Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Kxr691sYGr-aILtc-GoufYPj06M.roa
File: Kxr691sYGr-aILtc-GoufYPj06M.roa (raw, json)
Hash identifier: Ux/qlKH2CzqDmhbFFlMydfqjK+a8XwUm22WhhI3iiyA=
Subject key identifier: 2B:1A:FA:F7:5B:18:1A:BF:9A:20:BB:5C:F8:6A:2E:7D:83:E3:D3:A3
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018CC4934BEE24B7E02879BDC2DB9B15AD56
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Kxr691sYGr-aILtc-GoufYPj06M.roa
Signing time: Mon 01 Jan 2024 10:30:36 +0000
ROA not before: Mon 01 Jan 2024 10:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 213.21.240.0/24 maxlen: 24
213.21.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4b:ee:24:b7:e0:28:79:bd:c2:db:9b:15:ad:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 10:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2b1afaf75b181abf9a20bb5cf86a2e7d83e3d3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:6a:43:7f:97:40:d4:9a:3e:f5:9f:f3:f3:
43:59:7a:ff:27:f9:cd:cb:b5:84:a1:f4:d2:b1:67:
6f:f9:d1:18:11:b8:ed:a7:49:95:c8:f8:5f:37:51:
aa:64:17:36:b8:6f:34:b0:df:fd:e7:a4:ad:85:75:
d5:75:0c:77:31:7b:89:9c:ab:94:ad:e1:80:1f:3a:
da:38:e9:4c:09:75:f2:07:49:27:bb:c4:6c:c1:9a:
89:72:69:5d:36:0a:4e:df:8f:7e:d7:14:2f:14:f0:
0b:29:4a:f0:8d:c3:55:dd:f2:9c:b1:78:0e:6f:51:
d4:a5:29:78:cc:2d:1d:d8:5b:66:68:16:c7:7a:36:
77:08:e1:0c:c7:63:5b:1c:9f:ac:5a:4d:49:b5:73:
7e:cc:6e:c8:a1:51:1c:84:ec:c8:3d:2c:0a:9b:73:
66:8b:cb:f4:b0:1b:2f:00:a8:46:a1:d6:01:2f:a7:
47:84:5a:31:97:7a:9f:e6:42:35:b3:db:80:c9:f6:
c8:da:43:86:49:61:1f:e6:15:09:57:1f:68:6c:db:
93:d9:f5:5b:8a:bc:06:48:2f:68:a0:cd:0e:54:1a:
f4:65:28:83:98:d4:b5:9f:fc:0b:07:09:99:f2:ad:
88:e9:f9:e5:fa:1e:1e:57:46:6a:ef:b0:0d:14:aa:
e1:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1A:FA:F7:5B:18:1A:BF:9A:20:BB:5C:F8:6A:2E:7D:83:E3:D3:A3
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/Kxr691sYGr-aILtc-GoufYPj06M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.240.0/24
213.21.252.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:ea:10:43:0b:d5:c4:e0:66:e9:11:68:b0:92:8b:cc:56:cb:
66:03:06:f6:dc:b7:1c:ac:11:20:0a:c5:ea:c4:82:90:92:f6:
52:ef:af:0d:40:4f:a7:b5:56:03:bb:57:ca:f0:93:b2:d4:3e:
5d:d9:16:3b:68:99:54:85:e6:75:7d:8b:99:1f:83:9f:cc:b9:
ba:8b:99:73:af:4c:d9:62:ce:50:39:73:33:42:4f:1d:9c:d5:
f0:cd:d0:4a:27:8e:86:81:00:99:bc:a0:b5:bb:c4:f4:33:00:
08:3f:c2:e0:a0:21:b4:b9:a1:cf:e0:42:a3:aa:5d:73:13:9c:
0d:95:5d:b4:45:e1:fa:3b:19:12:1b:e7:70:32:f0:37:86:2d:
2f:d1:4e:47:a8:ab:4c:2a:85:cc:6d:77:37:e5:a3:9e:55:e7:
23:33:76:9b:1b:94:35:93:3f:a2:92:fe:8b:04:b9:86:c1:f6:
63:88:ac:82:95:29:c1:f4:d8:4d:c0:7d:85:44:2d:4f:a6:0e:
f7:9a:c6:de:2b:0e:64:c2:c3:7f:e6:98:70:73:fc:ac:90:90:
51:f8:23:d1:24:a1:d0:39:40:a1:f6:ea:7a:f8:e9:f4:f4:ae:
6a:fe:e7:00:7b:ca:78:7a:ab:f3:b8:b9:88:07:ee:00:5e:46:
92:18:f3:22
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzEk0vuJLfgKHm9wtubFa1WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjQwMTAxMTAzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjFhZmFmNzViMTgxYWJmOWEyMGJiNWNmODZhMmU3ZDgzZTNkM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9VqQ3+XQNSaPvWf8/NDWXr/J/nN
y7WEofTSsWdv+dEYEbjtp0mVyPhfN1GqZBc2uG80sN/956SthXXVdQx3MXuJnKuU
reGAHzraOOlMCXXyB0knu8RswZqJcmldNgpO349+1xQvFPALKUrwjcNV3fKcsXgO
b1HUpSl4zC0d2FtmaBbHejZ3COEMx2NbHJ+sWk1JtXN+zG7IoVEchOzIPSwKm3Nm
i8v0sBsvAKhGodYBL6dHhFoxl3qf5kI1s9uAyfbI2kOGSWEf5hUJVx9obNuT2fVb
irwGSC9ooM0OVBr0ZSiDmNS1n/wLBwmZ8q2I6fnl+h4eV0Zq77ANFKrh9QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCsa+vdbGBq/miC7XPhqLn2D49OjMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvS3hyNjkxc1lHci1hSUx0Yy1Hb3VmWVBqMDZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1RXwAwQA
1RX8MA0GCSqGSIb3DQEBCwUAA4IBAQBs6hBDC9XE4GbpEWiwkovMVstmAwb23Lcc
rBEgCsXqxIKQkvZS768NQE+ntVYDu1fK8JOy1D5d2RY7aJlUheZ1fYuZH4OfzLm6
i5lzr0zZYs5QOXMzQk8dnNXwzdBKJ46GgQCZvKC1u8T0MwAIP8LgoCG0uaHP4EKj
ql1zE5wNlV20ReH6OxkSG+dwMvA3hi0v0U5HqKtMKoXMbXc35aOeVecjM3abG5Q1
kz+ikv6LBLmGwfZjiKyClSnB9NhNwH2FRC1Ppg73msbeKw5kwsN/5phwc/yskJBR
+CPRJKHQOUCh9up6+On09K5q/ucAe8p4eqvzuLmIB+4AXkaSGPMi
-----END CERTIFICATE-----
Generated at Thu May 2 15:59:27 2024 by rpki-client on console-ams.rpki-client.org