Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/09Osv_J2vaLLmCXBdWQs6qaSB8s.roa
File: 09Osv_J2vaLLmCXBdWQs6qaSB8s.roa (raw, json)
Hash identifier: c/OqAF5iTDv4JkIRSsP3rqgd/Z6Txy2Tw53XGCqRVFs=
Subject key identifier: D3:D3:AC:BF:F2:76:BD:A2:CB:98:25:C1:75:64:2C:EA:A6:92:07:CB
Certificate issuer: /CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Certificate serial: 018EA75675BD9D32E9B9829962D5FF133728
Authority key identifier: 2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/09Osv_J2vaLLmCXBdWQs6qaSB8s.roa
Signing time: Thu 04 Apr 2024 04:20:45 +0000
ROA not before: Thu 04 Apr 2024 04:20:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9123
IP address blocks: 89.19.208.0/24 maxlen: 24
89.19.209.0/24 maxlen: 24
89.19.210.0/24 maxlen: 24
89.19.211.0/24 maxlen: 24
89.19.212.0/24 maxlen: 24
89.19.213.0/24 maxlen: 24
89.19.214.0/24 maxlen: 24
89.19.215.0/24 maxlen: 24
89.19.216.0/24 maxlen: 24
89.19.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 13:21:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a7:56:75:bd:9d:32:e9:b9:82:99:62:d5:ff:13:37:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2eebb691b24f2879253e3a6a45e0b5c52673b09d
Validity
Not Before: Apr 4 04:20:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3d3acbff276bda2cb9825c175642ceaa69207cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e6:49:6e:8f:c9:23:6a:de:a3:e3:b1:32:62:
5b:98:b7:af:08:21:e5:7c:f7:8d:3c:57:7e:29:09:
1a:d6:71:ef:41:c0:82:46:57:d8:a0:c9:a0:a3:43:
46:ce:d8:75:a7:c2:2b:e5:82:af:a0:a4:f7:b9:88:
d3:8d:0d:2f:14:0f:15:0b:42:2c:84:b4:e4:7c:34:
00:7a:e1:72:55:f4:71:09:d4:58:16:af:69:d9:90:
04:35:3b:15:b6:44:e3:b2:61:bc:bf:a8:7c:aa:5f:
32:f7:a1:34:c0:5d:a8:87:ed:c8:2e:84:45:3b:a7:
e9:09:88:ef:36:03:cd:2d:34:65:9d:50:28:f6:2c:
1b:f6:11:1c:d0:20:07:31:cc:46:45:aa:db:a6:ac:
51:24:c3:ee:62:92:c4:03:14:70:65:72:f0:53:70:
76:7d:06:b9:e2:1d:f3:3d:23:b0:13:ad:cf:72:a3:
b0:e2:72:c3:cb:8d:1b:cd:82:e4:57:0c:36:9c:69:
da:0b:08:8c:2e:aa:aa:8a:32:43:7f:ea:7e:26:cc:
0f:1a:e7:75:d2:76:c5:8b:ea:da:f8:16:ff:29:98:
46:35:b8:ca:c5:bd:5d:20:94:92:49:ab:aa:22:34:
91:34:64:0d:38:fa:bf:6c:d0:cf:92:d4:96:51:fd:
9f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:D3:AC:BF:F2:76:BD:A2:CB:98:25:C1:75:64:2C:EA:A6:92:07:CB
X509v3 Authority Key Identifier:
keyid:2E:EB:B6:91:B2:4F:28:79:25:3E:3A:6A:45:E0:B5:C5:26:73:B0:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Luu2kbJPKHklPjpqReC1xSZzsJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/09Osv_J2vaLLmCXBdWQs6qaSB8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/130d95-5641-4ada-80c0-da3e1192cdf6/1/Luu2kbJPKHklPjpqReC1xSZzsJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.19.208.0-89.19.217.255
