Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/yUyDMb6cwez1T92T9dY3ck3Rc-s.roa
File: yUyDMb6cwez1T92T9dY3ck3Rc-s.roa (raw, json)
Hash identifier: w9dU0AbssHRAg90Z40VKWU/fttxtn95TeGRSC+zPBfw=
Subject key identifier: C9:4C:83:31:BE:9C:C1:EC:F5:4F:DD:93:F5:D6:37:72:4D:D1:73:EB
Certificate issuer: /CN=303789258e609f3e558d77b3bfd08acf3515fa92
Certificate serial: 018CC64B19E23973BEBA2AD019A7CD6C45EB
Authority key identifier: 30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/yUyDMb6cwez1T92T9dY3ck3Rc-s.roa
Signing time: Mon 01 Jan 2024 18:30:59 +0000
ROA not before: Mon 01 Jan 2024 18:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59431
IP address blocks: 185.86.36.0/24 maxlen: 24
185.86.36.0/22 maxlen: 24
185.86.38.0/24 maxlen: 24
185.86.37.0/24 maxlen: 24
185.86.39.0/24 maxlen: 24
164.138.17.0/24 maxlen: 24
164.138.16.0/24 maxlen: 24
164.138.16.0/21 maxlen: 24
164.138.21.0/24 maxlen: 24
164.138.20.0/24 maxlen: 24
164.138.22.0/24 maxlen: 24
164.138.23.0/24 maxlen: 24
164.138.19.0/24 maxlen: 24
164.138.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:19:e2:39:73:be:ba:2a:d0:19:a7:cd:6c:45:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=303789258e609f3e558d77b3bfd08acf3515fa92
Validity
Not Before: Jan 1 18:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c94c8331be9cc1ecf54fdd93f5d637724dd173eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:98:e9:c6:c0:7d:a6:08:8a:28:d2:97:0f:
d8:3c:76:c1:a4:46:39:af:a3:36:61:73:71:21:a6:
eb:2e:39:f8:de:f9:cc:9b:fc:af:c9:1f:25:13:3f:
e1:1d:fc:26:7b:0f:8e:be:9b:91:b8:e6:b9:13:69:
23:25:6a:3c:78:34:fe:b8:a4:db:c1:0b:3e:9f:3c:
73:d2:50:61:5e:d5:20:06:a7:85:60:1e:f9:72:45:
ef:64:7e:09:0e:ef:1f:d9:00:20:2b:c2:64:39:90:
b7:97:81:78:44:9e:59:4a:4d:be:1f:b0:cf:12:6f:
d4:a0:8d:7e:f2:2c:28:cc:a8:4a:a2:9b:9e:d4:8e:
d5:f3:e5:f5:08:3e:e8:d5:7a:8e:d9:c5:de:11:b7:
fc:e8:ed:d4:88:6f:80:75:c3:61:f8:9a:25:47:d6:
85:65:eb:d0:d2:41:4a:15:76:12:ab:0c:c8:f5:f4:
d4:1d:56:d9:1f:18:cb:ee:7e:d3:c2:9a:12:a4:ac:
b3:fb:4e:bf:47:3b:c9:f6:c3:f4:38:6f:44:28:90:
81:0b:60:b6:92:3c:cd:31:38:72:ab:c1:96:26:e6:
5e:fc:03:17:2c:3d:4f:fc:47:cd:29:4a:75:8e:ba:
f7:e2:42:b4:a4:59:bc:ec:50:c4:29:23:fb:30:46:
a1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4C:83:31:BE:9C:C1:EC:F5:4F:DD:93:F5:D6:37:72:4D:D1:73:EB
X509v3 Authority Key Identifier:
keyid:30:37:89:25:8E:60:9F:3E:55:8D:77:B3:BF:D0:8A:CF:35:15:FA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDeJJY5gnz5VjXezv9CKzzUV-pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/yUyDMb6cwez1T92T9dY3ck3Rc-s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c934da-978a-46f9-87a7-4f219db78508/1/MDeJJY5gnz5VjXezv9CKzzUV-pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.138.16.0/21
