Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/If_kKWepwWHZ2j053W_xs7kNjDk.roa
File: If_kKWepwWHZ2j053W_xs7kNjDk.roa (raw, json)
Hash identifier: IJkn8ioRLNr2VbHLy0CDwPHVnlxN2jCPRZmut6gzGZA=
Subject key identifier: 21:FF:E4:29:67:A9:C1:61:D9:DA:3D:39:DD:6F:F1:B3:B9:0D:8C:39
Certificate issuer: /CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Certificate serial: 018CC94E14EB53CDC4B7D7480B994246D25A
Authority key identifier: 96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/If_kKWepwWHZ2j053W_xs7kNjDk.roa
Signing time: Tue 02 Jan 2024 08:33:06 +0000
ROA not before: Tue 02 Jan 2024 08:33:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 134.97.16.0/24 maxlen: 24
193.22.4.0/24 maxlen: 24
134.97.3.0/24 maxlen: 24
134.97.2.0/24 maxlen: 24
2001:650:cc02::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.mft
rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:14:eb:53:cd:c4:b7:d7:48:0b:99:42:46:d2:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=969948d0fe4d7f99d54ba8bffcd99a1a608ae0d3
Validity
Not Before: Jan 2 08:33:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21ffe42967a9c161d9da3d39dd6ff1b3b90d8c39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:87:1d:0d:35:48:3f:9a:dc:07:07:04:23:
59:99:b0:31:93:b5:b4:36:3e:c9:5d:26:94:c0:cf:
6d:80:a6:33:5f:ee:b7:71:1f:ee:d0:d7:c5:08:90:
4f:0a:d4:34:e8:9c:d1:40:1a:e0:83:47:79:5d:d2:
b1:12:8e:84:b5:72:91:85:b6:62:ec:56:8a:1b:02:
41:bb:e0:c7:6e:55:3a:80:6c:fc:fc:60:30:f1:e9:
aa:35:5c:a9:58:2a:ae:17:12:f7:31:0b:7e:3f:11:
48:ee:61:b2:7a:f6:d0:71:1e:6b:b6:46:fc:e0:7f:
c7:dd:c9:26:4c:7c:e9:ab:18:46:98:c7:22:55:b7:
53:ef:51:47:a7:60:1e:7d:ea:f0:b5:c2:6a:a3:09:
b3:d4:f9:de:66:08:f5:d8:26:3a:22:79:70:a4:43:
cb:2b:c2:e3:76:08:91:6a:26:d0:02:0f:c3:c6:4c:
0d:e8:c2:ae:c3:03:7f:d2:3b:03:6a:90:cb:3b:f7:
b0:a2:52:1e:48:88:e0:68:7b:23:ed:d3:68:7f:bf:
ab:bd:64:c0:53:b6:c2:43:56:87:e2:38:44:47:08:
a2:44:3f:e1:25:89:46:fa:18:4d:73:57:ba:9a:81:
40:19:42:88:56:eb:92:cb:83:7f:d9:2e:38:59:da:
34:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FF:E4:29:67:A9:C1:61:D9:DA:3D:39:DD:6F:F1:B3:B9:0D:8C:39
X509v3 Authority Key Identifier:
keyid:96:99:48:D0:FE:4D:7F:99:D5:4B:A8:BF:FC:D9:9A:1A:60:8A:E0:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lplI0P5Nf5nVS6i__NmaGmCK4NM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/If_kKWepwWHZ2j053W_xs7kNjDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/1a2fa2-eeb3-4312-9130-53cc5daf52cf/1/lplI0P5Nf5nVS6i__NmaGmCK4NM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.97.2.0/23
134.97.16.0/24
193.22.4.0/24
