Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/9-PliPH2H9IzErU3124xJiI0a24.roa
File: 9-PliPH2H9IzErU3124xJiI0a24.roa (raw, json)
Hash identifier: eLYQWZPTmU3vtoy94+IM/DHlKxrtgFfzydRLizZdhrI=
Subject key identifier: F7:E3:E5:88:F1:F6:1F:D2:33:12:B5:37:D7:6E:31:26:22:34:6B:6E
Certificate issuer: /CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Certificate serial: 018F7C58CDD176D2D09D5EEE7E1D8DAA7DAD
Authority key identifier: 61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/9-PliPH2H9IzErU3124xJiI0a24.roa
Signing time: Wed 15 May 2024 13:02:25 +0000
ROA not before: Wed 15 May 2024 13:02:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211381
IP address blocks: 45.131.182.0/24 maxlen: 24
213.134.31.0/24 maxlen: 24
2a13:4ac0::/46 maxlen: 46
2a13:4ac0:4::/46 maxlen: 46
2a13:4ac0:10::/46 maxlen: 46
2a13:4ac0:14::/46 maxlen: 46
2a13:4ac0:18::/46 maxlen: 46
2a13:4ac0:1c::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 07:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:58:cd:d1:76:d2:d0:9d:5e:ee:7e:1d:8d:aa:7d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61374fc4eab00d41c1eee47fdfb001078c74fa85
Validity
Not Before: May 15 13:02:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f7e3e588f1f61fd23312b537d76e312622346b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:48:e4:2b:d6:39:28:c5:d4:2a:b4:ef:e0:31:
2e:f3:8a:ac:3c:04:d4:95:39:f7:49:b3:8f:fa:fb:
f1:f8:d0:03:10:aa:c0:cc:53:f3:6a:a9:ba:b5:71:
3d:22:a2:19:86:07:48:81:d2:7f:6c:4a:d6:44:49:
e1:b0:7f:d6:d9:90:a3:ea:cd:b3:65:3d:b5:bd:e3:
e7:93:af:48:11:b1:c2:c7:ca:2d:f2:d8:9c:e8:df:
3d:d4:98:97:cb:60:0b:08:c5:2f:14:c9:9a:32:21:
c4:aa:7e:1d:8e:8d:b6:c9:10:b1:60:08:80:ac:4f:
9c:cc:d8:e1:83:41:1f:e3:9c:2d:50:88:3f:84:d7:
86:40:07:41:bb:b4:28:fc:fa:12:8d:af:9f:46:bc:
45:b4:27:42:fc:7d:3b:41:38:a2:d4:2d:bc:d6:40:
2a:1e:ee:56:e1:26:18:5d:16:24:21:32:fa:11:b2:
b9:83:3e:a3:95:b8:75:0d:f6:18:ac:e7:f7:c9:15:
e5:45:81:14:a2:b2:25:7b:1d:5b:31:34:8e:49:2d:
97:3a:de:f6:10:c2:ef:cf:6a:11:a6:9a:b8:31:e8:
5e:3a:3e:b0:1c:d5:83:8d:25:47:e9:37:7c:43:51:
4d:9a:6b:28:7e:29:62:2c:d8:f9:42:7f:68:01:e4:
c4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E3:E5:88:F1:F6:1F:D2:33:12:B5:37:D7:6E:31:26:22:34:6B:6E
X509v3 Authority Key Identifier:
keyid:61:37:4F:C4:EA:B0:0D:41:C1:EE:E4:7F:DF:B0:01:07:8C:74:FA:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YTdPxOqwDUHB7uR_37ABB4x0-oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/9-PliPH2H9IzErU3124xJiI0a24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a14d46-408a-470c-929d-1fc259bb7de2/1/YTdPxOqwDUHB7uR_37ABB4x0-oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.182.0/24