Signature Algorithm: sha256WithRSAEncryption
a7:8d:9a:29:4f:e8:b3:b5:0f:24:73:ed:1f:6a:3d:76:d5:c2:
5d:86:11:9a:98:e5:5e:dc:3e:cc:9b:e6:92:2c:12:b0:8c:ad:
55:c7:f1:25:73:a7:6b:c9:47:56:1c:25:3c:18:16:f6:56:c1:
85:fc:19:83:ef:ea:db:5f:33:5b:27:d8:9c:48:42:78:27:f8:
9a:5c:c5:d5:c5:2f:fd:67:c9:6f:50:dc:fb:bc:d5:95:98:e7:
75:6f:05:27:c0:34:e6:68:eb:78:f4:d0:b4:15:ff:22:da:e0:
fd:c6:97:0b:63:71:60:9d:d0:02:27:5f:45:a0:0b:2c:2f:cf:
a0:ff:d0:be:cb:1d:35:d1:70:63:c9:27:47:7a:48:db:7c:5a:
7a:9d:ea:e2:ce:4a:25:d3:dd:63:84:af:b4:d8:9e:3d:e2:28:
63:e0:63:01:7c:f2:3d:d0:1e:a3:d8:60:3e:c5:eb:66:49:d5:
3e:5f:97:43:bb:62:19:3c:f7:23:f9:d6:ba:fe:7c:7e:34:34:
03:6b:84:69:a1:fc:10:85:ce:21:8c:ab:66:b7:59:a7:65:99:
21:ec:b1:2c:a3:d7:11:aa:03:fc:b9:33:13:57:2f:b3:db:51:
24:f1:2b:9c:c4:4b:11:50:8f:01:6a:2e:53:ab:c2:eb:55:79:
58:46:78:e9
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY6nVnW9nTLpuYKZYtX/EzcoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZWJiNjkxYjI0ZjI4NzkyNTNlM2E2YTQ1ZTBiNWM1MjY3
M2IwOWQwHhcNMjQwNDA0MDQyMDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2QzYWNiZmYyNzZiZGEyY2I5ODI1YzE3NTY0MmNlYWE2OTIwN2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+ZJbo/JI2reo+OxMmJbmLevCCHl
fPeNPFd+KQka1nHvQcCCRlfYoMmgo0NGzth1p8Ir5YKvoKT3uYjTjQ0vFA8VC0Is
hLTkfDQAeuFyVfRxCdRYFq9p2ZAENTsVtkTjsmG8v6h8ql8y96E0wF2oh+3ILoRF
O6fpCYjvNgPNLTRlnVAo9iwb9hEc0CAHMcxGRarbpqxRJMPuYpLEAxRwZXLwU3B2
fQa54h3zPSOwE63PcqOw4nLDy40bzYLkVww2nGnaCwiMLqqqijJDf+p+JswPGud1
0nbFi+ra+Bb/KZhGNbjKxb1dIJSSSauqIjSRNGQNOPq/bNDPktSWUf2faQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNPTrL/ydr2iy5glwXVkLOqmkgfLMB8GA1UdIwQY
MBaAFC7rtpGyTyh5JT46akXgtcUmc7CdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAt
ZGEzZTExOTJjZGY2LzEvMDlPc3ZfSjJ2YUxMbUNYQmRXUXM2cWFTQjhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8xMzBkOTUtNTY0MS00YWRhLTgwYzAtZGEzZTExOTJjZGY2
LzEvTHV1MmtiSlBLSGtsUGpwcVJlQzF4U1p6c0owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBARZE9AD
BAFZE9gwDQYJKoZIhvcNAQELBQADggEBAKeNmilP6LO1DyRz7R9qPXbVwl2GEZqY
5V7cPsyb5pIsErCMrVXH8SVzp2vJR1YcJTwYFvZWwYX8GYPv6ttfM1sn2JxIQngn
+JpcxdXFL/1nyW9Q3Pu81ZWY53VvBSfANOZo63j00LQV/yLa4P3GlwtjcWCd0AIn
X0WgCywvz6D/0L7LHTXRcGPJJ0d6SNt8Wnqd6uLOSiXT3WOEr7TYnj3iKGPgYwF8
8j3QHqPYYD7F62ZJ1T5fl0O7Yhk89yP51rr+fH40NANrhGmh/BCFziGMq2a3Wadl
mSHssSyj1xGqA/y5MxNXL7PbUSTxK5zESxFQjwFqLlOrwutVeVhGeOk=
-----END CERTIFICATE-----
Generated at Thu May 30 19:08:56 2024 by rpki-client on console-ams.rpki-client.org