Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/KssG4Wky6VtFwLpOlwssyh1QkTY.roa
File: KssG4Wky6VtFwLpOlwssyh1QkTY.roa (raw, json)
Hash identifier: qjnKtpo9HoXqxoz/mmiU7Cos4RpZ169yBf/C4pFEPK8=
Subject key identifier: 2A:CB:06:E1:69:32:E9:5B:45:C0:BA:4E:97:0B:2C:CA:1D:50:91:36
Certificate issuer: /CN=c67e2a46e34f491433c8b62f319b902bddfde831
Certificate serial: 018F00ECC8CF9DD3C99F2530CA90BADE6DF1
Authority key identifier: C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/KssG4Wky6VtFwLpOlwssyh1QkTY.roa
Signing time: Sun 21 Apr 2024 13:51:08 +0000
ROA not before: Sun 21 Apr 2024 13:51:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216014
IP address blocks: 37.49.224.0/24 maxlen: 24
77.247.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:00:ec:c8:cf:9d:d3:c9:9f:25:30:ca:90:ba:de:6d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c67e2a46e34f491433c8b62f319b902bddfde831
Validity
Not Before: Apr 21 13:51:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2acb06e16932e95b45c0ba4e970b2cca1d509136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e7:84:99:b6:ae:7e:04:6f:ea:e2:8c:d2:05:
ba:02:cc:20:36:9b:08:31:02:8e:03:3a:ba:9f:14:
83:b9:be:58:30:59:76:c6:7f:80:23:c4:1d:2b:73:
54:65:bb:38:3d:3d:6b:17:43:36:24:22:8f:c0:04:
31:07:65:97:34:4c:4f:27:cd:9e:df:d7:eb:9d:1b:
ae:cf:ea:df:dd:97:70:bc:8a:a2:dc:64:09:89:40:
38:0a:aa:01:3c:ff:14:f2:70:cf:05:b3:21:a4:51:
55:8b:e0:37:da:32:fd:9e:9c:9c:6b:eb:0f:29:e8:
a2:a7:71:8d:7b:87:6e:67:a7:28:ea:54:14:39:6c:
64:cb:ee:e7:b6:f2:91:8e:6b:23:50:55:dd:05:99:
d0:9d:f8:51:40:b5:ce:95:d2:ee:f4:bb:14:8e:5d:
4e:c3:f9:ad:19:29:be:bd:e9:10:34:4a:54:f7:9a:
61:63:87:12:23:0a:a6:87:3b:51:46:fe:14:57:34:
32:7e:13:8d:91:d9:c0:02:67:9b:a4:59:0d:6b:0c:
d4:59:4e:67:55:09:b4:7c:fa:25:51:95:34:8f:ab:
a5:99:25:eb:a3:a7:00:23:42:3e:13:8f:6c:c1:e3:
ee:d5:bb:85:23:53:40:46:8e:2b:fa:c1:16:09:3c:
13:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CB:06:E1:69:32:E9:5B:45:C0:BA:4E:97:0B:2C:CA:1D:50:91:36
X509v3 Authority Key Identifier:
keyid:C6:7E:2A:46:E3:4F:49:14:33:C8:B6:2F:31:9B:90:2B:DD:FD:E8:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xn4qRuNPSRQzyLYvMZuQK9396DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/KssG4Wky6VtFwLpOlwssyh1QkTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/80c568-bd15-4f32-8dd4-066866f2ded0/1/xn4qRuNPSRQzyLYvMZuQK9396DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.49.224.0/24
