Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/ESNjT8q9hxsYdCpzZnK4oCIO3yw.roa
File: ESNjT8q9hxsYdCpzZnK4oCIO3yw.roa (raw, json)
Hash identifier: xFOOJoqJYVZSwcAqn0CvOAAnYPTnmOnqIuxMn3n8LMg=
Subject key identifier: 11:23:63:4F:CA:BD:87:1B:18:74:2A:73:66:72:B8:A0:22:0E:DF:2C
Certificate issuer: /CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Certificate serial: 0192BE27DED16784DAAF3BFBBA15EA01EC42
Authority key identifier: E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/ESNjT8q9hxsYdCpzZnK4oCIO3yw.roa
Signing time: Thu 24 Oct 2024 10:52:16 +0000
ROA not before: Thu 24 Oct 2024 10:52:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216003
IP address blocks: 89.29.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:be:27:de:d1:67:84:da:af:3b:fb:ba:15:ea:01:ec:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e92c415d1775ae9993e900a7536b46ab144a9aa2
Validity
Not Before: Oct 24 10:52:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1123634fcabd871b18742a736672b8a0220edf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bb:4e:e4:07:5e:87:45:3c:05:1b:72:50:07:
48:8c:f8:90:fd:05:21:95:cc:23:ac:6a:c0:8e:d3:
e6:84:18:93:9a:24:3d:82:43:98:5f:c2:f6:35:bd:
b1:4c:63:93:cf:3d:a8:1a:bd:13:6a:e3:86:36:79:
28:a8:80:d7:d8:23:92:49:74:57:59:30:b2:39:0b:
93:14:e0:54:10:bb:0a:b7:08:3c:cc:99:c7:15:57:
c7:7c:79:14:6a:75:2c:1c:74:06:91:fd:83:5d:40:
07:7b:4d:ed:b5:40:56:2e:3d:c6:04:60:49:5c:8b:
3c:3f:b7:3a:c6:71:68:8a:62:5a:c3:00:f3:29:30:
0e:69:e0:7c:ca:1e:9d:39:ee:f0:89:8f:6d:02:cf:
9d:fd:de:a2:65:4f:c0:c0:be:99:0e:ca:ae:9f:bd:
28:94:f6:74:fc:27:a8:5a:b2:33:95:bb:bf:03:29:
bb:99:24:0c:a9:6d:22:fb:ad:b9:a8:9d:8a:03:27:
80:91:79:50:f9:7c:2c:cc:fa:8b:98:a7:df:fc:95:
8c:ae:57:69:8a:65:75:d0:71:4f:1d:d7:1e:8f:93:
51:fa:2b:59:32:16:3a:39:99:11:b1:10:d3:01:90:
70:82:ff:53:7f:cc:ac:c6:bb:05:f4:d2:d2:99:84:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:23:63:4F:CA:BD:87:1B:18:74:2A:73:66:72:B8:A0:22:0E:DF:2C
X509v3 Authority Key Identifier:
keyid:E9:2C:41:5D:17:75:AE:99:93:E9:00:A7:53:6B:46:AB:14:4A:9A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6SxBXRd1rpmT6QCnU2tGqxRKmqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/ESNjT8q9hxsYdCpzZnK4oCIO3yw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0898be-b037-429f-b504-1d934a048474/1/6SxBXRd1rpmT6QCnU2tGqxRKmqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.29.252.0/24
Signature Algorithm: sha256WithRSAEncryption
