Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/9MEwf44Dyq6ZMCI9E1XgljCF_aY.roa
File: 9MEwf44Dyq6ZMCI9E1XgljCF_aY.roa (raw, json)
Hash identifier: I7zFLjBokOhYE2XUSMuTT577FeYwXZHHYM3x3xHgb+0=
Subject key identifier: F4:C1:30:7F:8E:03:CA:AE:99:30:22:3D:13:55:E0:96:30:85:FD:A6
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 0191F9E8CC5AC853DB79147EB878CD162FC1
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/9MEwf44Dyq6ZMCI9E1XgljCF_aY.roa
Signing time: Mon 16 Sep 2024 08:17:49 +0000
ROA not before: Mon 16 Sep 2024 08:17:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197450
IP address blocks: 185.95.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:f9:e8:cc:5a:c8:53:db:79:14:7e:b8:78:cd:16:2f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 16 08:17:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f4c1307f8e03caae9930223d1355e0963085fda6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:1b:15:99:3f:41:b5:81:75:38:e5:18:8a:
17:62:fa:1a:8f:2b:c8:18:91:c9:4f:f6:0c:41:28:
4a:97:c5:31:b3:e7:37:7c:53:43:ca:33:dd:eb:4f:
93:48:87:0f:c6:e5:cd:bc:88:b7:9c:42:9f:e8:d6:
0f:d4:9e:82:49:2f:7a:81:9c:4d:33:45:8e:23:05:
ce:8a:16:9f:16:74:96:43:ce:bb:3d:fb:8c:9f:3b:
4c:19:5e:de:ce:23:c6:a3:48:bc:8e:96:9a:b1:64:
8f:d0:b0:79:14:a8:aa:d6:e2:f0:c8:5a:ff:36:d3:
3a:50:b8:f9:d0:d3:86:80:5d:c4:33:e4:54:8e:45:
af:0f:a7:d3:69:af:75:a3:ba:83:97:d6:93:d2:78:
a1:a1:7b:88:6b:c3:0f:10:a2:1e:16:9c:b4:fe:92:
05:1e:7d:fa:7d:c0:38:12:0c:80:e4:c1:62:06:01:
97:80:48:a9:4b:f0:3e:84:e9:f8:24:d1:3f:f8:c6:
69:f8:df:58:22:2e:fb:3d:2e:08:78:f3:12:d6:22:
b6:28:da:92:ac:0f:c5:9e:51:a4:bd:bc:1e:cf:9f:
a1:a4:32:ef:e7:9f:6d:57:4e:cc:50:dc:d9:d8:5c:
1a:cd:d1:99:23:d2:1a:08:7e:ce:df:cf:aa:e1:de:
63:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C1:30:7F:8E:03:CA:AE:99:30:22:3D:13:55:E0:96:30:85:FD:A6
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/9MEwf44Dyq6ZMCI9E1XgljCF_aY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.95.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:34:fd:5a:95:d9:70:97:f0:d4:49:11:1b:e7:e9:4b:0a:55:
92:b7:e4:c3:b3:2f:1b:71:58:c0:25:65:d3:05:f1:fc:28:d1:
2e:1d:55:8e:e7:c0:3d:97:b3:5a:fe:5e:46:13:d3:2c:a5:d3:
c2:50:c6:da:ea:11:ba:77:60:38:18:5a:56:cd:e7:2d:bc:48:
67:db:7c:26:33:fb:7e:11:2d:97:52:15:4b:f3:dc:8b:fe:96:
53:9a:f7:33:cd:3d:a4:56:6e:47:0b:47:9a:9d:15:b0:13:9a:
96:2a:61:0d:45:d0:0a:94:44:3a:73:b7:39:c2:e2:10:c2:62:
cf:73:a4:f4:7e:78:b4:63:e2:5e:43:45:3b:f2:9e:06:66:ca:
a9:c7:c9:09:10:2c:fd:2c:d6:52:de:77:7b:e1:b6:a5:5f:0c:
e9:74:cc:92:a7:d3:7c:3b:ed:45:06:f6:8f:2f:69:b4:82:86:
c8:49:7e:1a:60:f3:15:50:e5:41:12:56:25:a5:c5:f7:ec:ee:
96:27:d3:d3:8f:5d:f3:22:ea:a9:b2:23:a5:8e:8c:52:9c:f2:
c2:2c:54:b2:da:56:a5:56:9e:a2:62:2d:bb:e7:5f:73:ce:b1:
4d:17:38:5b:60:b4:ac:63:51:d6:98:94:93:4a:cb:91:cb:36:
2d:4f:e0:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZH56MxayFPbeRR+uHjNFi/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjQwOTE2MDgxNzQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNGMxMzA3ZjhlMDNjYWFlOTkzMDIyM2QxMzU1ZTA5NjMwODVmZGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUgbFZk/QbWBdTjlGIoXYvoajyvI
GJHJT/YMQShKl8Uxs+c3fFNDyjPd60+TSIcPxuXNvIi3nEKf6NYP1J6CSS96gZxN
M0WOIwXOihafFnSWQ867PfuMnztMGV7eziPGo0i8jpaasWSP0LB5FKiq1uLwyFr/
NtM6ULj50NOGgF3EM+RUjkWvD6fTaa91o7qDl9aT0nihoXuIa8MPEKIeFpy0/pIF
Hn36fcA4EgyA5MFiBgGXgEipS/A+hOn4JNE/+MZp+N9YIi77PS4IePMS1iK2KNqS
rA/FnlGkvbwez5+hpDLv559tV07MUNzZ2FwazdGZI9IaCH7O38+q4d5jlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPTBMH+OA8qumTAiPRNV4JYwhf2mMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvOU1Fd2Y0NER5cTZaTUNJOUUxWGdsakNGX2FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV+fMA0G
CSqGSIb3DQEBCwUAA4IBAQA/NP1aldlwl/DUSREb5+lLClWSt+TDsy8bcVjAJWXT
BfH8KNEuHVWO58A9l7Na/l5GE9MspdPCUMba6hG6d2A4GFpWzectvEhn23wmM/t+
ES2XUhVL89yL/pZTmvczzT2kVm5HC0eanRWwE5qWKmENRdAKlEQ6c7c5wuIQwmLP
c6T0fni0Y+JeQ0U78p4GZsqpx8kJECz9LNZS3nd74balXwzpdMySp9N8O+1FBvaP
L2m0gobISX4aYPMVUOVBElYlpcX37O6WJ9PTj13zIuqpsiOljoxSnPLCLFSy2lal
Vp6iYi27519zzrFNFzhbYLSsY1HWmJSTSsuRyzYtT+Ch
-----END CERTIFICATE-----
Generated at Sat Sep 28 12:01:06 2024 by rpki-client on console-fra.rpki-client.org