77.247.109.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:85:ba:d0:a6:78:3e:26:1b:0f:bb:be:1b:02:d7:1a:1b:d4:
95:8b:5f:0c:6a:fe:4f:4e:30:11:6e:66:84:cc:51:84:1e:3a:
b1:60:80:fc:02:7b:89:1e:f9:9f:ff:57:39:ad:3e:ba:69:dd:
91:0d:20:7f:20:36:b7:85:0b:13:b8:6e:e4:6c:d8:d7:ac:61:
e3:ac:92:13:45:87:39:f2:65:08:7c:1f:80:e6:c9:c5:53:8d:
ee:e9:29:60:b2:98:84:f5:ef:13:98:9e:f7:c4:d0:4d:1d:ac:
ce:35:b3:f2:2f:dc:9c:77:0e:ef:5c:bf:bb:83:ae:ab:c1:be:
85:90:84:aa:02:dc:31:c2:5d:bd:71:e6:16:e9:40:7a:38:75:
af:55:f8:43:50:f0:da:c1:51:46:92:d7:57:1e:e1:10:48:16:
38:91:dc:9d:29:94:3b:1b:c5:b5:d7:1f:8f:95:41:28:73:d7:
62:9e:9a:af:f2:22:a9:66:41:5b:8a:89:98:02:62:e7:1d:df:
5c:61:37:77:c3:13:8d:30:93:67:ed:3e:e4:c2:ea:40:a8:f8:
71:03:fc:6b:73:20:bb:cd:ec:2f:f9:57:ee:ae:bb:71:96:f5:
1b:ee:0f:b0:f9:54:0b:3b:c9:df:b8:dc:17:bd:7a:4d:2d:45:
66:07:44:bd
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY8A7MjPndPJnyUwypC63m3xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2N2UyYTQ2ZTM0ZjQ5MTQzM2M4YjYyZjMxOWI5MDJiZGRm
ZGU4MzEwHhcNMjQwNDIxMTM1MTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWNiMDZlMTY5MzJlOTViNDVjMGJhNGU5NzBiMmNjYTFkNTA5MTM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyueEmbaufgRv6uKM0gW6AswgNpsI
MQKOAzq6nxSDub5YMFl2xn+AI8QdK3NUZbs4PT1rF0M2JCKPwAQxB2WXNExPJ82e
39frnRuuz+rf3ZdwvIqi3GQJiUA4CqoBPP8U8nDPBbMhpFFVi+A32jL9npyca+sP
Keiip3GNe4duZ6co6lQUOWxky+7ntvKRjmsjUFXdBZnQnfhRQLXOldLu9LsUjl1O
w/mtGSm+vekQNEpU95phY4cSIwqmhztRRv4UVzQyfhONkdnAAmebpFkNawzUWU5n
VQm0fPolUZU0j6ulmSXro6cAI0I+E49swePu1buFI1NARo4r+sEWCTwTVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCrLBuFpMulbRcC6TpcLLModUJE2MB8GA1UdIwQY
MBaAFMZ+KkbjT0kUM8i2LzGbkCvd/egxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQt
MDY2ODY2ZjJkZWQwLzEvS3NzRzRXa3k2VnRGd0xwT2x3c3N5aDFRa1RZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84MGM1NjgtYmQxNS00ZjMyLThkZDQtMDY2ODY2ZjJkZWQw
LzEveG40cVJ1TlBTUlF6eUxZdk1adVFLOTM5NkRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAJTHgAwQA
TfdtMA0GCSqGSIb3DQEBCwUAA4IBAQCrhbrQpng+JhsPu74bAtcaG9SVi18Mav5P
TjARbmaEzFGEHjqxYID8AnuJHvmf/1c5rT66ad2RDSB/IDa3hQsTuG7kbNjXrGHj
rJITRYc58mUIfB+A5snFU43u6SlgspiE9e8TmJ73xNBNHazONbPyL9ycdw7vXL+7
g66rwb6FkISqAtwxwl29ceYW6UB6OHWvVfhDUPDawVFGktdXHuEQSBY4kdydKZQ7
G8W11x+PlUEoc9dinpqv8iKpZkFbiomYAmLnHd9cYTd3wxONMJNn7T7kwupAqPhx
A/xrcyC7zewv+VfurrtxlvUb7g+w+VQLO8nfuNwXvXpNLUVmB0S9
-----END CERTIFICATE-----
Generated at Sun Jun 23 16:57:54 2024 by rpki-client on console-fra.rpki-client.org