Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/puorze_biIAKH-8j5hxsNOAlrVk.roa
File: puorze_biIAKH-8j5hxsNOAlrVk.roa (raw, json)
Hash identifier: ghElxTGXlmRG55jJwYs3k/96NzsqwUhC+wE9qH+PhgU=
Subject key identifier: A6:EA:2B:CD:EF:DB:88:80:0A:1F:EF:23:E6:1C:6C:34:E0:25:AD:59
Certificate issuer: /CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Certificate serial: 0191A338EE2D89F540D94822C92579FABD00
Authority key identifier: 3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/puorze_biIAKH-8j5hxsNOAlrVk.roa
Signing time: Fri 30 Aug 2024 12:18:22 +0000
ROA not before: Fri 30 Aug 2024 12:18:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 77.90.178.0/24 maxlen: 24
213.209.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a3:38:ee:2d:89:f5:40:d9:48:22:c9:25:79:fa:bd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b476e12e8987e5b302cdc24bdd9db3fe83c8449
Validity
Not Before: Aug 30 12:18:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6ea2bcdefdb88800a1fef23e61c6c34e025ad59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:5f:7b:94:2f:d0:2d:84:ef:ef:37:bc:29:
69:02:86:88:44:cc:4d:3b:eb:af:47:ea:6f:4a:1c:
d8:88:1d:72:40:58:cb:d4:b1:c1:38:15:a1:c1:69:
40:7d:d2:a3:19:c0:54:66:db:7e:51:e8:5f:81:27:
20:72:35:59:b4:9f:3c:a4:2e:19:db:71:8e:54:38:
ad:6d:e9:42:8c:65:68:a6:21:80:d8:2f:ae:b4:8c:
c2:1a:28:16:c9:c5:c5:df:e9:dd:0b:c2:4b:68:54:
ee:59:34:56:e4:74:31:ad:2c:4c:e9:c4:de:af:7e:
2a:2c:cc:b5:34:60:f2:d9:a5:90:91:56:9d:6c:53:
a2:da:9f:66:03:2c:5c:b6:14:96:50:4f:02:14:b0:
67:40:c8:c0:df:2d:fa:51:99:90:81:ce:fa:ef:07:
f4:d3:69:81:7d:b2:47:a3:70:96:a4:d3:01:c1:65:
80:0b:70:f8:fd:54:7b:14:85:52:43:0c:44:1b:37:
2b:1a:61:6b:80:bb:b3:cc:27:28:71:8c:27:43:3a:
3e:f7:fa:43:99:1b:29:71:f8:8d:ab:ec:59:f0:33:
ad:eb:f3:7e:83:39:9c:80:51:6b:7f:4d:bb:07:37:
13:32:3f:61:8b:0e:47:62:8e:39:50:b9:78:c4:cf:
3d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:EA:2B:CD:EF:DB:88:80:0A:1F:EF:23:E6:1C:6C:34:E0:25:AD:59
X509v3 Authority Key Identifier:
keyid:3B:47:6E:12:E8:98:7E:5B:30:2C:DC:24:BD:D9:DB:3F:E8:3C:84:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0duEuiYflswLNwkvdnbP-g8hEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/puorze_biIAKH-8j5hxsNOAlrVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d90c6f-6576-46b9-8313-6cbff3c4da01/1/O0duEuiYflswLNwkvdnbP-g8hEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.90.178.0/24
