Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/xvd1bdgqmIbAZDO90b1jupe-C6Q.roa
File: xvd1bdgqmIbAZDO90b1jupe-C6Q.roa (raw, json)
Hash identifier: vUhMEi6q/HD3hVf78E7dvunimuZ7/iExB5uAgfw7iBA=
Subject key identifier: C6:F7:75:6D:D8:2A:98:86:C0:64:33:BD:D1:BD:63:BA:97:BE:0B:A4
Certificate issuer: /CN=87be093097097c4457ff5aa3e5893c8c15432612
Certificate serial: 018CC8DF83B8D3BC695EA840ED648C770D94
Authority key identifier: 87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/xvd1bdgqmIbAZDO90b1jupe-C6Q.roa
Signing time: Tue 02 Jan 2024 06:32:20 +0000
ROA not before: Tue 02 Jan 2024 06:32:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213122
IP address blocks: 89.35.48.0/24 maxlen: 24
89.37.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:83:b8:d3:bc:69:5e:a8:40:ed:64:8c:77:0d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87be093097097c4457ff5aa3e5893c8c15432612
Validity
Not Before: Jan 2 06:32:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6f7756dd82a9886c06433bdd1bd63ba97be0ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:eb:5b:0e:e9:41:63:71:e7:3e:ad:51:a6:1e:
b4:44:c9:14:4a:f6:06:19:01:bc:40:27:3b:d0:93:
bf:c1:40:2e:89:c1:e2:8b:bf:5b:6e:c8:6d:61:81:
69:3c:74:18:8f:39:26:a1:55:c8:3a:41:63:2a:37:
02:36:dc:1b:f7:fb:72:a1:0b:f6:49:8c:9a:4a:b0:
d5:80:50:78:70:7f:66:9d:c3:8b:7d:56:b6:57:e3:
82:7c:2f:5e:b1:8f:20:72:65:50:40:47:33:ac:f0:
98:2f:15:3a:b1:e8:da:fa:49:84:7d:61:d5:40:69:
7e:d6:e2:b4:46:1d:24:ac:67:bc:8c:83:ab:e8:ac:
63:40:6f:b6:f7:1e:1f:b4:1c:74:0b:27:96:ce:b5:
af:db:55:03:2e:5b:7c:cc:8c:1f:18:42:14:2c:e9:
ab:76:6c:92:17:bd:c7:d2:80:3e:56:c2:f8:37:98:
7e:48:65:2b:45:bf:e3:18:a9:2c:2a:b3:a3:23:fe:
9f:9d:b7:d5:6b:13:54:e3:e5:8d:2b:de:85:11:d2:
fb:d8:b6:b8:e3:65:b3:00:93:fd:72:a8:7d:b6:5e:
07:2b:36:97:46:25:b6:57:bf:51:bd:b0:ad:f6:c9:
01:e7:28:a1:35:0e:9a:2e:19:20:b8:d7:cc:0c:91:
2c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F7:75:6D:D8:2A:98:86:C0:64:33:BD:D1:BD:63:BA:97:BE:0B:A4
X509v3 Authority Key Identifier:
keyid:87:BE:09:30:97:09:7C:44:57:FF:5A:A3:E5:89:3C:8C:15:43:26:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h74JMJcJfERX_1qj5Yk8jBVDJhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/xvd1bdgqmIbAZDO90b1jupe-C6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc8f4a-4c02-404b-8d93-2cde65f3112a/1/h74JMJcJfERX_1qj5Yk8jBVDJhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.48.0/24
89.37.99.0/24
