Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/0udWbjrUAndXulzASWbL1hG39rE.roa
File: 0udWbjrUAndXulzASWbL1hG39rE.roa (raw, json)
Hash identifier: h5qPGYdH/kfAm+82mjF2BI7NYzNFqXnCUjXrc1Muu+o=
Subject key identifier: D2:E7:56:6E:3A:D4:02:77:57:BA:5C:C0:49:66:CB:D6:11:B7:F6:B1
Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Certificate serial: 018CC86FE9B4FBE23C35652742562E9632A9
Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/0udWbjrUAndXulzASWbL1hG39rE.roa
Signing time: Tue 02 Jan 2024 04:30:26 +0000
ROA not before: Tue 02 Jan 2024 04:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 89.187.9.0/24 maxlen: 24
89.187.8.0/24 maxlen: 24
89.187.10.0/24 maxlen: 24
89.187.7.0/24 maxlen: 24
89.187.6.0/24 maxlen: 24
89.187.16.0/24 maxlen: 24
89.187.15.0/24 maxlen: 24
89.187.17.0/24 maxlen: 24
89.187.12.0/24 maxlen: 24
89.187.14.0/24 maxlen: 24
89.187.13.0/24 maxlen: 24
89.187.18.0/24 maxlen: 24
89.187.22.0/24 maxlen: 24
89.187.19.0/24 maxlen: 24
89.187.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:e9:b4:fb:e2:3c:35:65:27:42:56:2e:96:32:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055
Validity
Not Before: Jan 2 04:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2e7566e3ad4027757ba5cc04966cbd611b7f6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f2:4f:3d:45:2e:db:91:80:36:cc:82:ca:0c:
de:9d:90:94:4a:1c:7e:ad:6f:72:83:7c:22:1b:cd:
db:55:b0:93:37:90:5f:ae:8f:27:53:ed:a6:e6:ec:
03:b8:ce:06:bc:58:6b:c0:4a:78:de:75:b1:b0:68:
ac:53:f5:ff:a2:12:36:cc:03:80:1e:58:ec:a4:44:
10:b3:8b:61:d2:49:97:ad:d8:14:37:84:3d:4b:c1:
6a:b2:99:59:0e:84:7b:9a:d6:c5:fc:54:ae:46:49:
c4:9e:98:40:10:06:b1:8b:11:45:0d:9a:a9:1a:41:
fc:e3:e9:94:93:7a:93:7b:10:95:69:27:88:ec:cd:
2c:7c:93:5a:53:cc:b9:dc:65:66:81:8a:7a:31:be:
96:5b:c6:a0:32:50:3a:cd:e5:47:76:ae:a0:33:42:
04:2a:65:0b:64:4c:9d:ec:a9:d5:94:89:f9:a7:a4:
f7:d2:14:4a:0d:ec:61:89:33:dd:fc:03:3d:81:d3:
fd:b3:a6:b1:29:4b:41:a9:d8:32:d2:2c:3e:e5:6d:
cc:1d:4c:5b:9e:67:6e:06:65:e6:bd:07:8c:99:95:
7e:5d:92:e0:cf:40:29:0a:c1:d0:79:ad:ec:6f:bf:
2a:d8:a0:19:29:01:8a:94:c6:7e:63:47:4e:0a:ba:
8c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:E7:56:6E:3A:D4:02:77:57:BA:5C:C0:49:66:CB:D6:11:B7:F6:B1
X509v3 Authority Key Identifier:
keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/0udWbjrUAndXulzASWbL1hG39rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.187.6.0-89.187.10.255
