Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/SSv3lFleO0qDyxb3ifhp8e1wXR8.roa
File: SSv3lFleO0qDyxb3ifhp8e1wXR8.roa (raw, json)
Hash identifier: t9Yosc09ZFKXcT0pa+c0OT1f2fRjuhLHaA/m+0TmNx8=
Subject key identifier: 49:2B:F7:94:59:5E:3B:4A:83:CB:16:F7:89:F8:69:F1:ED:70:5D:1F
Certificate issuer: /CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Certificate serial: 018E42CC3D2896F00735410152E358B71CCE
Authority key identifier: 41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/SSv3lFleO0qDyxb3ifhp8e1wXR8.roa
Signing time: Fri 15 Mar 2024 15:47:45 +0000
ROA not before: Fri 15 Mar 2024 15:47:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51088
IP address blocks: 92.249.7.0/24 maxlen: 24
2a14:12c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 09:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:42:cc:3d:28:96:f0:07:35:41:01:52:e3:58:b7:1c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4137b6daa20b5e061862b6fb99e236ac2c2e34f8
Validity
Not Before: Mar 15 15:47:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=492bf794595e3b4a83cb16f789f869f1ed705d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f9:76:68:de:be:e3:da:e1:c1:28:53:95:8f:
d0:ed:0f:c8:f5:8a:97:74:00:ed:1e:e1:62:67:e9:
b6:d7:0d:ad:3b:a4:18:38:ba:19:6a:33:b2:04:c7:
e4:b6:40:af:37:05:03:55:23:ff:05:aa:f4:ab:27:
98:4f:d7:e6:99:60:83:4e:1c:70:cc:81:bf:1a:cb:
36:9b:12:7d:98:c6:29:51:ba:d7:ba:e5:97:7b:55:
fe:1e:56:a3:60:8e:fb:3a:8c:be:25:84:9e:6a:1b:
fb:f6:6c:7e:a3:c5:3a:f1:a0:c1:f6:f4:9e:db:e2:
02:30:d8:a2:67:58:47:60:99:1f:1e:dd:34:c9:1b:
8a:01:1a:f5:54:0c:b1:d3:dd:71:67:d9:96:5a:8c:
95:e8:a6:8d:72:bd:1c:1d:fd:49:1f:4e:28:d3:d7:
65:89:11:b0:6a:fe:ff:bd:13:4b:87:49:71:89:e8:
b9:2b:d1:9d:66:be:5f:59:31:8a:d2:ba:f2:01:3f:
d7:14:bf:9e:c7:f0:d6:5e:7e:76:ac:d9:56:40:f7:
39:f9:a4:96:fa:a4:3c:a5:88:86:07:df:57:28:ab:
59:81:61:f5:74:a1:1f:ff:19:21:d5:f0:93:40:0c:
a3:c0:50:1e:92:38:aa:3e:19:db:4b:f8:56:d2:b5:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2B:F7:94:59:5E:3B:4A:83:CB:16:F7:89:F8:69:F1:ED:70:5D:1F
X509v3 Authority Key Identifier:
keyid:41:37:B6:DA:A2:0B:5E:06:18:62:B6:FB:99:E2:36:AC:2C:2E:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QTe22qILXgYYYrb7meI2rCwuNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/SSv3lFleO0qDyxb3ifhp8e1wXR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/03fd42-6589-46ba-a673-0b02a4732479/1/QTe22qILXgYYYrb7meI2rCwuNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.7.0/24
IPv6:
