Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/PGc3q2kmeT8N-sjb5ljZbkBkmo4.roa
File: PGc3q2kmeT8N-sjb5ljZbkBkmo4.roa (raw, json)
Hash identifier: 8Fhm3hLf0/Pjfkpio1+4vteZWBGIDUi3qAL4nNyESpo=
Subject key identifier: 3C:67:37:AB:69:26:79:3F:0D:FA:C8:DB:E6:58:D9:6E:40:64:9A:8E
Certificate issuer: /CN=a8c6f393350c77598c121acd3c92f7048576ef89
Certificate serial: 018CC3B714C7B492FD3CEEF1971D81236329
Authority key identifier: A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/PGc3q2kmeT8N-sjb5ljZbkBkmo4.roa
Signing time: Mon 01 Jan 2024 06:30:04 +0000
ROA not before: Mon 01 Jan 2024 06:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60386
IP address blocks: 91.237.107.0/24 maxlen: 24
176.121.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:14:c7:b4:92:fd:3c:ee:f1:97:1d:81:23:63:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8c6f393350c77598c121acd3c92f7048576ef89
Validity
Not Before: Jan 1 06:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c6737ab6926793f0dfac8dbe658d96e40649a8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:5e:8d:eb:bc:08:e9:92:5d:de:a4:33:8f:40:
a1:7a:47:4d:f8:d0:7a:9c:88:4a:7f:b5:9a:dd:d7:
6e:78:6a:5f:89:24:c3:07:50:bc:20:cf:6e:39:f6:
eb:6f:2c:e2:2a:99:33:8a:56:63:bf:10:11:05:07:
9d:12:ce:8a:a6:4d:51:33:92:d5:de:ea:40:9d:d8:
0b:9f:db:68:56:0b:48:bd:81:9b:b9:6b:c4:1a:36:
dd:57:20:d6:bb:50:cf:8c:ca:c6:e5:c4:1d:c9:af:
df:35:2d:b8:bf:89:69:59:22:e5:6c:e8:8b:35:88:
a3:73:64:30:e4:d8:34:8b:e0:95:b3:4f:64:81:07:
4e:51:b9:bc:b2:27:94:48:fc:c6:7f:0b:62:65:38:
d8:54:7f:df:a3:d9:12:8d:45:6b:1a:2a:06:52:35:
10:87:c5:ee:01:77:b7:df:64:4c:4c:f0:b0:a8:85:
c7:2e:44:71:a8:da:37:1b:6d:c0:3a:97:3d:c9:d6:
85:c9:74:2c:34:46:4b:27:ed:f2:d9:b0:72:27:2d:
b3:97:03:24:1d:c5:dc:01:52:ba:0f:29:5d:62:07:
33:82:56:e4:ba:61:16:ac:4e:46:66:93:16:a4:09:
18:4c:6e:e0:b1:55:66:6f:cf:c2:e7:8a:05:9a:1b:
1c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:67:37:AB:69:26:79:3F:0D:FA:C8:DB:E6:58:D9:6E:40:64:9A:8E
X509v3 Authority Key Identifier:
keyid:A8:C6:F3:93:35:0C:77:59:8C:12:1A:CD:3C:92:F7:04:85:76:EF:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qMbzkzUMd1mMEhrNPJL3BIV274k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/PGc3q2kmeT8N-sjb5ljZbkBkmo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/709e07-47d5-4720-b777-c6bca01b2ff8/1/qMbzkzUMd1mMEhrNPJL3BIV274k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.107.0/24
