZIhvcNAQELBQADggEBAH/4KYQXmZryOgfZjkyB2erhK+YckWGO
WTjPdOOLyTRjHcPJ1Vo20//NeyRp5Ki0BkYsH/C+mEmqvPowgnUzjCnbw/Ong2kt
BahpCpNbY7clywn9RSzFVgzUnKBOt9A6KXxY0l5KxsABgJmrMf0U/vbW4aRw/Z98
5dxTUDt1RFQDr2CTh4AOZWBo+XSDVBxDW3FoVnA9SwGahmnRyCDp7SFQ+tyvkFE0
GkffJUL0VVedLAgTkezFSDK4Xvh8h0KlLS3XXkW5JcY6l7v9BwUCrH3h2UpOif2D
uSSwUhENCubFVH6sJROMdtqN8GhWV9NMIb1Z36i5aPtTIdmrk6sYEwU=
-----END CERTIFICATE-----
Generated at Sat Jun 8 01:19:15 2024 by rpki-client on console-ams.rpki-client.org