Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/yF5hwX8loMsesPXSW6MmEfoEq08.roa
File: yF5hwX8loMsesPXSW6MmEfoEq08.roa (raw, json)
Hash identifier: 12Vd58ZrIhrtfexSafjAUnjQdMQN3HDNmdBKPT+XLgI=
Subject key identifier: C8:5E:61:C1:7F:25:A0:CB:1E:B0:F5:D2:5B:A3:26:11:FA:04:AB:4F
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 0191A61903C8003E28958F5B728CC049C6AD
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/yF5hwX8loMsesPXSW6MmEfoEq08.roa
Signing time: Sat 31 Aug 2024 01:42:22 +0000
ROA not before: Sat 31 Aug 2024 01:42:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48695
IP address blocks: 92.43.168.0/23 maxlen: 23
92.43.169.0/24 maxlen: 24
92.43.170.0/23 maxlen: 23
92.43.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a6:19:03:c8:00:3e:28:95:8f:5b:72:8c:c0:49:c6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Aug 31 01:42:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c85e61c17f25a0cb1eb0f5d25ba32611fa04ab4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8b:dd:e4:93:b0:41:26:c6:f3:06:3b:cf:aa:
78:00:9c:41:10:f3:98:34:68:2a:8f:29:c4:de:d3:
85:2c:19:57:0c:5e:04:fa:30:77:23:1d:18:24:b0:
e8:1b:83:6d:c7:e6:27:01:cb:a2:ec:42:bb:9f:af:
11:82:bd:a0:96:72:3e:b3:ca:ef:79:d1:55:c1:a8:
90:c7:6b:5a:59:d2:66:0d:5d:a8:e9:cf:3e:35:cd:
8c:95:87:14:9d:98:dd:5b:55:a9:00:57:98:d2:a8:
16:24:01:f6:6b:91:a1:55:a5:d7:6a:7a:c0:a6:7c:
a9:ba:07:b6:1c:9f:a4:0f:41:ef:c6:64:1e:c9:9a:
d0:7f:d6:03:92:64:d6:b4:6d:75:4b:36:7f:fc:b9:
c7:4e:3b:27:a3:27:cd:4a:9d:10:20:45:24:d0:93:
b2:40:13:5d:b6:87:27:d4:02:56:01:45:67:a6:5e:
32:92:f8:b3:50:94:a9:db:33:a0:e8:49:81:58:6a:
f9:aa:7a:a6:80:a9:d1:7d:86:44:31:7f:c8:90:98:
6c:49:cb:7c:cb:e2:64:8c:45:76:3d:a1:24:42:55:
42:4a:a2:6d:2a:64:5a:91:ea:02:03:83:e6:d2:5e:
b1:fd:32:10:33:4f:fb:53:fd:ee:0a:cd:8b:26:41:
78:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:5E:61:C1:7F:25:A0:CB:1E:B0:F5:D2:5B:A3:26:11:FA:04:AB:4F
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/yF5hwX8loMsesPXSW6MmEfoEq08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:c6:a0:9a:62:db:64:b6:f4:59:1b:97:03:94:e7:5e:b4:06:
15:87:3f:32:a9:7f:42:a9:78:70:5d:26:2c:00:53:bf:43:62:
68:85:a8:f9:6a:c2:ad:89:76:78:de:af:cf:73:85:13:bc:cc:
09:4f:c8:c0:3d:58:d6:f8:e8:5b:46:cc:24:52:47:c0:91:82:
54:6f:e7:5c:94:21:a7:71:33:4f:83:3a:32:aa:77:2f:55:6c:
16:08:6f:7c:57:15:3e:e2:ac:0f:58:c5:22:a6:48:b7:33:79:
ae:a6:51:3e:ff:15:15:5c:73:ff:75:0c:43:82:8b:fc:e0:8b:
32:6c:f6:09:6c:b1:23:86:f7:2b:18:24:91:9b:51:b8:95:bf:
4e:5a:d8:e3:99:e6:c7:07:62:c6:e6:5d:b9:8f:36:00:0b:1a:
1a:d2:8c:4c:40:73:d9:3b:71:e6:b7:65:15:76:50:ba:a7:64:
53:03:16:2f:e5:30:3f:23:3f:98:5e:d4:02:3c:97:a8:fa:70:
43:05:0b:6e:77:2c:7b:da:cc:45:15:67:ad:2c:1f:c9:1c:61:
8e:cf:07:5b:52:77:1c:37:4d:96:04:80:d3:c4:dc:49:c6:6a:
8a:b5:0a:88:e2:cc:7c:88:dd:2a:6b:98:7b:84:50:24:1a:1a:
aa:3b:9d:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGmGQPIAD4olY9bcozAScatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZDdmZTczMTJlZmI0MmJkOGQxZWNkODJhYzc2MTkxZWEy
NmMzNTYwHhcNMjQwODMxMDE0MjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODVlNjFjMTdmMjVhMGNiMWViMGY1ZDI1YmEzMjYxMWZhMDRhYjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnovd5JOwQSbG8wY7z6p4AJxBEPOY
NGgqjynE3tOFLBlXDF4E+jB3Ix0YJLDoG4Ntx+YnAcui7EK7n68Rgr2glnI+s8rv
edFVwaiQx2taWdJmDV2o6c8+Nc2MlYcUnZjdW1WpAFeY0qgWJAH2a5GhVaXXanrA
pnypuge2HJ+kD0HvxmQeyZrQf9YDkmTWtG11SzZ//LnHTjsnoyfNSp0QIEUk0JOy
QBNdtocn1AJWAUVnpl4ykvizUJSp2zOg6EmBWGr5qnqmgKnRfYZEMX/IkJhsSct8
y+JkjEV2PaEkQlVCSqJtKmRakeoCA4Pm0l6x/TIQM0/7U/3uCs2LJkF4kQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMheYcF/JaDLHrD10lujJhH6BKtPMB8GA1UdIwQY
MBaAFILX/nMS77Qr2NHs2CrHYZHqJsNWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYt
MzdiMjFiYWIzYjAwLzEveUY1aHdYOGxvTXNlc1BYU1c2TW1FZm9FcTA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wNWQ4YmEtOTQzMy00YTJlLWJmZTYtMzdiMjFiYWIzYjAw
LzEvZ3RmLWN4THZ0Q3ZZMGV6WUtzZGhrZW9tdzFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXCuoMA0G
CSqGSIb3DQEBCwUAA4IBAQChxqCaYttktvRZG5cDlOdetAYVhz8yqX9CqXhwXSYs
AFO/Q2Johaj5asKtiXZ43q/Pc4UTvMwJT8jAPVjW+OhbRswkUkfAkYJUb+dclCGn
cTNPgzoyqncvVWwWCG98VxU+4qwPWMUipki3M3muplE+/xUVXHP/dQxDgov84Isy
bPYJbLEjhvcrGCSRm1G4lb9OWtjjmebHB2LG5l25jzYACxoa0oxMQHPZO3Hmt2UV
dlC6p2RTAxYv5TA/Iz+YXtQCPJeo+nBDBQtudyx72sxFFWetLB/JHGGOzwdbUncc
N02WBIDTxNxJxmqKtQqI4sx8iN0qa5h7hFAkGhqqO528
-----END CERTIFICATE-----
Generated at Sat Sep 28 17:37:04 2024 by rpki-client on console-ams.rpki-client.org