176.121.3.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:66:0b:af:89:c3:88:a8:6b:cf:2c:39:14:f3:79:4e:7f:3b:
ab:5c:70:2c:b5:8a:14:69:5a:d2:36:fa:9c:60:eb:6e:d1:03:
f0:0d:ff:58:d1:9a:ff:a5:fd:8e:2f:c4:fb:ea:c1:dd:18:13:
47:48:1d:c3:74:38:52:92:47:be:3e:4b:28:94:e7:e5:e0:6e:
e2:db:ef:73:d1:a3:7b:32:94:11:84:0c:e0:c3:14:5b:1a:46:
ca:02:64:0c:13:81:63:f9:e2:06:84:8e:dd:5c:63:ab:19:15:
4f:d1:63:d8:b0:bd:5e:25:14:6b:0e:67:61:34:00:45:11:9f:
60:26:39:d4:5b:53:c8:78:d7:9a:24:69:4e:cb:89:1a:38:95:
e3:06:c9:2b:f5:aa:dc:dc:fe:d0:93:5c:7e:36:2a:c1:b6:6b:
61:97:70:26:8b:cd:86:f2:1b:52:f8:84:8f:27:f1:dc:7b:eb:
41:a3:44:c7:a6:2f:4d:6d:db:92:a7:9f:38:fb:cb:b9:ba:3a:
d9:e8:48:e3:03:b6:21:27:e4:cd:de:f7:9c:d6:39:88:a1:6c:
a2:0b:ee:d5:b3:17:14:1c:fb:fe:77:84:eb:8d:dd:59:dd:40:
99:08:f2:fd:99:20:2d:63:2c:b5:f6:8a:95:32:13:f7:2a:40:
5b:64:b5:6b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDtxTHtJL9PO7xlx2BI2MpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YzZmMzkzMzUwYzc3NTk4YzEyMWFjZDNjOTJmNzA0ODU3
NmVmODkwHhcNMjQwMTAxMDYzMDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzY3MzdhYjY5MjY3OTNmMGRmYWM4ZGJlNjU4ZDk2ZTQwNjQ5YThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil6N67wI6ZJd3qQzj0ChekdN+NB6
nIhKf7Wa3ddueGpfiSTDB1C8IM9uOfbrbyziKpkzilZjvxARBQedEs6Kpk1RM5LV
3upAndgLn9toVgtIvYGbuWvEGjbdVyDWu1DPjMrG5cQdya/fNS24v4lpWSLlbOiL
NYijc2Qw5Ng0i+CVs09kgQdOUbm8sieUSPzGfwtiZTjYVH/fo9kSjUVrGioGUjUQ
h8XuAXe332RMTPCwqIXHLkRxqNo3G23AOpc9ydaFyXQsNEZLJ+3y2bByJy2zlwMk
HcXcAVK6DyldYgczglbkumEWrE5GZpMWpAkYTG7gsVVmb8/C54oFmhscdQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDxnN6tpJnk/DfrI2+ZY2W5AZJqOMB8GA1UdIwQY
MBaAFKjG85M1DHdZjBIazTyS9wSFdu+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS83MDllMDctNDdkNS00NzIwLWI3Nzct
YzZiY2EwMWIyZmY4LzEvUEdjM3Eya21lVDhOLXNqYjVsalpia0JrbW80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS83MDllMDctNDdkNS00NzIwLWI3NzctYzZiY2EwMWIyZmY4
LzEvcU1iemt6VU1kMW1NRWhyTlBKTDNCSVYyNzRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+1rAwQA
sHkDMA0GCSqGSIb3DQEBCwUAA4IBAQDCZguvicOIqGvPLDkU83lOfzurXHAstYoU
aVrSNvqcYOtu0QPwDf9Y0Zr/pf2OL8T76sHdGBNHSB3DdDhSkke+PksolOfl4G7i
2+9z0aN7MpQRhAzgwxRbGkbKAmQME4Fj+eIGhI7dXGOrGRVP0WPYsL1eJRRrDmdh
NABFEZ9gJjnUW1PIeNeaJGlOy4kaOJXjBskr9arc3P7Qk1x+NirBtmthl3Ami82G
8htS+ISPJ/Hce+tBo0THpi9NbduSp584+8u5ujrZ6EjjA7YhJ+TN3vec1jmIoWyi
C+7VsxcUHPv+d4Trjd1Z3UCZCPL9mSAtYyy19oqVMhP3KkBbZLVr
-----END CERTIFICATE-----
Generated at Sat Jun 1 08:29:32 2024 by rpki-client on console-ams.rpki-client.org