Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/9G4k3_QRj6FGz731QwKZBAbBs14.roa
File: 9G4k3_QRj6FGz731QwKZBAbBs14.roa (raw, json)
Hash identifier: fKMdxLR6xfX1PbTURjbHkE1SXodZI/S5h/7CQKPdhb8=
Subject key identifier: F4:6E:24:DF:F4:11:8F:A1:46:CF:BD:F5:43:02:99:04:06:C1:B3:5E
Certificate issuer: /CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Certificate serial: 018CC2DB003D0EF6B5659517FE7C90E835E6
Authority key identifier: 80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/9G4k3_QRj6FGz731QwKZBAbBs14.roa
Signing time: Mon 01 Jan 2024 02:29:41 +0000
ROA not before: Mon 01 Jan 2024 02:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59441
IP address blocks: 185.113.9.0/24 maxlen: 24
2a12:9340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:00:3d:0e:f6:b5:65:95:17:fe:7c:90:e8:35:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8053d9b51f47aa55f9e52704754869f5536bae4c
Validity
Not Before: Jan 1 02:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f46e24dff4118fa146cfbdf54302990406c1b35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:71:56:eb:b4:3d:6b:35:a3:ae:30:7b:92:25:
ed:ee:fa:f0:c9:ce:66:a2:f5:4e:99:c9:09:2d:88:
82:e1:33:a1:21:0f:e5:98:bc:94:db:7e:e7:42:7e:
85:33:1a:c4:d6:7f:5e:bc:f3:f4:15:33:99:87:7c:
8c:02:56:23:65:37:0c:80:20:d9:26:43:24:6e:5b:
9e:a9:e1:bc:41:fc:57:be:af:47:3c:b0:9f:62:27:
ef:53:a9:ea:d5:da:ab:ea:79:3f:65:23:f2:c6:ce:
f6:4f:c5:90:10:7f:16:bb:f5:64:55:7e:08:86:40:
23:e6:e1:6e:25:ea:20:89:dd:8e:28:44:96:13:0b:
41:bc:c5:19:a8:c0:77:38:3a:49:5c:be:e7:b4:00:
72:ec:2a:9b:2f:d3:3f:74:29:9d:c5:15:d4:d9:2e:
a3:dd:b1:58:df:ab:0c:3e:ff:06:31:ff:e1:24:e9:
35:f3:f4:28:aa:f6:d7:e8:17:6f:01:7d:2e:56:d3:
1d:64:7e:c7:b0:6d:db:e4:a2:42:86:20:d7:62:02:
86:4c:d8:e1:06:ce:55:2e:a5:1d:08:a8:38:78:20:
40:cd:03:a2:01:8d:ce:41:41:f2:3d:4b:03:da:8d:
81:4b:d8:3a:07:35:2c:c4:e8:b3:4e:e6:c6:95:f2:
4f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:6E:24:DF:F4:11:8F:A1:46:CF:BD:F5:43:02:99:04:06:C1:B3:5E
X509v3 Authority Key Identifier:
keyid:80:53:D9:B5:1F:47:AA:55:F9:E5:27:04:75:48:69:F5:53:6B:AE:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gFPZtR9HqlX55ScEdUhp9VNrrkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/9G4k3_QRj6FGz731QwKZBAbBs14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a46bf5-cc8f-40c7-915b-a15af5e8f13c/1/gFPZtR9HqlX55ScEdUhp9VNrrkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.9.0/24
IPv6:
2a12:9340::/29
