Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/SP7xjcYSa-Q4rzHS6hiqOm4uIOk.roa
File: SP7xjcYSa-Q4rzHS6hiqOm4uIOk.roa (raw, json)
Hash identifier: kR2gfcFA0w4nTqF5cl3cmJBKafVboC9WScvr3QL7KMk=
Subject key identifier: 48:FE:F1:8D:C6:12:6B:E4:38:AF:31:D2:EA:18:AA:3A:6E:2E:20:E9
Certificate issuer: /CN=60fcd55b9130858d8ea583c0987dad00f614db39
Certificate serial: 01903142B97C65360258900FDDEFDC6FE4D6
Authority key identifier: 60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/SP7xjcYSa-Q4rzHS6hiqOm4uIOk.roa
Signing time: Wed 19 Jun 2024 16:09:34 +0000
ROA not before: Wed 19 Jun 2024 16:09:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 399989
IP address blocks: 185.5.147.0/24 maxlen: 24
195.64.120.0/24 maxlen: 24
195.64.121.0/24 maxlen: 24
195.64.122.0/24 maxlen: 24
195.64.123.0/24 maxlen: 24
195.64.124.0/24 maxlen: 24
195.64.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:31:42:b9:7c:65:36:02:58:90:0f:dd:ef:dc:6f:e4:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60fcd55b9130858d8ea583c0987dad00f614db39
Validity
Not Before: Jun 19 16:09:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48fef18dc6126be438af31d2ea18aa3a6e2e20e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:87:4e:a0:ec:59:88:13:f7:eb:f2:8f:50:
30:f2:fd:e4:de:9b:e4:ab:68:bc:f3:d9:d7:8c:ab:
0e:f3:68:4a:10:d5:05:f8:35:4c:f7:d0:f0:18:52:
11:69:4b:27:f5:25:fa:d3:0e:83:48:8c:72:1b:c8:
67:34:0a:9c:09:bc:dd:2f:68:87:57:de:0b:08:7b:
fb:1a:3d:d0:64:3a:f4:f2:1b:3d:44:ec:8e:fc:1b:
d6:a0:5d:83:06:59:ae:1a:1b:54:d5:c9:97:ba:16:
4b:8f:80:72:fe:e1:9a:d4:d3:bc:aa:96:3b:64:44:
c9:16:0a:00:4a:0e:01:f2:29:c2:9a:4a:3a:b9:22:
86:f1:35:00:49:dd:aa:11:1e:f7:eb:d4:c2:2c:fd:
a2:d1:c0:85:e9:78:6a:8e:42:6c:68:23:5d:08:0c:
97:b0:82:82:d2:c2:ec:aa:1f:5b:0d:0f:25:d9:eb:
b4:f6:85:d9:18:a4:4c:de:3d:b9:e2:fb:b9:cf:96:
05:fd:25:44:d8:2b:43:db:bf:05:5f:c2:b1:b2:41:
7a:eb:54:f1:bf:6e:78:70:4f:89:67:4b:6b:d9:ca:
f5:3e:73:22:f3:ef:66:00:0e:e6:06:de:1c:ef:fe:
e3:b9:14:c8:fc:c2:f8:04:f8:43:e6:c3:a0:b7:4f:
6f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FE:F1:8D:C6:12:6B:E4:38:AF:31:D2:EA:18:AA:3A:6E:2E:20:E9
X509v3 Authority Key Identifier:
keyid:60:FC:D5:5B:91:30:85:8D:8E:A5:83:C0:98:7D:AD:00:F6:14:DB:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPzVW5EwhY2OpYPAmH2tAPYU2zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/SP7xjcYSa-Q4rzHS6hiqOm4uIOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/82233d-ec07-42fb-8799-ed30b9bb12d5/1/YPzVW5EwhY2OpYPAmH2tAPYU2zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.147.0/24
