Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/DuWUMSx5YU3vXFc5PwBSsoSrgzE.roa
File: DuWUMSx5YU3vXFc5PwBSsoSrgzE.roa (raw, json)
Hash identifier: Z6CPoIt8EAM2CjBBbVi1g+FqUFkRR8pVuamImInwtZ0=
Subject key identifier: 0E:E5:94:31:2C:79:61:4D:EF:5C:57:39:3F:00:52:B2:84:AB:83:31
Certificate issuer: /CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Certificate serial: 0191EBD0B2E501142452B7BF62E933EB0B48
Authority key identifier: AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/DuWUMSx5YU3vXFc5PwBSsoSrgzE.roa
Signing time: Fri 13 Sep 2024 14:36:48 +0000
ROA not before: Fri 13 Sep 2024 14:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212318
IP address blocks: 178.57.65.0/24 maxlen: 24
178.57.66.0/24 maxlen: 24
178.57.67.0/24 maxlen: 24
178.57.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:eb:d0:b2:e5:01:14:24:52:b7:bf:62:e9:33:eb:0b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab7aaabb23cd245bfa828fb02521d644c6d5b566
Validity
Not Before: Sep 13 14:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0ee594312c79614def5c57393f0052b284ab8331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:21:e1:c0:be:97:cf:c7:41:f1:4b:76:4d:
d5:30:37:5e:29:00:f9:b3:7d:05:4d:c8:05:38:a2:
8b:3f:41:61:7e:a8:ca:97:52:e3:e5:34:d4:1d:86:
6a:76:d6:7c:a5:72:e0:39:5a:df:16:1d:87:57:56:
61:78:bb:d2:a4:85:a2:d0:bf:08:b3:b1:7e:50:02:
77:40:7a:6c:41:7d:75:a0:ad:2e:e4:e2:97:01:0a:
5a:42:95:2f:ba:db:85:0c:8f:3b:2a:e6:ee:7e:45:
2b:4f:5f:94:14:a4:6b:b0:c8:9d:ee:da:20:d9:df:
b5:e1:fc:14:78:11:7e:bb:5e:b3:ec:1a:82:5b:7c:
f7:4d:c3:61:1c:22:6b:f4:d9:9b:9e:bb:c4:4d:b4:
c4:b9:a4:f4:ba:f9:5a:14:4f:09:46:1c:b1:2c:03:
18:b5:bd:50:04:36:35:ed:62:48:83:8a:a8:42:3b:
9c:db:ce:bd:e8:5c:54:0a:17:c5:8d:a9:1e:b7:7d:
34:8a:e4:56:91:39:f3:42:c6:43:b9:94:f5:ce:1e:
05:85:31:a9:de:04:d2:44:00:d0:6b:f6:df:fb:30:
bb:76:b6:32:dc:e7:af:82:62:31:8c:2a:52:b7:8e:
fa:c6:ce:0c:4b:63:c2:fd:57:34:07:a3:4b:e3:47:
dd:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E5:94:31:2C:79:61:4D:EF:5C:57:39:3F:00:52:B2:84:AB:83:31
X509v3 Authority Key Identifier:
keyid:AB:7A:AA:BB:23:CD:24:5B:FA:82:8F:B0:25:21:D6:44:C6:D5:B5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3qquyPNJFv6go-wJSHWRMbVtWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/DuWUMSx5YU3vXFc5PwBSsoSrgzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/46dec5-c38d-4c1d-9cec-9ead81da2e44/1/q3qquyPNJFv6go-wJSHWRMbVtWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.57.65.0-178.57.68.255
