Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/CetbUy_fih1WTKLZJYz5OuGpVhk.roa
File: CetbUy_fih1WTKLZJYz5OuGpVhk.roa (raw, json)
Hash identifier: VucvDkNCM5Tr1WFSjH3HxzbOYtHaZew+2KaAM1SoL/s=
Subject key identifier: 09:EB:5B:53:2F:DF:8A:1D:56:4C:A2:D9:25:8C:F9:3A:E1:A9:56:19
Certificate issuer: /CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Certificate serial: 018CC3B6A851A8A70DFA62BC2FD5B4C582BE
Authority key identifier: 1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/CetbUy_fih1WTKLZJYz5OuGpVhk.roa
Signing time: Mon 01 Jan 2024 06:29:36 +0000
ROA not before: Mon 01 Jan 2024 06:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209956
IP address blocks: 217.119.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.mft
rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:a8:51:a8:a7:0d:fa:62:bc:2f:d5:b4:c5:82:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d8eab93530cfd50da7fb7da5eba0aa440c9ef0c
Validity
Not Before: Jan 1 06:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09eb5b532fdf8a1d564ca2d9258cf93ae1a95619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:66:09:e8:c0:12:60:77:aa:db:84:7f:0e:0c:
d7:03:ed:ed:14:cb:c2:72:5a:67:1e:02:84:1c:44:
6a:0d:00:2f:3c:e4:94:26:ae:2c:5a:59:8e:97:d4:
70:fb:05:24:3b:ef:76:67:e6:9f:be:3d:3d:5d:8c:
38:ff:b0:64:92:ee:e7:f6:a8:95:56:39:2d:be:a1:
44:ea:15:7f:d1:a9:56:98:a4:2f:ec:66:1d:0f:9c:
80:41:97:ed:fd:cd:7c:87:26:bf:ad:47:a0:55:ba:
75:3b:30:0a:41:07:44:9a:2e:6a:96:a5:47:70:62:
db:ee:a4:f3:96:09:97:df:63:d5:82:f5:7f:d7:d8:
cc:da:6a:28:c4:86:55:87:88:2c:5a:8b:d3:ee:63:
fd:f6:92:8c:7c:86:2d:88:94:13:9f:5d:c7:8a:fe:
a0:fe:0b:17:e5:b8:2b:76:ad:59:5a:fd:ba:d0:db:
03:3e:92:5a:96:ca:5d:97:4f:58:2f:a9:cb:e4:64:
08:45:d4:3d:5c:c2:8f:0e:31:6e:9d:7e:fb:88:1d:
3b:16:af:29:b4:58:f5:03:ec:b5:9f:f4:7c:8b:ed:
80:79:3b:72:42:58:04:8f:7f:72:e9:3b:fb:4f:e5:
e6:69:3f:ba:bc:04:55:26:2a:f1:d2:e8:ca:b1:71:
c7:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EB:5B:53:2F:DF:8A:1D:56:4C:A2:D9:25:8C:F9:3A:E1:A9:56:19
X509v3 Authority Key Identifier:
keyid:1D:8E:AB:93:53:0C:FD:50:DA:7F:B7:DA:5E:BA:0A:A4:40:C9:EF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HY6rk1MM_VDaf7faXroKpEDJ7ww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/CetbUy_fih1WTKLZJYz5OuGpVhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ebb83a-0126-43c0-b9ea-32dd53640b9c/1/HY6rk1MM_VDaf7faXroKpEDJ7ww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.119.134.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:8a:4a:af:32:67:9e:26:e2:e2:e5:36:e9:bc:55:22:68:a3:
