Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/eo1ldKAOybCByJyYx1I9BpnwkGw.roa
File: eo1ldKAOybCByJyYx1I9BpnwkGw.roa (raw, json)
Hash identifier: 4TBhc5ntwvM3jtcJYB/UDidgCV6I7Ozi7EUYCIwg31c=
Subject key identifier: 7A:8D:65:74:A0:0E:C9:B0:81:C8:9C:98:C7:52:3D:06:99:F0:90:6C
Certificate issuer: /CN=90f25e6a6893f466d2695e90670c047443643701
Certificate serial: 018CC8DD104C9B1B8A59E91BD107AB5BFCCA
Authority key identifier: 90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/eo1ldKAOybCByJyYx1I9BpnwkGw.roa
Signing time: Tue 02 Jan 2024 06:29:39 +0000
ROA not before: Tue 02 Jan 2024 06:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31079
IP address blocks: 195.20.106.0/24 maxlen: 24
2001:678:2e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:10:4c:9b:1b:8a:59:e9:1b:d1:07:ab:5b:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f25e6a6893f466d2695e90670c047443643701
Validity
Not Before: Jan 2 06:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a8d6574a00ec9b081c89c98c7523d0699f0906c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:64:d2:11:29:2d:98:96:73:46:37:49:08:93:
ad:7d:0e:5f:d8:14:1c:d8:05:31:a2:a9:f3:97:7a:
b8:a5:f8:98:9f:61:b2:14:c3:4f:8a:c2:94:12:40:
2d:ca:4b:80:68:46:c1:bc:f9:aa:f4:b5:50:06:d3:
a1:67:9a:84:43:72:92:a9:40:19:3e:7f:d1:f6:25:
97:77:d6:93:8a:a8:87:01:06:98:6c:6c:4e:40:0a:
4e:8c:53:12:b5:fa:36:97:fe:c4:64:c4:8e:b1:ac:
94:28:9d:9e:ff:a1:ec:49:1c:7c:4e:f8:16:1d:a9:
3f:7a:2c:6c:13:1c:f0:81:1a:f9:d6:a8:d8:d9:11:
d1:53:cc:27:41:5c:df:fd:e5:b8:3a:a4:03:9b:a2:
3e:60:c6:d6:2b:0e:03:88:95:40:f0:c1:38:7f:6f:
45:00:27:a8:e5:23:e2:aa:cf:ea:80:74:a2:58:69:
30:e6:74:da:26:4c:51:59:8a:2b:c4:d3:ea:19:f0:
d7:fb:b2:2d:3a:60:0b:fa:6e:d8:79:a9:3e:f8:02:
42:a1:03:2c:23:e4:e7:e6:19:69:20:8d:9d:f7:b7:
f2:e6:c6:9d:c4:b2:3f:e9:77:88:06:58:f8:63:59:
c2:3a:ff:42:17:3b:57:5e:e7:6a:5a:d3:7b:ff:3d:
4f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:8D:65:74:A0:0E:C9:B0:81:C8:9C:98:C7:52:3D:06:99:F0:90:6C
X509v3 Authority Key Identifier:
keyid:90:F2:5E:6A:68:93:F4:66:D2:69:5E:90:67:0C:04:74:43:64:37:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJeamiT9GbSaV6QZwwEdENkNwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/eo1ldKAOybCByJyYx1I9BpnwkGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/04b162-7099-404d-8391-3b0b4b8a2983/1/kPJeamiT9GbSaV6QZwwEdENkNwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.106.0/24
IPv6:
2001:678:2e4::/48
Signature Algorithm: sha256WithRSAEncryption