Signature Algorithm: sha256WithRSAEncryption
13:1e:d3:37:ac:f9:fa:7b:67:59:22:22:4e:e8:d7:5f:39:c3:
21:12:16:05:e6:f4:04:96:74:52:2e:79:ee:c2:83:da:06:f2:
94:fb:05:f7:a6:4b:61:70:64:6f:bc:da:35:28:42:e9:62:04:
c0:e0:6a:01:ec:80:18:17:96:8c:75:52:78:9d:1c:fb:1d:22:
90:0f:f9:cb:fa:e9:6a:73:75:4c:e2:f4:e5:0c:9d:bf:e5:c4:
50:78:b3:b6:f1:07:9f:19:db:8c:93:40:52:86:cc:83:de:fe:
f8:73:03:51:47:35:26:5e:c5:6e:cb:c6:a7:03:b7:0e:8e:6d:
00:30:df:85:f3:f5:87:1a:84:96:34:05:60:b7:2e:82:b9:f2:
b6:e6:a1:7b:da:87:02:a2:5c:db:cc:0d:16:30:a5:1c:50:99:
f2:63:be:8c:b6:5f:7e:c5:a5:da:8e:29:cb:5e:d9:be:53:5e:
23:b2:4d:12:fa:ac:86:5d:1c:c4:f5:f6:2c:78:06:22:7f:92:
d1:3d:9a:f0:c6:60:f3:91:70:87:8e:e5:ac:70:64:e4:9a:a2:
72:4a:21:bf:71:a3:12:0d:e3:44:02:c7:a7:a6:b1:48:1b:58:
eb:c5:bd:2c:1b:c0:b8:4b:cf:14:0a:a7:34:23:08:73:17:01:
86:66:86:62
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzC2wA9Dva1ZZUX/nyQ6DXmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwNTNkOWI1MWY0N2FhNTVmOWU1MjcwNDc1NDg2OWY1NTM2
YmFlNGMwHhcNMjQwMTAxMDIyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNDZlMjRkZmY0MTE4ZmExNDZjZmJkZjU0MzAyOTkwNDA2YzFiMzVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXFW67Q9azWjrjB7kiXt7vrwyc5m
ovVOmckJLYiC4TOhIQ/lmLyU237nQn6FMxrE1n9evPP0FTOZh3yMAlYjZTcMgCDZ
JkMkblueqeG8QfxXvq9HPLCfYifvU6nq1dqr6nk/ZSPyxs72T8WQEH8Wu/VkVX4I
hkAj5uFuJeogid2OKESWEwtBvMUZqMB3ODpJXL7ntABy7CqbL9M/dCmdxRXU2S6j
3bFY36sMPv8GMf/hJOk18/QoqvbX6BdvAX0uVtMdZH7HsG3b5KJChiDXYgKGTNjh
Bs5VLqUdCKg4eCBAzQOiAY3OQUHyPUsD2o2BS9g6BzUsxOizTubGlfJPBQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFPRuJN/0EY+hRs+99UMCmQQGwbNeMB8GA1UdIwQY
MBaAFIBT2bUfR6pV+eUnBHVIafVTa65MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWIt
YTE1YWY1ZThmMTNjLzEvOUc0azNfUVJqNkZHejczMVF3S1pCQWJCczE0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNDZiZjUtY2M4Zi00MGM3LTkxNWItYTE1YWY1ZThmMTNj
LzEvZ0ZQWnRSOUhxbFg1NVNjRWRVaHA5Vk5ycmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAuXEJMA0E
AgACMAcDBQMqEpNAMA0GCSqGSIb3DQEBCwUAA4IBAQATHtM3rPn6e2dZIiJO6Ndf
OcMhEhYF5vQElnRSLnnuwoPaBvKU+wX3pkthcGRvvNo1KELpYgTA4GoB7IAYF5aM
dVJ4nRz7HSKQD/nL+ulqc3VM4vTlDJ2/5cRQeLO28QefGduMk0BShsyD3v74cwNR
RzUmXsVuy8anA7cOjm0AMN+F8/WHGoSWNAVgty6CufK25qF72ocColzbzA0WMKUc
UJnyY76Mtl9+xaXajinLXtm+U14jsk0S+qyGXRzE9fYseAYif5LRPZrwxmDzkXCH
juWscGTkmqJySiG/caMSDeNEAsenprFIG1jrxb0sG8C4S88UCqc0IwhzFwGGZoZi
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:36:54 2024 by rpki-client on console-fra.rpki-client.org