Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/PPdBUw_uc8EZTSLP0iOoV_ssa0w.roa
File: PPdBUw_uc8EZTSLP0iOoV_ssa0w.roa (raw, json)
Hash identifier: juJGw6szvPa7DQmJCNxTjQ9iax9ELTL8qs+YNOxtcrQ=
Subject key identifier: 3C:F7:41:53:0F:EE:73:C1:19:4D:22:CF:D2:23:A8:57:FB:2C:6B:4C
Certificate issuer: /CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Certificate serial: 019052E456FE0908FF99B79C9F8E2BFD4B64
Authority key identifier: 66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/PPdBUw_uc8EZTSLP0iOoV_ssa0w.roa
Signing time: Wed 26 Jun 2024 04:53:34 +0000
ROA not before: Wed 26 Jun 2024 04:53:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31182
IP address blocks: 193.8.139.0/24 maxlen: 24
2a14:5ec0::/29 maxlen: 29
2a14:5ec0::/32 maxlen: 32
2a14:5ec1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:52:e4:56:fe:09:08:ff:99:b7:9c:9f:8e:2b:fd:4b:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6696fa3fe40cf770851c83adcafafb7a4107678f
Validity
Not Before: Jun 26 04:53:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cf741530fee73c1194d22cfd223a857fb2c6b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:db:af:a0:67:75:44:a4:4a:2e:9e:07:8f:34:
d3:f8:ed:25:54:42:81:4e:a7:20:d2:70:86:5d:9a:
1f:3d:af:45:bc:28:8b:d1:63:93:c8:d5:a4:e1:84:
4d:45:3c:4a:64:76:24:9b:4e:00:5e:72:07:9d:0d:
c3:f3:eb:b9:6f:55:b8:63:d5:38:bb:84:8b:ac:ae:
39:77:02:70:4b:4b:19:47:7a:c2:e5:a8:77:37:f7:
7f:05:7b:f2:f5:7b:3a:67:9f:0b:30:94:18:93:99:
b5:8f:b5:11:39:76:48:f0:a8:f8:f9:60:c4:7c:84:
84:2a:19:09:0d:91:26:ec:66:7c:7f:f0:aa:40:54:
66:f0:31:0c:0f:4f:4e:64:d4:86:f0:29:d2:9d:9f:
2e:1c:d7:e7:a7:64:9b:3d:92:19:c5:7e:41:39:20:
cd:32:3f:26:ef:15:49:48:dc:5d:6b:78:ec:6d:0d:
b9:97:8f:53:7d:5c:7c:dc:dd:c8:1f:cf:4e:c3:46:
6c:53:c8:1c:ab:80:24:23:7e:fb:b5:eb:be:10:40:
fc:0f:6e:68:97:6e:a0:64:37:49:51:9e:48:e7:cf:
ea:c3:39:7a:00:fd:31:47:b8:d8:5b:7f:ad:e0:7b:
73:aa:a9:b6:91:bf:47:10:65:8e:4a:6d:36:16:88:
62:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F7:41:53:0F:EE:73:C1:19:4D:22:CF:D2:23:A8:57:FB:2C:6B:4C
X509v3 Authority Key Identifier:
keyid:66:96:FA:3F:E4:0C:F7:70:85:1C:83:AD:CA:FA:FB:7A:41:07:67:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zpb6P-QM93CFHIOtyvr7ekEHZ48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/PPdBUw_uc8EZTSLP0iOoV_ssa0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e66afe-6e0b-4dbd-8d0d-ce6915b4736f/1/Zpb6P-QM93CFHIOtyvr7ekEHZ48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.139.0/24
IPv6:
2a14:5ec0::/29
