Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/sN6K7blStdXV5QiGCoT_v-Nm0hI.roa
File: sN6K7blStdXV5QiGCoT_v-Nm0hI.roa (raw, json)
Hash identifier: M6loonIqxNr0p/pWO7s8QG9xtT65Y3FkWkTKosktrSI=
Subject key identifier: B0:DE:8A:ED:B9:52:B5:D5:D5:E5:08:86:0A:84:FF:BF:E3:66:D2:12
Certificate issuer: /CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Certificate serial: 0191941AFE839BDBCB59D04E161D0FAFE5B2
Authority key identifier: 3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/sN6K7blStdXV5QiGCoT_v-Nm0hI.roa
Signing time: Tue 27 Aug 2024 13:51:22 +0000
ROA not before: Tue 27 Aug 2024 13:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 91.211.196.0/22 maxlen: 24
193.109.152.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:94:1a:fe:83:9b:db:cb:59:d0:4e:16:1d:0f:af:e5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b5fc69b7c6ee869930ce0b8391ee5d84c53494a
Validity
Not Before: Aug 27 13:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b0de8aedb952b5d5d5e508860a84ffbfe366d212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:de:5f:e7:91:bf:cf:ef:c6:57:cb:78:26:f5:
49:a9:43:37:e5:d7:04:13:fc:58:50:6c:7c:4b:36:
76:2a:be:22:9c:19:9c:f0:eb:92:17:80:ec:25:9e:
2e:a0:e1:18:0d:99:8a:42:37:85:32:0c:bd:5e:92:
6b:23:b7:4c:d2:65:24:1e:4d:21:ae:3e:ca:ac:8d:
fa:d8:9f:30:57:36:27:95:82:a8:85:d2:de:83:c6:
91:f2:6d:67:5a:6d:33:bd:c8:69:ea:78:34:18:a5:
53:87:22:a2:63:27:bd:3e:7d:da:32:37:e7:35:27:
86:91:e6:17:b0:e5:05:98:54:ec:b6:73:ba:92:4f:
8b:d4:15:c7:4c:86:b8:17:ad:fc:87:67:0a:ee:89:
54:86:3c:a1:cc:06:b6:2c:55:de:43:67:44:d2:73:
fe:9d:1d:0b:4c:c7:cc:0f:fd:e7:30:bf:b2:ce:c3:
a2:25:84:e8:d3:1e:9c:fd:ca:89:d4:0b:1d:85:ef:
aa:87:ce:fe:30:86:25:d4:81:29:b4:c9:b7:e0:64:
ad:a6:a9:77:d9:c2:5d:ea:86:bc:88:75:df:67:c9:
a8:40:bd:a2:ee:41:1a:49:65:9c:92:1e:7d:bf:90:
91:46:f6:f1:18:fd:bf:80:60:65:06:77:9a:a7:ba:
4d:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:DE:8A:ED:B9:52:B5:D5:D5:E5:08:86:0A:84:FF:BF:E3:66:D2:12
X509v3 Authority Key Identifier:
keyid:3B:5F:C6:9B:7C:6E:E8:69:93:0C:E0:B8:39:1E:E5:D8:4C:53:49:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/sN6K7blStdXV5QiGCoT_v-Nm0hI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7c1727-9eaf-49c9-aafc-f99453a95a99/1/O1_Gm3xu6GmTDOC4OR7l2ExTSUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.196.0/22
193.109.152.0/21
Signature Algorithm: sha256WithRSAEncryption
35:3a:8a:81:26:10:f2:65:e8:94:c4:10:90:5a:1a:6a:aa:88:
