Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/yjZjzoiV6eRSgmwgqXiWXMMyphI.roa
File: yjZjzoiV6eRSgmwgqXiWXMMyphI.roa (raw, json)
Hash identifier: XlzdyYLcw8SOdO4YHsBQYKz3zDU2AgKaTFlKRE6bamc=
Subject key identifier: CA:36:63:CE:88:95:E9:E4:52:82:6C:20:A9:78:96:5C:C3:32:A6:12
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 018CC727696B03B9D3F5206BCA95F9D5C8B1
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/yjZjzoiV6eRSgmwgqXiWXMMyphI.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213195
IP address blocks: 46.230.168.0/22 maxlen: 22
5.254.168.0/22 maxlen: 22
46.230.172.0/22 maxlen: 22
5.254.192.0/19 maxlen: 19
178.72.4.0/22 maxlen: 22
92.241.208.0/22 maxlen: 22
92.241.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:69:6b:03:b9:d3:f5:20:6b:ca:95:f9:d5:c8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca3663ce8895e9e452826c20a978965cc332a612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0e:09:26:89:7a:44:c0:dd:41:df:ba:99:8e:
d0:3b:4b:e0:5a:03:f7:1a:4e:47:20:da:c4:dd:50:
61:bf:05:6c:b1:45:19:7b:de:4c:ef:71:61:2d:03:
b9:73:ba:d4:d5:49:4d:cb:8c:5e:a9:fb:5e:22:69:
f0:ed:a8:d7:57:d2:90:32:58:35:8a:49:4c:1b:e4:
e7:be:c9:73:13:39:31:45:78:71:00:da:43:2f:6a:
aa:fd:24:e0:5e:12:bf:c3:26:61:31:6d:a1:8e:5f:
62:c5:97:90:1c:07:2b:ae:f2:3d:01:18:66:b0:73:
c1:c5:45:6c:5e:06:f4:37:1e:dc:0e:aa:6e:68:f3:
a4:a5:54:58:06:f9:22:a3:f2:2a:88:88:8c:ac:47:
c4:11:4f:db:07:f0:d5:0f:e2:12:87:55:c6:d1:9c:
b6:0a:d8:11:f5:76:68:82:1e:c9:0d:fd:64:8a:17:
33:2d:fe:97:ab:19:ff:c6:10:23:95:b0:57:61:f4:
09:7e:33:19:61:a1:8a:1f:ae:51:da:96:93:50:6a:
e0:67:3b:a6:e7:06:fc:e8:b5:cf:44:9f:9f:df:1c:
d1:71:33:62:c5:44:10:72:03:57:a9:82:8c:7c:19:
20:6f:d2:ae:1b:c1:ed:2c:41:39:23:ae:d4:2b:9b:
84:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:36:63:CE:88:95:E9:E4:52:82:6C:20:A9:78:96:5C:C3:32:A6:12
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/yjZjzoiV6eRSgmwgqXiWXMMyphI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.254.168.0/22
5.254.192.0/19
46.230.168.0/21
92.241.208.0/21
178.72.4.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:85:e2:c9:bf:2f:ac:a4:b3:1f:33:61:04:c6:b0:d6:65:a2:
ee:27:ea:ff:c8:af:90:41:92:7c:e9:26:73:59:71:47:24:c5:
de:57:fb:25:03:c0:71:0e:54:23:1b:ed:40:d1:cf:0f:eb:a8:
1d:d6:42:9a:24:5a:8a:5e:a1:48:f3:78:e0:53:8f:8d:ba:d6:
e2:0a:b4:d0:a8:7f:7b:6c:e4:54:58:81:e9:c7:ad:d2:87:ce:
51:8a:0b:76:3b:bf:ce:6f:3a:63:94:89:d8:bc:21:af:28:ed:
14:50:2d:e8:8a:24:53:0b:f0:12:f7:e9:fb:bf:45:85:6c:c8:
28:db:68:0e:6d:fb:83:d1:e4:2c:9d:2a:9b:9c:6c:72:57:34:
ce:96:77:20:ab:e0:23:11:12:7b:24:ae:a7:ec:24:cf:7e:d4:
89:83:1f:4f:58:51:5e:e4:cb:01:93:a3:73:60:60:64:c0:94:
18:6c:d7:00:17:ac:d4:05:14:ed:7b:fb:69:de:48:d6:6a:13:
d9:08:2b:78:4b:a7:15:a9:f2:1d:94:2b:59:c4:ae:ad:b5:a3:
84:ab:56:ed:46:b9:f0:17:a2:af:d4:a6:81:07:8a:15:20:48:
64:a1:20:c5:9e:c8:fc:19:c8:f4:05:f9:aa:0a:df:b0:2b:88:
63:e7:70:fe
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAYzHJ2lrA7nT9SBrypX51cixMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NDk3NTdlM2UzNWFhYWI1ZDU3YzUxODYyNDNhNDM3MTcz
ZTRkMzYwHhcNMjQwMTAxMjIzMTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTM2NjNjZTg4OTVlOWU0NTI4MjZjMjBhOTc4OTY1Y2MzMzJhNjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA4JJol6RMDdQd+6mY7QO0vgWgP3
Gk5HINrE3VBhvwVssUUZe95M73FhLQO5c7rU1UlNy4xeqfteImnw7ajXV9KQMlg1
iklMG+TnvslzEzkxRXhxANpDL2qq/STgXhK/wyZhMW2hjl9ixZeQHAcrrvI9ARhm
sHPBxUVsXgb0Nx7cDqpuaPOkpVRYBvkio/IqiIiMrEfEEU/bB/DVD+ISh1XG0Zy2
CtgR9XZogh7JDf1kihczLf6Xqxn/xhAjlbBXYfQJfjMZYaGKH65R2paTUGrgZzum
5wb86LXPRJ+f3xzRcTNixUQQcgNXqYKMfBkgb9KuG8HtLEE5I67UK5uEhQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMo2Y86IlenkUoJsIKl4llzDMqYSMB8GA1UdIwQY
MBaAFAhJdX4+NaqrXVfFGGJDpDcXPk02MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5Yjgt
ZjhlZWNiNDI1MDg3LzEveWpaanpvaVY2ZVJTZ213Z3FYaVdYTU15cGhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mYjI0MDEtZTQ3MC00YzA1LTk5YjgtZjhlZWNiNDI1MDg3
LzEvQ0VsMWZqNDFxcXRkVjhVWVlrT2tOeGMtVFRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBf6oAwQF
Bf7AAwQDLuaoAwQDXPHQAwQCskgEMA0GCSqGSIb3DQEBCwUAA4IBAQCrheLJvy+s
pLMfM2EExrDWZaLuJ+r/yK+QQZJ86SZzWXFHJMXeV/slA8BxDlQjG+1A0c8P66gd
1kKaJFqKXqFI83jgU4+NutbiCrTQqH97bORUWIHpx63Sh85Rigt2O7/ObzpjlInY
vCGvKO0UUC3oiiRTC/AS9+n7v0WFbMgo22gObfuD0eQsnSqbnGxyVzTOlncgq+Aj
ERJ7JK6n7CTPftSJgx9PWFFe5MsBk6NzYGBkwJQYbNcAF6zUBRTte/tp3kjWahPZ
CCt4S6cVqfIdlCtZxK6ttaOEq1btRrnwF6Kv1KaBB4oVIEhkoSDFnsj8Gcj0Bfmq
Ct+wK4hj53D+
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:16:34 2024 by rpki-client on console-fra.rpki-client.org