213.209.130.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:64:62:57:3e:e5:00:4a:81:f3:1a:27:34:fa:97:df:74:5a:
71:bc:fe:a9:e7:86:35:21:28:b6:b5:bd:52:ef:af:d3:d1:b6:
b5:69:3f:b4:cd:23:05:a0:34:5b:fc:22:4b:04:97:91:54:47:
0a:52:a9:b1:34:51:6f:31:a6:e4:58:aa:a9:2b:40:02:6e:f4:
50:a9:a1:d7:bf:8e:de:4d:98:76:b6:c2:2e:11:ce:04:d6:fa:
58:0b:0a:43:03:4c:de:3a:f9:4f:ff:ae:39:c9:81:13:ff:85:
04:ee:be:f9:d4:10:4d:fb:74:0d:8d:10:4c:27:21:40:6f:ce:
86:db:89:cf:1c:03:ca:8d:64:90:f1:c0:61:a5:84:9b:b9:2f:
e5:21:52:83:8e:cb:ec:62:9d:5f:6e:6d:1f:83:8d:e0:a4:07:
68:e1:e5:84:35:8d:f0:c9:18:7f:90:2b:1f:18:8e:61:88:e3:
6b:7a:d4:0d:14:6f:d2:01:8d:00:94:63:e6:ce:93:ac:65:fc:
e6:de:19:13:20:b6:c6:f2:7b:ca:c5:5b:8d:8e:37:70:b2:b6:
7d:75:b3:0f:40:ef:5f:c9:7b:32:3e:7d:53:54:a2:a3:d1:ea:
e8:ea:26:dd:85:52:3c:0e:9f:10:52:82:bc:b4:4f:1b:55:01:
cd:9e:4e:81
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGjOO4tifVA2UgiySV5+r0AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNDc2ZTEyZTg5ODdlNWIzMDJjZGMyNGJkZDlkYjNmZTgz
Yzg0NDkwHhcNMjQwODMwMTIxODIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmVhMmJjZGVmZGI4ODgwMGExZmVmMjNlNjFjNmMzNGUwMjVhZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiBfe5Qv0C2E7+83vClpAoaIRMxN
O+uvR+pvShzYiB1yQFjL1LHBOBWhwWlAfdKjGcBUZtt+UehfgScgcjVZtJ88pC4Z
23GOVDitbelCjGVopiGA2C+utIzCGigWycXF3+ndC8JLaFTuWTRW5HQxrSxM6cTe
r34qLMy1NGDy2aWQkVadbFOi2p9mAyxcthSWUE8CFLBnQMjA3y36UZmQgc767wf0
02mBfbJHo3CWpNMBwWWAC3D4/VR7FIVSQwxEGzcrGmFrgLuzzCcocYwnQzo+9/pD
mRspcfiNq+xZ8DOt6/N+gzmcgFFrf027BzcTMj9hiw5HYo45ULl4xM89awIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKbqK83v24iACh/vI+YcbDTgJa1ZMB8GA1UdIwQY
MBaAFDtHbhLomH5bMCzcJL3Z2z/oPIRJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMt
NmNiZmYzYzRkYTAxLzEvcHVvcnplX2JpSUFLSC04ajVoeHNOT0FsclZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kOTBjNmYtNjU3Ni00NmI5LTgzMTMtNmNiZmYzYzRkYTAx
LzEvTzBkdUV1aVlmbHN3TE53a3ZkbmJQLWc4aEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATVqyAwQA
1dGCMA0GCSqGSIb3DQEBCwUAA4IBAQAMZGJXPuUASoHzGic0+pffdFpxvP6p54Y1
ISi2tb1S76/T0ba1aT+0zSMFoDRb/CJLBJeRVEcKUqmxNFFvMabkWKqpK0ACbvRQ
qaHXv47eTZh2tsIuEc4E1vpYCwpDA0zeOvlP/645yYET/4UE7r751BBN+3QNjRBM
JyFAb86G24nPHAPKjWSQ8cBhpYSbuS/lIVKDjsvsYp1fbm0fg43gpAdo4eWENY3w
yRh/kCsfGI5hiONretQNFG/SAY0AlGPmzpOsZfzm3hkTILbG8nvKxVuNjjdwsrZ9
dbMPQO9fyXsyPn1TVKKj0ero6ibdhVI8Dp8QUoK8tE8bVQHNnk6B
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:39:54 2024 by rpki-client on console-fra.rpki-client.org