Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/yQOzt0Fg2XgdGtGZReWrHbVCPug.roa
File: yQOzt0Fg2XgdGtGZReWrHbVCPug.roa (raw, json)
Hash identifier: x5o8WMrnpphvGRbMQzqKLIljG2zdXkMhQzUIvJV8Vww=
Subject key identifier: C9:03:B3:B7:41:60:D9:78:1D:1A:D1:99:45:E5:AB:1D:B5:42:3E:E8
Certificate issuer: /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial: 01929BDBF8193469ADDCEA64CD771A82F16A
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/yQOzt0Fg2XgdGtGZReWrHbVCPug.roa
Signing time: Thu 17 Oct 2024 19:02:17 +0000
ROA not before: Thu 17 Oct 2024 19:02:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206505
IP address blocks: 109.72.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9b:db:f8:19:34:69:ad:dc:ea:64:cd:77:1a:82:f1:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Validity
Not Before: Oct 17 19:02:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c903b3b74160d9781d1ad19945e5ab1db5423ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:39:cc:92:25:bc:7f:12:8e:da:65:8d:30:ce:
f5:05:49:a8:32:81:f1:4b:d7:10:ec:d5:f6:8b:e3:
48:6f:96:88:56:79:73:48:31:f5:26:d9:8e:c6:4b:
b5:f3:b7:52:59:e5:a9:90:da:c3:60:04:60:3c:df:
cd:62:93:af:ce:61:27:3d:7f:2b:09:4f:66:4e:21:
58:c4:d3:89:66:da:6d:6c:81:a2:2f:21:e3:36:16:
ef:05:d6:bd:b4:39:28:41:fc:2c:65:3a:1b:05:87:
55:ef:7f:06:9c:01:d0:fb:aa:e8:1e:c5:85:f0:f4:
4d:d2:2b:37:09:6e:b9:d6:1a:18:fb:cb:1b:c5:17:
67:d1:79:0a:89:f5:8e:2b:80:98:66:d8:10:3e:04:
ed:91:af:13:56:f3:35:0e:85:f0:b1:14:1c:a5:b9:
d4:24:fb:c6:19:31:b6:66:c7:73:d4:97:cb:d9:3a:
db:9d:33:aa:10:27:9c:6f:20:92:ae:22:ce:f4:4d:
91:95:76:62:88:ef:fc:11:3e:60:da:a7:ba:40:77:
95:45:35:5b:84:67:05:2c:4f:25:99:38:2f:a6:08:
2c:6c:62:27:8c:d6:9f:88:b3:06:6a:83:7f:62:cb:
85:0f:d4:66:c4:4b:2d:84:f5:3f:ea:6a:ca:e5:8f:
6e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:03:B3:B7:41:60:D9:78:1D:1A:D1:99:45:E5:AB:1D:B5:42:3E:E8
X509v3 Authority Key Identifier:
keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/yQOzt0Fg2XgdGtGZReWrHbVCPug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.72.124.0/24
Signature Algorithm: sha256WithRSAEncryption
07:66:28:d3:d4:50:0a:49:5e:6b:5a:fb:85:82:b2:ef:9b:ee:
f6:7c:bd:61:ca:31:19:ad:f8:65:b2:84:71:f8:2d:81:fa:3d:
b2:7e:d2:82:78:01:e0:64:76:48:28:b6:73:5d:9f:a2:8c:07:
90:a3:4c:3b:f7:ea:b7:e1:78:b6:12:e8:37:57:44:1e:55:30:
11:04:a2:0d:74:37:53:ac:e0:e7:a9:fa:a2:13:c8:7a:5e:9e:
8f:76:4f:b8:66:e7:a4:98:14:17:11:7b:82:77:2c:33:68:5b:
86:31:d6:41:6e:31:6b:e3:9e:61:fb:6f:36:d0:84:eb:c0:03:
85:58:63:6c:bd:ce:e7:be:98:5d:d3:b3:75:e2:45:27:90:e0:
e2:ca:d8:80:a5:0c:f9:78:89:be:9d:de:87:e9:11:41:bc:13:
47:89:f8:cd:a0:63:13:a6:8f:0b:7a:1f:a4:0e:df:40:0b:bb:
e8:69:83:12:71:90:a7:18:62:ec:cc:64:c9:ae:a7:1d:3c:74:
4e:5d:9d:83:db:09:a6:7b:f3:a1:40:16:75:ba:6f:48:7f:8e:
35:da:14:8e:86:7a:17:a0:ab:15:b8:34:18:2d:bf:e2:c6:33:
df:78:46:03:9d:dd:e3:b5:ee:6c:21:9a:cd:90:49:b0:60:68:
9e:ea:ab:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKb2/gZNGmt3OpkzXcagvFqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4MmNmODA5YzBlM2U4ZTU1NTJmOWQwZGQyZTI3ZTBkZDJk
OGRhYmUwHhcNMjQxMDE3MTkwMjE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTAzYjNiNzQxNjBkOTc4MWQxYWQxOTk0NWU1YWIxZGI1NDIzZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsznMkiW8fxKO2mWNMM71BUmoMoHx
S9cQ7NX2i+NIb5aIVnlzSDH1JtmOxku187dSWeWpkNrDYARgPN/NYpOvzmEnPX8r
CU9mTiFYxNOJZtptbIGiLyHjNhbvBda9tDkoQfwsZTobBYdV738GnAHQ+6roHsWF
8PRN0is3CW651hoY+8sbxRdn0XkKifWOK4CYZtgQPgTtka8TVvM1DoXwsRQcpbnU
JPvGGTG2Zsdz1JfL2TrbnTOqECecbyCSriLO9E2RlXZiiO/8ET5g2qe6QHeVRTVb
hGcFLE8lmTgvpggsbGInjNafiLMGaoN/YsuFD9RmxEsthPU/6mrK5Y9uxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMkDs7dBYNl4HRrRmUXlqx21Qj7oMB8GA1UdIwQY
MBaAFJgs+AnA4+jlVS+dDdLifg3S2Nq+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEt
ODJhZDE0NTU1ZWFhLzEveVFPenQwRmcyWGdkR3RHWlJlV3JIYlZDUHVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82MTY4ZDctOTQ2Yy00NTc0LTkxZWEtODJhZDE0NTU1ZWFh
LzEvbUN6NENjRGo2T1ZWTDUwTjB1Si1EZExZMnI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUh8MA0G
CSqGSIb3DQEBCwUAA4IBAQAHZijT1FAKSV5rWvuFgrLvm+72fL1hyjEZrfhlsoRx
+C2B+j2yftKCeAHgZHZIKLZzXZ+ijAeQo0w79+q34Xi2Eug3V0QeVTARBKINdDdT
rODnqfqiE8h6Xp6Pdk+4ZuekmBQXEXuCdywzaFuGMdZBbjFr455h+2820ITrwAOF
WGNsvc7nvphd07N14kUnkODiytiApQz5eIm+nd6H6RFBvBNHifjNoGMTpo8Leh+k
Dt9AC7voaYMScZCnGGLszGTJrqcdPHROXZ2D2wmme/OhQBZ1um9If4412hSOhnoX
oKsVuDQYLb/ixjPfeEYDnd3jte5sIZrNkEmwYGie6qte
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:57:36 2024 by rpki-client on console-fra.rpki-client.org