185.86.36.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:70:6c:c4:db:a7:c2:04:65:d1:e7:e5:68:0e:ea:94:65:dc:
3a:57:99:58:a6:8b:4f:bc:78:3e:27:bb:63:d3:1a:df:55:c5:
4f:be:0c:7c:05:0d:a5:e4:e4:d9:fa:f1:3a:8d:49:20:11:d5:
d1:a5:7c:6b:72:1c:f0:5c:0d:83:23:d5:1a:b7:7b:75:29:a3:
ec:a1:f0:44:4e:49:bb:94:b3:f3:d4:da:ac:85:60:f5:27:fa:
8f:66:08:fa:cd:2f:5f:62:7c:09:d9:1c:87:fa:c4:00:d4:4b:
6f:01:48:47:64:91:73:b9:a0:76:cd:97:4e:30:79:b6:5c:8f:
ea:9a:7e:df:54:af:75:1f:13:a8:e5:f3:10:12:2d:26:63:7c:
98:36:6c:32:40:8b:bc:ca:4d:34:b7:18:cc:6a:16:a0:19:04:
a6:f6:f6:08:76:39:50:e9:97:fb:7b:a3:04:66:e5:9e:d2:40:
b4:8d:34:9d:a1:d1:af:62:83:a9:d0:3b:3b:af:1e:47:af:1d:
32:08:f0:81:0a:a1:8c:66:c4:55:c5:d7:0f:90:f5:5f:f4:17:
17:49:1d:f5:20:16:a2:4e:f1:37:28:36:5c:ec:8a:ff:06:02:
1d:51:a5:e3:e0:15:ca:cf:06:53:c4:09:7f:dd:53:c7:0b:f1:
f1:7f:f1:b2
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGSxniOXO+uirQGafNbEXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzc4OTI1OGU2MDlmM2U1NThkNzdiM2JmZDA4YWNmMzUx
NWZhOTIwHhcNMjQwMTAxMTgzMDU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjOTRjODMzMWJlOWNjMWVjZjU0ZmRkOTNmNWQ2Mzc3MjRkZDE3M2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuf2Y6cbAfaYIiijSlw/YPHbBpEY5
r6M2YXNxIabrLjn43vnMm/yvyR8lEz/hHfwmew+OvpuRuOa5E2kjJWo8eDT+uKTb
wQs+nzxz0lBhXtUgBqeFYB75ckXvZH4JDu8f2QAgK8JkOZC3l4F4RJ5ZSk2+H7DP
Em/UoI1+8iwozKhKopue1I7V8+X1CD7o1XqO2cXeEbf86O3UiG+AdcNh+JolR9aF
ZevQ0kFKFXYSqwzI9fTUHVbZHxjL7n7TwpoSpKyz+06/RzvJ9sP0OG9EKJCBC2C2
kjzNMThyq8GWJuZe/AMXLD1P/EfNKUp1jrr34kK0pFm87FDEKSP7MEahjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMlMgzG+nMHs9U/dk/XWN3JN0XPrMB8GA1UdIwQY
MBaAFDA3iSWOYJ8+VY13s7/Qis81FfqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jOTM0ZGEtOTc4YS00NmY5LTg3YTct
NGYyMTlkYjc4NTA4LzEveVV5RE1iNmN3ZXoxVDkyVDlkWTNjazNSYy1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jOTM0ZGEtOTc4YS00NmY5LTg3YTctNGYyMTlkYjc4NTA4
LzEvTURlSkpZNWduejVWalhlenY5Q0t6elVWLXBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDpIoQAwQC
uVYkMA0GCSqGSIb3DQEBCwUAA4IBAQA6cGzE26fCBGXR5+VoDuqUZdw6V5lYpotP
vHg+J7tj0xrfVcVPvgx8BQ2l5OTZ+vE6jUkgEdXRpXxrchzwXA2DI9Uat3t1KaPs
ofBETkm7lLPz1NqshWD1J/qPZgj6zS9fYnwJ2RyH+sQA1EtvAUhHZJFzuaB2zZdO
MHm2XI/qmn7fVK91HxOo5fMQEi0mY3yYNmwyQIu8yk00txjMahagGQSm9vYIdjlQ
6Zf7e6MEZuWe0kC0jTSdodGvYoOp0Ds7rx5Hrx0yCPCBCqGMZsRVxdcPkPVf9BcX
SR31IBaiTvE3KDZc7Ir/BgIdUaXj4BXKzwZTxAl/3VPHC/Hxf/Gy
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:25:37 2024 by rpki-client on console-ams.rpki-client.org