IPv6:
2001:650:cc02::/48
Signature Algorithm: sha256WithRSAEncryption
a9:88:e4:bb:5b:c6:f9:63:e6:53:63:e7:91:3e:60:8e:1c:d4:
3e:3d:ba:15:ff:94:8a:5a:36:40:0f:5b:01:5f:19:83:2a:5d:
82:2b:e7:9a:d7:77:8f:e6:ba:69:35:f0:9e:7a:3f:b7:e2:09:
53:4f:28:c5:ba:83:e3:4c:7d:9f:17:df:13:e8:6d:24:51:fd:
61:77:5a:b4:52:64:ec:8e:d7:a4:cd:15:ec:81:5f:fb:7b:46:
ab:35:ad:be:08:f9:c2:81:15:aa:99:66:bb:9d:40:b7:0d:e6:
0e:21:60:54:a0:98:65:a4:32:6a:5a:ed:ec:d5:e8:c5:07:2a:
18:2b:bf:02:f7:f4:f2:c2:7e:e7:dd:3b:b2:90:cb:e3:e1:62:
13:40:65:d0:55:75:bd:7e:eb:f5:2c:53:cb:38:bd:9f:fa:8c:
d3:35:17:32:ce:dc:c3:43:a5:82:16:1a:b2:82:95:66:33:d0:
20:ca:0e:97:94:9c:c9:c4:00:99:a7:86:91:e1:ee:be:d9:1e:
a7:a9:a7:6e:fd:a6:db:48:a0:83:f2:c2:c4:47:b3:a1:0b:4c:
79:1c:58:52:da:1b:83:df:b2:7a:ef:c7:c0:5a:00:2b:e3:5a:
7b:ad:f7:11:92:e8:d5:eb:fe:ed:9a:66:d5:9a:aa:14:db:e4:
76:f6:fa:06
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAYzJThTrU83Et9dIC5lCRtJaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2OTk0OGQwZmU0ZDdmOTlkNTRiYThiZmZjZDk5YTFhNjA4
YWUwZDMwHhcNMjQwMTAyMDgzMzA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWZmZTQyOTY3YTljMTYxZDlkYTNkMzlkZDZmZjFiM2I5MGQ4YzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbWHHQ01SD+a3AcHBCNZmbAxk7W0
Nj7JXSaUwM9tgKYzX+63cR/u0NfFCJBPCtQ06JzRQBrgg0d5XdKxEo6EtXKRhbZi
7FaKGwJBu+DHblU6gGz8/GAw8emqNVypWCquFxL3MQt+PxFI7mGyevbQcR5rtkb8
4H/H3ckmTHzpqxhGmMciVbdT71FHp2AeferwtcJqowmz1PneZgj12CY6InlwpEPL
K8LjdgiRaibQAg/DxkwN6MKuwwN/0jsDapDLO/ewolIeSIjgaHsj7dNof7+rvWTA
U7bCQ1aH4jhERwiiRD/hJYlG+hhNc1e6moFAGUKIVuuSy4N/2S44Wdo09wIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFCH/5ClnqcFh2do9Od1v8bO5DYw5MB8GA1UdIwQY
MBaAFJaZSND+TX+Z1Uuov/zZmhpgiuDTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8xYTJmYTItZWViMy00MzEyLTkxMzAt
NTNjYzVkYWY1MmNmLzEvSWZfa0tXZXB3V0haMmowNTNXX3hzN2tOakRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8xYTJmYTItZWViMy00MzEyLTkxMzAtNTNjYzVkYWY1MmNm
LzEvbHBsSTBQNU5mNW5WUzZpX19ObWFHbUNLNE5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAYBAIAATASAwQBhmECAwQA
hmEQAwQAwRYEMA8EAgACMAkDBwAgAQZQzAIwDQYJKoZIhvcNAQELBQADggEBAKmI
5Ltbxvlj5lNj55E+YI4c1D49uhX/lIpaNkAPWwFfGYMqXYIr55rXd4/mumk18J56
P7fiCVNPKMW6g+NMfZ8X3xPobSRR/WF3WrRSZOyO16TNFeyBX/t7Rqs1rb4I+cKB
FaqZZrudQLcN5g4hYFSgmGWkMmpa7ezV6MUHKhgrvwL39PLCfufdO7KQy+PhYhNA
ZdBVdb1+6/UsU8s4vZ/6jNM1FzLO3MNDpYIWGrKClWYz0CDKDpeUnMnEAJmnhpHh
7r7ZHqepp279pttIoIPywsRHs6ELTHkcWFLaG4Pfsnrvx8BaACvjWnut9xGS6NXr
/u2aZtWaqhTb5Hb2+gY=
-----END CERTIFICATE-----
Generated at Sun May 12 15:20:01 2024 by rpki-client on console-fra.rpki-client.org