Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/L93-dKXn3yDHd8ebsoeCv7n3YnM.roa
File: L93-dKXn3yDHd8ebsoeCv7n3YnM.roa (raw, json)
Hash identifier: IjUJMPFwaNZIdM5Whssz2L+0D1ZSLYnS89Od5Fcghys=
Subject key identifier: 2F:DD:FE:74:A5:E7:DF:20:C7:77:C7:9B:B2:87:82:BF:B9:F7:62:73
Certificate issuer: /CN=623f344fd4a91bfad138308d527155bbce52af6e
Certificate serial: 018CC3B6CB8EAE24905B7A823E6945ECCE4E
Authority key identifier: 62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/L93-dKXn3yDHd8ebsoeCv7n3YnM.roa
Signing time: Mon 01 Jan 2024 06:29:45 +0000
ROA not before: Mon 01 Jan 2024 06:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8819
IP address blocks: 83.142.192.0/21 maxlen: 21
91.189.24.0/21 maxlen: 21
46.227.104.0/21 maxlen: 21
185.188.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:cb:8e:ae:24:90:5b:7a:82:3e:69:45:ec:ce:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=623f344fd4a91bfad138308d527155bbce52af6e
Validity
Not Before: Jan 1 06:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2fddfe74a5e7df20c777c79bb28782bfb9f76273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b5:87:7a:40:44:f6:a2:02:5b:95:96:ea:47:
d4:6a:a5:b0:1e:cd:b7:cd:61:ef:54:7b:3d:02:e1:
ea:10:80:8f:2e:c4:5d:14:be:1d:f4:a7:36:d9:09:
ee:ff:fa:e4:6c:50:39:ba:32:46:dd:e3:93:c9:a3:
fa:1d:f2:7b:e9:16:50:ff:80:d8:d2:57:98:95:36:
7c:4e:dc:61:11:b5:15:89:92:9d:61:45:c7:81:c3:
6b:87:e6:09:7b:8b:1c:71:12:3f:6f:6c:f6:dc:fe:
35:23:3e:a1:f7:0f:33:42:82:6d:6f:61:9b:50:ff:
25:09:83:e9:f9:d8:b8:c2:a8:10:e4:2a:61:5b:aa:
1d:ec:3e:3a:b3:f6:9d:22:a4:f7:00:11:3f:52:90:
a7:a9:04:cc:08:d1:84:1d:52:0d:c8:af:c3:d0:00:
a1:82:00:05:cc:4f:9d:60:08:dd:24:c9:9f:59:68:
e9:8d:fe:56:0a:37:00:4e:16:f9:80:5e:12:83:7d:
60:2a:b1:0b:69:42:e6:dc:20:65:59:a6:05:7a:ba:
5f:81:86:23:4e:93:e4:e9:15:5a:e6:5f:7b:13:50:
d0:54:29:1d:c4:eb:cf:be:80:8d:8f:09:23:30:21:
19:37:7c:0a:8f:9f:f2:e1:c7:22:db:88:90:66:37:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:DD:FE:74:A5:E7:DF:20:C7:77:C7:9B:B2:87:82:BF:B9:F7:62:73
X509v3 Authority Key Identifier:
keyid:62:3F:34:4F:D4:A9:1B:FA:D1:38:30:8D:52:71:55:BB:CE:52:AF:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yj80T9SpG_rRODCNUnFVu85Sr24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/L93-dKXn3yDHd8ebsoeCv7n3YnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/105da0-0c7d-415d-8d00-a34e8679f374/1/Yj80T9SpG_rRODCNUnFVu85Sr24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.104.0/21
83.142.192.0/21
91.189.24.0/21
185.188.68.0/22
Signature Algorithm: sha256WithRSAEncryption
