Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/Bv3gSC12WwxU8y-w7tXNQnCENYE.roa
File: Bv3gSC12WwxU8y-w7tXNQnCENYE.roa (raw, json)
Hash identifier: eUYfiqlCD6Yt1UhDa1q8htxWoOgG0aToEcxV1Uu2V3g=
Subject key identifier: 06:FD:E0:48:2D:76:5B:0C:54:F3:2F:B0:EE:D5:CD:42:70:84:35:81
Certificate issuer: /CN=03196c89e554dbe4774522759906e2581a174694
Certificate serial: 018CC64B1084342BB0D5CA3CFC0E1DAB6945
Authority key identifier: 03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/Bv3gSC12WwxU8y-w7tXNQnCENYE.roa
Signing time: Mon 01 Jan 2024 18:30:57 +0000
ROA not before: Mon 01 Jan 2024 18:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42893
IP address blocks: 146.66.192.0/20 maxlen: 20
178.252.64.0/18 maxlen: 18
146.66.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 19:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:10:84:34:2b:b0:d5:ca:3c:fc:0e:1d:ab:69:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03196c89e554dbe4774522759906e2581a174694
Validity
Not Before: Jan 1 18:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06fde0482d765b0c54f32fb0eed5cd4270843581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8b:b7:ec:b0:03:88:aa:d1:1c:14:44:2f:9e:
b7:e6:cb:4c:d8:6c:a9:89:9a:a1:29:b3:e9:40:9e:
ce:5e:e8:e4:24:90:f3:96:80:65:b2:2e:87:b8:bd:
05:30:8d:59:2b:14:4a:0b:9f:d7:8e:5d:2d:0d:30:
6d:8d:02:4f:6a:c5:36:73:db:ed:19:99:62:80:88:
c0:bd:0d:91:a8:7b:04:1d:bc:22:41:38:dc:1b:97:
0b:4c:13:03:f7:04:13:29:5b:d5:86:8b:ab:d9:b7:
2d:f4:51:4b:3d:ec:76:0e:82:ca:7e:fb:52:cf:ad:
fe:0b:f4:e8:af:79:67:8a:5d:5f:d6:a4:19:4e:b1:
ae:fb:4a:c8:61:ed:1c:c8:6e:6a:5d:60:5a:1d:02:
63:c7:1c:78:cf:ef:37:98:6b:31:ab:c6:bb:88:88:
74:fb:81:4a:9b:e9:85:f5:23:b7:1e:6b:d0:8d:f0:
1c:07:fe:24:78:6d:f0:18:c3:30:7b:e1:fd:3a:e5:
37:26:45:8f:89:67:26:b3:c5:97:11:af:09:16:84:
7e:af:2f:a9:c4:82:5d:26:2d:5c:92:ef:26:09:44:
e5:1f:d4:1b:1c:2c:e3:7e:91:38:1f:df:2a:79:32:
ac:bd:b5:70:45:14:8e:8a:42:e7:13:60:be:12:81:
54:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:FD:E0:48:2D:76:5B:0C:54:F3:2F:B0:EE:D5:CD:42:70:84:35:81
X509v3 Authority Key Identifier:
keyid:03:19:6C:89:E5:54:DB:E4:77:45:22:75:99:06:E2:58:1A:17:46:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/Bv3gSC12WwxU8y-w7tXNQnCENYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/9ed76b-35a6-4a9d-9fa6-8517a8f355ae/1/AxlsieVU2-R3RSJ1mQbiWBoXRpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.66.160.0-146.66.207.255
178.252.64.0/18
Signature Algorithm: sha256WithRSAEncryption