213.134.31.0/24
IPv6:
2a13:4ac0::/45
2a13:4ac0:10::/44
Signature Algorithm: sha256WithRSAEncryption
af:64:b1:80:7d:ad:b0:e5:e4:60:28:ec:b7:1d:fe:9c:d5:96:
d3:40:e6:9f:dd:71:75:ad:05:49:da:da:ad:95:e6:5e:75:77:
d2:ea:9f:d3:4c:b5:e8:f8:e9:60:fe:c9:92:c4:55:1f:0a:71:
ea:ea:ac:22:c7:ad:33:8a:3d:3e:32:83:1d:46:d6:1f:93:7c:
54:9f:7c:c7:40:d1:be:83:8a:e5:eb:1a:95:e8:8f:1d:3f:79:
ca:10:58:74:a8:ff:77:01:82:48:e1:ce:b4:f9:93:76:7b:6c:
5f:82:7b:0a:78:1f:46:62:4e:19:e9:eb:7b:13:dc:c5:01:ba:
45:60:c6:2d:3e:6f:7f:27:c2:26:30:ca:20:bb:6d:b5:25:e3:
8f:b9:e2:df:5a:15:e2:ad:b3:06:2f:32:41:e4:11:a3:3f:c7:
38:75:06:19:28:b9:1a:a7:68:01:69:7b:b6:6f:44:5e:30:0c:
ee:6e:33:4c:9f:d9:7c:de:57:96:1b:81:d9:46:d6:ae:a6:71:
c1:26:91:9b:6f:49:a2:62:93:a3:92:c4:81:50:04:53:94:85:
53:7b:48:f5:ee:64:85:57:66:65:77:cc:37:b1:ac:eb:7b:92:
79:5b:71:13:da:41:8d:74:7b:85:64:fd:14:4c:77:31:60:b8:
36:f8:a1:30
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAY98WM3RdtLQnV7ufh2Nqn2tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxMzc0ZmM0ZWFiMDBkNDFjMWVlZTQ3ZmRmYjAwMTA3OGM3
NGZhODUwHhcNMjQwNTE1MTMwMjI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmN2UzZTU4OGYxZjYxZmQyMzMxMmI1MzdkNzZlMzEyNjIyMzQ2YjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUjkK9Y5KMXUKrTv4DEu84qsPATU
lTn3SbOP+vvx+NADEKrAzFPzaqm6tXE9IqIZhgdIgdJ/bErWREnhsH/W2ZCj6s2z
ZT21vePnk69IEbHCx8ot8tic6N891JiXy2ALCMUvFMmaMiHEqn4djo22yRCxYAiA
rE+czNjhg0Ef45wtUIg/hNeGQAdBu7Qo/PoSja+fRrxFtCdC/H07QTii1C281kAq
Hu5W4SYYXRYkITL6EbK5gz6jlbh1DfYYrOf3yRXlRYEUorIlex1bMTSOSS2XOt72
EMLvz2oRppq4MeheOj6wHNWDjSVH6Td8Q1FNmmsofiliLNj5Qn9oAeTEXwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFPfj5Yjx9h/SMxK1N9duMSYiNGtuMB8GA1UdIwQY
MBaAFGE3T8TqsA1Bwe7kf9+wAQeMdPqFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hMTRkNDYtNDA4YS00NzBjLTkyOWQt
MWZjMjU5YmI3ZGUyLzEvOS1QbGlQSDJIOUl6RXJVMzEyNHhKaUkwYTI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hMTRkNDYtNDA4YS00NzBjLTkyOWQtMWZjMjU5YmI3ZGUy
LzEvWVRkUHhPcXdEVUhCN3VSXzM3QUJCNHgwLW9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQALYO2AwQA
1YYfMBgEAgACMBIDBwMqE0rAAAADBwQqE0rAABAwDQYJKoZIhvcNAQELBQADggEB
AK9ksYB9rbDl5GAo7Lcd/pzVltNA5p/dcXWtBUna2q2V5l51d9Lqn9NMtej46WD+
yZLEVR8KcerqrCLHrTOKPT4ygx1G1h+TfFSffMdA0b6DiuXrGpXojx0/ecoQWHSo
/3cBgkjhzrT5k3Z7bF+Cewp4H0ZiThnp63sT3MUBukVgxi0+b38nwiYwyiC7bbUl
44+54t9aFeKtswYvMkHkEaM/xzh1BhkouRqnaAFpe7ZvRF4wDO5uM0yf2XzeV5Yb
gdlG1q6mccEmkZtvSaJik6OSxIFQBFOUhVN7SPXuZIVXZmV3zDexrOt7knlbcRPa
QY10e4Vk/RRMdzFguDb4oTA=
-----END CERTIFICATE-----
Generated at Mon Jun 24 12:26:57 2024 by rpki-client on console-ams.rpki-client.org