Signature Algorithm: sha256WithRSAEncryption
4d:cb:47:aa:94:1b:80:74:0e:61:52:9f:13:98:4b:88:e1:8c:
bf:0b:fd:b7:c8:a3:47:ba:71:0d:d2:d1:6e:a4:2b:e6:7e:de:
02:c9:c6:28:21:e7:a4:5e:6a:4f:37:55:c8:2e:7b:d9:d8:43:
0a:f6:74:69:db:60:a7:da:7e:70:56:dc:67:62:90:f9:31:cf:
6e:15:37:b8:ca:1a:57:66:99:e5:63:d1:c4:75:b2:a0:23:e5:
5b:d2:1c:b4:49:8d:0b:c9:24:2b:b5:5e:5f:8f:72:e9:91:ad:
28:10:76:45:d9:21:9e:7a:03:d7:fe:e5:05:a2:2e:2b:b7:a5:
73:a9:b0:de:2a:e6:9a:e9:2b:6b:30:88:2e:e9:fc:65:e5:e4:
fc:fe:e9:66:b1:77:60:bf:71:af:81:cd:b5:5d:4e:bf:47:2a:
00:a1:74:aa:5b:24:48:b1:d2:a7:4b:ba:50:80:a8:cc:c4:db:
44:50:a3:ce:12:0d:e7:13:17:34:d9:3b:4a:b6:bb:74:43:61:
12:12:01:d4:92:69:3a:15:d4:52:78:82:86:f0:71:5a:c7:92:
b3:a6:ba:b8:5e:4f:87:90:6a:ff:c9:45:84:5a:a8:c2:94:f1:
a4:e3:36:8b:67:54:40:4e:fd:37:5b:65:dd:a6:e2:ea:66:20:
cc:c8:69:b1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZBS5Fb+CQj/mbecn44r/UtkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2OTZmYTNmZTQwY2Y3NzA4NTFjODNhZGNhZmFmYjdhNDEw
NzY3OGYwHhcNMjQwNjI2MDQ1MzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2Y3NDE1MzBmZWU3M2MxMTk0ZDIyY2ZkMjIzYTg1N2ZiMmM2YjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9uvoGd1RKRKLp4HjzTT+O0lVEKB
Tqcg0nCGXZofPa9FvCiL0WOTyNWk4YRNRTxKZHYkm04AXnIHnQ3D8+u5b1W4Y9U4
u4SLrK45dwJwS0sZR3rC5ah3N/d/BXvy9Xs6Z58LMJQYk5m1j7UROXZI8Kj4+WDE
fISEKhkJDZEm7GZ8f/CqQFRm8DEMD09OZNSG8CnSnZ8uHNfnp2SbPZIZxX5BOSDN
Mj8m7xVJSNxda3jsbQ25l49TfVx83N3IH89Ow0ZsU8gcq4AkI377teu+EED8D25o
l26gZDdJUZ5I58/qwzl6AP0xR7jYW3+t4Htzqqm2kb9HEGWOSm02FohiXwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDz3QVMP7nPBGU0iz9IjqFf7LGtMMB8GA1UdIwQY
MBaAFGaW+j/kDPdwhRyDrcr6+3pBB2ePMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lNjZhZmUtNmUwYi00ZGJkLThkMGQt
Y2U2OTE1YjQ3MzZmLzEvUFBkQlV3X3VjOEVaVFNMUDBpT29WX3NzYTB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lNjZhZmUtNmUwYi00ZGJkLThkMGQtY2U2OTE1YjQ3MzZm
LzEvWnBiNlAtUU05M0NGSElPdHl2cjdla0VIWjQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwQiLMA0E
AgACMAcDBQMqFF7AMA0GCSqGSIb3DQEBCwUAA4IBAQBNy0eqlBuAdA5hUp8TmEuI
4Yy/C/23yKNHunEN0tFupCvmft4CycYoIeekXmpPN1XILnvZ2EMK9nRp22Cn2n5w
VtxnYpD5Mc9uFTe4yhpXZpnlY9HEdbKgI+Vb0hy0SY0LySQrtV5fj3Lpka0oEHZF
2SGeegPX/uUFoi4rt6VzqbDeKuaa6StrMIgu6fxl5eT8/ulmsXdgv3Gvgc21XU6/
RyoAoXSqWyRIsdKnS7pQgKjMxNtEUKPOEg3nExc02TtKtrt0Q2ESEgHUkmk6FdRS
eIKG8HFax5Kzprq4Xk+HkGr/yUWEWqjClPGk4zaLZ1RATv03W2XdpuLqZiDMyGmx
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:09 2024 by rpki-client on console-fra.rpki-client.org