aa:54:95:8e:51:58:23:f7:f9:30:58:68:8a:0a:00:0f:fe:71:
67:98:94:54:5a:8e:18:f5:8c:45:dc:96:a9:44:2d:61:4f:9e:
4e:a0:b2:72:d4:de:9a:aa:46:63:3e:57:76:3a:2d:5b:ea:1e:
db:d1:91:6a:03:57:70:9d:ba:11:3f:3d:43:1b:0b:db:47:d7:
5b:f7:3f:98:97:79:74:3a:47:64:ab:80:39:7e:05:be:eb:04:
ab:c6:d3:63:ab:18:f9:cd:c7:5c:e8:1d:9b:7e:a6:4a:5c:4e:
35:44:f9:0a:31:53:fe:df:a7:ab:a5:44:46:d5:f9:a3:19:90:
7e:da:9b:0d:ec:6a:b3:ff:0d:a5:70:74:36:9d:55:83:5c:b8:
d1:a2:a1:a6:48:0e:e2:89:31:bf:22:70:85:d7:f0:c8:40:05:
a7:f2:0f:34:0e:1a:1e:43:e9:82:61:e4:eb:2c:ae:0f:04:77:
b2:04:ee:fb:b8:bb:cb:e0:11:01:7d:98:bd:82:fc:fb:c6:84:
a6:43:b1:2a:f2:34:41:b8:27:13:e3:94:64:88:92:3c:76:4c:
89:ed:bb:5a:be:8f:19:bf:38:6b:66:ba:7c:63:85:17:1c:02:
5c:14:9d:b7:2d:c8:41:8f:7c:04:55:7e:59:72:f8:ae:fe:e4:
f8:b3:68:19
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzGSxCENCuw1co8/A4dq2lFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzMTk2Yzg5ZTU1NGRiZTQ3NzQ1MjI3NTk5MDZlMjU4MWEx
NzQ2OTQwHhcNMjQwMTAxMTgzMDU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmZkZTA0ODJkNzY1YjBjNTRmMzJmYjBlZWQ1Y2Q0MjcwODQzNTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4u37LADiKrRHBREL5635stM2Gyp
iZqhKbPpQJ7OXujkJJDzloBlsi6HuL0FMI1ZKxRKC5/Xjl0tDTBtjQJPasU2c9vt
GZligIjAvQ2RqHsEHbwiQTjcG5cLTBMD9wQTKVvVhour2bct9FFLPex2DoLKfvtS
z63+C/Tor3lnil1f1qQZTrGu+0rIYe0cyG5qXWBaHQJjxxx4z+83mGsxq8a7iIh0
+4FKm+mF9SO3HmvQjfAcB/4keG3wGMMwe+H9OuU3JkWPiWcms8WXEa8JFoR+ry+p
xIJdJi1cku8mCUTlH9QbHCzjfpE4H98qeTKsvbVwRRSOikLnE2C+EoFUlQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFAb94EgtdlsMVPMvsO7VzUJwhDWBMB8GA1UdIwQY
MBaAFAMZbInlVNvkd0UidZkG4lgaF0aUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi85ZWQ3NmItMzVhNi00YTlkLTlmYTYt
ODUxN2E4ZjM1NWFlLzEvQnYzZ1NDMTJXd3hVOHktdzd0WE5RbkNFTllFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi85ZWQ3NmItMzVhNi00YTlkLTlmYTYtODUxN2E4ZjM1NWFl
LzEvQXhsc2llVlUyLVIzUlNKMW1RYmlXQm9YUnBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAWSQqAD
BASSQsADBAay/EAwDQYJKoZIhvcNAQELBQADggEBAKpUlY5RWCP3+TBYaIoKAA/+
cWeYlFRajhj1jEXclqlELWFPnk6gsnLU3pqqRmM+V3Y6LVvqHtvRkWoDV3CduhE/
PUMbC9tH11v3P5iXeXQ6R2SrgDl+Bb7rBKvG02OrGPnNx1zoHZt+pkpcTjVE+Qox
U/7fp6ulREbV+aMZkH7amw3sarP/DaVwdDadVYNcuNGioaZIDuKJMb8icIXX8MhA
BafyDzQOGh5D6YJh5Ossrg8Ed7IE7vu4u8vgEQF9mL2C/PvGhKZDsSryNEG4JxPj
lGSIkjx2TIntu1q+jxm/OGtmunxjhRccAlwUnbctyEGPfARVflly+K7+5PizaBk=
-----END CERTIFICATE-----
Generated at Tue Nov 26 02:55:42 2024 by rpki-client on console-fra.rpki-client.org