Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/2TB6y3VyDX1ywqlZ5EebQMngmMY.roa
File: 2TB6y3VyDX1ywqlZ5EebQMngmMY.roa (raw, json)
Hash identifier: SR+4peWrCt3DOy01tvAzeW3/IJrALeasVbevodPFzSI=
Subject key identifier: D9:30:7A:CB:75:72:0D:7D:72:C2:A9:59:E4:47:9B:40:C9:E0:98:C6
Certificate issuer: /CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Certificate serial: 019112691EEBE2849550BD81493CEC5B4E56
Authority key identifier: 6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/2TB6y3VyDX1ywqlZ5EebQMngmMY.roa
Signing time: Fri 02 Aug 2024 09:26:04 +0000
ROA not before: Fri 02 Aug 2024 09:26:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202513
IP address blocks: 43.230.184.0/22 maxlen: 24
185.98.16.0/22 maxlen: 24
185.249.148.0/22 maxlen: 24
2a0c:97c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:39:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:69:1e:eb:e2:84:95:50:bd:81:49:3c:ec:5b:4e:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d85061361b19f212efe90c2d8cf3eee617f20e5
Validity
Not Before: Aug 2 09:26:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9307acb75720d7d72c2a959e4479b40c9e098c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:dc:8b:34:ed:71:f5:de:32:e6:2f:54:13:
4c:64:33:63:b6:45:68:7b:03:c0:8c:1e:0a:d3:de:
f0:0e:11:34:6f:21:61:1c:86:26:92:0e:e6:c9:5c:
c2:26:b4:cd:41:b8:0c:54:67:bc:91:57:28:26:56:
56:10:cf:db:12:0a:0a:be:5a:5e:35:7e:18:f8:b4:
bb:58:18:b7:4f:c9:46:ea:67:9d:00:20:e9:49:cd:
31:72:da:b8:63:dd:0a:e1:5b:91:f8:a5:91:4f:1e:
7c:09:75:90:95:f3:9a:da:be:7d:b5:8f:f9:ad:a8:
7d:53:55:e1:df:8d:6e:a4:57:50:a8:8f:fb:21:bd:
b0:60:fb:d4:53:9b:58:e9:de:22:3b:99:30:27:51:
47:ce:5c:db:a8:3a:09:5c:ae:1d:55:19:77:8c:63:
66:93:65:4e:c1:3c:84:43:82:0b:82:fc:a2:7a:b3:
0c:02:64:8d:35:28:81:10:8a:ce:ef:df:e0:04:66:
fa:29:9a:20:55:3e:51:47:af:2a:cb:f5:91:0d:45:
44:82:fb:e2:a3:53:3c:7c:56:63:86:0e:be:7d:a1:
38:cd:f1:6e:ef:3c:2c:a1:37:84:b0:d6:a2:00:cb:
4e:25:44:2b:cd:93:37:d0:22:03:a9:93:83:f7:3f:
d9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:30:7A:CB:75:72:0D:7D:72:C2:A9:59:E4:47:9B:40:C9:E0:98:C6
X509v3 Authority Key Identifier:
keyid:6D:85:06:13:61:B1:9F:21:2E:FE:90:C2:D8:CF:3E:EE:61:7F:20:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYUGE2GxnyEu_pDC2M8-7mF_IOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/2TB6y3VyDX1ywqlZ5EebQMngmMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/7e7b8b-79e0-4f51-b866-67ad60d386dd/1/bYUGE2GxnyEu_pDC2M8-7mF_IOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.184.0/22
185.98.16.0/22
