Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/bRHw_yDzH1RGOePbjgMX5RmhepQ.roa
File: bRHw_yDzH1RGOePbjgMX5RmhepQ.roa (raw, json)
Hash identifier: 7jyKQhThsQjlPtH0NwzWVe/fSWrDnpCyBHNGVjW1UOM=
Subject key identifier: 6D:11:F0:FF:20:F3:1F:54:46:39:E3:DB:8E:03:17:E5:19:A1:7A:94
Certificate issuer: /CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Certificate serial: 01931CC40A6C47FC48CCBDED106F4890BBA0
Authority key identifier: A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/bRHw_yDzH1RGOePbjgMX5RmhepQ.roa
Signing time: Mon 11 Nov 2024 19:47:09 +0000
ROA not before: Mon 11 Nov 2024 19:47:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29255
IP address blocks: 82.147.192.0/19 maxlen: 19
85.194.64.0/18 maxlen: 18
89.237.128.0/18 maxlen: 18
89.237.128.0/19 maxlen: 19
89.237.176.0/20 maxlen: 20
185.27.220.0/22 maxlen: 22
185.29.92.0/22 maxlen: 22
212.24.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1c:c4:0a:6c:47:fc:48:cc:bd:ed:10:6f:48:90:bb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63bcc6d25f7476fbb3ec33f6dbc3e9eead92212
Validity
Not Before: Nov 11 19:47:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d11f0ff20f31f544639e3db8e0317e519a17a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d0:cb:98:e0:7b:71:3a:54:ee:c9:06:58:80:
24:73:74:e9:60:42:66:38:5f:7e:81:a0:2a:9d:5a:
28:ff:2c:3a:72:c8:75:7e:d2:6f:44:9d:a1:9f:b0:
94:81:a0:ff:cd:30:69:73:0c:24:9a:7b:56:c2:09:
83:7a:e0:e4:ff:d8:13:ee:3c:07:c3:ba:af:fa:04:
a8:9a:91:96:38:08:32:0d:85:b0:fe:43:e8:14:d9:
95:4a:cc:5b:2f:12:91:8e:d7:09:76:e1:48:37:b3:
40:4c:d2:6d:86:2a:b2:3b:78:96:a5:41:9d:05:71:
c4:56:ee:3a:9e:b4:02:7b:f4:4d:74:8a:3e:09:78:
4d:6d:c4:5a:3e:5d:b3:53:0d:a8:0d:dc:5f:c2:4c:
30:c2:3a:df:1f:33:4e:d5:7b:ff:e6:fc:e1:02:28:
c9:b1:86:7d:86:80:65:54:61:ce:66:3a:27:88:67:
13:97:af:dc:68:40:85:28:11:3d:e4:8e:1f:ac:4b:
04:e1:ca:7d:8b:f9:00:85:34:f4:83:2c:72:b0:76:
38:d5:ab:9d:d8:80:fb:cd:13:7a:c7:1f:37:cc:95:
2b:5e:30:2b:eb:05:f6:a7:7b:65:86:af:37:5e:ba:
f1:88:ff:ed:90:33:8d:8f:f8:bd:1f:50:15:cd:60:
9e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:11:F0:FF:20:F3:1F:54:46:39:E3:DB:8E:03:17:E5:19:A1:7A:94
X509v3 Authority Key Identifier:
keyid:A6:3B:CC:6D:25:F7:47:6F:BB:3E:C3:3F:6D:BC:3E:9E:EA:D9:22:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjvMbSX3R2-7PsM_bbw-nurZIhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/bRHw_yDzH1RGOePbjgMX5RmhepQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/768fdb-d1b5-4bef-bcbd-4924fa000b7c/1/pjvMbSX3R2-7PsM_bbw-nurZIhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.147.192.0/19
