Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/IY_YnCkvvSHp9GfIvU2RPaUcTbw.roa
File: IY_YnCkvvSHp9GfIvU2RPaUcTbw.roa (raw, json)
Hash identifier: DyBmKVyEULzTcgLEO9H1ApnqiTxiBMTx1NS1xEQhss8=
Subject key identifier: 21:8F:D8:9C:29:2F:BD:21:E9:F4:67:C8:BD:4D:91:3D:A5:1C:4D:BC
Certificate issuer: /CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Certificate serial: 019425FDDC0788CEC6B458DAE315FE6F795A
Authority key identifier: 17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/IY_YnCkvvSHp9GfIvU2RPaUcTbw.roa
Signing time: Thu 02 Jan 2025 07:49:41 +0000
ROA not before: Thu 02 Jan 2025 07:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2589
IP address blocks: 85.119.96.0/21 maxlen: 24
178.251.168.0/21 maxlen: 24
185.21.20.0/22 maxlen: 24
2a00:ea40::/32 maxlen: 56
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:dc:07:88:ce:c6:b4:58:da:e3:15:fe:6f:79:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17fff1e78c37499d72d108ba728ef029b7f0e7f3
Validity
Not Before: Jan 2 07:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=218fd89c292fbd21e9f467c8bd4d913da51c4dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c0:32:12:e1:90:c7:b7:3e:8a:fa:fa:b6:e1:
15:b2:90:16:f6:2f:6e:80:10:9a:8a:58:02:63:03:
2a:3f:97:74:34:c9:4f:06:19:2d:37:ed:bc:15:28:
cd:59:7b:73:31:e8:2e:a4:8d:be:dd:ff:fe:47:29:
09:c0:08:e0:77:c4:f5:84:a8:6b:3e:b7:e4:b1:9a:
a2:f9:07:87:18:eb:7a:87:7a:be:13:0b:87:39:91:
61:17:14:81:7f:04:4e:d8:78:b8:97:af:10:25:89:
71:37:db:a1:08:29:70:33:79:29:7d:5e:9c:81:8d:
75:4b:79:ea:ea:40:2c:c2:c0:2a:68:ca:5a:27:45:
94:d7:54:3d:2e:42:23:a6:2f:76:a5:37:d8:e1:b3:
1b:90:b1:11:ac:7f:b2:81:cc:6f:fb:76:c9:0e:71:
95:14:88:de:d7:42:bb:b1:d9:9f:b7:f3:8b:7d:c7:
b8:21:c2:23:5f:10:b6:38:62:b2:97:87:bd:ab:21:
e4:d9:d0:ff:8b:af:6c:5d:65:b1:e4:45:98:4e:e2:
f0:67:57:13:d4:8f:33:5f:f4:29:0c:0c:ae:2b:64:
ab:c2:45:1d:fa:95:2e:1b:60:d4:ab:53:27:1e:77:
ce:85:e1:fa:51:cf:30:6a:3c:f1:be:01:4b:df:50:
a2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:8F:D8:9C:29:2F:BD:21:E9:F4:67:C8:BD:4D:91:3D:A5:1C:4D:BC
X509v3 Authority Key Identifier:
keyid:17:FF:F1:E7:8C:37:49:9D:72:D1:08:BA:72:8E:F0:29:B7:F0:E7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F__x54w3SZ1y0Qi6co7wKbfw5_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/IY_YnCkvvSHp9GfIvU2RPaUcTbw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/81f3b6-6d40-4902-bee1-3f39d76424fb/1/F__x54w3SZ1y0Qi6co7wKbfw5_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.96.0/21
178.251.168.0/21
185.21.20.0/22