195.64.120.0-195.64.125.255
Signature Algorithm: sha256WithRSAEncryption
52:c6:fd:65:f9:a5:a6:12:97:38:a1:e1:5c:49:a9:5f:1b:b8:
65:85:2f:8e:26:d0:30:a4:98:e7:d7:ab:6a:90:8c:99:47:97:
cd:14:45:f0:93:c9:1c:a5:97:dc:8f:cb:44:3a:a6:e7:e7:2d:
57:b5:07:6c:20:a4:d4:c1:26:f9:cd:e3:b0:cb:85:7e:b4:5b:
d8:fe:99:df:a7:36:14:9e:13:26:d8:34:00:00:b0:f7:9c:06:
84:a9:b0:98:c0:d2:43:65:32:90:7c:92:f6:41:04:c7:25:17:
28:03:83:ee:f4:10:fe:31:94:9a:75:4e:61:4b:6b:76:ee:7f:
c8:8d:45:85:5a:ba:d0:60:0a:0d:e6:cf:aa:d4:b8:89:75:75:
da:26:97:bd:a4:b2:ed:1a:60:7a:7b:b5:7a:8e:76:3b:d1:ec:
1f:b0:6d:93:13:ce:6b:8b:ac:3a:3e:de:12:1d:4e:24:f2:ee:
33:4d:ce:0d:44:e6:c1:8a:fd:8f:07:26:93:46:22:27:67:90:
ae:d5:48:d1:53:8a:94:21:11:8b:96:4f:6c:33:c2:65:a1:df:
74:73:34:96:ab:4a:91:91:76:c4:bd:84:7c:f7:e8:ba:b5:09:
27:cc:c6:39:d7:62:58:36:65:1a:ca:e0:0c:6e:40:ce:73:5c:
ec:53:7d:2d
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZAxQrl8ZTYCWJAP3e/cb+TWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZmNkNTViOTEzMDg1OGQ4ZWE1ODNjMDk4N2RhZDAwZjYx
NGRiMzkwHhcNMjQwNjE5MTYwOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGZlZjE4ZGM2MTI2YmU0MzhhZjMxZDJlYTE4YWEzYTZlMmUyMGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY2HTqDsWYgT9+vyj1Aw8v3k3pvk
q2i889nXjKsO82hKENUF+DVM99DwGFIRaUsn9SX60w6DSIxyG8hnNAqcCbzdL2iH
V94LCHv7Gj3QZDr08hs9ROyO/BvWoF2DBlmuGhtU1cmXuhZLj4By/uGa1NO8qpY7
ZETJFgoASg4B8inCmko6uSKG8TUASd2qER7369TCLP2i0cCF6XhqjkJsaCNdCAyX
sIKC0sLsqh9bDQ8l2eu09oXZGKRM3j254vu5z5YF/SVE2CtD278FX8KxskF661Tx
v254cE+JZ0tr2cr1PnMi8+9mAA7mBt4c7/7juRTI/ML4BPhD5sOgt09v/wIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFEj+8Y3GEmvkOK8x0uoYqjpuLiDpMB8GA1UdIwQY
MBaAFGD81VuRMIWNjqWDwJh9rQD2FNs5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTkt
ZWQzMGI5YmIxMmQ1LzEvU1A3eGpjWVNhLVE0cnpIUzZoaXFPbTR1SU9rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84MjIzM2QtZWMwNy00MmZiLTg3OTktZWQzMGI5YmIxMmQ1
LzEvWVB6Vlc1RXdoWTJPcFlQQW1IMnRBUFlVMnprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAuQWTMAwD
BAPDQHgDBAHDQHwwDQYJKoZIhvcNAQELBQADggEBAFLG/WX5paYSlzih4VxJqV8b
uGWFL44m0DCkmOfXq2qQjJlHl80URfCTyRyll9yPy0Q6pufnLVe1B2wgpNTBJvnN
47DLhX60W9j+md+nNhSeEybYNAAAsPecBoSpsJjA0kNlMpB8kvZBBMclFygDg+70
EP4xlJp1TmFLa3buf8iNRYVautBgCg3mz6rUuIl1ddoml72ksu0aYHp7tXqOdjvR
7B+wbZMTzmuLrDo+3hIdTiTy7jNNzg1E5sGK/Y8HJpNGIidnkK7VSNFTipQhEYuW
T2wzwmWh33RzNJarSpGRdsS9hHz36Lq1CSfMxjnXYlg2ZRrK4AxuQM5zXOxTfS0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:24 2024 by rpki-client on console-ams.rpki-client.org