Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/M-ybLWSBwjOg9xdJq4h6Z8HVCkg.roa
File: M-ybLWSBwjOg9xdJq4h6Z8HVCkg.roa (raw, json)
Hash identifier: Egark30IQxNxtKNCk5DEbgG7SSFhuiGYnIX77MJ7Mpw=
Subject key identifier: 33:EC:9B:2D:64:81:C2:33:A0:F7:17:49:AB:88:7A:67:C1:D5:0A:48
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC5012DE8B520AB5B5D658B0A139612E0
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/M-ybLWSBwjOg9xdJq4h6Z8HVCkg.roa
Signing time: Mon 01 Jan 2024 12:30:37 +0000
ROA not before: Mon 01 Jan 2024 12:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212042
IP address blocks: 217.74.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 12:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:2d:e8:b5:20:ab:5b:5d:65:8b:0a:13:96:12:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=33ec9b2d6481c233a0f71749ab887a67c1d50a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:79:71:a6:0f:d6:14:26:a7:d6:69:dd:d5:35:
7b:6e:26:bc:ae:ce:94:05:30:5b:bf:5f:00:74:b1:
ba:09:26:a2:3c:d9:62:7a:d4:6f:b6:b4:2f:e8:84:
c4:54:f5:14:48:b1:da:ac:e5:9f:33:9d:e3:58:47:
41:c4:54:f4:d7:87:05:b0:0d:54:12:cb:3c:3e:7c:
52:33:93:34:00:f3:0c:bf:f9:da:76:18:9a:06:ef:
a9:27:83:e4:87:de:6c:86:97:14:ab:46:54:7b:1d:
fb:d4:a1:55:5b:54:a3:68:9a:cf:5b:46:55:91:79:
7f:68:0d:08:a9:33:08:2b:68:50:3f:5d:1b:90:c7:
86:78:71:06:a8:0c:9c:2e:71:45:a4:4c:2c:53:8e:
ad:ca:44:26:22:d1:43:36:f7:bb:ad:f8:26:44:00:
67:e7:22:c9:56:56:1e:d9:ae:f4:ec:13:54:89:fa:
f0:d4:c6:51:f0:22:23:a8:0a:d7:7c:a1:c2:61:3d:
2e:39:7a:81:7c:55:5d:ae:0a:f0:e5:62:d5:5f:9a:
d9:82:a9:aa:41:95:76:96:13:91:87:d4:12:fd:3c:
13:90:f4:f7:83:c0:f9:5c:e4:68:59:dd:7b:36:6a:
6e:52:ea:bc:66:11:6e:53:12:46:d9:ba:72:5f:50:
a8:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EC:9B:2D:64:81:C2:33:A0:F7:17:49:AB:88:7A:67:C1:D5:0A:48
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/M-ybLWSBwjOg9xdJq4h6Z8HVCkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.74.17.0/24
Signature Algorithm: sha256WithRSAEncryption
81:fb:90:6d:40:5e:81:8a:57:03:9b:eb:5e:b6:b4:ee:e5:f0:
08:4c:7a:21:09:d5:b0:10:55:bc:9b:c9:77:32:3c:65:e8:27:
1b:d5:2c:26:8b:8f:97:6a:93:dd:12:a2:87:b0:3e:ee:48:ee:
05:e4:2a:2e:cd:6d:0d:42:8d:c4:a4:fa:d2:8f:61:a7:02:be:
48:38:ec:c5:60:50:34:ef:5f:28:6b:ad:7d:90:22:93:57:0a:
3a:f3:8d:06:ee:67:05:11:a3:af:85:b0:bd:80:4c:dc:6f:44:
4e:50:93:00:ec:80:b8:77:51:cd:f0:b5:96:f2:52:5f:3a:14:
95:cb:8f:7f:55:59:2f:2d:b7:9c:e9:93:a8:bd:7d:e3:74:29:
94:42:2f:eb:d8:df:83:e1:dd:57:ea:ee:17:93:b0:84:20:8e:
7b:88:80:c5:72:f1:2f:51:f6:e4:61:14:50:5d:e7:22:da:0c:
12:b4:f5:d4:6b:c4:69:15:d5:c0:04:b4:e5:cc:66:d9:59:a0:
44:4c:d2:7b:e2:7e:fa:a1:25:5b:5a:55:bc:00:b9:b1:54:dc:
12:21:41:5f:70:cc:37:9d:54:5a:58:29:bd:80:90:79:87:ec:
8b:92:0a:87:bf:40:57:8f:ae:8b:be:1f:30:10:b8:61:a2:6f:
3a:39:77:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAS3otSCrW11liwoTlhLgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQwMTAxMTIzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzM2VjOWIyZDY0ODFjMjMzYTBmNzE3NDlhYjg4N2E2N2MxZDUwYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3lxpg/WFCan1mnd1TV7bia8rs6U
BTBbv18AdLG6CSaiPNlietRvtrQv6ITEVPUUSLHarOWfM53jWEdBxFT014cFsA1U
Ess8PnxSM5M0APMMv/nadhiaBu+pJ4Pkh95shpcUq0ZUex371KFVW1SjaJrPW0ZV
kXl/aA0IqTMIK2hQP10bkMeGeHEGqAycLnFFpEwsU46tykQmItFDNve7rfgmRABn
5yLJVlYe2a707BNUifrw1MZR8CIjqArXfKHCYT0uOXqBfFVdrgrw5WLVX5rZgqmq
QZV2lhORh9QS/TwTkPT3g8D5XORoWd17NmpuUuq8ZhFuUxJG2bpyX1CokwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDPsmy1kgcIzoPcXSauIemfB1QpIMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvTS15YkxXU0J3ak9nOXhkSnE0aDZaOEhWQ2tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2UoRMA0G
CSqGSIb3DQEBCwUAA4IBAQCB+5BtQF6BilcDm+tetrTu5fAITHohCdWwEFW8m8l3
Mjxl6Ccb1Swmi4+XapPdEqKHsD7uSO4F5CouzW0NQo3EpPrSj2GnAr5IOOzFYFA0
718oa619kCKTVwo6840G7mcFEaOvhbC9gEzcb0ROUJMA7IC4d1HN8LWW8lJfOhSV
y49/VVkvLbec6ZOovX3jdCmUQi/r2N+D4d1X6u4Xk7CEII57iIDFcvEvUfbkYRRQ
Xeci2gwStPXUa8RpFdXABLTlzGbZWaBETNJ74n76oSVbWlW8ALmxVNwSIUFfcMw3
nVRaWCm9gJB5h+yLkgqHv0BXj66Lvh8wELhhom86OXfI
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:28:50 2024 by rpki-client on console-fra.rpki-client.org