Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/tyIUU96WkQEIp4T-oqSr-Lz10LA.roa
File: tyIUU96WkQEIp4T-oqSr-Lz10LA.roa (raw, json)
Hash identifier: nEPW/3NDVCXo+yl4QkJ03iNc/Lr7c6o839ZVghHojVY=
Subject key identifier: B7:22:14:53:DE:96:91:01:08:A7:84:FE:A2:A4:AB:F8:BC:F5:D0:B0
Certificate issuer: /CN=8d66032e08894118d7998c5c060ca46eb3871338
Certificate serial: 018FCE621DA663D68765BC4FBF6D9329498B
Authority key identifier: 8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/tyIUU96WkQEIp4T-oqSr-Lz10LA.roa
Signing time: Fri 31 May 2024 11:21:27 +0000
ROA not before: Fri 31 May 2024 11:21:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48152
IP address blocks: 217.70.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ce:62:1d:a6:63:d6:87:65:bc:4f:bf:6d:93:29:49:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d66032e08894118d7998c5c060ca46eb3871338
Validity
Not Before: May 31 11:21:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7221453de96910108a784fea2a4abf8bcf5d0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c9:cc:6d:47:c9:2f:6c:13:30:17:0b:f9:da:
e3:15:13:83:d7:27:19:e0:f4:a4:87:2d:49:1f:cf:
53:f7:2a:9c:d5:3a:ab:30:7f:40:17:0d:a1:55:be:
af:f0:8d:17:1a:71:89:28:58:c1:d2:af:79:6c:a5:
f1:88:cc:43:c9:42:95:c1:76:e7:9f:95:1a:e2:0a:
ee:c4:d5:85:66:aa:3c:73:59:f0:71:05:f8:1e:f9:
cf:b9:8d:3e:e6:bc:c6:8f:ad:5f:82:d1:2d:bf:ce:
6f:b4:99:49:79:96:f2:e5:a5:cc:71:83:95:a9:06:
a0:34:dc:86:70:d8:19:f3:97:e7:69:9a:72:69:4e:
15:38:a1:c9:17:ef:ee:97:b9:20:8e:f7:a1:ed:73:
53:20:73:a8:ef:58:44:91:60:e3:bf:b0:12:66:3c:
90:55:86:f9:4c:d5:c0:5e:dd:f9:7d:9e:a6:de:98:
48:24:15:50:2b:62:3d:21:50:6f:79:c5:3f:df:07:
7f:f1:f7:d3:f2:16:0b:e9:78:71:fe:a5:d8:2d:91:
05:ad:9a:30:b9:d4:07:28:25:37:9f:36:83:cb:bc:
a9:90:77:21:ba:63:31:07:e6:4f:03:3c:00:82:3c:
1c:ef:1a:2f:71:46:30:19:34:27:de:a1:49:78:d1:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:22:14:53:DE:96:91:01:08:A7:84:FE:A2:A4:AB:F8:BC:F5:D0:B0
X509v3 Authority Key Identifier:
keyid:8D:66:03:2E:08:89:41:18:D7:99:8C:5C:06:0C:A4:6E:B3:87:13:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWYDLgiJQRjXmYxcBgykbrOHEzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/tyIUU96WkQEIp4T-oqSr-Lz10LA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/872dc7-7c01-4e66-844e-599d1ca6a5fd/1/jWYDLgiJQRjXmYxcBgykbrOHEzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.70.224.0/22
Signature Algorithm: sha256WithRSAEncryption