2a14:12c0::/32
Signature Algorithm: sha256WithRSAEncryption
09:86:61:0a:fc:1d:91:7b:1a:e5:77:db:21:8a:3c:e4:4d:f6:
61:da:7a:19:88:76:d9:f8:0e:e6:45:8c:9f:98:5a:2b:25:44:
f0:90:bd:24:7f:4f:35:9e:d4:3f:84:d7:df:96:1b:c8:f3:b0:
2d:47:30:99:69:1b:b6:d9:86:cf:d8:8f:85:45:4d:5b:02:0d:
98:08:11:5e:08:7c:f6:d2:41:5b:7a:ce:d2:bd:de:7d:7c:75:
e6:18:b6:6f:81:cb:6a:ab:ff:23:ba:db:61:60:be:18:a3:b1:
39:69:f3:50:ae:c4:a8:e5:1b:fd:b9:c1:97:46:31:97:55:45:
32:64:01:f2:5f:70:2b:d7:5f:40:d1:6a:0c:5f:b4:d2:1a:df:
93:2f:0d:3c:f8:94:c8:eb:f4:5f:a1:f1:01:70:94:a9:8f:cf:
9a:51:b1:51:2a:af:39:ce:4d:b9:00:35:27:df:1d:20:11:13:
49:1a:a6:59:57:2c:46:a8:f8:4f:04:4e:52:ad:0f:a2:81:ba:
d2:88:01:a9:18:24:83:1b:7c:4f:70:b8:23:7e:29:2b:74:d6:
d5:5a:41:37:80:e7:77:b3:69:a1:a8:5d:d3:5b:3e:43:49:1e:
c9:58:e4:52:de:13:84:29:dc:e6:b8:28:2e:cd:27:b2:ff:bd:
b0:e2:6e:cf
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY5CzD0olvAHNUEBUuNYtxzOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxMzdiNmRhYTIwYjVlMDYxODYyYjZmYjk5ZTIzNmFjMmMy
ZTM0ZjgwHhcNMjQwMzE1MTU0NzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTJiZjc5NDU5NWUzYjRhODNjYjE2Zjc4OWY4NjlmMWVkNzA1ZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPl2aN6+49rhwShTlY/Q7Q/I9YqX
dADtHuFiZ+m21w2tO6QYOLoZajOyBMfktkCvNwUDVSP/Bar0qyeYT9fmmWCDThxw
zIG/Gss2mxJ9mMYpUbrXuuWXe1X+HlajYI77Ooy+JYSeahv79mx+o8U68aDB9vSe
2+ICMNiiZ1hHYJkfHt00yRuKARr1VAyx091xZ9mWWoyV6KaNcr0cHf1JH04o09dl
iRGwav7/vRNLh0lxiei5K9GdZr5fWTGK0rryAT/XFL+ex/DWXn52rNlWQPc5+aSW
+qQ8pYiGB99XKKtZgWH1dKEf/xkh1fCTQAyjwFAekjiqPhnbS/hW0rVM9QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEkr95RZXjtKg8sW94n4afHtcF0fMB8GA1UdIwQY
MBaAFEE3ttqiC14GGGK2+5niNqwsLjT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMt
MGIwMmE0NzMyNDc5LzEvU1N2M2xGbGVPMHFEeXhiM2lmaHA4ZTF3WFI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS8wM2ZkNDItNjU4OS00NmJhLWE2NzMtMGIwMmE0NzMyNDc5
LzEvUVRlMjJxSUxYZ1lZWXJiN21lSTJyQ3d1TlBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAXPkHMA0E
AgACMAcDBQAqFBLAMA0GCSqGSIb3DQEBCwUAA4IBAQAJhmEK/B2Rexrld9shijzk
TfZh2noZiHbZ+A7mRYyfmForJUTwkL0kf081ntQ/hNfflhvI87AtRzCZaRu22YbP
2I+FRU1bAg2YCBFeCHz20kFbes7Svd59fHXmGLZvgctqq/8jutthYL4Yo7E5afNQ
rsSo5Rv9ucGXRjGXVUUyZAHyX3Ar119A0WoMX7TSGt+TLw08+JTI6/RfofEBcJSp
j8+aUbFRKq85zk25ADUn3x0gERNJGqZZVyxGqPhPBE5SrQ+igbrSiAGpGCSDG3xP
cLgjfikrdNbVWkE3gOd3s2mhqF3TWz5DSR7JWORS3hOEKdzmuCguzSey/72w4m7P
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:29:01 2024 by rpki-client on console-fra.rpki-client.org