15:6c:b6:db:e2:ca:f0:94:4c:46:d7:a0:40:42:87:3a:00:07:
d8:88:06:e8:ff:b8:ba:c7:fa:ae:c0:9d:80:f1:40:44:4b:c2:
a5:cd:75:89:ee:96:b3:f0:be:43:51:b0:a4:cd:5a:5a:2a:60:
bf:12:b0:94:c1:2e:84:f3:d6:5f:2b:aa:7b:6b:b9:b1:cc:2b:
88:1f:5f:8e:cf:46:d6:cf:47:4c:e6:59:bf:9f:5a:c0:61:d6:
13:9f:e8:20:25:d2:81:4d:42:9e:9e:84:95:ac:c3:a7:bf:19:
fc:86:1a:41:b7:ae:a2:84:7a:38:a9:df:a7:18:ff:cd:8c:2c:
04:aa:43:f1:53:ca:5e:19:85:a7:d0:98:f3:c5:8a:7b:42:fe:
2e:47:fb:6b:f0:2c:2f:09:2a:c3:f1:99:0d:b4:ed:56:7a:71:
1b:9d:e2:35:d8:06:d8:bd:70:bc:c6:a8:fd:18:cc:ae:f8:b8:
fa:94:a4:9c:84:b0:10:25:c6:35:e7:10:e2:20:1d:69:61:0d:
af:7e:73:09:81:55:bc:7e:da:36:64:c8:1f:b3:26:b3:10:6c:
8b:10:2a:6c:ce:26:9a:7c:5b:11:dc:e7:d1:70:79:91:e6:da:
b7:13:ff:6f:5d:ad:e1:0e:f2:e5:46:69:39:c3:bb:5a:b4:01:
45:90:2a:14
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzI3RBMmxuKWekb0QerW/zKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwZjI1ZTZhNjg5M2Y0NjZkMjY5NWU5MDY3MGMwNDc0NDM2
NDM3MDEwHhcNMjQwMTAyMDYyOTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YThkNjU3NGEwMGVjOWIwODFjODljOThjNzUyM2QwNjk5ZjA5MDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GTSESktmJZzRjdJCJOtfQ5f2BQc
2AUxoqnzl3q4pfiYn2GyFMNPisKUEkAtykuAaEbBvPmq9LVQBtOhZ5qEQ3KSqUAZ
Pn/R9iWXd9aTiqiHAQaYbGxOQApOjFMStfo2l/7EZMSOsayUKJ2e/6HsSRx8TvgW
Hak/eixsExzwgRr51qjY2RHRU8wnQVzf/eW4OqQDm6I+YMbWKw4DiJVA8ME4f29F
ACeo5SPiqs/qgHSiWGkw5nTaJkxRWYorxNPqGfDX+7ItOmAL+m7Yeak++AJCoQMs
I+Tn5hlpII2d97fy5sadxLI/6XeIBlj4Y1nCOv9CFztXXudqWtN7/z1PSQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHqNZXSgDsmwgcicmMdSPQaZ8JBsMB8GA1UdIwQY
MBaAFJDyXmpok/Rm0mlekGcMBHRDZDcBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEt
M2IwYjRiOGEyOTgzLzEvZW8xbGRLQU95YkNCeUp5WXgxSTlCcG53a0d3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNGIxNjItNzA5OS00MDRkLTgzOTEtM2IwYjRiOGEyOTgz
LzEva1BKZWFtaVQ5R2JTYVY2UVp3d0VkRU5rTndFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAwxRqMA8E
AgACMAkDBwAgAQZ4AuQwDQYJKoZIhvcNAQELBQADggEBABVsttviyvCUTEbXoEBC
hzoAB9iIBuj/uLrH+q7AnYDxQERLwqXNdYnulrPwvkNRsKTNWloqYL8SsJTBLoTz
1l8rqntrubHMK4gfX47PRtbPR0zmWb+fWsBh1hOf6CAl0oFNQp6ehJWsw6e/GfyG
GkG3rqKEejip36cY/82MLASqQ/FTyl4ZhafQmPPFintC/i5H+2vwLC8JKsPxmQ20
7VZ6cRud4jXYBti9cLzGqP0YzK74uPqUpJyEsBAlxjXnEOIgHWlhDa9+cwmBVbx+
2jZkyB+zJrMQbIsQKmzOJpp8WxHc59FweZHm2rcT/29dreEO8uVGaTnDu1q0AUWQ
KhQ=
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:29:49 2024 by rpki-client on console-ams.rpki-client.org