46:15:e5:84:ca:61:fb:4b:6c:82:85:21:2e:15:2b:cd:ee:c7:
d8:f5:04:f6:de:8b:2f:d7:95:2d:41:87:15:f7:18:5d:0c:2e:
f0:8a:28:f2:f1:0d:70:9e:94:e8:82:6c:b3:c1:8b:c9:0f:05:
c1:ce:54:06:1e:0a:b2:f8:cf:27:84:cc:00:78:9a:43:b1:3f:
b6:81:4c:b9:f8:02:a7:17:ce:42:ff:e8:64:45:95:d4:56:31:
76:1f:26:25:60:6c:4a:3f:fd:b1:d7:1c:08:a9:cf:c7:16:c4:
73:83:bf:d2:e5:33:28:07:65:07:90:b0:73:be:a6:3b:65:5f:
be:ff:9c:06:68:a8:3c:7d:c6:91:9d:4c:bd:8f:a5:23:8d:2e:
12:6a:4d:c4:97:64:a2:1d:f9:5b:40:e8:dc:40:d7:f8:42:a4:
1b:a0:21:ac:12:76:30:4f:5e:77:85:e5:c1:d5:96:c8:db:d8:
a6:43:86:f5:b6:4d:da:aa:1a:83:bd:96:3c:f4:dd:e9:6a:e7:
f1:c6:14:4a:d8:31:f5:7a:db:02:0b:4e:bf:50:f2:af:22:ec:
8b:e3:3b:fc:1b:40:31:01:b3:f5:95:56:9f:0c:18:25:a1:b2:
ae:68:d5:c8:1d:f9:48:bc:3e:bc:9c:af:77:ec:83:50:96:78:
1d:38:7f:85
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzDtsuOriSQW3qCPmlF7M5OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyM2YzNDRmZDRhOTFiZmFkMTM4MzA4ZDUyNzE1NWJiY2U1
MmFmNmUwHhcNMjQwMTAxMDYyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZmRkZmU3NGE1ZTdkZjIwYzc3N2M3OWJiMjg3ODJiZmI5Zjc2MjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirWHekBE9qICW5WW6kfUaqWwHs23
zWHvVHs9AuHqEICPLsRdFL4d9Kc22Qnu//rkbFA5ujJG3eOTyaP6HfJ76RZQ/4DY
0leYlTZ8TtxhEbUViZKdYUXHgcNrh+YJe4sccRI/b2z23P41Iz6h9w8zQoJtb2Gb
UP8lCYPp+di4wqgQ5CphW6od7D46s/adIqT3ABE/UpCnqQTMCNGEHVINyK/D0ACh
ggAFzE+dYAjdJMmfWWjpjf5WCjcAThb5gF4Sg31gKrELaULm3CBlWaYFerpfgYYj
TpPk6RVa5l97E1DQVCkdxOvPvoCNjwkjMCEZN3wKj5/y4cci24iQZjcKGwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFC/d/nSl598gx3fHm7KHgr+592JzMB8GA1UdIwQY
MBaAFGI/NE/UqRv60TgwjVJxVbvOUq9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWo4MFQ5U3BHX3JST0RDTlVuRlZ1ODVTcjI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8xMDVkYTAtMGM3ZC00MTVkLThkMDAt
YTM0ZTg2NzlmMzc0LzEvTDkzLWRLWG4zeURIZDhlYnNvZUN2N24zWW5NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC8xMDVkYTAtMGM3ZC00MTVkLThkMDAtYTM0ZTg2NzlmMzc0
LzEvWWo4MFQ5U3BHX3JST0RDTlVuRlZ1ODVTcjI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQDLuNoAwQD
U47AAwQDW70YAwQCubxEMA0GCSqGSIb3DQEBCwUAA4IBAQBGFeWEymH7S2yChSEu
FSvN7sfY9QT23osv15UtQYcV9xhdDC7wiijy8Q1wnpTogmyzwYvJDwXBzlQGHgqy
+M8nhMwAeJpDsT+2gUy5+AKnF85C/+hkRZXUVjF2HyYlYGxKP/2x1xwIqc/HFsRz
g7/S5TMoB2UHkLBzvqY7ZV++/5wGaKg8fcaRnUy9j6UjjS4Sak3El2SiHflbQOjc
QNf4QqQboCGsEnYwT153heXB1ZbI29imQ4b1tk3aqhqDvZY89N3paufxxhRK2DH1
etsCC06/UPKvIuyL4zv8G0AxAbP1lVafDBglobKuaNXIHflIvD68nK937INQlngd
OH+F
-----END CERTIFICATE-----
Generated at Thu Jun 20 10:32:03 2024 by rpki-client on console-ams.rpki-client.org