85.194.64.0/18
89.237.128.0/18
185.27.220.0/22
185.29.92.0/22
212.24.224.0/19
Signature Algorithm: sha256WithRSAEncryption
79:ef:0b:bc:b0:ac:57:ea:35:5e:ef:47:29:5f:3e:44:ab:aa:
8c:f0:f1:63:dc:d5:e7:c1:7b:b3:46:7f:8f:be:50:b9:3b:b4:
44:81:e8:d9:a1:5d:fa:9a:86:2a:88:d4:8b:d0:99:59:1f:ee:
28:9b:15:a6:fb:7b:59:33:b5:f6:65:5b:06:d5:33:6b:d3:5b:
6c:85:eb:4f:cf:7d:51:09:dd:20:d6:72:0d:e3:4a:16:e0:50:
b0:1a:6e:d9:f5:7d:6c:44:5f:5c:ba:cf:89:37:1d:1c:cb:4e:
3e:36:1d:b6:e7:cc:37:b0:4b:0e:b3:7e:12:b4:9c:79:90:ef:
fc:d9:f6:80:ed:d4:75:83:92:81:49:c0:9e:e3:33:25:62:76:
22:36:02:78:9c:66:96:df:c3:1f:6b:5d:bf:2a:81:65:b3:c4:
dd:1d:79:60:64:44:09:fe:42:b6:f6:bc:0b:83:1d:2e:8d:bc:
7d:fe:a0:95:74:57:11:f4:94:f9:dd:8a:68:61:3e:77:88:52:
10:99:28:e2:16:6e:09:aa:9d:47:1f:05:91:43:aa:c0:cb:13:
7c:c0:e5:ef:05:23:e5:79:10:e4:82:c2:47:5b:ec:92:85:d4:
b2:9c:01:ed:89:10:a0:65:da:b2:4c:d4:b9:02:cf:da:f3:e9:
41:72:00:03
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZMcxApsR/xIzL3tEG9IkLugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2JjYzZkMjVmNzQ3NmZiYjNlYzMzZjZkYmMzZTllZWFk
OTIyMTIwHhcNMjQxMTExMTk0NzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDExZjBmZjIwZjMxZjU0NDYzOWUzZGI4ZTAzMTdlNTE5YTE3YTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNDLmOB7cTpU7skGWIAkc3TpYEJm
OF9+gaAqnVoo/yw6csh1ftJvRJ2hn7CUgaD/zTBpcwwkmntWwgmDeuDk/9gT7jwH
w7qv+gSompGWOAgyDYWw/kPoFNmVSsxbLxKRjtcJduFIN7NATNJthiqyO3iWpUGd
BXHEVu46nrQCe/RNdIo+CXhNbcRaPl2zUw2oDdxfwkwwwjrfHzNO1Xv/5vzhAijJ
sYZ9hoBlVGHOZjoniGcTl6/caECFKBE95I4frEsE4cp9i/kAhTT0gyxysHY41aud
2ID7zRN6xx83zJUrXjAr6wX2p3tlhq83XrrxiP/tkDONj/i9H1AVzWCeZQIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFG0R8P8g8x9URjnj244DF+UZoXqUMB8GA1UdIwQY
MBaAFKY7zG0l90dvuz7DP228Pp7q2SISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQt
NDkyNGZhMDAwYjdjLzEvYlJId195RHpIMVJHT2VQYmpnTVg1Um1oZXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS83NjhmZGItZDFiNS00YmVmLWJjYmQtNDkyNGZhMDAwYjdj
LzEvcGp2TWJTWDNSMi03UHNNX2Jidy1udXJaSWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQFUpPAAwQG
VcJAAwQGWe2AAwQCuRvcAwQCuR1cAwQF1BjgMA0GCSqGSIb3DQEBCwUAA4IBAQB5
7wu8sKxX6jVe70cpXz5Eq6qM8PFj3NXnwXuzRn+PvlC5O7REgejZoV36moYqiNSL
0JlZH+4omxWm+3tZM7X2ZVsG1TNr01tshetPz31RCd0g1nIN40oW4FCwGm7Z9X1s
RF9cus+JNx0cy04+Nh2258w3sEsOs34StJx5kO/82faA7dR1g5KBScCe4zMlYnYi
NgJ4nGaW38Mfa12/KoFls8TdHXlgZEQJ/kK29rwLgx0ujbx9/qCVdFcR9JT53Ypo
YT53iFIQmSjiFm4Jqp1HHwWRQ6rAyxN8wOXvBSPleRDkgsJHW+yShdSynAHtiRCg
ZdqyTNS5As/a8+lBcgAD
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:44:59 2024 by rpki-client on console-fra.rpki-client.org