Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/brjfRNcG3nYZhYtzIe4-JE203u4.roa
File: brjfRNcG3nYZhYtzIe4-JE203u4.roa (raw, json)
Hash identifier: qgFBaSB74sLdj1np3/G1JATAHk7sY9Rn2tUBW966v7M=
Subject key identifier: 6E:B8:DF:44:D7:06:DE:76:19:85:8B:73:21:EE:3E:24:4D:B4:DE:EE
Certificate issuer: /CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Certificate serial: 018CC5DC4FF7E191745E239129F4CF4AAD51
Authority key identifier: 45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/brjfRNcG3nYZhYtzIe4-JE203u4.roa
Signing time: Mon 01 Jan 2024 16:29:59 +0000
ROA not before: Mon 01 Jan 2024 16:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16177
IP address blocks: 193.41.176.0/22 maxlen: 24
194.9.220.0/23 maxlen: 24
82.195.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4f:f7:e1:91:74:5e:23:91:29:f4:cf:4a:ad:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45fd3374c7ac3c03778707f367f9148f1fe0390d
Validity
Not Before: Jan 1 16:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6eb8df44d706de7619858b7321ee3e244db4deee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0c:52:7d:be:06:fb:2a:44:93:5b:54:c2:83:
59:6e:65:b6:0f:8d:88:b5:5f:dd:12:1c:8d:d1:75:
06:db:b9:91:78:a2:d7:f9:84:eb:bb:44:60:b7:44:
ae:34:45:3c:62:b8:c1:9d:cd:93:31:80:2f:84:47:
a6:fc:a0:fc:ad:08:4e:52:56:c4:7d:37:69:36:cf:
7f:bd:fe:88:c7:69:64:62:bf:07:00:f7:4e:0b:d8:
47:80:d3:b0:31:a9:dd:a6:7c:08:aa:d6:99:08:c5:
8e:25:5c:de:ff:57:89:de:4a:a2:39:f2:75:e8:30:
3e:99:1c:73:3a:60:80:41:da:fa:a6:57:47:50:64:
ad:d5:61:a2:54:d7:0c:9c:a8:1d:a2:b8:8a:63:e9:
4d:e5:b1:8a:25:f2:93:bf:2e:75:b2:11:2f:95:2c:
a2:8c:bf:9f:02:da:43:52:f0:f7:e7:88:24:dd:60:
eb:44:a1:c8:0e:d2:67:3e:19:56:e7:50:2f:6f:9f:
53:f4:fc:d8:7e:e2:57:40:8c:e1:93:28:25:db:71:
00:e6:f7:ec:0f:02:77:a4:75:63:c4:91:c9:9d:07:
c6:3b:8b:03:72:0e:f4:28:c0:c0:85:8b:fc:76:d4:
2c:e8:03:57:1c:b8:17:b9:5b:f2:c3:d3:9c:56:f0:
98:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:B8:DF:44:D7:06:DE:76:19:85:8B:73:21:EE:3E:24:4D:B4:DE:EE
X509v3 Authority Key Identifier:
keyid:45:FD:33:74:C7:AC:3C:03:77:87:07:F3:67:F9:14:8F:1F:E0:39:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/brjfRNcG3nYZhYtzIe4-JE203u4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8809bb-2468-41e6-8a42-de25cdc8f211/1/Rf0zdMesPAN3hwfzZ_kUjx_gOQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.195.32.0/19
193.41.176.0/22
194.9.220.0/23
Signature Algorithm: sha256WithRSAEncryption
2b:c9:ea:aa:07:e1:80:c7:02:6a:cd:13:26:b6:ed:2c:49:b2:
1c:4b:56:38:cb:a3:bd:57:f1:dc:24:9a:d6:d7:fa:d5:be:f8:
79:36:58:6e:34:f1:48:4d:de:5f:54:65:5d:8f:a3:22:77:af:
17:24:f1:3b:68:6f:89:64:12:50:58:bd:51:0e:0b:aa:ba:45:
45:76:6f:e6:7c:a3:87:00:cc:0f:ff:8f:bf:f4:6b:57:09:36:
b3:26:f5:f8:24:aa:84:9e:9e:14:71:32:26:a2:23:cd:22:36:
1f:5f:c8:a4:70:dd:e9:a8:97:c8:ba:ff:55:92:c7:72:c0:30:
4f:9a:13:31:87:91:6b:a1:b8:aa:9a:77:86:05:81:ec:b0:b8:
a0:35:6b:29:4a:62:1c:38:1d:da:39:8a:80:e7:0f:18:38:db:
2c:5f:e7:57:f4:2d:e2:cb:73:2a:e3:45:89:4a:76:ae:dc:af:
e0:bd:56:9d:1f:46:98:5a:30:02:ca:ec:08:ac:7c:29:73:55:
1d:8f:95:fe:db:b4:4b:a0:bc:28:29:85:77:f4:5c:0c:0e:c3:
17:10:b6:f0:0e:1b:e0:2a:b4:5b:4c:f2:bd:46:65:43:5b:1a:
e1:58:e9:17:dc:79:33:17:be:e0:f7:ef:32:0b:e6:e9:3a:ba:
7f:d8:95:63
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYzF3E/34ZF0XiORKfTPSq1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZmQzMzc0YzdhYzNjMDM3Nzg3MDdmMzY3ZjkxNDhmMWZl
MDM5MGQwHhcNMjQwMTAxMTYyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZWI4ZGY0NGQ3MDZkZTc2MTk4NThiNzMyMWVlM2UyNDRkYjRkZWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgxSfb4G+ypEk1tUwoNZbmW2D42I
tV/dEhyN0XUG27mReKLX+YTru0Rgt0SuNEU8YrjBnc2TMYAvhEem/KD8rQhOUlbE
fTdpNs9/vf6Ix2lkYr8HAPdOC9hHgNOwMandpnwIqtaZCMWOJVze/1eJ3kqiOfJ1
6DA+mRxzOmCAQdr6pldHUGSt1WGiVNcMnKgdoriKY+lN5bGKJfKTvy51shEvlSyi
jL+fAtpDUvD354gk3WDrRKHIDtJnPhlW51Avb59T9PzYfuJXQIzhkygl23EA5vfs
DwJ3pHVjxJHJnQfGO4sDcg70KMDAhYv8dtQs6ANXHLgXuVvyw9OcVvCYKQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFG6430TXBt52GYWLcyHuPiRNtN7uMB8GA1UdIwQY
MBaAFEX9M3THrDwDd4cH82f5FI8f4DkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmYwemRNZXNQQU4zaHdmelpfa1VqeF9nT1EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84ODA5YmItMjQ2OC00MWU2LThhNDIt
ZGUyNWNkYzhmMjExLzEvYnJqZlJOY0czbllaaFl0ekllNC1KRTIwM3U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84ODA5YmItMjQ2OC00MWU2LThhNDItZGUyNWNkYzhmMjEx
LzEvUmYwemRNZXNQQU4zaHdmelpfa1VqeF9nT1EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQFUsMgAwQC
wSmwAwQBwgncMA0GCSqGSIb3DQEBCwUAA4IBAQAryeqqB+GAxwJqzRMmtu0sSbIc
S1Y4y6O9V/HcJJrW1/rVvvh5NlhuNPFITd5fVGVdj6Mid68XJPE7aG+JZBJQWL1R
DguqukVFdm/mfKOHAMwP/4+/9GtXCTazJvX4JKqEnp4UcTImoiPNIjYfX8ikcN3p
qJfIuv9VksdywDBPmhMxh5FrobiqmneGBYHssLigNWspSmIcOB3aOYqA5w8YONss
X+dX9C3iy3Mq40WJSnau3K/gvVadH0aYWjACyuwIrHwpc1Udj5X+27RLoLwoKYV3
9FwMDsMXELbwDhvgKrRbTPK9RmVDWxrhWOkX3HkzF77g9+8yC+bpOrp/2JVj
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:43:22 2024 by rpki-client on console-fra.rpki-client.org