Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/y-nXZceaCcPoG2ive4bdpnDs3ng.roa
File: y-nXZceaCcPoG2ive4bdpnDs3ng.roa (raw, json)
Hash identifier: yzr/JrJ+xed5WTxRfx9tUfksGwsGBDG15cSUN2hwN70=
Subject key identifier: CB:E9:D7:65:C7:9A:09:C3:E8:1B:68:AF:7B:86:DD:A6:70:EC:DE:78
Certificate issuer: /CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Certificate serial: 018CC5DD2640324619FAB3DD0D7777A952D9
Authority key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/y-nXZceaCcPoG2ive4bdpnDs3ng.roa
Signing time: Mon 01 Jan 2024 16:30:53 +0000
ROA not before: Mon 01 Jan 2024 16:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206238
IP address blocks: 185.238.128.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dd:26:40:32:46:19:fa:b3:dd:0d:77:77:a9:52:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Validity
Not Before: Jan 1 16:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbe9d765c79a09c3e81b68af7b86dda670ecde78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5a:84:d9:e6:95:26:d8:c0:41:a3:24:48:58:
7c:53:d1:00:55:6d:a9:d1:f9:ee:4a:6f:e0:cf:64:
7e:21:24:35:e8:9e:c0:c6:e9:6a:db:37:b5:c6:5e:
cd:e5:92:78:ae:b2:65:aa:43:3e:82:9d:2f:e7:d1:
7f:ba:8c:a0:88:88:98:6e:7e:b4:03:da:65:33:a5:
7c:30:c2:37:ac:91:9a:e6:79:a0:8e:50:56:9d:4a:
d3:0d:53:b6:3f:20:fb:97:4c:6c:e7:c2:a6:57:da:
3b:d1:1d:d4:41:2e:3d:07:5d:21:f6:48:4e:d2:29:
17:2c:a0:f5:b6:a9:ef:71:2f:79:ca:f6:21:2f:ca:
5d:5e:74:a6:7c:4e:88:30:af:b8:a8:a8:b7:f4:dd:
7b:a5:d9:5f:bd:0c:27:34:a9:09:c8:99:fe:49:6f:
01:a5:81:a8:fc:f4:37:cd:bb:22:79:5a:6f:30:cd:
e5:d4:6f:1e:7a:68:ad:ee:ae:f4:f5:e1:8e:be:46:
90:4d:5d:a3:79:28:40:95:57:a2:24:2e:03:38:68:
f8:bc:90:ef:c3:6c:55:9e:5b:9d:bb:fe:df:e9:a4:
ac:c7:a3:0d:85:d4:6c:80:b2:d6:01:d1:2e:e6:55:
f4:1b:2d:de:87:3d:22:b6:d2:b6:35:0b:38:b1:dd:
f6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E9:D7:65:C7:9A:09:C3:E8:1B:68:AF:7B:86:DD:A6:70:EC:DE:78
X509v3 Authority Key Identifier:
keyid:C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/y-nXZceaCcPoG2ive4bdpnDs3ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.238.128.0/22
Signature Algorithm: sha256WithRSAEncryption
76:a5:57:21:2c:0a:f9:95:c0:a1:11:a3:11:86:e9:e3:46:82:
22:f7:74:8d:1d:1a:06:47:1e:0a:12:45:73:32:cc:51:c1:72:
27:30:e2:a2:50:6c:c6:bc:83:de:01:5b:dd:a3:50:f2:df:19:
cb:5f:5f:31:4d:a8:54:f9:ae:03:c1:fc:b8:9a:9a:91:5f:2f:
e1:51:6a:70:30:2e:9b:ac:e4:56:1b:36:a7:af:26:d9:3a:64:
85:0a:f7:a3:c0:27:7a:70:93:95:85:c5:74:5a:3b:22:09:71:
41:98:14:45:2e:0b:d2:94:bc:31:c1:e3:04:0e:87:85:40:64:
43:51:a1:17:c6:a7:d0:0c:4a:57:2d:e7:e5:d4:af:35:13:6b:
60:97:c7:a4:6f:c6:47:0d:8f:8e:0f:86:1c:63:b3:1c:e8:8d:
ee:33:04:0c:65:3c:41:01:8f:12:a6:f0:17:2c:7e:c7:ba:41:
4b:de:d7:4c:a3:94:4c:43:5c:0d:8d:49:01:49:2c:d1:7b:22:
10:ef:64:88:e4:5f:ba:6d:7b:ff:b5:1c:19:86:f3:b6:b6:75:
46:fe:ff:c3:5f:71:a6:2f:19:67:1a:e4:1f:19:01:45:93:b1:
08:94:e0:11:35:44:7c:bf:86:da:1d:cf:f5:15:21:40:3a:6b:
92:10:cc:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3SZAMkYZ+rPdDXd3qVLZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxNWU3ZDdiYjY5ZWZhY2IwYzczOTAyOTcyYzc0ZDcyZDI5
YmY3N2YwHhcNMjQwMTAxMTYzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmU5ZDc2NWM3OWEwOWMzZTgxYjY4YWY3Yjg2ZGRhNjcwZWNkZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVqE2eaVJtjAQaMkSFh8U9EAVW2p
0fnuSm/gz2R+ISQ16J7Axulq2ze1xl7N5ZJ4rrJlqkM+gp0v59F/uoygiIiYbn60
A9plM6V8MMI3rJGa5nmgjlBWnUrTDVO2PyD7l0xs58KmV9o70R3UQS49B10h9khO
0ikXLKD1tqnvcS95yvYhL8pdXnSmfE6IMK+4qKi39N17pdlfvQwnNKkJyJn+SW8B
pYGo/PQ3zbsieVpvMM3l1G8eemit7q709eGOvkaQTV2jeShAlVeiJC4DOGj4vJDv
w2xVnludu/7f6aSsx6MNhdRsgLLWAdEu5lX0Gy3ehz0ittK2NQs4sd322QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMvp12XHmgnD6Btor3uG3aZw7N54MB8GA1UdIwQY
MBaAFMFefXu2nvrLDHOQKXLHTXLSm/d/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAt
MzQ3YTBmN2M1YjA4LzEveS1uWFpjZWFDY1BvRzJpdmU0YmRwbkRzM25nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lYTQwMmEtMGZmNi00N2Q5LTljZDAtMzQ3YTBmN2M1YjA4
LzEvd1Y1OWU3YWUtc3NNYzVBcGNzZE5jdEtiOTM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCue6AMA0G
CSqGSIb3DQEBCwUAA4IBAQB2pVchLAr5lcChEaMRhunjRoIi93SNHRoGRx4KEkVz
MsxRwXInMOKiUGzGvIPeAVvdo1Dy3xnLX18xTahU+a4Dwfy4mpqRXy/hUWpwMC6b
rORWGzanrybZOmSFCvejwCd6cJOVhcV0WjsiCXFBmBRFLgvSlLwxweMEDoeFQGRD
UaEXxqfQDEpXLefl1K81E2tgl8ekb8ZHDY+OD4YcY7Mc6I3uMwQMZTxBAY8SpvAX
LH7HukFL3tdMo5RMQ1wNjUkBSSzReyIQ72SI5F+6bXv/tRwZhvO2tnVG/v/DX3Gm
LxlnGuQfGQFFk7EIlOARNUR8v4baHc/1FSFAOmuSEMyo
-----END CERTIFICATE-----
Generated at Sat May 4 02:18:18 2024 by rpki-client on console-ams.rpki-client.org