89.187.12.0-89.187.20.255
89.187.22.0/24
Signature Algorithm: sha256WithRSAEncryption
98:9c:88:f5:da:84:60:bd:38:69:82:82:2d:67:16:79:95:b7:
1b:6e:51:a4:28:84:54:16:ce:f3:21:8b:90:d7:11:24:0c:0d:
8a:38:83:f7:0e:82:53:c6:7f:98:75:8c:ab:a4:a1:4d:4e:73:
79:2d:e0:31:46:84:6a:c3:d0:55:1b:86:d3:86:b8:81:97:20:
11:8d:f6:59:73:d0:5d:38:a6:b9:f6:af:63:4a:ca:67:04:e2:
9a:ad:c8:a6:f2:8b:89:fe:c2:4e:36:22:da:38:da:c7:40:ba:
92:f9:3a:77:5d:87:c3:66:bc:23:87:f6:87:1c:53:9d:21:35:
93:9e:00:6b:6d:6e:20:5f:00:fa:71:cf:b1:46:6f:ae:be:0c:
4a:56:b7:a5:ed:9d:50:c7:5b:63:9b:ae:57:b1:30:31:f4:01:
cd:89:5b:16:a9:18:2e:af:7f:d7:76:f3:f2:b9:77:18:5d:7a:
78:ab:8c:70:40:15:c8:7a:c4:8c:34:03:c4:d5:20:08:6d:8d:
aa:b7:44:41:60:5b:d0:05:d7:74:80:ed:ca:3c:f1:1d:c9:72:
3d:22:10:cd:3c:8d:23:41:d2:ad:b3:e2:80:f9:cc:ef:36:f0:
20:a6:b6:58:8e:fc:9e:c4:4c:73:20:fa:f8:94:f8:3d:96:39:
d3:b5:54:f6
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAYzIb+m0++I8NWUnQlYuljKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw
YmYwNTUwHhcNMjQwMTAyMDQzMDI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmU3NTY2ZTNhZDQwMjc3NTdiYTVjYzA0OTY2Y2JkNjExYjdmNmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/JPPUUu25GANsyCygzenZCUShx+
rW9yg3wiG83bVbCTN5Bfro8nU+2m5uwDuM4GvFhrwEp43nWxsGisU/X/ohI2zAOA
HljspEQQs4th0kmXrdgUN4Q9S8FqsplZDoR7mtbF/FSuRknEnphAEAaxixFFDZqp
GkH84+mUk3qTexCVaSeI7M0sfJNaU8y53GVmgYp6Mb6WW8agMlA6zeVHdq6gM0IE
KmULZEyd7KnVlIn5p6T30hRKDexhiTPd/AM9gdP9s6axKUtBqdgy0iw+5W3MHUxb
nmduBmXmvQeMmZV+XZLgz0ApCsHQea3sb78q2KAZKQGKlMZ+Y0dOCrqM7wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNLnVm461AJ3V7pcwElmy9YRt/axMB8GA1UdIwQY
MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt
NDVjZmM4NTdkZGRkLzEvMHVkV2JqclVBbmRYdWx6QVNXYkwxaEczOXJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk
LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjAoBAIAATAiMAwDBAFZuwYD
BABZuwowDAMEAlm7DAMEAFm7FAMEAFm7FjANBgkqhkiG9w0BAQsFAAOCAQEAmJyI
9dqEYL04aYKCLWcWeZW3G25RpCiEVBbO8yGLkNcRJAwNijiD9w6CU8Z/mHWMq6Sh
TU5zeS3gMUaEasPQVRuG04a4gZcgEY32WXPQXTimufavY0rKZwTimq3IpvKLif7C
TjYi2jjax0C6kvk6d12Hw2a8I4f2hxxTnSE1k54Aa21uIF8A+nHPsUZvrr4MSla3
pe2dUMdbY5uuV7EwMfQBzYlbFqkYLq9/13bz8rl3GF16eKuMcEAVyHrEjDQDxNUg
CG2NqrdEQWBb0AXXdIDtyjzxHclyPSIQzTyNI0HSrbPigPnM7zbwIKa2WI78nsRM
cyD6+JT4PZY507VU9g==
-----END CERTIFICATE-----
Generated at Sat May 4 11:24:37 2024 by rpki-client on console-ams.rpki-client.org