Signature Algorithm: sha256WithRSAEncryption
7e:8e:3b:df:e9:a5:cf:4d:a3:f0:02:d6:10:d7:bb:75:8a:4e:
ba:9f:8d:ab:85:78:66:26:dd:b5:9b:c9:33:27:e1:9f:83:77:
54:36:48:e1:a5:2e:bf:ae:23:05:cb:25:32:db:2a:28:3e:37:
f2:ac:aa:db:a1:11:75:92:ef:4d:ae:b3:8a:c1:30:fc:0c:32:
4a:05:a2:8f:ec:b8:91:8c:99:81:a0:ce:7c:53:68:e1:74:13:
37:49:9a:00:2c:11:e6:41:93:9d:24:77:c7:5d:38:7d:11:09:
f9:6d:30:d1:c1:e7:ef:a5:4a:d2:e8:c8:4f:68:7c:a5:be:f7:
e8:e4:e5:10:8c:aa:24:f3:9d:47:6d:3b:71:73:9a:0b:af:ae:
e5:40:41:eb:9f:d8:32:00:f2:20:ce:b4:fa:d7:64:ab:61:95:
19:90:e9:9a:0b:11:d4:d9:15:bf:c0:00:5a:02:cd:11:88:bf:
8a:40:92:69:b3:46:01:cd:07:f8:eb:dd:3b:ce:e6:90:85:b6:
cf:26:34:8f:4d:b1:da:cd:0a:aa:0a:6f:05:6d:d5:af:db:00:
64:39:9e:e0:15:64:e1:68:96:49:d8:a8:4d:d9:b1:c8:6a:e5:
c6:40:68:c7:ab:7e:c7:6d:5b:b0:80:41:b3:5d:c2:27:a0:a4:
ac:aa:c4:8c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZHr0LLlARQkUre/Yukz6wtIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiN2FhYWJiMjNjZDI0NWJmYTgyOGZiMDI1MjFkNjQ0YzZk
NWI1NjYwHhcNMjQwOTEzMTQzNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWU1OTQzMTJjNzk2MTRkZWY1YzU3MzkzZjAwNTJiMjg0YWI4MzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPgh4cC+l8/HQfFLdk3VMDdeKQD5
s30FTcgFOKKLP0FhfqjKl1Lj5TTUHYZqdtZ8pXLgOVrfFh2HV1ZheLvSpIWi0L8I
s7F+UAJ3QHpsQX11oK0u5OKXAQpaQpUvutuFDI87KubufkUrT1+UFKRrsMid7tog
2d+14fwUeBF+u16z7BqCW3z3TcNhHCJr9NmbnrvETbTEuaT0uvlaFE8JRhyxLAMY
tb1QBDY17WJIg4qoQjuc28696FxUChfFjaket300iuRWkTnzQsZDuZT1zh4FhTGp
3gTSRADQa/bf+zC7drYy3OevgmIxjCpSt476xs4MS2PC/Vc0B6NL40fdmwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFA7llDEseWFN71xXOT8AUrKEq4MxMB8GA1UdIwQY
MBaAFKt6qrsjzSRb+oKPsCUh1kTG1bVmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMt
OWVhZDgxZGEyZTQ0LzEvRHVXVU1TeDVZVTN2WEZjNVB3QlNzb1NyZ3pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS80NmRlYzUtYzM4ZC00YzFkLTljZWMtOWVhZDgxZGEyZTQ0
LzEvcTNxcXV5UE5KRnY2Z28td0pTSFdSTWJWdFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACyOUED
BACyOUQwDQYJKoZIhvcNAQELBQADggEBAH6OO9/ppc9No/AC1hDXu3WKTrqfjauF
eGYm3bWbyTMn4Z+Dd1Q2SOGlLr+uIwXLJTLbKig+N/KsqtuhEXWS702us4rBMPwM
MkoFoo/suJGMmYGgznxTaOF0EzdJmgAsEeZBk50kd8ddOH0RCfltMNHB5++lStLo
yE9ofKW+9+jk5RCMqiTznUdtO3FzmguvruVAQeuf2DIA8iDOtPrXZKthlRmQ6ZoL
EdTZFb/AAFoCzRGIv4pAkmmzRgHNB/jr3TvO5pCFts8mNI9NsdrNCqoKbwVt1a/b
AGQ5nuAVZOFolknYqE3Zschq5cZAaMerfsdtW7CAQbNdwiegpKyqxIw=
-----END CERTIFICATE-----
Generated at Sat Nov 23 21:59:42 2024 by rpki-client on console-fra.rpki-client.org