Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/eB3mwWmF7A2Ehzrl4zScG8aFhkQ.roa
File: eB3mwWmF7A2Ehzrl4zScG8aFhkQ.roa (raw, json)
Hash identifier: STunX0sxM4SG1W3VJquklTwPJV35CI2dJd9OpncnqBs=
Subject key identifier: 78:1D:E6:C1:69:85:EC:0D:84:87:3A:E5:E3:34:9C:1B:C6:85:86:44
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018CC2DB28E6D560C2DE905DF37383E0A712
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/eB3mwWmF7A2Ehzrl4zScG8aFhkQ.roa
Signing time: Mon 01 Jan 2024 02:29:51 +0000
ROA not before: Mon 01 Jan 2024 02:29:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41171
IP address blocks: 193.37.200.0/22 maxlen: 22
212.90.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 12:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:28:e6:d5:60:c2:de:90:5d:f3:73:83:e0:a7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 02:29:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=781de6c16985ec0d84873ae5e3349c1bc6858644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c0:dc:5f:79:3c:6f:9c:bd:5e:7c:96:d3:2e:
75:41:28:17:e8:7f:61:76:13:e2:d3:32:6f:67:ff:
49:b5:0f:ba:b7:79:1a:39:b7:5a:cd:97:99:4f:b0:
e1:6a:c4:c0:31:a4:77:11:be:a7:c3:56:41:f7:4b:
db:a2:87:73:25:8a:53:02:cd:75:25:d0:95:6a:3e:
a2:1d:3e:ab:9b:f0:81:c4:da:44:c4:11:93:45:07:
38:53:77:43:9d:94:bd:d4:f3:c3:01:7c:a2:04:a2:
80:e8:0b:46:6f:00:a4:a8:6a:38:59:5f:c0:aa:03:
18:e7:80:6c:46:43:1a:1e:91:b2:6e:dd:eb:f6:c5:
75:57:f3:84:4b:f9:08:77:31:f5:e1:7e:34:8d:9c:
ac:52:c5:5f:8e:32:f8:00:0e:3a:27:08:2f:af:8a:
5b:89:71:a4:44:a2:ff:f7:fb:bb:51:e3:4d:f1:9d:
25:4e:c8:1d:3d:84:73:4c:c9:6e:b9:b4:49:6a:3c:
7b:06:de:3b:e8:9d:18:0e:c0:52:7f:73:da:90:1d:
fb:a0:88:80:40:04:f0:b6:af:ad:22:93:90:bb:2e:
17:72:7d:5d:1b:68:df:3c:e0:e8:88:4f:f2:94:e6:
94:49:35:fa:9f:bc:90:a1:83:d9:86:3c:da:04:0f:
66:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:1D:E6:C1:69:85:EC:0D:84:87:3A:E5:E3:34:9C:1B:C6:85:86:44
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/eB3mwWmF7A2Ehzrl4zScG8aFhkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.200.0/22
212.90.116.0/22
Signature Algorithm: sha256WithRSAEncryption
17:ba:81:e2:a9:e2:81:16:05:34:fb:f5:b2:7b:7f:59:10:f8:
ed:91:63:17:60:ee:35:26:63:a6:67:7b:f3:c8:ed:31:6f:62:
54:73:7e:e2:ca:8d:7e:fb:42:ab:e8:44:f9:9b:91:d1:22:6c:
06:b5:28:ba:3a:e3:9e:9c:19:d6:34:58:5e:09:f3:6c:d2:d6:
34:cb:d1:20:d4:cf:94:41:75:fa:5f:aa:92:21:0c:fa:60:90:
04:98:76:d4:e1:42:17:7a:b9:30:c0:45:c6:b6:aa:93:6c:8b:
4f:8b:a8:8b:ef:0f:6d:97:94:f4:95:5c:f8:5e:0a:8b:c8:d1:
b7:86:f3:e0:2d:75:2e:7e:e8:b7:81:13:17:db:5f:02:41:ad:
b9:b0:0f:a4:2f:dd:24:37:86:86:33:33:51:8d:f8:89:8e:d6:
18:ff:99:c1:c2:00:bb:02:81:89:36:fd:19:73:2c:27:e8:dc:
13:06:d5:bc:d5:99:37:61:3c:80:39:fc:bb:d1:7c:b0:3b:de:
bd:a9:5d:6b:77:cc:45:b6:22:d9:f5:1a:ac:e4:c1:76:51:2b:
0c:f2:5d:bb:14:31:ce:f1:d3:a5:b4:0d:b6:ef:eb:a9:d6:6b:
9f:f8:be:eb:18:b4:ff:c1:7a:1f:c5:21:38:61:3d:33:d5:ae:
af:dd:85:a0
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzC2yjm1WDC3pBd83OD4KcSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjQwMTAxMDIyOTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODFkZTZjMTY5ODVlYzBkODQ4NzNhZTVlMzM0OWMxYmM2ODU4NjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMDcX3k8b5y9XnyW0y51QSgX6H9h
dhPi0zJvZ/9JtQ+6t3kaObdazZeZT7DhasTAMaR3Eb6nw1ZB90vboodzJYpTAs11
JdCVaj6iHT6rm/CBxNpExBGTRQc4U3dDnZS91PPDAXyiBKKA6AtGbwCkqGo4WV/A
qgMY54BsRkMaHpGybt3r9sV1V/OES/kIdzH14X40jZysUsVfjjL4AA46Jwgvr4pb
iXGkRKL/9/u7UeNN8Z0lTsgdPYRzTMluubRJajx7Bt476J0YDsBSf3PakB37oIiA
QATwtq+tIpOQuy4Xcn1dG2jfPODoiE/ylOaUSTX6n7yQoYPZhjzaBA9mmQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHgd5sFphewNhIc65eM0nBvGhYZEMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvZUIzbXdXbUY3QTJFaHpybDR6U2NHOGFGaGtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwSXIAwQC
1Fp0MA0GCSqGSIb3DQEBCwUAA4IBAQAXuoHiqeKBFgU0+/Wye39ZEPjtkWMXYO41
JmOmZ3vzyO0xb2JUc37iyo1++0Kr6ET5m5HRImwGtSi6OuOenBnWNFheCfNs0tY0
y9Eg1M+UQXX6X6qSIQz6YJAEmHbU4UIXerkwwEXGtqqTbItPi6iL7w9tl5T0lVz4
XgqLyNG3hvPgLXUufui3gRMX218CQa25sA+kL90kN4aGMzNRjfiJjtYY/5nBwgC7
AoGJNv0Zcywn6NwTBtW81Zk3YTyAOfy70XywO969qV1rd8xFtiLZ9Rqs5MF2USsM
8l27FDHO8dOltA227+up1muf+L7rGLT/wXofxSE4YT0z1a6v3YWg
-----END CERTIFICATE-----
Generated at Sat May 4 18:15:01 2024 by rpki-client on console-fra.rpki-client.org