185.249.148.0/22
IPv6:
2a0c:97c0::/29
Signature Algorithm: sha256WithRSAEncryption
09:5e:54:7f:c1:14:a8:0d:51:74:a6:c6:9b:c3:13:0f:37:50:
04:16:28:31:70:d0:f9:71:f9:63:66:f4:22:65:1a:29:b6:13:
7e:e7:87:7a:f5:7a:bf:a8:6b:3b:9c:10:92:b3:0e:af:6c:79:
ea:3e:f8:af:ae:d5:6a:8f:44:65:69:e2:b1:23:d3:a7:f0:c3:
bc:fb:4b:19:b1:33:a5:4d:cb:b8:2a:a2:43:36:09:7c:3d:95:
6d:a3:69:45:33:ea:b6:5c:ab:98:bc:0e:89:77:e2:bc:1d:56:
e4:c5:2d:5f:e0:ff:f9:15:ac:c4:4a:09:e1:e1:0d:4e:51:b9:
76:b3:d9:64:07:e2:a9:89:23:94:cd:08:76:38:a8:d6:e4:00:
9b:dd:2b:7c:5f:61:53:08:03:5e:9a:da:0a:d9:e1:41:04:f5:
ef:39:49:87:1f:25:c6:1b:0f:c8:e9:51:2c:8b:04:6b:96:5a:
83:89:da:08:a4:38:7f:92:bb:87:d6:4b:66:65:aa:05:2a:02:
62:69:f7:fa:30:13:85:e9:db:2c:af:57:18:38:2c:b9:a7:6e:
13:4c:a5:54:2c:40:4a:ba:41:7f:ce:e8:04:9f:d7:4e:7c:85:
da:e3:03:6a:7e:c3:67:cd:23:b4:b8:69:ed:de:bc:fa:08:eb:
00:5d:bc:18
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZESaR7r4oSVUL2BSTzsW05WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkODUwNjEzNjFiMTlmMjEyZWZlOTBjMmQ4Y2YzZWVlNjE3
ZjIwZTUwHhcNMjQwODAyMDkyNjA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTMwN2FjYjc1NzIwZDdkNzJjMmE5NTllNDQ3OWI0MGM5ZTA5OGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkhXcizTtcfXeMuYvVBNMZDNjtkVo
ewPAjB4K097wDhE0byFhHIYmkg7myVzCJrTNQbgMVGe8kVcoJlZWEM/bEgoKvlpe
NX4Y+LS7WBi3T8lG6medACDpSc0xctq4Y90K4VuR+KWRTx58CXWQlfOa2r59tY/5
rah9U1Xh341upFdQqI/7Ib2wYPvUU5tY6d4iO5kwJ1FHzlzbqDoJXK4dVRl3jGNm
k2VOwTyEQ4ILgvyierMMAmSNNSiBEIrO79/gBGb6KZogVT5RR68qy/WRDUVEgvvi
o1M8fFZjhg6+faE4zfFu7zwsoTeEsNaiAMtOJUQrzZM30CIDqZOD9z/ZlQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFNkwest1cg19csKpWeRHm0DJ4JjGMB8GA1UdIwQY
MBaAFG2FBhNhsZ8hLv6QwtjPPu5hfyDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYt
NjdhZDYwZDM4NmRkLzEvMlRCNnkzVnlEWDF5d3FsWjVFZWJRTW5nbU1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC83ZTdiOGItNzllMC00ZjUxLWI4NjYtNjdhZDYwZDM4NmRk
LzEvYllVR0UyR3hueUV1X3BEQzJNOC03bUZfSU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCK+a4AwQC
uWIQAwQCufmUMA0EAgACMAcDBQMqDJfAMA0GCSqGSIb3DQEBCwUAA4IBAQAJXlR/
wRSoDVF0psabwxMPN1AEFigxcND5cfljZvQiZRopthN+54d69Xq/qGs7nBCSsw6v
bHnqPvivrtVqj0RlaeKxI9On8MO8+0sZsTOlTcu4KqJDNgl8PZVto2lFM+q2XKuY
vA6Jd+K8HVbkxS1f4P/5FazESgnh4Q1OUbl2s9lkB+KpiSOUzQh2OKjW5ACb3St8
X2FTCANemtoK2eFBBPXvOUmHHyXGGw/I6VEsiwRrllqDidoIpDh/kruH1ktmZaoF
KgJiaff6MBOF6dssr1cYOCy5p24TTKVULEBKukF/zugEn9dOfIXa4wNqfsNnzSO0
uGnt3rz6COsAXbwY
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:50:30 2024 by rpki-client on console-fra.rpki-client.org