Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/EdJg23CEda8T94OgEGXj7zDDSPc.roa
File: EdJg23CEda8T94OgEGXj7zDDSPc.roa (raw, json)
Hash identifier: N36NBKEFaCutWn21AN2zl7GDW8MUO5yXD8yyJTszARE=
Subject key identifier: 11:D2:60:DB:70:84:75:AF:13:F7:83:A0:10:65:E3:EF:30:C3:48:F7
Certificate issuer: /CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Certificate serial: 018CC5DCCDD4CD3F726364F585CE980CD7B4
Authority key identifier: 1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/EdJg23CEda8T94OgEGXj7zDDSPc.roa
Signing time: Mon 01 Jan 2024 16:30:31 +0000
ROA not before: Mon 01 Jan 2024 16:30:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196945
IP address blocks: 91.217.155.0/24 maxlen: 24
185.106.16.0/22 maxlen: 22
2a06:3ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:cd:d4:cd:3f:72:63:64:f5:85:ce:98:0c:d7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1eab01293c9dbd1a9d6adc86182b520cd176c007
Validity
Not Before: Jan 1 16:30:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=11d260db708475af13f783a01065e3ef30c348f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0c:0a:e9:3a:ae:19:e2:58:2f:55:52:aa:64:
7a:a9:cd:4e:e9:b4:16:d1:b3:14:02:17:79:69:23:
4d:55:4d:21:6b:f2:32:3f:ce:cd:3d:14:ac:24:d7:
e1:51:e3:da:a1:a8:26:45:de:c4:e7:18:01:85:72:
2a:50:0b:a2:5e:c8:c6:7a:3c:eb:ed:db:36:b8:85:
8a:4c:c5:ad:7c:cf:68:f3:20:80:2b:98:21:5f:d8:
a9:d5:14:7a:b9:59:fa:5d:39:6b:12:60:14:9b:45:
6a:5d:09:a5:e1:83:e1:1b:9a:73:cd:51:28:56:dc:
d8:69:47:48:ab:f9:ce:12:59:c5:ae:0f:e1:7d:a7:
fd:fb:d0:67:54:66:06:03:6f:b1:20:94:3c:23:43:
1e:41:c3:f9:6c:cc:9d:e1:db:72:70:66:57:e6:cd:
a8:9d:a0:61:5e:16:51:8f:5c:c8:7d:cc:9a:59:b2:
26:ed:59:a3:81:20:41:a6:a6:44:87:54:8c:2d:17:
ff:cf:a3:de:52:77:d3:50:08:44:2c:f4:79:fd:5a:
56:1a:cf:e4:71:fa:f6:78:41:90:68:b3:3c:16:16:
f8:e6:f9:50:36:75:63:db:61:36:3e:a5:6e:51:7d:
71:2f:9d:01:79:20:8b:77:9a:9b:e1:e4:d9:e6:06:
e9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D2:60:DB:70:84:75:AF:13:F7:83:A0:10:65:E3:EF:30:C3:48:F7
X509v3 Authority Key Identifier:
keyid:1E:AB:01:29:3C:9D:BD:1A:9D:6A:DC:86:18:2B:52:0C:D1:76:C0:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqsBKTydvRqdatyGGCtSDNF2wAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/EdJg23CEda8T94OgEGXj7zDDSPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c00c13-791a-4e15-baf7-e03ac589a03f/1/HqsBKTydvRqdatyGGCtSDNF2wAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.155.0/24
185.106.16.0/22
IPv6:
2a06:3ac0::/29
