Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Y5BQZlj0r8n6n2YOGbbBoQu5oNs.roa
File: Y5BQZlj0r8n6n2YOGbbBoQu5oNs.roa (raw, json)
Hash identifier: ElpUd4LnaE/WNXd9H0Eidor5Rh3Xg9xW+iaNggVKANw=
Subject key identifier: 63:90:50:66:58:F4:AF:C9:FA:9F:66:0E:19:B6:C1:A1:0B:B9:A0:DB
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 018CC9BC0F8CF07F3D0BC518D056A11EF057
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Y5BQZlj0r8n6n2YOGbbBoQu5oNs.roa
Signing time: Tue 02 Jan 2024 10:33:14 +0000
ROA not before: Tue 02 Jan 2024 10:33:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212669
IP address blocks: 193.106.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:0f:8c:f0:7f:3d:0b:c5:18:d0:56:a1:1e:f0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 2 10:33:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6390506658f4afc9fa9f660e19b6c1a10bb9a0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:31:d0:73:b6:49:49:af:ff:66:97:85:10:
bd:0c:0a:20:7e:39:d0:c1:51:89:51:ea:3b:46:67:
82:9c:41:79:69:eb:f6:3f:13:c1:d6:df:9b:e8:44:
f9:4c:c7:bf:8d:00:b7:f7:cd:95:ad:06:d3:60:2a:
51:9d:ac:b8:3b:5d:3a:df:1d:43:36:b5:49:5d:4c:
8b:91:23:af:96:70:d7:0f:af:4a:94:46:f0:8f:29:
a3:4d:2e:d7:2c:1f:6e:69:25:88:dd:19:c2:aa:57:
82:cc:92:91:df:7b:9b:42:29:b9:b5:f9:b7:e1:ea:
53:e7:3f:d3:b3:3c:70:2d:bd:83:a6:7e:71:2e:c1:
e6:71:85:67:c2:fd:6a:25:14:16:74:84:fb:4e:89:
23:ff:47:66:eb:4a:60:10:0d:20:bc:10:5b:09:dc:
34:b4:78:b3:f9:de:fb:b6:3f:a5:32:3d:96:26:22:
1b:37:88:5b:fd:07:25:9c:bd:7b:1a:77:dd:b5:e4:
e8:77:81:69:38:d7:a1:90:8a:3b:b9:c4:b7:f7:72:
3f:0a:5a:6b:2a:5d:0d:2a:ba:ad:7f:e9:22:6f:d3:
88:54:02:b4:0d:8e:e9:e2:bf:45:9b:a6:8c:1f:5e:
60:ae:bd:17:ec:d5:01:ee:86:c6:0d:f3:df:f2:de:
4c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:90:50:66:58:F4:AF:C9:FA:9F:66:0E:19:B6:C1:A1:0B:B9:A0:DB
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Y5BQZlj0r8n6n2YOGbbBoQu5oNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.198.0/24
Signature Algorithm: sha256WithRSAEncryption
78:97:4c:8b:10:72:04:11:78:9b:80:fa:e3:30:9f:09:1a:6b:
e7:fc:59:7c:84:8e:36:53:7a:49:0a:ca:3a:29:41:66:68:92:
76:ba:27:dc:ca:f4:a9:00:2b:85:c0:0e:dc:55:42:c5:59:1c:
de:bd:4d:fd:99:32:e4:39:10:93:f0:6c:75:54:a5:8b:13:9a:
90:00:7c:c3:47:13:5e:c3:0b:ff:84:ba:b8:77:8a:3d:4d:31:
a9:69:5e:27:82:70:83:54:6b:05:a9:c8:46:69:19:30:bd:dd:
12:3c:26:18:52:bd:46:56:a9:26:a9:2a:ff:64:63:e2:87:93:
d8:28:82:ed:92:e7:66:6e:9c:c5:73:c5:d9:b8:98:05:13:07:
88:b7:35:a2:d1:03:4f:f3:12:22:e7:2d:d5:30:00:d8:29:87:
f3:1d:cc:ed:39:dc:c6:d4:34:7a:8d:35:35:19:28:09:ec:08:
04:cb:83:ff:c3:55:2c:e2:c2:44:6d:a2:87:b3:d1:c8:33:35:
4d:2b:30:43:01:50:74:b2:99:a8:08:1c:02:35:5a:e7:fb:f4:
e7:c1:33:5e:0b:f0:94:62:d7:e3:66:33:86:3c:99:a7:08:b0:
97:fc:53:5d:e1:1d:9d:1a:d6:96:e8:67:ea:a5:be:40:4c:7f:
82:77:03:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvA+M8H89C8UY0FahHvBXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyZWU0NTQyNmUxMmU1MGZlMzBlOGZmYzM5ZTA0NDg1ZDhm
NzMzMzkwHhcNMjQwMTAyMTAzMzE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MzkwNTA2NjU4ZjRhZmM5ZmE5ZjY2MGUxOWI2YzFhMTBiYjlhMGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1fkx0HO2SUmv/2aXhRC9DAogfjnQ
wVGJUeo7RmeCnEF5aev2PxPB1t+b6ET5TMe/jQC3982VrQbTYCpRnay4O1063x1D
NrVJXUyLkSOvlnDXD69KlEbwjymjTS7XLB9uaSWI3RnCqleCzJKR33ubQim5tfm3
4epT5z/TszxwLb2Dpn5xLsHmcYVnwv1qJRQWdIT7Tokj/0dm60pgEA0gvBBbCdw0
tHiz+d77tj+lMj2WJiIbN4hb/QclnL17GnfdteTod4FpONehkIo7ucS393I/Clpr
Kl0NKrqtf+kib9OIVAK0DY7p4r9Fm6aMH15grr0X7NUB7obGDfPf8t5MGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGOQUGZY9K/J+p9mDhm2waELuaDbMB8GA1UdIwQY
MBaAFMLuRUJuEuUP4w6P/DngRIXY9zM5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUt
ZGE3NTQzMGIxNmY2LzEvWTVCUVpsajByOG42bjJZT0diYkJvUXU1b05zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC83MGFhMzItOTYwNy00ZGI3LThmMWUtZGE3NTQzMGIxNmY2
LzEvd3U1RlFtNFM1UV9qRG9fOE9lQkVoZGozTXprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWrGMA0G
CSqGSIb3DQEBCwUAA4IBAQB4l0yLEHIEEXibgPrjMJ8JGmvn/Fl8hI42U3pJCso6
KUFmaJJ2uifcyvSpACuFwA7cVULFWRzevU39mTLkORCT8Gx1VKWLE5qQAHzDRxNe
wwv/hLq4d4o9TTGpaV4ngnCDVGsFqchGaRkwvd0SPCYYUr1GVqkmqSr/ZGPih5PY
KILtkudmbpzFc8XZuJgFEweItzWi0QNP8xIi5y3VMADYKYfzHcztOdzG1DR6jTU1
GSgJ7AgEy4P/w1Us4sJEbaKHs9HIMzVNKzBDAVB0spmoCBwCNVrn+/TnwTNeC/CU
YtfjZjOGPJmnCLCX/FNd4R2dGtaW6Gfqpb5ATH+CdwOf
-----END CERTIFICATE-----
Generated at Thu May 23 00:40:42 2024 by rpki-client on console-fra.rpki-client.org