Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fab9ubA6vOSI6wg5CXMM8WODnWQ.roa
File: fab9ubA6vOSI6wg5CXMM8WODnWQ.roa (raw, json)
Hash identifier: 6OULSaELGYbHLUS4R5CjPjz0NWJyTBgFSd0iYKUsQwY=
Subject key identifier: 7D:A6:FD:B9:B0:3A:BC:E4:88:EB:08:39:09:73:0C:F1:63:83:9D:64
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018DA2AFBAE7E7B462AB65C1EB53AF2D3B91
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fab9ubA6vOSI6wg5CXMM8WODnWQ.roa
Signing time: Tue 13 Feb 2024 13:37:22 +0000
ROA not before: Tue 13 Feb 2024 13:37:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42964
IP address blocks: 79.172.206.0/24 maxlen: 24
79.172.215.0/24 maxlen: 24
79.172.217.0/24 maxlen: 24
79.172.237.0/24 maxlen: 24
87.229.98.0/23 maxlen: 23
87.229.102.0/24 maxlen: 24
178.238.223.0/24 maxlen: 24
213.181.222.0/24 maxlen: 24
217.144.61.0/24 maxlen: 24
2a02:730:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a2:af:ba:e7:e7:b4:62:ab:65:c1:eb:53:af:2d:3b:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 13 13:37:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7da6fdb9b03abce488eb083909730cf163839d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:90:44:88:8a:10:f8:d6:fa:28:85:28:91:20:
d9:2d:aa:3b:d8:42:fe:49:5c:14:f1:23:d3:3b:7d:
b6:5b:af:09:ae:e7:35:be:6c:fe:81:99:31:60:22:
19:00:36:bc:0e:18:09:77:eb:4c:ba:4d:a6:fa:19:
00:ec:dd:e6:e2:46:4f:4f:66:ed:96:4e:2e:53:c2:
0f:48:1b:f8:52:df:ab:90:55:a9:8f:a3:20:4f:11:
19:99:64:34:df:b4:3b:6d:fc:7c:5b:da:64:f3:f7:
76:2a:bb:af:7e:71:9b:44:18:cc:39:a0:0d:a9:2c:
06:e8:08:58:8b:50:a3:2e:23:50:45:0f:7d:9a:45:
c2:c3:bd:34:0f:fa:e6:9c:3a:83:d8:8f:bc:09:6e:
1e:4a:88:df:76:a3:a3:97:87:18:a0:3c:2a:0a:7b:
93:9e:36:b2:90:d6:d2:93:c3:2d:93:e7:db:44:13:
0d:ec:ae:1f:a8:d9:35:f1:39:00:df:2e:64:75:4f:
aa:7f:18:cc:ac:82:a7:b0:c2:eb:98:75:cd:6d:fc:
f9:8a:72:3e:37:db:0c:60:95:67:1c:60:5e:7d:4c:
4d:e6:8f:39:89:4f:f7:b5:94:8d:4b:91:9f:a4:3b:
3a:cc:58:7f:33:4b:72:16:ce:65:70:74:ef:a1:cb:
28:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:A6:FD:B9:B0:3A:BC:E4:88:EB:08:39:09:73:0C:F1:63:83:9D:64
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/fab9ubA6vOSI6wg5CXMM8WODnWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.172.206.0/24
79.172.215.0/24
79.172.217.0/24
79.172.237.0/24
87.229.98.0/23
87.229.102.0/24
178.238.223.0/24
213.181.222.0/24
217.144.61.0/24
IPv6:
2a02:730:1::/48
Signature Algorithm: sha256WithRSAEncryption
8a:d4:53:2d:77:80:f5:57:b7:7f:6a:cd:c2:e3:13:50:e2:7e:
bb:42:54:a3:64:f7:dd:72:80:ab:59:a5:69:76:62:be:7d:d1:
25:4b:6f:4c:c7:c0:17:87:aa:4d:81:48:2f:94:e1:bd:4b:b4:
22:88:37:f0:3a:85:25:21:21:fc:6f:f6:93:9c:dc:9d:65:f5:
13:77:ab:16:a8:80:9b:a9:95:a7:a6:58:42:87:37:c3:29:c3:
00:f5:62:7c:fe:dd:12:e9:e4:26:5f:ce:15:88:33:f9:26:07:
1a:aa:17:dc:c2:8b:c7:94:c0:a3:45:5f:bb:23:33:99:42:69:
ca:f7:83:12:37:ae:ea:ec:2d:6a:51:13:c1:62:17:ef:f4:d4:
85:b9:ee:06:bd:d3:2e:cc:93:2e:94:7f:2c:56:a9:97:84:f3:
7d:fd:1a:f0:fd:a5:47:27:39:75:b5:77:d5:1f:b5:38:0e:f9:
4d:b1:db:26:4c:be:0f:ca:aa:4f:91:76:86:68:7d:52:9c:25:
e3:75:11:59:77:90:d3:18:4e:77:4d:0f:e8:ba:03:5c:a6:38:
16:81:79:5d:93:08:0f:c3:93:42:4b:1f:51:40:76:a3:4e:31:
fc:a4:38:47:56:fb:d5:5a:eb:f3:ea:b9:7e:ba:f9:39:6b:b4:
80:07:ac:62
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAY2ir7rn57Riq2XB61OvLTuRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQwMjEzMTMzNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZGE2ZmRiOWIwM2FiY2U0ODhlYjA4MzkwOTczMGNmMTYzODM5ZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5BEiIoQ+Nb6KIUokSDZLao72EL+
SVwU8SPTO322W68Jruc1vmz+gZkxYCIZADa8DhgJd+tMuk2m+hkA7N3m4kZPT2bt
lk4uU8IPSBv4Ut+rkFWpj6MgTxEZmWQ037Q7bfx8W9pk8/d2KruvfnGbRBjMOaAN
qSwG6AhYi1CjLiNQRQ99mkXCw700D/rmnDqD2I+8CW4eSojfdqOjl4cYoDwqCnuT
njaykNbSk8Mtk+fbRBMN7K4fqNk18TkA3y5kdU+qfxjMrIKnsMLrmHXNbfz5inI+
N9sMYJVnHGBefUxN5o85iU/3tZSNS5GfpDs6zFh/M0tyFs5lcHTvocso8QIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFH2m/bmwOrzkiOsIOQlzDPFjg51kMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvZmFiOXViQTZ2T1NJNndnNUNYTU04V09EbldRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzA8BAIAATA2AwQAT6zOAwQA
T6zXAwQAT6zZAwQAT6ztAwQBV+ViAwQAV+VmAwQAsu7fAwQA1bXeAwQA2ZA9MA8E
AgACMAkDBwAqAgcwAAEwDQYJKoZIhvcNAQELBQADggEBAIrUUy13gPVXt39qzcLj
E1DifrtCVKNk991ygKtZpWl2Yr590SVLb0zHwBeHqk2BSC+U4b1LtCKIN/A6hSUh
Ifxv9pOc3J1l9RN3qxaogJuplaemWEKHN8MpwwD1Ynz+3RLp5CZfzhWIM/kmBxqq
F9zCi8eUwKNFX7sjM5lCacr3gxI3rursLWpRE8FiF+/01IW57ga90y7Mky6UfyxW
qZeE8339GvD9pUcnOXW1d9UftTgO+U2x2yZMvg/Kqk+RdoZofVKcJeN1EVl3kNMY
TndND+i6A1ymOBaBeV2TCA/Dk0JLH1FAdqNOMfykOEdW+9Va6/PquX66+TlrtIAH
rGI=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:30:57 2024 by rpki-client on console-ams.rpki-client.org