Signature Algorithm: sha256WithRSAEncryption
6a:cd:84:e9:83:4e:59:bd:a8:25:99:6b:df:74:42:08:67:ce:
65:f2:9d:3a:ad:d1:35:14:ba:1b:18:54:d4:ac:f7:9d:0d:7b:
7e:d7:8a:1c:6b:44:58:4d:cf:23:6e:56:d1:c3:67:31:c2:e8:
bf:e9:c6:c2:b3:a7:2e:2a:56:81:ee:1e:f9:05:34:d8:73:98:
68:ac:73:ff:d4:60:c4:6f:2d:d9:76:09:db:d8:ac:f4:40:2a:
9b:7b:c9:5f:74:f0:87:9c:d1:b6:eb:d2:8f:f8:c7:f5:20:6c:
ff:8d:ff:88:d6:0f:4b:df:73:7b:cc:58:f7:73:ca:93:42:a1:
b8:9d:0e:4b:ec:7a:8a:cc:3a:0e:15:b4:99:28:f6:d1:04:55:
29:06:d1:ad:47:f7:bc:72:78:85:2d:13:e2:06:1d:b8:01:e3:
42:2a:a7:c1:07:7d:35:d4:59:b6:ba:67:51:8d:65:9d:34:02:
01:64:1d:8f:60:a1:60:b9:ee:f8:42:d9:4a:d0:03:47:dd:2f:
c0:c1:74:f0:90:ce:60:82:84:d2:74:70:c3:03:ca:46:86:ed:
db:57:2b:80:d1:35:6f:a6:c4:df:46:c7:44:50:3e:84:1a:b1:
fd:9a:cc:74:9f:6b:f2:73:da:04:a7:02:dd:10:83:09:6f:a2:
3d:3f:e6:af
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAYzF3M3UzT9yY2T1hc6YDNe0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlYWIwMTI5M2M5ZGJkMWE5ZDZhZGM4NjE4MmI1MjBjZDE3
NmMwMDcwHhcNMjQwMTAxMTYzMDMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWQyNjBkYjcwODQ3NWFmMTNmNzgzYTAxMDY1ZTNlZjMwYzM0OGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQwK6TquGeJYL1VSqmR6qc1O6bQW
0bMUAhd5aSNNVU0ha/IyP87NPRSsJNfhUePaoagmRd7E5xgBhXIqUAuiXsjGejzr
7ds2uIWKTMWtfM9o8yCAK5ghX9ip1RR6uVn6XTlrEmAUm0VqXQml4YPhG5pzzVEo
VtzYaUdIq/nOElnFrg/hfaf9+9BnVGYGA2+xIJQ8I0MeQcP5bMyd4dtycGZX5s2o
naBhXhZRj1zIfcyaWbIm7VmjgSBBpqZEh1SMLRf/z6PeUnfTUAhELPR5/VpWGs/k
cfr2eEGQaLM8Fhb45vlQNnVj22E2PqVuUX1xL50BeSCLd5qb4eTZ5gbpfQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFBHSYNtwhHWvE/eDoBBl4+8ww0j3MB8GA1UdIwQY
MBaAFB6rASk8nb0anWrchhgrUgzRdsAHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjct
ZTAzYWM1ODlhMDNmLzEvRWRKZzIzQ0VkYThUOTRPZ0VHWGo3ekREU1BjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9jMDBjMTMtNzkxYS00ZTE1LWJhZjctZTAzYWM1ODlhMDNm
LzEvSHFzQktUeWR2UnFkYXR5R0dDdFNETkYyd0FjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9mbAwQC
uWoQMA0EAgACMAcDBQMqBjrAMA0GCSqGSIb3DQEBCwUAA4IBAQBqzYTpg05Zvagl
mWvfdEIIZ85l8p06rdE1FLobGFTUrPedDXt+14oca0RYTc8jblbRw2cxwui/6cbC
s6cuKlaB7h75BTTYc5horHP/1GDEby3Zdgnb2Kz0QCqbe8lfdPCHnNG269KP+Mf1
IGz/jf+I1g9L33N7zFj3c8qTQqG4nQ5L7HqKzDoOFbSZKPbRBFUpBtGtR/e8cniF
LRPiBh24AeNCKqfBB3011Fm2umdRjWWdNAIBZB2PYKFgue74QtlK0ANH3S/AwXTw
kM5ggoTSdHDDA8pGhu3bVyuA0TVvpsTfRsdEUD6EGrH9msx0n2vyc9oEpwLdEIMJ
b6I9P+av
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:03:54 2024 by rpki-client on console-fra.rpki-client.org