af:ea:5a:10:c4:7e:e5:f1:d2:2a:f2:15:e5:07:b9:f0:b5:6e:
eb:f9:40:c2:cf:14:16:42:77:de:fb:c4:38:35:63:5e:1d:d9:
0c:1d:87:bb:a2:9b:9b:41:a7:de:88:59:ee:44:85:c5:62:10:
00:79:c5:28:0a:04:84:fd:7b:4c:da:9f:fb:04:85:90:10:ee:
29:f8:ce:07:d4:46:12:89:0a:1e:b4:76:1f:8d:6a:2f:3d:23:
36:e0:ba:82:c6:6f:ad:71:d9:50:6f:49:52:68:8a:c2:c0:01:
1e:b4:96:df:b3:e5:50:5a:ec:96:c4:64:81:56:ec:fe:da:16:
76:61:b7:a8:e0:57:01:1e:0c:d0:cd:56:61:7c:0d:c6:a0:0c:
b8:14:ae:df:98:b6:0d:2c:f4:4a:ce:55:42:d1:b3:a0:7d:46:
f0:27:c6:b6:d6:43:15:ba:17:83:9f:77:d7:cf:2d:53:24:63:
1d:1c:a0:6e:fb:c5:5a:bf:86:ba:c2:51:71:83:4a:43:2a:ae:
04:b8:14:2a:eb:2e:59:59:59:66:3b:66:77:15:86:da:13:fc:
2b:39:a0:9a:4c:19:db:74:18:94:18:8a:ca:bc:6a:6d:ac:02:
e4:e9:5c:7d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZGUGv6Dm9vLWdBOFh0Pr+WyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiNWZjNjliN2M2ZWU4Njk5MzBjZTBiODM5MWVlNWQ4NGM1
MzQ5NGEwHhcNMjQwODI3MTM1MTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMGRlOGFlZGI5NTJiNWQ1ZDVlNTA4ODYwYTg0ZmZiZmUzNjZkMjEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0t5f55G/z+/GV8t4JvVJqUM35dcE
E/xYUGx8SzZ2Kr4inBmc8OuSF4DsJZ4uoOEYDZmKQjeFMgy9XpJrI7dM0mUkHk0h
rj7KrI362J8wVzYnlYKohdLeg8aR8m1nWm0zvchp6ng0GKVThyKiYye9Pn3aMjfn
NSeGkeYXsOUFmFTstnO6kk+L1BXHTIa4F638h2cK7olUhjyhzAa2LFXeQ2dE0nP+
nR0LTMfMD/3nML+yzsOiJYTo0x6c/cqJ1Asdhe+qh87+MIYl1IEptMm34GStpql3
2cJd6oa8iHXfZ8moQL2i7kEaSWWckh59v5CRRvbxGP2/gGBlBneap7pNwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLDeiu25UrXV1eUIhgqE/7/jZtISMB8GA1UdIwQY
MBaAFDtfxpt8buhpkwzguDke5dhMU0lKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83YzE3MjctOWVhZi00OWM5LWFhZmMt
Zjk5NDUzYTk1YTk5LzEvc042SzdibFN0ZFhWNVFpR0NvVF92LU5tMGhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC83YzE3MjctOWVhZi00OWM5LWFhZmMtZjk5NDUzYTk1YTk5
LzEvTzFfR20zeHU2R21URE9DNE9SN2wyRXhUU1VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9PEAwQD
wW2YMA0GCSqGSIb3DQEBCwUAA4IBAQA1OoqBJhDyZeiUxBCQWhpqqoiv6loQxH7l
8dIq8hXlB7nwtW7r+UDCzxQWQnfe+8Q4NWNeHdkMHYe7opubQafeiFnuRIXFYhAA
ecUoCgSE/XtM2p/7BIWQEO4p+M4H1EYSiQoetHYfjWovPSM24LqCxm+tcdlQb0lS
aIrCwAEetJbfs+VQWuyWxGSBVuz+2hZ2Ybeo4FcBHgzQzVZhfA3GoAy4FK7fmLYN
LPRKzlVC0bOgfUbwJ8a21kMVuheDn3fXzy1TJGMdHKBu+8Vav4a6wlFxg0pDKq4E
uBQq6y5ZWVlmO2Z3FYbaE/wrOaCaTBnbdBiUGIrKvGptrALk6Vx9
-----END CERTIFICATE-----
Generated at Tue Oct 22 21:25:27 2024 by rpki-client on console-ams.rpki-client.org