Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/abO0AnlXa0JfatT8MLBDygpfHJY.roa
File: abO0AnlXa0JfatT8MLBDygpfHJY.roa (raw, json)
Hash identifier: e2ovSDXC/WbbCatunUN2NwyvbYsJQ02CWhLNp1IxiWQ=
Subject key identifier: 69:B3:B4:02:79:57:6B:42:5F:6A:D4:FC:30:B0:43:CA:0A:5F:1C:96
Certificate issuer: /CN=327b3420c25013795e822a2ae50d38dc1d382793
Certificate serial: 018D1CAC04762DF24E26FEA12B7CB7739491
Authority key identifier: 32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/abO0AnlXa0JfatT8MLBDygpfHJY.roa
Signing time: Thu 18 Jan 2024 13:04:11 +0000
ROA not before: Thu 18 Jan 2024 13:04:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207582
IP address blocks: 91.205.41.0/24 maxlen: 24
185.248.59.0/24 maxlen: 24
2a07:a700::/29 maxlen: 29
2a07:a700::/32 maxlen: 32
2a07:a701::/32 maxlen: 32
2a07:a702::/32 maxlen: 32
2a07:a703::/32 maxlen: 32
2a07:a704::/32 maxlen: 32
2a07:a705::/32 maxlen: 32
2a07:a706::/32 maxlen: 32
2a07:a707::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1c:ac:04:76:2d:f2:4e:26:fe:a1:2b:7c:b7:73:94:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=327b3420c25013795e822a2ae50d38dc1d382793
Validity
Not Before: Jan 18 13:04:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69b3b40279576b425f6ad4fc30b043ca0a5f1c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e6:83:93:cc:4e:52:62:9a:01:3d:e2:a1:95:
91:9b:a2:71:31:bb:d0:9b:86:05:e9:41:1a:6a:e1:
53:4c:28:30:9f:42:40:a6:97:cb:03:0e:c6:15:41:
b6:b0:54:78:07:a4:ad:6a:b1:0f:4b:ce:d6:5c:d1:
af:a1:da:32:90:97:b6:4a:b9:61:80:67:3e:54:10:
2d:f5:94:3b:9d:a3:b4:7d:2f:4c:a7:c1:f3:90:19:
f0:37:5a:da:9f:80:a6:e6:f7:3f:c8:76:6e:0f:38:
33:0b:c5:77:14:a5:4b:d9:b8:f7:94:1b:ca:84:00:
d2:37:11:70:e5:b9:a5:da:0a:01:75:5f:46:75:b5:
ac:b0:60:36:a1:55:29:8c:d3:42:c6:bb:a0:bd:c8:
10:9a:e6:e8:21:5b:7b:6f:c6:9b:37:26:20:56:11:
b2:9f:ec:81:ce:8c:e6:8b:02:8a:ee:ae:de:90:b0:
ab:ea:a9:24:da:26:9e:64:cc:a4:bd:de:df:f9:b5:
a5:a1:46:99:fb:0f:92:27:30:c8:c3:ea:71:f8:45:
06:54:5d:0c:33:dc:8f:e0:e7:12:ff:e3:d7:5a:ce:
8e:08:32:73:52:0d:4c:77:61:1d:d1:33:39:22:44:
66:31:aa:db:f7:64:66:4b:1a:e0:83:12:5b:f4:12:
9c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B3:B4:02:79:57:6B:42:5F:6A:D4:FC:30:B0:43:CA:0A:5F:1C:96
X509v3 Authority Key Identifier:
keyid:32:7B:34:20:C2:50:13:79:5E:82:2A:2A:E5:0D:38:DC:1D:38:27:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mns0IMJQE3legioq5Q043B04J5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/abO0AnlXa0JfatT8MLBDygpfHJY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3631e0-56d7-4c29-95c4-6682b07fa947/1/Mns0IMJQE3legioq5Q043B04J5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.41.0/24