IPv6:
2a00:ea40::/32
Signature Algorithm: sha256WithRSAEncryption
39:fa:cf:68:cf:50:fc:aa:b8:89:d2:50:68:bc:1d:5c:8d:18:
b8:a2:44:f9:19:5c:b0:2a:dc:37:a9:50:84:cc:d7:00:e5:d4:
bd:98:4d:32:c2:20:3e:2f:7f:3a:e1:09:21:ff:c1:80:5e:1c:
3c:f2:fc:25:c7:28:c8:12:07:39:e0:8d:88:9d:f6:92:cd:7f:
23:86:c0:61:af:78:fc:b1:82:de:34:2d:37:7e:4a:8e:56:d9:
ed:95:d8:1e:5c:99:16:f0:bf:95:d0:ba:91:58:2c:c3:c2:a6:
0f:e5:5e:98:8e:b5:10:b6:26:95:85:21:c0:14:85:3f:81:e7:
c0:58:b0:b1:92:0c:3e:ac:6d:fd:e5:f2:b5:f3:8b:fe:87:c7:
c1:9f:57:18:88:3f:a7:9c:7a:4e:40:b8:fb:e5:0b:13:42:0d:
38:c7:e1:6c:bb:f2:1c:6f:49:e2:b2:13:f5:c2:90:64:62:64:
ab:cc:be:ad:b0:56:71:53:76:38:b3:07:2e:eb:a7:c8:e8:45:
7d:2a:8b:84:29:45:29:d8:55:16:74:45:00:a3:33:61:8b:6e:
f0:16:87:0b:73:e2:45:a0:84:ae:65:29:c8:5e:75:c0:a0:de:
54:bf:3c:9d:81:c6:5e:be:8c:c0:ed:fd:b0:6f:52:e0:b6:4b:
4a:55:16:0d
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQl/dwHiM7GtFja4xX+b3laMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZmZmMWU3OGMzNzQ5OWQ3MmQxMDhiYTcyOGVmMDI5Yjdm
MGU3ZjMwHhcNMjUwMTAyMDc0OTQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMThmZDg5YzI5MmZiZDIxZTlmNDY3YzhiZDRkOTEzZGE1MWM0ZGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMAyEuGQx7c+ivr6tuEVspAW9i9u
gBCailgCYwMqP5d0NMlPBhktN+28FSjNWXtzMegupI2+3f/+RykJwAjgd8T1hKhr
PrfksZqi+QeHGOt6h3q+EwuHOZFhFxSBfwRO2Hi4l68QJYlxN9uhCClwM3kpfV6c
gY11S3nq6kAswsAqaMpaJ0WU11Q9LkIjpi92pTfY4bMbkLERrH+ygcxv+3bJDnGV
FIje10K7sdmft/OLfce4IcIjXxC2OGKyl4e9qyHk2dD/i69sXWWx5EWYTuLwZ1cT
1I8zX/QpDAyuK2SrwkUd+pUuG2DUq1MnHnfOheH6Uc8wajzxvgFL31Ci4QIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFCGP2JwpL70h6fRnyL1NkT2lHE28MB8GA1UdIwQY
MBaAFBf/8eeMN0mdctEIunKO8Cm38OfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84MWYzYjYtNmQ0MC00OTAyLWJlZTEt
M2YzOWQ3NjQyNGZiLzEvSVlfWW5Da3Z2U0hwOUdmSXZVMlJQYVVjVGJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84MWYzYjYtNmQ0MC00OTAyLWJlZTEtM2YzOWQ3NjQyNGZi
LzEvRl9feDU0dzNTWjF5MFFpNmNvN3dLYmZ3NV9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDVXdgAwQD
svuoAwQCuRUUMA0EAgACMAcDBQAqAOpAMA0GCSqGSIb3DQEBCwUAA4IBAQA5+s9o
z1D8qriJ0lBovB1cjRi4okT5GVywKtw3qVCEzNcA5dS9mE0ywiA+L3864Qkh/8GA
Xhw88vwlxyjIEgc54I2InfaSzX8jhsBhr3j8sYLeNC03fkqOVtntldgeXJkW8L+V
0LqRWCzDwqYP5V6YjrUQtiaVhSHAFIU/gefAWLCxkgw+rG395fK184v+h8fBn1cY
iD+nnHpOQLj75QsTQg04x+Fsu/Icb0nishP1wpBkYmSrzL6tsFZxU3Y4swcu66fI
6EV9KouEKUUp2FUWdEUAozNhi27wFocLc+JFoISuZSnIXnXAoN5UvzydgcZevozA
7f2wb1LgtktKVRYN
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:19 2025 by rpki-client