Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/12E7PqydxFh9KwT4tgZnXMta3mE.roa
File: 12E7PqydxFh9KwT4tgZnXMta3mE.roa (raw, json)
Hash identifier: dm/j8aiZlQJBJXSACwN/Sm0Ao6QEA4ezS/5CGp1HZ3Q=
Subject key identifier: D7:61:3B:3E:AC:9D:C4:58:7D:2B:04:F8:B6:06:67:5C:CB:5A:DE:61
Certificate issuer: /CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Certificate serial: 01920081F13E090FA2AFD84E4391DB532299
Authority key identifier: B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/12E7PqydxFh9KwT4tgZnXMta3mE.roa
Signing time: Tue 17 Sep 2024 15:02:48 +0000
ROA not before: Tue 17 Sep 2024 15:02:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43139
IP address blocks: 91.196.148.0/22 maxlen: 22
94.158.80.0/20 maxlen: 20
109.207.192.0/20 maxlen: 20
178.158.192.0/18 maxlen: 24
185.199.96.0/22 maxlen: 22
195.128.24.0/23 maxlen: 23
195.128.26.0/23 maxlen: 23
195.128.27.0/24 maxlen: 24
2001:67c:738::/48 maxlen: 48
2a0a:9b40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:81:f1:3e:09:0f:a2:af:d8:4e:43:91:db:53:22:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b393df877bf2f0cf01a9718973eaeee87b0697d9
Validity
Not Before: Sep 17 15:02:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d7613b3eac9dc4587d2b04f8b606675ccb5ade61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:4a:fc:2b:b4:6c:9f:14:64:74:ed:1a:75:8c:
e4:d2:cd:e2:2b:7c:e0:64:bc:3e:9a:90:56:07:19:
ab:a7:3e:7a:95:de:d8:17:a3:9d:4c:d4:9a:06:55:
da:89:89:08:57:b4:56:d0:58:06:88:fd:65:03:b2:
73:df:f3:2e:27:f3:ae:ed:d6:db:0c:41:0d:c5:c3:
1a:f0:44:82:7d:64:f1:7c:1b:52:d3:e7:11:e5:d9:
cc:ce:d5:a8:3a:91:e8:a8:ff:f1:71:a2:1e:07:34:
79:07:ac:fb:35:cc:ea:c3:05:45:f8:6e:e1:12:35:
f8:62:8d:77:dd:76:d1:87:9f:66:93:92:d1:a9:c5:
d4:b1:be:0c:5a:05:86:57:bc:04:35:b5:b5:80:78:
22:74:d4:20:2c:3f:6b:2a:b9:ef:5c:70:8e:f7:4c:
d0:d5:b2:d8:61:9b:17:02:db:2e:54:56:54:d2:dd:
84:bb:ba:92:04:b0:cf:73:6a:4e:e8:5d:16:8f:67:
b9:de:69:5d:8d:5d:cf:fe:94:b7:3b:3c:7f:06:95:
4b:be:f2:45:05:78:82:e2:27:ad:95:18:5e:21:78:
b1:37:33:c5:af:82:ef:7e:ba:0c:21:b2:85:b2:a8:
21:3c:79:c0:90:28:0c:97:08:f5:8a:7b:8d:78:40:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:61:3B:3E:AC:9D:C4:58:7D:2B:04:F8:B6:06:67:5C:CB:5A:DE:61
X509v3 Authority Key Identifier:
keyid:B3:93:DF:87:7B:F2:F0:CF:01:A9:71:89:73:EA:EE:E8:7B:06:97:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/12E7PqydxFh9KwT4tgZnXMta3mE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9375e3-377e-4b70-ba36-396bc720e2b4/1/s5Pfh3vy8M8BqXGJc-ru6HsGl9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.148.0/22
94.158.80.0/20
109.207.192.0/20
178.158.192.0/18
