Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/cYyXk7kqoqCwbvbiOiTfwTPMNtQ.roa
File: cYyXk7kqoqCwbvbiOiTfwTPMNtQ.roa (raw, json)
Hash identifier: oh+QaFKfmT9iedFpWPEyuDNQ6Z1C+pyX0dwE9FaP6HM=
Subject key identifier: 71:8C:97:93:B9:2A:A2:A0:B0:6E:F6:E2:3A:24:DF:C1:33:CC:36:D4
Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial: 018CC348C46023C476EEF5BB497CFE1BBFC4
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/cYyXk7kqoqCwbvbiOiTfwTPMNtQ.roa
Signing time: Mon 01 Jan 2024 04:29:35 +0000
ROA not before: Mon 01 Jan 2024 04:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49596
IP address blocks: 188.253.84.0/22 maxlen: 22
185.103.128.0/22 maxlen: 22
5.202.36.0/23 maxlen: 23
5.202.34.0/23 maxlen: 23
5.202.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c4:60:23:c4:76:ee:f5:bb:49:7c:fe:1b:bf:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Validity
Not Before: Jan 1 04:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=718c9793b92aa2a0b06ef6e23a24dfc133cc36d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:06:ec:fe:3b:53:b1:42:e2:5f:b0:36:28:8b:
0b:64:37:44:dd:97:59:33:59:e7:24:81:58:a9:5c:
70:df:42:cc:72:03:94:55:1c:37:0e:43:c9:1a:28:
8f:fe:3c:5d:bb:f1:c7:ad:8e:06:80:a8:14:85:40:
0c:8c:3e:36:ff:fe:a7:e5:eb:3b:f7:d0:57:f9:9b:
a3:e2:89:a6:44:1c:e1:e7:71:5f:49:36:d8:2b:2b:
f2:a7:58:af:ef:86:5b:e2:78:23:2f:3c:1c:f8:17:
e1:28:90:36:5b:ea:91:65:ba:4c:89:ae:84:ab:64:
ec:a7:4e:2f:8e:8a:d4:e6:3e:96:aa:71:34:68:9d:
c3:e0:5e:35:48:18:62:ce:0f:e2:0f:04:d4:4d:e6:
57:eb:f9:0d:bc:b7:59:9f:6a:13:7e:42:b1:bb:4b:
61:5b:2c:4d:19:53:ef:c4:ac:8b:5a:f1:10:56:ce:
96:3e:70:e5:08:1d:96:71:90:43:87:81:e7:5d:de:
ce:a8:dd:22:e5:37:de:80:e6:00:f0:59:b8:69:71:
ec:8b:ac:cf:d3:3c:1d:2a:ba:26:3f:f6:66:d6:3d:
0f:0c:8b:d9:f2:e4:da:d9:61:8a:c5:46:96:5a:4b:
cd:6e:21:57:87:23:a4:cb:26:51:cd:42:57:fd:77:
a1:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:8C:97:93:B9:2A:A2:A0:B0:6E:F6:E2:3A:24:DF:C1:33:CC:36:D4
X509v3 Authority Key Identifier:
keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/cYyXk7kqoqCwbvbiOiTfwTPMNtQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.202.34.0-5.202.38.255
185.103.128.0/22
188.253.84.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:78:e4:fa:26:48:de:8f:70:07:32:0a:eb:35:c1:7c:e9:90:
f4:f4:50:d2:8f:90:26:ec:fd:26:d2:b0:22:fc:de:fa:de:ca:
a8:da:d0:9b:3a:bb:60:8b:19:a1:5f:91:b9:32:01:4a:18:25:
61:fd:f5:80:11:91:62:26:30:50:3c:da:73:78:3d:30:2a:44:
66:f2:82:43:fb:6b:d6:ea:0e:ca:89:d4:53:02:21:2d:26:93:
5c:fb:36:13:22:a3:e1:b2:9e:78:8e:2d:5e:d6:e5:88:80:4b:
77:71:06:16:17:9f:9f:1d:3b:c6:49:cd:da:a4:6b:a2:0f:56:
2f:d8:0a:0e:65:40:67:fa:0d:d8:27:6f:c4:d1:72:40:77:2b:
b9:84:02:31:f4:8f:3d:72:f6:a1:58:d2:84:75:78:57:e6:7e:
8d:2b:e5:18:90:bf:71:45:60:94:73:8c:18:ae:27:f6:51:46:
20:c0:8e:57:a3:68:89:91:dc:95:d0:de:81:8b:49:81:77:9f:
60:8d:9b:1b:5a:25:4c:a9:42:db:4b:f9:97:f2:c8:99:76:d7:
aa:e9:a2:3c:cb:51:72:cc:d9:a5:5a:aa:d7:ac:33:66:77:ce:
e5:09:eb:9c:b4:ce:81:74:a2:3e:7d:20:e3:79:2d:51:b8:fd:
34:87:df:40
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAYzDSMRgI8R27vW7SXz+G7/EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1
OTVlYmEwHhcNMjQwMTAxMDQyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MThjOTc5M2I5MmFhMmEwYjA2ZWY2ZTIzYTI0ZGZjMTMzY2MzNmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwbs/jtTsULiX7A2KIsLZDdE3ZdZ
M1nnJIFYqVxw30LMcgOUVRw3DkPJGiiP/jxdu/HHrY4GgKgUhUAMjD42//6n5es7
99BX+Zuj4ommRBzh53FfSTbYKyvyp1iv74Zb4ngjLzwc+BfhKJA2W+qRZbpMia6E
q2Tsp04vjorU5j6WqnE0aJ3D4F41SBhizg/iDwTUTeZX6/kNvLdZn2oTfkKxu0th
WyxNGVPvxKyLWvEQVs6WPnDlCB2WcZBDh4HnXd7OqN0i5TfegOYA8Fm4aXHsi6zP
0zwdKromP/Zm1j0PDIvZ8uTa2WGKxUaWWkvNbiFXhyOkyyZRzUJX/Xeh9wIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFHGMl5O5KqKgsG724jok38EzzDbUMB8GA1UdIwQY
MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt
MTA5ODJlMDQwZDUzLzEvY1l5WGs3a3FvcUN3YnZiaU9pVGZ3VFBNTnRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz
LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAEFyiID
BAAFyiYDBAK5Z4ADBAK8/VQwDQYJKoZIhvcNAQELBQADggEBAI145PomSN6PcAcy
Cus1wXzpkPT0UNKPkCbs/SbSsCL83vreyqja0Js6u2CLGaFfkbkyAUoYJWH99YAR
kWImMFA82nN4PTAqRGbygkP7a9bqDsqJ1FMCIS0mk1z7NhMio+GynniOLV7W5YiA
S3dxBhYXn58dO8ZJzdqka6IPVi/YCg5lQGf6Ddgnb8TRckB3K7mEAjH0jz1y9qFY
0oR1eFfmfo0r5RiQv3FFYJRzjBiuJ/ZRRiDAjlejaImR3JXQ3oGLSYF3n2CNmxta
JUypQttL+ZfyyJl216rpojzLUXLM2aVaqtesM2Z3zuUJ65y0zoF0oj59ION5LVG4
/TSH30A=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:48 2024 by rpki-client on console-fra.rpki-client.org