Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/0IRr4BK_iddLp6XqXceTuvWZYyo.roa
File: 0IRr4BK_iddLp6XqXceTuvWZYyo.roa (raw, json)
Hash identifier: WJaQM2b0HdD9kOFEDrVy2bEVTSckWLkz1Uq6u/SmjS4=
Subject key identifier: D0:84:6B:E0:12:BF:89:D7:4B:A7:A5:EA:5D:C7:93:BA:F5:99:63:2A
Certificate issuer: /CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Certificate serial: 0192660D6CF2869C3FC6F15B8428916EC9EF
Authority key identifier: F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/0IRr4BK_iddLp6XqXceTuvWZYyo.roa
Signing time: Mon 07 Oct 2024 08:16:48 +0000
ROA not before: Mon 07 Oct 2024 08:16:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211771
IP address blocks: 86.38.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:66:0d:6c:f2:86:9c:3f:c6:f1:5b:84:28:91:6e:c9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0dd81a833d9b043c7ffd635a5987f536971180d
Validity
Not Before: Oct 7 08:16:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0846be012bf89d74ba7a5ea5dc793baf599632a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dc:04:0b:28:1c:f6:ea:a7:df:33:f2:8d:66:
5b:4d:28:bd:4a:76:9b:cc:d8:d2:1a:d8:28:9c:c6:
89:20:ac:a0:72:57:fc:42:44:5e:37:4a:7d:d7:c0:
eb:57:36:73:dc:7d:64:20:3b:d4:51:db:97:e1:c8:
af:cb:88:a5:a5:95:43:6a:0c:cf:3f:cf:d5:cc:d7:
b5:48:a0:bd:77:20:ef:de:38:69:1f:e1:be:d6:d7:
a2:f6:f3:79:d2:97:a7:8a:bd:50:59:bb:b5:fe:e9:
6b:6a:e5:cc:97:2e:59:db:00:d8:6e:8a:e2:b9:80:
ba:e0:7e:68:92:94:12:b5:53:70:73:ec:7e:3c:09:
d8:48:36:cd:7d:73:20:19:57:aa:6b:4d:f8:ef:d7:
6a:27:31:c4:57:84:ff:20:23:91:21:8e:bf:49:df:
9d:79:1e:cd:fb:73:72:22:ff:ad:af:0a:fa:26:be:
23:8f:be:b7:bf:c2:0c:88:02:26:1b:28:ec:a8:3c:
6e:a9:42:06:f3:dc:79:99:2a:c4:cd:75:b6:74:0a:
d8:d0:e7:74:89:89:c8:f9:f2:43:d5:b7:dd:b0:b5:
38:8b:93:d2:7b:ca:cf:04:95:c1:23:c7:b9:5f:18:
66:f0:90:ec:e3:1a:38:be:25:7d:b0:ed:3e:1e:eb:
cb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:84:6B:E0:12:BF:89:D7:4B:A7:A5:EA:5D:C7:93:BA:F5:99:63:2A
X509v3 Authority Key Identifier:
keyid:F0:DD:81:A8:33:D9:B0:43:C7:FF:D6:35:A5:98:7F:53:69:71:18:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/0IRr4BK_iddLp6XqXceTuvWZYyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a8ebe4-d0b3-4e7d-af25-0468042486dc/1/8N2BqDPZsEPH_9Y1pZh_U2lxGA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.38.164.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:77:e3:13:b4:3f:9f:65:25:3a:f0:eb:66:a2:44:e9:3f:67:
49:32:90:25:2e:19:52:22:78:68:3f:10:58:38:f4:64:05:be:
5c:37:ae:d3:d6:a3:03:f9:ab:58:7d:f2:6f:12:c0:15:0a:c1:
01:1e:5a:b8:df:ca:09:b7:b0:b7:77:4d:0a:07:90:8a:ba:e4:
1d:d2:a1:85:57:c8:be:b9:27:63:2f:0f:c2:bb:c4:c4:64:2b:
34:6d:ce:35:ae:93:a9:06:9d:fb:45:ee:ba:82:19:6e:9b:95:
07:55:62:80:f5:c0:f7:c4:9a:ec:6f:7b:16:2e:da:59:dd:f3:
fd:e9:09:d9:6e:71:85:02:52:f0:b7:4b:c0:48:f4:33:7b:c0:
d9:8b:65:ee:7e:6d:dc:49:03:73:a1:85:fd:fd:be:3a:a1:88:
99:4a:8b:ec:76:dd:cf:3a:8d:ee:87:98:52:78:67:a9:69:33:
6b:9b:23:2c:4e:4a:c3:74:45:fe:9c:d5:bc:1b:94:2c:29:dd:
9a:64:9e:f6:91:f0:22:3a:90:de:c1:80:20:0f:f9:cc:62:72:
db:3b:ff:56:47:5f:e4:16:86:9a:70:2a:eb:c0:0b:05:93:b6:
3d:b3:b2:f9:ca:a4:71:26:c7:43:84:7d:4d:7d:2a:87:fe:be:
56:e9:32:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJmDWzyhpw/xvFbhCiRbsnvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwZGQ4MWE4MzNkOWIwNDNjN2ZmZDYzNWE1OTg3ZjUzNjk3
MTE4MGQwHhcNMjQxMDA3MDgxNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDg0NmJlMDEyYmY4OWQ3NGJhN2E1ZWE1ZGM3OTNiYWY1OTk2MzJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9wECygc9uqn3zPyjWZbTSi9Snab
zNjSGtgonMaJIKygclf8QkReN0p918DrVzZz3H1kIDvUUduX4civy4ilpZVDagzP
P8/VzNe1SKC9dyDv3jhpH+G+1tei9vN50penir1QWbu1/ulrauXMly5Z2wDYbori
uYC64H5okpQStVNwc+x+PAnYSDbNfXMgGVeqa03479dqJzHEV4T/ICORIY6/Sd+d
eR7N+3NyIv+trwr6Jr4jj763v8IMiAImGyjsqDxuqUIG89x5mSrEzXW2dArY0Od0
iYnI+fJD1bfdsLU4i5PSe8rPBJXBI8e5Xxhm8JDs4xo4viV9sO0+HuvL/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNCEa+ASv4nXS6el6l3Hk7r1mWMqMB8GA1UdIwQY
MBaAFPDdgagz2bBDx//WNaWYf1NpcRgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUt
MDQ2ODA0MjQ4NmRjLzEvMElScjRCS19pZGRMcDZYcVhjZVR1dldaWXlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hOGViZTQtZDBiMy00ZTdkLWFmMjUtMDQ2ODA0MjQ4NmRj
LzEvOE4yQnFEUFpzRVBIXzlZMXBaaF9VMmx4R0EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAViakMA0G
CSqGSIb3DQEBCwUAA4IBAQCLd+MTtD+fZSU68OtmokTpP2dJMpAlLhlSInhoPxBY
OPRkBb5cN67T1qMD+atYffJvEsAVCsEBHlq438oJt7C3d00KB5CKuuQd0qGFV8i+
uSdjLw/Cu8TEZCs0bc41rpOpBp37Re66ghlum5UHVWKA9cD3xJrsb3sWLtpZ3fP9
6QnZbnGFAlLwt0vASPQze8DZi2Xufm3cSQNzoYX9/b46oYiZSovsdt3POo3uh5hS
eGepaTNrmyMsTkrDdEX+nNW8G5QsKd2aZJ72kfAiOpDewYAgD/nMYnLbO/9WR1/k
FoaacCrrwAsFk7Y9s7L5yqRxJsdDhH1NfSqH/r5W6TIS
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:42:22 2024 by rpki-client on console-fra.rpki-client.org