Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/yFaQpt2HRHWCmo4eSPrCEXVRWbM.roa
File: yFaQpt2HRHWCmo4eSPrCEXVRWbM.roa (raw, json)
Hash identifier: t0f/9yN9ywI66yqf1F7mp1gOG2XAL24/o+CTFS4OToQ=
Subject key identifier: C8:56:90:A6:DD:87:44:75:82:9A:8E:1E:48:FA:C2:11:75:51:59:B3
Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial: 018EF5C583E8895A969FE477FF5C28687300
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/yFaQpt2HRHWCmo4eSPrCEXVRWbM.roa
Signing time: Fri 19 Apr 2024 09:52:25 +0000
ROA not before: Fri 19 Apr 2024 09:52:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 267708
IP address blocks: 176.57.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 14:20:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f5:c5:83:e8:89:5a:96:9f:e4:77:ff:5c:28:68:73:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
Validity
Not Before: Apr 19 09:52:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c85690a6dd874475829a8e1e48fac211755159b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:11:90:30:88:d5:52:91:e9:4a:17:9f:fd:c4:
bc:4b:9e:44:95:cf:b6:9a:07:38:9e:db:03:b1:e9:
a4:33:85:0c:72:b7:1c:42:73:d6:06:61:d5:83:56:
9b:99:70:8e:b8:de:02:a4:6a:f8:3d:66:3d:81:df:
9e:a3:c6:86:04:e0:8d:22:ce:41:58:0a:8e:eb:88:
a5:3c:d1:8a:27:99:35:bb:ec:c9:5a:fa:70:93:0f:
27:31:8f:ab:3b:43:7b:8d:0b:49:84:64:cb:aa:f0:
92:7c:d9:ab:24:01:ee:16:f5:a7:2e:83:7a:72:8e:
99:99:5d:f5:0a:f8:c4:5d:db:b6:b4:15:76:1c:e7:
fc:47:91:2e:bb:13:d1:10:fe:0f:e1:95:f1:65:4c:
8f:5b:af:d0:cb:9e:03:52:ee:ea:50:18:fc:4a:18:
87:f4:2b:db:1f:e3:4f:43:7f:ba:c1:dd:78:01:9a:
95:10:06:c4:97:25:c0:be:e1:7e:48:36:d5:2c:c8:
4b:b3:32:ed:1c:80:d5:b8:cc:ef:34:e5:86:87:05:
dc:c4:db:f5:15:84:55:9a:1a:4b:39:96:eb:52:dc:
1d:f1:17:ea:d6:0c:a8:6e:a3:01:fc:30:29:25:7a:
56:b7:5a:86:a4:27:d0:23:49:93:cf:84:4b:ec:31:
06:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:56:90:A6:DD:87:44:75:82:9A:8E:1E:48:FA:C2:11:75:51:59:B3
X509v3 Authority Key Identifier:
keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/yFaQpt2HRHWCmo4eSPrCEXVRWbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.57.207.0/24
Signature Algorithm: sha256WithRSAEncryption
80:31:18:22:01:16:3c:c7:07:c0:f3:7c:e7:08:d6:19:6c:45:
12:ac:55:e4:54:dd:df:db:7e:e5:e7:85:ac:50:7e:73:db:05:
ce:97:8c:0f:67:35:67:a5:c2:7b:7c:23:99:1e:d7:11:be:5e:
8d:57:80:25:2e:01:d1:72:cc:0b:3d:d4:3b:94:c2:f4:98:7a:
af:85:76:d7:05:01:7d:f5:ee:db:b5:02:40:33:f6:9a:a8:f5:
b9:82:68:27:91:31:cf:d1:88:88:2f:2d:56:09:4a:b0:d1:2c:
50:73:42:55:9e:c1:23:f9:dc:7d:16:bc:fc:95:78:4f:2a:10:
f8:48:e2:3d:34:dd:a7:a8:5b:f0:55:ac:5f:95:42:f2:2e:1d:
6b:1b:91:2d:8d:fe:8b:0c:f8:46:d7:dc:f8:7c:46:21:45:6f:
33:d0:67:da:ee:fb:8d:43:2f:a0:d4:f9:3f:95:cd:e6:76:dd:
e9:5c:1f:d0:4f:4f:b4:e8:77:0a:33:1d:b9:30:ce:bb:c9:04:
f0:00:7c:73:80:00:bd:bb:f3:7e:07:c4:ea:dc:ac:19:65:e6:
eb:86:5b:3f:4f:c6:da:1f:65:5f:1b:c1:ce:54:cc:10:ee:54:
df:46:30:3a:70:23:a3:2a:3b:9e:8f:ad:07:8c:77:79:08:fb:
3a:87:46:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY71xYPoiVqWn+R3/1woaHMAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk
ZWZlNzEwHhcNMjQwNDE5MDk1MjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODU2OTBhNmRkODc0NDc1ODI5YThlMWU0OGZhYzIxMTc1NTE1OWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxGQMIjVUpHpShef/cS8S55Elc+2
mgc4ntsDsemkM4UMcrccQnPWBmHVg1abmXCOuN4CpGr4PWY9gd+eo8aGBOCNIs5B
WAqO64ilPNGKJ5k1u+zJWvpwkw8nMY+rO0N7jQtJhGTLqvCSfNmrJAHuFvWnLoN6
co6ZmV31CvjEXdu2tBV2HOf8R5EuuxPREP4P4ZXxZUyPW6/Qy54DUu7qUBj8ShiH
9CvbH+NPQ3+6wd14AZqVEAbElyXAvuF+SDbVLMhLszLtHIDVuMzvNOWGhwXcxNv1
FYRVmhpLOZbrUtwd8Rfq1gyobqMB/DApJXpWt1qGpCfQI0mTz4RL7DEG6wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMhWkKbdh0R1gpqOHkj6whF1UVmzMB8GA1UdIwQY
MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt
Zjg4OWNhMTYxYzAxLzEveUZhUXB0MkhSSFdDbW80ZVNQckNFWFZSV2JNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx
LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsDnPMA0G
CSqGSIb3DQEBCwUAA4IBAQCAMRgiARY8xwfA83znCNYZbEUSrFXkVN3f237l54Ws
UH5z2wXOl4wPZzVnpcJ7fCOZHtcRvl6NV4AlLgHRcswLPdQ7lML0mHqvhXbXBQF9
9e7btQJAM/aaqPW5gmgnkTHP0YiILy1WCUqw0SxQc0JVnsEj+dx9Frz8lXhPKhD4
SOI9NN2nqFvwVaxflULyLh1rG5Etjf6LDPhG19z4fEYhRW8z0Gfa7vuNQy+g1Pk/
lc3mdt3pXB/QT0+06HcKMx25MM67yQTwAHxzgAC9u/N+B8Tq3KwZZebrhls/T8ba
H2VfG8HOVMwQ7lTfRjA6cCOjKjuej60HjHd5CPs6h0Yc
-----END CERTIFICATE-----
Generated at Tue Jul 2 23:17:25 2024 by rpki-client on console-fra.rpki-client.org