Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/h7l5olG2BaJs5zGjNRm51l3oIAU.roa
File: h7l5olG2BaJs5zGjNRm51l3oIAU.roa (raw, json)
Hash identifier: 1QEOcPnMjCpTDHBdffV9kIZEShSlgYsnwl5bB8vnPaM=
Subject key identifier: 87:B9:79:A2:51:B6:05:A2:6C:E7:31:A3:35:19:B9:D6:5D:E8:20:05
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019362D5F92D30FB1C948E484E65862F9C6B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/h7l5olG2BaJs5zGjNRm51l3oIAU.roa
Signing time: Mon 25 Nov 2024 10:20:10 +0000
ROA not before: Mon 25 Nov 2024 10:20:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 89.37.195.0/24 maxlen: 24
92.114.93.0/24 maxlen: 24
93.114.244.0/24 maxlen: 24
94.177.150.0/24 maxlen: 24
213.134.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Dec 2024 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:62:d5:f9:2d:30:fb:1c:94:8e:48:4e:65:86:2f:9c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 25 10:20:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87b979a251b605a26ce731a33519b9d65de82005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:89:74:b0:3e:11:ae:43:34:ba:79:93:da:95:
54:88:59:5f:ec:04:48:a0:ae:62:36:90:4f:bc:ed:
04:4d:43:8b:2a:3a:10:e8:2c:7b:5d:ef:78:69:b3:
78:bd:2b:df:c3:30:02:20:67:fa:ba:ab:ab:ba:39:
e1:e8:f4:f4:17:99:f3:c0:43:ca:f2:9e:51:98:75:
c0:ed:0c:df:0a:34:49:cc:8d:e3:71:09:62:da:85:
ea:ff:cf:eb:ea:71:15:1e:44:e1:4a:75:5d:ad:94:
58:a8:c0:d4:2a:00:a2:89:71:5d:bc:a4:7f:ac:6e:
e2:a9:c4:1b:1f:8b:14:52:2d:c6:b0:39:d6:5e:de:
47:60:70:f9:90:85:86:e9:65:e9:80:ee:86:cf:02:
d3:b1:77:78:ad:0e:80:24:f7:17:cc:2c:87:78:cb:
f3:29:00:30:e6:15:73:38:50:f0:68:10:27:ea:36:
a5:05:bd:11:71:49:d0:db:f4:b1:fc:a9:9a:bf:c7:
82:d5:1c:bd:de:e3:0b:43:9f:3a:5d:be:ff:ab:58:
cc:6a:11:23:a8:0b:6c:fc:fb:5d:f0:13:ea:25:14:
e8:1b:32:01:28:84:b2:e2:57:71:3e:af:47:02:0c:
90:a6:59:28:19:0d:fd:6b:db:28:33:1b:72:05:5e:
dc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B9:79:A2:51:B6:05:A2:6C:E7:31:A3:35:19:B9:D6:5D:E8:20:05
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/h7l5olG2BaJs5zGjNRm51l3oIAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.37.195.0/24
92.114.93.0/24
93.114.244.0/24
94.177.150.0/24
213.134.11.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7c:1e:c9:5a:f5:c4:2c:50:2f:fb:df:0b:e8:8b:45:01:e1:
15:f6:3b:b9:d2:42:8b:c0:1f:f8:68:01:bb:1e:36:e3:0b:4b:
30:ca:d6:ec:70:15:8a:d9:86:9e:90:82:66:9b:95:63:9e:bc:
dd:c5:17:ed:3f:bb:c7:48:70:64:08:49:c6:66:75:df:f1:2b:
45:05:00:3f:96:98:85:02:ce:09:b8:04:96:a1:21:4d:a4:cb:
2d:f9:e7:fe:fb:a0:5d:41:d3:d7:35:93:c2:69:0f:a6:22:ca:
f8:7d:f7:0d:1b:8b:2a:24:0e:84:e3:c6:a3:88:ee:87:f7:d8:
74:09:61:ff:61:9d:78:fd:89:40:c6:5b:c5:f5:5e:1c:2d:dc:
95:01:c6:80:8a:10:6a:40:20:d7:56:e3:ef:20:18:bd:bd:0a:
cf:f9:e8:fd:40:80:68:24:7a:28:36:00:7b:fd:09:00:c1:c2:
8f:ca:30:d5:24:f2:f3:b2:ae:0a:db:f8:85:99:14:47:c0:54:
97:da:21:53:ef:cd:07:96:8c:e2:9e:14:de:5e:5f:83:db:9f:
db:35:55:b2:24:c2:cf:e2:af:dd:8e:12:6c:16:f5:3a:24:43:
a0:ab:3d:f1:78:25:f2:1a:01:c2:36:ad:27:25:16:42:57:77:
10:55:3a:72
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZNi1fktMPsclI5ITmWGL5xrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQxMTI1MTAyMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4N2I5NzlhMjUxYjYwNWEyNmNlNzMxYTMzNTE5YjlkNjVkZTgyMDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4l0sD4RrkM0unmT2pVUiFlf7ARI
oK5iNpBPvO0ETUOLKjoQ6Cx7Xe94abN4vSvfwzACIGf6uqurujnh6PT0F5nzwEPK
8p5RmHXA7QzfCjRJzI3jcQli2oXq/8/r6nEVHkThSnVdrZRYqMDUKgCiiXFdvKR/
rG7iqcQbH4sUUi3GsDnWXt5HYHD5kIWG6WXpgO6GzwLTsXd4rQ6AJPcXzCyHeMvz
KQAw5hVzOFDwaBAn6jalBb0RcUnQ2/Sx/Kmav8eC1Ry93uMLQ586Xb7/q1jMahEj
qAts/Ptd8BPqJRToGzIBKISy4ldxPq9HAgyQplkoGQ39a9soMxtyBV7cnQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFIe5eaJRtgWibOcxozUZudZd6CAFMB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvaDdsNW9sRzJCYUpzNXpHak5SbTUxbDNvSUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAWSXDAwQA
XHJdAwQAXXL0AwQAXrGWAwQA1YYLMA0GCSqGSIb3DQEBCwUAA4IBAQCFfB7JWvXE
LFAv+98L6ItFAeEV9ju50kKLwB/4aAG7HjbjC0swytbscBWK2YaekIJmm5Vjnrzd
xRftP7vHSHBkCEnGZnXf8StFBQA/lpiFAs4JuASWoSFNpMst+ef++6BdQdPXNZPC
aQ+mIsr4ffcNG4sqJA6E48ajiO6H99h0CWH/YZ14/YlAxlvF9V4cLdyVAcaAihBq
QCDXVuPvIBi9vQrP+ej9QIBoJHooNgB7/QkAwcKPyjDVJPLzsq4K2/iFmRRHwFSX
2iFT780HlozinhTeXl+D25/bNVWyJMLP4q/djhJsFvU6JEOgqz3xeCXyGgHCNq0n
JRZCV3cQVTpy
-----END CERTIFICATE-----
Generated at Thu Dec 26 07:18:06 2024 by rpki-client on console-ams.rpki-client.org