Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/11yGxPRxMoe2PZ0u90JslrilobE.roa
File: 11yGxPRxMoe2PZ0u90JslrilobE.roa (raw, json)
Hash identifier: 2lD0h0iLXb+hEtzEunJfsLcoy7BMyb04kVEBE5AIa2I=
Subject key identifier: D7:5C:86:C4:F4:71:32:87:B6:3D:9D:2E:F7:42:6C:96:B8:A5:A1:B1
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 018E22900F47851B4775F63C043369F4132D
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/11yGxPRxMoe2PZ0u90JslrilobE.roa
Signing time: Sat 09 Mar 2024 09:34:10 +0000
ROA not before: Sat 09 Mar 2024 09:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 94.154.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:22:90:0f:47:85:1b:47:75:f6:3c:04:33:69:f4:13:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Mar 9 09:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d75c86c4f4713287b63d9d2ef7426c96b8a5a1b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:e2:2d:17:af:08:a0:d9:03:9b:fd:a8:de:f4:
c4:e6:50:66:1c:b7:97:78:ac:6b:42:1c:98:19:4a:
d4:2f:4a:27:78:0b:47:27:d0:3c:f0:1c:b7:86:1e:
fe:05:fe:48:d1:8f:6a:ce:94:41:3c:f1:14:93:a0:
ec:1b:2b:2c:94:92:90:be:54:8c:2d:20:ca:ad:f8:
07:c2:1e:f1:22:4b:6b:b8:71:1c:b6:f6:13:08:8e:
fb:5f:9f:97:6d:23:39:4c:27:2e:b4:78:9e:a5:ef:
13:c6:20:d0:c4:0b:bc:c0:21:b8:92:d1:58:62:18:
19:d3:87:3c:bf:3f:a6:23:0b:1f:d6:78:b8:fa:70:
3e:d1:07:c4:e6:44:43:89:76:0d:9c:bb:78:f7:f7:
44:4f:2e:96:7e:fd:d8:00:1d:0b:ca:20:ce:8a:fb:
fe:ed:ec:3d:f3:14:db:73:4e:ab:f4:58:6c:4a:e1:
f6:7e:59:4c:cc:84:01:3e:5a:70:21:6e:35:03:ce:
2a:e5:e0:f0:75:7c:c8:a3:a9:bf:25:71:c8:39:7d:
23:61:18:94:1b:94:d4:0a:6b:e8:05:54:78:53:14:
9b:2e:f3:57:c9:b5:de:6e:8e:7b:c0:af:05:b1:ba:
6c:54:ed:46:ed:aa:67:31:7b:87:11:a0:c8:44:ac:
d9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:5C:86:C4:F4:71:32:87:B6:3D:9D:2E:F7:42:6C:96:B8:A5:A1:B1
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/11yGxPRxMoe2PZ0u90JslrilobE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.38.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f6:17:08:c2:cd:3e:0e:c5:4a:bf:a8:f8:14:3f:90:2a:58:
76:07:1b:d3:c2:8b:93:34:e6:4a:9f:fa:78:8f:61:49:07:c8:
9a:68:13:03:02:eb:23:4e:c0:4e:eb:31:8e:63:f0:74:2d:1a:
93:43:e2:5f:45:19:2a:53:4e:e9:95:4f:3c:dc:7e:1a:80:ee:
b3:29:0d:9f:84:86:93:81:c8:80:d4:eb:42:4a:f3:71:43:60:
ad:7a:c7:61:37:0f:4a:79:ff:a9:37:5d:11:0a:47:d3:26:b8:
49:fe:75:46:77:35:db:63:80:7d:fd:ae:0e:d4:0d:33:23:d7:
cc:20:a7:7c:01:4b:9f:d1:64:51:a4:cc:77:8f:ca:50:70:93:
00:a4:95:28:3f:b6:9e:5a:25:83:a6:81:45:92:58:b7:0e:e9:
de:3f:ca:58:29:8f:31:59:15:8e:3d:f5:06:84:e9:93:93:d1:
4e:cb:10:2c:a9:f3:e5:52:4d:32:15:03:11:63:1a:34:36:5e:
bf:22:d8:23:b1:4e:d8:33:34:72:09:47:d3:1a:07:d0:50:12:
75:63:e4:36:b4:b5:a9:c0:61:53:f4:21:f6:41:95:68:46:a8:
19:ab:97:51:8a:52:2a:a2:2c:bd:18:9f:eb:99:59:7f:28:7e:
26:61:7a:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY4ikA9HhRtHdfY8BDNp9BMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjQwMzA5MDkzNDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzVjODZjNGY0NzEzMjg3YjYzZDlkMmVmNzQyNmM5NmI4YTVhMWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+uItF68IoNkDm/2o3vTE5lBmHLeX
eKxrQhyYGUrUL0oneAtHJ9A88By3hh7+Bf5I0Y9qzpRBPPEUk6DsGysslJKQvlSM
LSDKrfgHwh7xIktruHEctvYTCI77X5+XbSM5TCcutHiepe8TxiDQxAu8wCG4ktFY
YhgZ04c8vz+mIwsf1ni4+nA+0QfE5kRDiXYNnLt49/dETy6Wfv3YAB0LyiDOivv+
7ew98xTbc06r9FhsSuH2fllMzIQBPlpwIW41A84q5eDwdXzIo6m/JXHIOX0jYRiU
G5TUCmvoBVR4UxSbLvNXybXebo57wK8FsbpsVO1G7apnMXuHEaDIRKzZvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNdchsT0cTKHtj2dLvdCbJa4paGxMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvMTF5R3hQUnhNb2UyUFowdTkwSnNscmlsb2JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXpomMA0G
CSqGSIb3DQEBCwUAA4IBAQAz9hcIws0+DsVKv6j4FD+QKlh2BxvTwouTNOZKn/p4
j2FJB8iaaBMDAusjTsBO6zGOY/B0LRqTQ+JfRRkqU07plU883H4agO6zKQ2fhIaT
gciA1OtCSvNxQ2CtesdhNw9Kef+pN10RCkfTJrhJ/nVGdzXbY4B9/a4O1A0zI9fM
IKd8AUuf0WRRpMx3j8pQcJMApJUoP7aeWiWDpoFFkli3DuneP8pYKY8xWRWOPfUG
hOmTk9FOyxAsqfPlUk0yFQMRYxo0Nl6/ItgjsU7YMzRyCUfTGgfQUBJ1Y+Q2tLWp
wGFT9CH2QZVoRqgZq5dRilIqoiy9GJ/rmVl/KH4mYXoV
-----END CERTIFICATE-----
Generated at Thu May 2 10:31:26 2024 by rpki-client on console-ams.rpki-client.org