Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/RR3fTWvJHCWBjYcpH52DSJzX79Q.roa
File: RR3fTWvJHCWBjYcpH52DSJzX79Q.roa (raw, json)
Hash identifier: WHjv1Epe5YrBXX3mfjWky8gNBosjZNR+nI/5121gHXc=
Subject key identifier: 45:1D:DF:4D:6B:C9:1C:25:81:8D:87:29:1F:9D:83:48:9C:D7:EF:D4
Certificate issuer: /CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Certificate serial: 0190A944274D0EFE19E338B74860DB60DB92
Authority key identifier: FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/RR3fTWvJHCWBjYcpH52DSJzX79Q.roa
Signing time: Fri 12 Jul 2024 23:25:34 +0000
ROA not before: Fri 12 Jul 2024 23:25:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202319
IP address blocks: 185.166.104.0/24 maxlen: 24
185.166.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Dec 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a9:44:27:4d:0e:fe:19:e3:38:b7:48:60:db:60:db:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9be4ed4e54b601e6b6a42d0ba04cfb7ab2c3bf
Validity
Not Before: Jul 12 23:25:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=451ddf4d6bc91c25818d87291f9d83489cd7efd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:95:ba:e1:3a:b3:84:36:45:63:48:b4:91:bf:
4c:df:7c:e5:44:b4:8e:ba:00:ce:bf:bc:30:64:95:
b6:e5:54:8d:e8:01:80:a3:0b:9f:48:bd:27:80:7d:
8f:40:c9:aa:1b:4c:57:55:cb:85:a8:d3:df:23:ff:
0c:8f:29:4e:01:d8:bb:f1:26:56:f3:a2:dd:dd:5e:
80:1e:78:7a:2a:f2:67:be:9c:af:1d:41:b2:df:b5:
f5:87:4b:6b:c3:9d:f4:0f:19:90:7c:cc:d2:b4:f7:
f9:69:99:85:31:03:a7:c7:bd:fd:77:02:e8:9e:7e:
b3:be:f1:c7:f9:fa:2a:cb:da:9f:19:c3:64:e8:ae:
33:63:1d:1d:d6:53:0e:15:d9:fc:c2:ba:be:b2:8b:
97:8b:6e:25:40:eb:88:68:d8:37:43:e4:b3:3d:63:
eb:6b:6a:d6:07:57:27:28:bd:82:47:99:5e:67:d8:
bb:d7:61:9c:7a:00:01:40:09:7c:e1:cd:96:39:0a:
59:9f:a4:75:da:ae:30:2f:da:e6:a7:42:81:b6:47:
12:35:8e:67:b1:bf:ec:1b:13:6d:ab:4c:20:df:e1:
05:41:64:70:6a:4d:b0:b9:c7:21:1b:8e:97:ad:fa:
7a:9e:54:f3:11:58:b2:9d:37:a3:61:f3:20:50:8f:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1D:DF:4D:6B:C9:1C:25:81:8D:87:29:1F:9D:83:48:9C:D7:EF:D4
X509v3 Authority Key Identifier:
keyid:FC:9B:E4:ED:4E:54:B6:01:E6:B6:A4:2D:0B:A0:4C:FB:7A:B2:C3:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Jvk7U5UtgHmtqQtC6BM-3qyw78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/RR3fTWvJHCWBjYcpH52DSJzX79Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/36362a-d91c-4ad4-92c7-1d2513308d21/1/_Jvk7U5UtgHmtqQtC6BM-3qyw78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.166.104.0/24