185.199.96.0/22
195.128.24.0/22
IPv6:
2001:67c:738::/48
2a0a:9b40::/29
Signature Algorithm: sha256WithRSAEncryption
b7:39:3c:6e:fb:ed:d0:97:af:ca:c0:7c:9d:ff:32:fa:ce:e0:
ab:f1:69:94:be:7f:5b:fe:f6:8a:42:8b:35:41:64:79:e7:2b:
9d:c4:9d:1c:af:12:27:e2:c4:b1:53:5e:1e:61:35:89:0b:bd:
6e:66:b1:de:4c:7f:03:3b:c5:23:01:59:af:0c:3c:60:82:91:
07:b8:6b:64:86:d8:93:be:f5:f8:72:4c:ea:59:3c:e2:6c:a1:
75:87:33:b0:d1:77:cd:77:ee:29:77:3f:1a:98:25:f6:54:6f:
10:0c:90:d5:35:13:b7:f9:fa:dc:cc:b6:0a:56:27:d2:9d:7d:
3a:01:99:b2:8d:56:8f:31:d3:f1:0b:70:92:7e:14:e3:19:a0:
61:67:f0:7b:98:d9:8c:02:8b:87:11:09:6d:83:03:9a:20:72:
cc:dd:76:84:e9:9f:c3:d3:87:79:fa:bb:b9:8c:71:30:9e:7c:
11:52:28:bd:e9:05:1b:c6:33:38:3b:43:5d:5e:00:b6:af:26:
5f:3d:ba:f7:ef:71:25:8d:e1:0b:92:8e:62:1a:73:6f:1d:36:
2b:b5:2f:c7:95:48:bd:d3:9f:9a:a9:6e:ac:f3:2a:7f:42:d6:
4c:91:17:46:5d:7d:bc:96:83:b1:4a:db:83:ee:91:95:01:5f:
1e:b9:8f:52
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISAZIAgfE+CQ+ir9hOQ5HbUyKZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzOTNkZjg3N2JmMmYwY2YwMWE5NzE4OTczZWFlZWU4N2Iw
Njk3ZDkwHhcNMjQwOTE3MTUwMjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzYxM2IzZWFjOWRjNDU4N2QyYjA0ZjhiNjA2Njc1Y2NiNWFkZTYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Er8K7RsnxRkdO0adYzk0s3iK3zg
ZLw+mpBWBxmrpz56ld7YF6OdTNSaBlXaiYkIV7RW0FgGiP1lA7Jz3/MuJ/Ou7dbb
DEENxcMa8ESCfWTxfBtS0+cR5dnMztWoOpHoqP/xcaIeBzR5B6z7NczqwwVF+G7h
EjX4Yo133XbRh59mk5LRqcXUsb4MWgWGV7wENbW1gHgidNQgLD9rKrnvXHCO90zQ
1bLYYZsXAtsuVFZU0t2Eu7qSBLDPc2pO6F0Wj2e53mldjV3P/pS3Ozx/BpVLvvJF
BXiC4ietlRheIXixNzPFr4LvfroMIbKFsqghPHnAkCgMlwj1inuNeECriwIDAQAB
o4ICPzCCAjswHQYDVR0OBBYEFNdhOz6sncRYfSsE+LYGZ1zLWt5hMB8GA1UdIwQY
MBaAFLOT34d78vDPAalxiXPq7uh7BpfZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYt
Mzk2YmM3MjBlMmI0LzEvMTJFN1BxeWR4Rmg5S3dUNHRnWm5YTXRhM21FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85Mzc1ZTMtMzc3ZS00YjcwLWJhMzYtMzk2YmM3MjBlMmI0
LzEvczVQZmgzdnk4TThCcVhHSmMtcnU2SHNHbDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFUGCCsGAQUFBwEHAQH/BEYwRDAqBAIAATAkAwQCW8SUAwQE
Xp5QAwQEbc/AAwQGsp7AAwQCucdgAwQCw4AYMBYEAgACMBADBwAgAQZ8BzgDBQMq
CptAMA0GCSqGSIb3DQEBCwUAA4IBAQC3OTxu++3Ql6/KwHyd/zL6zuCr8WmUvn9b
/vaKQos1QWR55yudxJ0crxIn4sSxU14eYTWJC71uZrHeTH8DO8UjAVmvDDxggpEH
uGtkhtiTvvX4ckzqWTzibKF1hzOw0XfNd+4pdz8amCX2VG8QDJDVNRO3+frczLYK
VifSnX06AZmyjVaPMdPxC3CSfhTjGaBhZ/B7mNmMAouHEQltgwOaIHLM3XaE6Z/D
04d5+ru5jHEwnnwRUii96QUbxjM4O0NdXgC2ryZfPbr373EljeELko5iGnNvHTYr
tS/HlUi905+aqW6s8yp/QtZMkRdGXX28loOxStuD7pGVAV8euY9S
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:04:44 2024 by rpki-client on console-ams.rpki-client.org