Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/hol7NfPQG1aOCxhtiVbp9jbKcb8.roa
File: hol7NfPQG1aOCxhtiVbp9jbKcb8.roa (raw, json)
Hash identifier: zNQNqul/N+rWWPwr8F2Gx4Km8esGsO3Lzo4Lz2UfUU4=
Subject key identifier: 86:89:7B:35:F3:D0:1B:56:8E:0B:18:6D:89:56:E9:F6:36:CA:71:BF
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 0192964B058123DE4B01A782B37B34D15002
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/hol7NfPQG1aOCxhtiVbp9jbKcb8.roa
Signing time: Wed 16 Oct 2024 17:05:51 +0000
ROA not before: Wed 16 Oct 2024 17:05:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43094
IP address blocks: 91.242.78.0/23 maxlen: 24
91.242.84.0/23 maxlen: 23
194.114.144.0/24 maxlen: 25
194.114.144.128/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:96:4b:05:81:23:de:4b:01:a7:82:b3:7b:34:d1:50:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Oct 16 17:05:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86897b35f3d01b568e0b186d8956e9f636ca71bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:78:08:d9:cc:dc:ae:43:d8:53:8f:43:57:9d:
fe:a6:1b:f9:18:cc:b9:11:f4:05:8f:55:64:4e:5d:
5c:18:df:a0:45:6d:90:38:d9:1b:9c:f3:83:f3:63:
49:10:10:24:80:b0:d5:42:1b:18:dd:a4:ef:d0:c4:
f8:52:23:6d:5b:9c:df:0e:20:ec:21:2f:3a:90:f8:
d6:f1:20:cb:39:87:be:ed:1d:6d:db:ac:8c:41:02:
39:ce:95:99:84:15:f1:8a:c6:e8:6a:73:ec:a2:9e:
c6:63:69:2c:6a:36:b3:83:2d:c1:5f:98:ab:b8:33:
22:a9:97:ad:6b:2c:56:56:cf:72:2b:b9:98:35:0e:
54:7a:92:9d:4f:92:49:ec:9c:49:c5:01:d2:1a:ea:
6d:66:9e:d2:ef:5d:5b:d0:5e:99:8f:47:6f:e6:e7:
35:dd:a4:c0:9b:9a:1e:58:91:dc:4f:f8:c3:fa:5f:
9d:67:01:4c:24:13:38:80:3a:62:56:be:92:df:41:
79:1d:57:bb:2e:52:da:b6:c6:63:a6:1d:0e:56:31:
cf:e7:42:02:ad:26:c3:f8:cb:c7:3b:4e:bc:e1:31:
ba:42:61:ac:31:ca:8a:d2:55:10:3e:07:f6:72:68:
c9:96:de:ed:2a:76:5f:d6:a1:6c:0d:d2:91:5f:2d:
c1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:89:7B:35:F3:D0:1B:56:8E:0B:18:6D:89:56:E9:F6:36:CA:71:BF
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/hol7NfPQG1aOCxhtiVbp9jbKcb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.78.0/23
91.242.84.0/23
194.114.144.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:56:29:72:b8:ef:f6:50:af:44:86:e5:26:73:2a:0f:64:63:
c6:07:f4:ed:f4:be:9c:8d:c1:dd:81:a5:ba:1e:a7:94:91:06:
6c:a9:de:49:01:18:7b:02:12:56:31:12:ec:48:0d:91:e2:e9:
cf:4b:43:71:b4:b3:3b:91:5c:da:83:ae:a2:05:10:23:d5:64:
20:86:74:2a:62:18:fe:95:7f:34:3b:fd:7f:a4:22:87:6e:e3:
88:77:d3:35:a1:da:c3:e5:77:07:2b:71:fd:81:b0:b7:c4:8a:
f7:bc:29:bb:44:c4:56:2e:30:16:69:c0:e2:b5:c3:42:13:6c:
bd:37:da:8c:b4:5a:7c:fd:22:f9:13:df:86:ac:67:b3:d4:50:
86:da:6f:e6:53:8d:58:2b:57:8f:2f:b7:92:05:ac:05:a3:c3:
66:2e:e0:e9:cd:45:4e:d9:08:43:ab:7b:e2:a4:2a:f3:8b:49:
8b:f6:5a:9c:db:2b:f9:b0:42:cf:cb:1e:83:23:c7:0b:78:fb:
45:6a:b1:f3:76:b2:5b:78:7d:23:04:c7:72:bf:fb:76:7a:1e:
3c:e7:e7:43:32:30:96:c8:d6:8b:c6:e2:4e:7a:95:41:15:e0:
d9:ce:19:e8:b3:7a:68:c3:c3:97:d6:52:8c:d6:91:ef:0f:3b:
a1:20:bf:97
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZKWSwWBI95LAaeCs3s00VACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjQxMDE2MTcwNTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Njg5N2IzNWYzZDAxYjU2OGUwYjE4NmQ4OTU2ZTlmNjM2Y2E3MWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXgI2czcrkPYU49DV53+phv5GMy5
EfQFj1VkTl1cGN+gRW2QONkbnPOD82NJEBAkgLDVQhsY3aTv0MT4UiNtW5zfDiDs
IS86kPjW8SDLOYe+7R1t26yMQQI5zpWZhBXxisboanPsop7GY2ksajazgy3BX5ir
uDMiqZetayxWVs9yK7mYNQ5UepKdT5JJ7JxJxQHSGuptZp7S711b0F6Zj0dv5uc1
3aTAm5oeWJHcT/jD+l+dZwFMJBM4gDpiVr6S30F5HVe7LlLatsZjph0OVjHP50IC
rSbD+MvHO0684TG6QmGsMcqK0lUQPgf2cmjJlt7tKnZf1qFsDdKRXy3BpQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIaJezXz0BtWjgsYbYlW6fY2ynG/MB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvaG9sN05mUFFHMWFPQ3hodGlWYnA5amJLY2I4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW/JOAwQB
W/JUAwQAwnKQMA0GCSqGSIb3DQEBCwUAA4IBAQB6VilyuO/2UK9EhuUmcyoPZGPG
B/Tt9L6cjcHdgaW6HqeUkQZsqd5JARh7AhJWMRLsSA2R4unPS0NxtLM7kVzag66i
BRAj1WQghnQqYhj+lX80O/1/pCKHbuOId9M1odrD5XcHK3H9gbC3xIr3vCm7RMRW
LjAWacDitcNCE2y9N9qMtFp8/SL5E9+GrGez1FCG2m/mU41YK1ePL7eSBawFo8Nm
LuDpzUVO2QhDq3vipCrzi0mL9lqc2yv5sELPyx6DI8cLePtFarHzdrJbeH0jBMdy
v/t2eh485+dDMjCWyNaLxuJOepVBFeDZzhnos3pow8OX1lKM1pHvDzuhIL+X
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:49:17 2024 by rpki-client on console-fra.rpki-client.org