185.166.106.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:de:25:37:d1:e0:21:26:06:02:47:0a:3b:77:17:5a:36:80:
97:3f:34:1b:40:a1:98:24:8f:ce:df:2c:d4:e6:60:a4:5f:64:
28:3a:d2:af:00:38:34:45:79:2a:d4:81:3a:d7:d0:33:5c:d4:
1b:a8:5c:fb:68:31:b5:da:ad:53:33:72:51:66:81:2e:c6:5f:
a5:3f:e6:7d:77:2f:36:96:fd:a0:08:15:e5:2d:fd:8c:69:50:
b2:8b:fd:ba:a6:75:86:26:10:75:4c:52:25:72:38:30:cb:67:
12:22:88:ab:b1:9f:aa:9b:27:43:da:39:ff:66:c1:7b:29:f3:
cd:d8:85:7f:f1:ba:0c:82:9f:3a:a6:10:93:c8:a2:d9:e2:91:
d3:92:a5:9f:fe:ee:7c:8c:18:3b:17:62:43:bd:36:91:7c:79:
0f:5d:27:65:dd:65:b4:15:8c:90:6f:27:80:58:2c:1c:2d:0e:
39:c2:39:95:ae:4c:8e:02:96:4c:07:c7:94:5b:9b:e7:a8:41:
17:db:a9:a4:b9:c4:2e:97:47:ec:cb:27:e7:bb:45:7b:74:fb:
7e:07:aa:90:7f:8c:d9:d7:0a:86:0c:24:d3:38:38:f6:7b:33:
a3:bb:ba:9b:1b:a0:6e:49:04:54:3c:68:6a:b7:5f:3a:e7:4f:
16:5c:59:4d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZCpRCdNDv4Z4zi3SGDbYNuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOWJlNGVkNGU1NGI2MDFlNmI2YTQyZDBiYTA0Y2ZiN2Fi
MmMzYmYwHhcNMjQwNzEyMjMyNTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTFkZGY0ZDZiYzkxYzI1ODE4ZDg3MjkxZjlkODM0ODljZDdlZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65W64TqzhDZFY0i0kb9M33zlRLSO
ugDOv7wwZJW25VSN6AGAowufSL0ngH2PQMmqG0xXVcuFqNPfI/8MjylOAdi78SZW
86Ld3V6AHnh6KvJnvpyvHUGy37X1h0trw530DxmQfMzStPf5aZmFMQOnx739dwLo
nn6zvvHH+foqy9qfGcNk6K4zYx0d1lMOFdn8wrq+souXi24lQOuIaNg3Q+SzPWPr
a2rWB1cnKL2CR5leZ9i712GcegABQAl84c2WOQpZn6R12q4wL9rmp0KBtkcSNY5n
sb/sGxNtq0wg3+EFQWRwak2wucchG46Xrfp6nlTzEViynTejYfMgUI9hFwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEUd301ryRwlgY2HKR+dg0ic1+/UMB8GA1UdIwQY
MBaAFPyb5O1OVLYB5rakLQugTPt6ssO/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0p2azdVNVV0Z0htdHFRdEM2Qk0tM3F5dzc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8zNjM2MmEtZDkxYy00YWQ0LTkyYzct
MWQyNTEzMzA4ZDIxLzEvUlIzZlRXdkpIQ1dCalljcEg1MkRTSnpYNzlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8zNjM2MmEtZDkxYy00YWQ0LTkyYzctMWQyNTEzMzA4ZDIx
LzEvX0p2azdVNVV0Z0htdHFRdEM2Qk0tM3F5dzc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuaZoAwQA
uaZqMA0GCSqGSIb3DQEBCwUAA4IBAQBc3iU30eAhJgYCRwo7dxdaNoCXPzQbQKGY
JI/O3yzU5mCkX2QoOtKvADg0RXkq1IE619AzXNQbqFz7aDG12q1TM3JRZoEuxl+l
P+Z9dy82lv2gCBXlLf2MaVCyi/26pnWGJhB1TFIlcjgwy2cSIoirsZ+qmydD2jn/
ZsF7KfPN2IV/8boMgp86phCTyKLZ4pHTkqWf/u58jBg7F2JDvTaRfHkPXSdl3WW0
FYyQbyeAWCwcLQ45wjmVrkyOApZMB8eUW5vnqEEX26mkucQul0fsyyfnu0V7dPt+
B6qQf4zZ1wqGDCTTODj2ezOju7qbG6BuSQRUPGhqt186508WXFlN
-----END CERTIFICATE-----
Generated at Sun Dec 29 10:28:56 2024 by rpki-client on console-fra.rpki-client.org