18:e1:e0:d5:fd:b4:47:b9:68:91:3c:67:85:59:38:0e:5a:23:
98:ad:00:c4:5f:bd:b7:36:f1:e5:9b:00:ed:e1:13:b1:37:91:
0a:73:f0:f3:b4:44:47:11:8f:49:05:04:08:b2:47:91:99:f7:
ef:26:49:75:d9:be:ea:3c:0b:df:30:a7:c6:0f:3d:5a:8c:5d:
f6:8c:b4:38:73:ed:7d:d4:5d:c4:29:1c:6b:53:26:3a:92:2f:
24:ad:f1:84:d2:c7:78:2b:be:58:82:9f:ab:80:1e:f6:1a:83:
c8:4f:db:28:df:c4:09:1e:a4:58:4c:5f:8d:85:0b:41:97:72:
d2:f0:6a:04:b5:18:ee:86:c5:8e:83:15:c9:3c:04:7e:9b:8d:
f4:22:c0:73:f0:1b:4e:83:1e:13:be:d2:24:1c:e3:c4:94:8f:
64:4e:aa:70:44:85:45:80:19:4d:b3:2e:e2:a1:14:41:b6:40:
a1:45:15:4f:b4:1b:b3:56:9d:26:a9:6a:95:b5:e3:01:81:96:
d4:fd:d8:a0:c9:43:0a:4b:da:2c:f8:d7:7e:5d:c6:74:f4:b8:
74:66:ba:31:56:42:ae:25:6a:d2:66:51:cf:6c:bd:4f:39:9c:
66:1d:9b:8d:95:bc:79:2a:ee:0e:73:54:8b:f1:a7:aa:5c:39:
8d:a6:bf:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/OYh2mY9aHZbxPv22TKUmLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNjYwMzJlMDg4OTQxMThkNzk5OGM1YzA2MGNhNDZlYjM4
NzEzMzgwHhcNMjQwNTMxMTEyMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzIyMTQ1M2RlOTY5MTAxMDhhNzg0ZmVhMmE0YWJmOGJjZjVkMGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcnMbUfJL2wTMBcL+drjFROD1ycZ
4PSkhy1JH89T9yqc1TqrMH9AFw2hVb6v8I0XGnGJKFjB0q95bKXxiMxDyUKVwXbn
n5Ua4gruxNWFZqo8c1nwcQX4HvnPuY0+5rzGj61fgtEtv85vtJlJeZby5aXMcYOV
qQagNNyGcNgZ85fnaZpyaU4VOKHJF+/ul7kgjveh7XNTIHOo71hEkWDjv7ASZjyQ
VYb5TNXAXt35fZ6m3phIJBVQK2I9IVBvecU/3wd/8ffT8hYL6Xhx/qXYLZEFrZow
udQHKCU3nzaDy7ypkHchumMxB+ZPAzwAgjwc7xovcUYwGTQn3qFJeNHAQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLciFFPelpEBCKeE/qKkq/i89dCwMB8GA1UdIwQY
MBaAFI1mAy4IiUEY15mMXAYMpG6zhxM4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUt
NTk5ZDFjYTZhNWZkLzEvdHlJVVU5NldrUUVJcDRULW9xU3ItTHoxMExBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC84NzJkYzctN2MwMS00ZTY2LTg0NGUtNTk5ZDFjYTZhNWZk
LzEvaldZRExnaUpRUmpYbVl4Y0JneWtick9IRXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2UbgMA0G
CSqGSIb3DQEBCwUAA4IBAQAY4eDV/bRHuWiRPGeFWTgOWiOYrQDEX723NvHlmwDt
4ROxN5EKc/DztERHEY9JBQQIskeRmffvJkl12b7qPAvfMKfGDz1ajF32jLQ4c+19
1F3EKRxrUyY6ki8krfGE0sd4K75Ygp+rgB72GoPIT9so38QJHqRYTF+NhQtBl3LS
8GoEtRjuhsWOgxXJPAR+m430IsBz8BtOgx4TvtIkHOPElI9kTqpwRIVFgBlNsy7i
oRRBtkChRRVPtBuzVp0mqWqVteMBgZbU/digyUMKS9os+Nd+XcZ09Lh0ZroxVkKu
JWrSZlHPbL1POZxmHZuNlbx5Ku4Oc1SL8aeqXDmNpr9R
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:17:39 2024 by rpki-client on console-fra.rpki-client.org