57:d7:48:4f:17:bc:ad:1b:75:cf:19:09:23:6f:28:77:a3:d7:
ed:e2:ef:d2:fa:76:99:7f:4e:82:82:d2:f5:79:22:96:49:5b:
ba:c8:77:ec:2a:a2:94:ed:ac:a9:c7:fc:c2:6f:39:44:8e:b1:
10:24:65:70:b7:7d:61:db:10:e7:51:0e:40:e2:46:41:62:1e:
4a:64:37:4f:d3:77:12:f0:90:d9:45:11:e3:35:98:55:10:43:
28:07:4f:b8:25:20:b0:52:73:f8:d3:04:8c:34:89:3f:52:7e:
a9:67:0f:3e:8f:57:c2:1e:3a:86:76:ca:7d:9f:8b:c9:43:0f:
25:46:07:af:2a:18:2b:16:8c:fd:a0:4f:8e:50:d9:ba:49:db:
c7:9c:92:ce:d6:48:e8:55:1a:06:e2:8c:21:63:85:d6:50:48:
5a:a4:c3:bd:f7:ec:5c:d5:fe:b3:bd:0f:a4:63:8b:7a:d6:18:
fe:3f:dd:55:8b:7f:24:f2:30:e8:3d:15:47:15:25:22:2d:01:
01:fb:28:25:11:62:95:5b:f1:42:5a:74:68:fa:c2:3e:31:19:
24:6c:e6:ae:83:77:65:34:06:f8:5d:65:bf:42:59:51:52:ae:
71:10:a6:b5:df:a3:47:cb:b6:08:8e:57:57:d4:2e:a0:e9:9f:
76:db:9b:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZK+J97RZ4Tarzv7uhXqAexCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MmM0MTVkMTc3NWFlOTk5M2U5MDBhNzUzNmI0NmFiMTQ0
YTlhYTIwHhcNMjQxMDI0MTA1MjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTIzNjM0ZmNhYmQ4NzFiMTg3NDJhNzM2NjcyYjhhMDIyMGVkZjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz7tO5Adeh0U8BRtyUAdIjPiQ/QUh
lcwjrGrAjtPmhBiTmiQ9gkOYX8L2Nb2xTGOTzz2oGr0TauOGNnkoqIDX2COSSXRX
WTCyOQuTFOBUELsKtwg8zJnHFVfHfHkUanUsHHQGkf2DXUAHe03ttUBWLj3GBGBJ
XIs8P7c6xnFoimJawwDzKTAOaeB8yh6dOe7wiY9tAs+d/d6iZU/AwL6ZDsqun70o
lPZ0/CeoWrIzlbu/Aym7mSQMqW0i+625qJ2KAyeAkXlQ+XwszPqLmKff/JWMrldp
imV10HFPHdcej5NR+itZMhY6OZkRsRDTAZBwgv9Tf8ysxrsF9NLSmYQFdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBEjY0/KvYcbGHQqc2ZyuKAiDt8sMB8GA1UdIwQY
MBaAFOksQV0Xda6Zk+kAp1NrRqsUSpqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQt
MWQ5MzRhMDQ4NDc0LzEvRVNOalQ4cTloeHNZZENwelpuSzRvQ0lPM3l3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wODk4YmUtYjAzNy00MjlmLWI1MDQtMWQ5MzRhMDQ4NDc0
LzEvNlN4QlhSZDFycG1UNlFDblUydEdxeFJLbXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWR38MA0G
CSqGSIb3DQEBCwUAA4IBAQBX10hPF7ytG3XPGQkjbyh3o9ft4u/S+naZf06CgtL1
eSKWSVu6yHfsKqKU7aypx/zCbzlEjrEQJGVwt31h2xDnUQ5A4kZBYh5KZDdP03cS
8JDZRRHjNZhVEEMoB0+4JSCwUnP40wSMNIk/Un6pZw8+j1fCHjqGdsp9n4vJQw8l
RgevKhgrFoz9oE+OUNm6SdvHnJLO1kjoVRoG4owhY4XWUEhapMO99+xc1f6zvQ+k
Y4t61hj+P91Vi38k8jDoPRVHFSUiLQEB+yglEWKVW/FCWnRo+sI+MRkkbOaug3dl
NAb4XWW/QllRUq5xEKa136NHy7YIjldX1C6g6Z9225sZ
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:29 2024 by rpki-client on console-fra.rpki-client.org