a9:6b:99:12:df:de:7d:65:3e:05:0a:5f:de:53:ca:dd:ca:d5:
bb:45:cd:d7:88:96:c8:9c:00:87:89:e1:45:e5:56:4e:83:2e:
87:03:e6:62:b1:c0:71:4c:f9:a0:79:d6:a7:6a:79:b6:f7:3f:
42:db:a4:c7:2c:d7:be:61:f1:33:69:13:8b:46:f8:b2:9d:e1:
10:c9:6f:24:de:77:10:4a:7b:07:41:7b:5e:16:2c:7a:8b:40:
24:64:ef:57:ea:37:ba:92:7b:76:2a:28:6b:ac:c7:23:5b:40:
0c:08:5f:fa:37:6a:0c:19:63:1f:dc:eb:b1:8a:33:76:42:2a:
49:42:e9:68:ec:31:fc:62:57:89:d2:f1:e5:a1:8f:a4:22:61:
fa:39:0d:54:53:90:fe:52:7f:a2:c7:df:ba:96:8d:e5:03:15:
19:14:ea:d0:09:47:2c:9a:8e:dc:f9:b5:3a:eb:57:f8:e9:d2:
d2:2c:f4:6e:7f:d8:59:2f:ef:d7:44:a7:da:eb:6c:1a:c2:65:
cf:cd:e8:a1:ac:47:81:34:50:27:ea:69:1b:13:9a:59:5d:41:
3c:72:d3:f6:24:85:ac:72:38:01:c7:b8:a3:a6:0c:e4:d8:1b:
b4:3c:29:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtqhRqKcN+mK8L9W0xYK+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkOGVhYjkzNTMwY2ZkNTBkYTdmYjdkYTVlYmEwYWE0NDBj
OWVmMGMwHhcNMjQwMTAxMDYyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOWViNWI1MzJmZGY4YTFkNTY0Y2EyZDkyNThjZjkzYWUxYTk1NjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2YJ6MASYHeq24R/DgzXA+3tFMvC
clpnHgKEHERqDQAvPOSUJq4sWlmOl9Rw+wUkO+92Z+afvj09XYw4/7Bkku7n9qiV
VjktvqFE6hV/0alWmKQv7GYdD5yAQZft/c18hya/rUegVbp1OzAKQQdEmi5qlqVH
cGLb7qTzlgmX32PVgvV/19jM2mooxIZVh4gsWovT7mP99pKMfIYtiJQTn13Hiv6g
/gsX5bgrdq1ZWv260NsDPpJalspdl09YL6nL5GQIRdQ9XMKPDjFunX77iB07Fq8p
tFj1A+y1n/R8i+2AeTtyQlgEj39y6Tv7T+XmaT+6vARVJirx0ujKsXHH0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAnrW1Mv34odVkyi2SWM+TrhqVYZMB8GA1UdIwQY
MBaAFB2Oq5NTDP1Q2n+32l66CqRAye8MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEt
MzJkZDUzNjQwYjljLzEvQ2V0YlV5X2ZpaDFXVEtMWkpZejVPdUdwVmhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9lYmI4M2EtMDEyNi00M2MwLWI5ZWEtMzJkZDUzNjQwYjlj
LzEvSFk2cmsxTU1fVkRhZjdmYVhyb0twRURKN3d3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2XeGMA0G
CSqGSIb3DQEBCwUAA4IBAQB7ikqvMmeeJuLi5TbpvFUiaKOpa5kS3959ZT4FCl/e
U8rdytW7Rc3XiJbInACHieFF5VZOgy6HA+ZiscBxTPmgedananm29z9C26THLNe+
YfEzaROLRviyneEQyW8k3ncQSnsHQXteFix6i0AkZO9X6je6knt2KihrrMcjW0AM
CF/6N2oMGWMf3OuxijN2QipJQulo7DH8YleJ0vHloY+kImH6OQ1UU5D+Un+ix9+6
lo3lAxUZFOrQCUcsmo7c+bU661f46dLSLPRuf9hZL+/XRKfa62wawmXPzeihrEeB
NFAn6mkbE5pZXUE8ctP2JIWscjgBx7ijpgzk2Bu0PCki
-----END CERTIFICATE-----
Generated at Sun Apr 28 11:04:44 2024 by rpki-client on console-ams.rpki-client.org