Signature Algorithm: sha256WithRSAEncryption
52:7b:c1:ae:0a:8e:1e:55:03:10:cb:fc:22:7f:4a:eb:96:65:
0e:3c:c1:1e:17:ca:d8:a7:09:2b:d4:c1:38:16:96:97:b8:ac:
7c:2e:c8:3c:2b:7f:d8:37:f4:97:14:c5:7d:e7:eb:54:06:f5:
1d:c7:bd:17:4c:2a:63:8d:db:2c:d5:e5:ad:40:74:31:f6:94:
68:e4:22:21:a0:5d:1e:e8:d9:16:4c:e3:26:f7:f8:2f:29:a3:
a1:31:b4:e4:a6:90:82:81:8d:76:ed:96:f2:f5:9b:8e:97:17:
67:bc:d8:4f:d2:16:48:e8:d1:dd:b2:82:1e:b6:42:c7:6a:55:
c1:1d:75:ba:a1:ac:78:3b:bb:80:a8:02:41:92:7a:e8:52:79:
e9:96:ce:63:7d:d9:a6:71:7e:78:74:95:93:c5:ad:5f:1d:dd:
6e:5f:56:4b:73:aa:7b:cc:4c:cd:01:07:8d:d5:19:89:fe:a4:
89:11:78:25:fd:a0:42:69:70:b7:1a:bc:5e:f2:e8:82:52:51:
47:c8:32:a8:44:85:45:20:8c:79:84:95:16:73:5f:20:3d:4d:
c6:de:2c:3c:44:5d:0e:02:34:00:ce:32:ba:c9:a4:6c:0c:c4:
dd:2d:a7:29:a5:c0:59:a7:e1:f8:b6:b2:fe:04:35:a2:0c:b3:
42:fa:e4:88
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzI34O407xpXqhA7WSMdw2UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YmUwOTMwOTcwOTdjNDQ1N2ZmNWFhM2U1ODkzYzhjMTU0
MzI2MTIwHhcNMjQwMTAyMDYzMjIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmY3NzU2ZGQ4MmE5ODg2YzA2NDMzYmRkMWJkNjNiYTk3YmUwYmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOtbDulBY3HnPq1Rph60RMkUSvYG
GQG8QCc70JO/wUAuicHii79bbshtYYFpPHQYjzkmoVXIOkFjKjcCNtwb9/tyoQv2
SYyaSrDVgFB4cH9mncOLfVa2V+OCfC9esY8gcmVQQEczrPCYLxU6seja+kmEfWHV
QGl+1uK0Rh0krGe8jIOr6KxjQG+29x4ftBx0CyeWzrWv21UDLlt8zIwfGEIULOmr
dmySF73H0oA+VsL4N5h+SGUrRb/jGKksKrOjI/6fnbfVaxNU4+WNK96FEdL72La4
42WzAJP9cqh9tl4HKzaXRiW2V79RvbCt9skB5yihNQ6aLhkguNfMDJEsCwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMb3dW3YKpiGwGQzvdG9Y7qXvgukMB8GA1UdIwQY
MBaAFIe+CTCXCXxEV/9ao+WJPIwVQyYSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMt
MmNkZTY1ZjMxMTJhLzEveHZkMWJkZ3FtSWJBWkRPOTBiMWp1cGUtQzZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jYzhmNGEtNGMwMi00MDRiLThkOTMtMmNkZTY1ZjMxMTJh
LzEvaDc0Sk1KY0pmRVJYXzFxajVZazhqQlZESmhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWSMwAwQA
WSVjMA0GCSqGSIb3DQEBCwUAA4IBAQBSe8GuCo4eVQMQy/wif0rrlmUOPMEeF8rY
pwkr1ME4FpaXuKx8Lsg8K3/YN/SXFMV95+tUBvUdx70XTCpjjdss1eWtQHQx9pRo
5CIhoF0e6NkWTOMm9/gvKaOhMbTkppCCgY127Zby9ZuOlxdnvNhP0hZI6NHdsoIe
tkLHalXBHXW6oax4O7uAqAJBknroUnnpls5jfdmmcX54dJWTxa1fHd1uX1ZLc6p7
zEzNAQeN1RmJ/qSJEXgl/aBCaXC3Grxe8uiCUlFHyDKoRIVFIIx5hJUWc18gPU3G
3iw8RF0OAjQAzjK6yaRsDMTdLacppcBZp+H4trL+BDWiDLNC+uSI
-----END CERTIFICATE-----
Generated at Tue Jun 4 02:49:56 2024 by rpki-client on console-ams.rpki-client.org