185.248.59.0/24
IPv6:
2a07:a700::/29
Signature Algorithm: sha256WithRSAEncryption
63:f7:f6:20:fc:8f:10:43:1b:0c:07:9a:3f:5b:36:e2:b0:3e:
5b:1c:dc:3a:fe:ca:04:c1:5d:ba:b4:bf:d1:63:84:b8:8f:d4:
81:94:ce:92:aa:82:8f:d7:55:5a:c4:33:02:6b:95:3a:57:40:
7e:b3:61:50:36:cd:3a:10:d9:5e:87:eb:c0:34:48:72:0a:3d:
7b:a9:74:29:74:9f:61:ec:63:01:f3:a4:58:66:85:5a:93:03:
9d:0f:47:84:cf:d3:b2:52:49:d6:f6:a3:ca:79:c4:17:f7:d3:
c3:df:57:0a:e0:bc:3d:20:6a:59:73:ea:24:08:1e:af:12:5f:
2e:95:7d:25:08:e6:d6:10:bf:48:a1:71:63:01:56:df:49:7c:
27:16:b7:72:93:ed:74:d4:f8:b3:a0:63:44:71:6a:75:b4:39:
15:c1:d7:40:d6:ad:6b:5c:f6:75:df:13:32:53:7d:90:8c:f3:
14:3a:39:a7:e2:63:b2:ca:8b:d8:b7:88:be:d7:bd:32:6a:b3:
6a:5e:7f:1e:0c:98:fd:b3:37:27:03:3d:38:dd:8f:34:d3:81:
2f:ba:6d:4b:49:e9:87:c6:59:6b:14:d9:29:9e:4d:32:60:c0:
1f:88:8e:86:fa:4c:49:66:a1:2e:e3:77:13:35:e1:0c:d4:48:
ad:db:ea:92
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAY0crAR2LfJOJv6hK3y3c5SRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyN2IzNDIwYzI1MDEzNzk1ZTgyMmEyYWU1MGQzOGRjMWQz
ODI3OTMwHhcNMjQwMTE4MTMwNDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWIzYjQwMjc5NTc2YjQyNWY2YWQ0ZmMzMGIwNDNjYTBhNWYxYzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOaDk8xOUmKaAT3ioZWRm6JxMbvQ
m4YF6UEaauFTTCgwn0JAppfLAw7GFUG2sFR4B6StarEPS87WXNGvodoykJe2Srlh
gGc+VBAt9ZQ7naO0fS9Mp8HzkBnwN1ran4Cm5vc/yHZuDzgzC8V3FKVL2bj3lBvK
hADSNxFw5bml2goBdV9GdbWssGA2oVUpjNNCxrugvcgQmuboIVt7b8abNyYgVhGy
n+yBzozmiwKK7q7ekLCr6qkk2iaeZMykvd7f+bWloUaZ+w+SJzDIw+px+EUGVF0M
M9yP4OcS/+PXWs6OCDJzUg1Md2Ed0TM5IkRmMarb92RmSxrggxJb9BKckwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFGmztAJ5V2tCX2rU/DCwQ8oKXxyWMB8GA1UdIwQY
MBaAFDJ7NCDCUBN5XoIqKuUNONwdOCeTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQt
NjY4MmIwN2ZhOTQ3LzEvYWJPMEFubFhhMEpmYXRUOE1MQkR5Z3BmSEpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My8zNjMxZTAtNTZkNy00YzI5LTk1YzQtNjY4MmIwN2ZhOTQ3
LzEvTW5zMElNSlFFM2xlZ2lvcTVRMDQzQjA0SjVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW80pAwQA
ufg7MA0EAgACMAcDBQMqB6cAMA0GCSqGSIb3DQEBCwUAA4IBAQBj9/Yg/I8QQxsM
B5o/WzbisD5bHNw6/soEwV26tL/RY4S4j9SBlM6SqoKP11VaxDMCa5U6V0B+s2FQ
Ns06ENleh+vANEhyCj17qXQpdJ9h7GMB86RYZoVakwOdD0eEz9OyUknW9qPKecQX
99PD31cK4Lw9IGpZc+okCB6vEl8ulX0lCObWEL9IoXFjAVbfSXwnFrdyk+101Piz
oGNEcWp1tDkVwddA1q1rXPZ13xMyU32QjPMUOjmn4mOyyovYt4i+170yarNqXn8e
DJj9szcnAz043Y8004Evum1LSemHxllrFNkpnk0yYMAfiI6G+kxJZqEu43cTNeEM
1Eit2+qS
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:20:16 2024 by rpki-client on console-ams.rpki-client.org