Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/enUwcWlT1mgHHpWZpXxbhR7C9JA.roa
File: enUwcWlT1mgHHpWZpXxbhR7C9JA.roa (raw, json)
Hash identifier: iHSKblwRHPSBIQbWCRf6CCOt8RNC9FkpQvAIQDcpzHc=
Subject key identifier: 7A:75:30:71:69:53:D6:68:07:1E:95:99:A5:7C:5B:85:1E:C2:F4:90
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 0192E3B1024AA5B90306E79021BA0088D62D
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/enUwcWlT1mgHHpWZpXxbhR7C9JA.roa
Signing time: Thu 31 Oct 2024 17:48:01 +0000
ROA not before: Thu 31 Oct 2024 17:48:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49074
IP address blocks: 85.255.112.0/22 maxlen: 22
91.228.140.0/22 maxlen: 22
91.234.56.0/22 maxlen: 22
151.248.95.0/24 maxlen: 24
178.212.207.0/24 maxlen: 24
194.40.204.0/22 maxlen: 22
2a04:2041::/32 maxlen: 32
2a04:2043::/32 maxlen: 32
2a04:2045::/32 maxlen: 32
2a04:2047::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:b1:02:4a:a5:b9:03:06:e7:90:21:ba:00:88:d6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Oct 31 17:48:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a7530716953d668071e9599a57c5b851ec2f490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ca:e6:61:09:dd:e2:ab:31:4a:c8:2c:d6:fa:
54:9f:f8:9c:f4:4a:ab:a9:0b:85:37:9e:75:16:88:
d6:26:ed:ce:9e:bc:7b:01:c2:f6:8c:34:ca:3f:97:
22:ae:8b:a7:9a:ab:5c:0c:31:e0:ec:99:35:d0:72:
ea:12:a3:6e:5a:0f:b6:ed:96:cc:3c:14:98:2c:07:
0f:e7:72:4a:bb:6d:f1:83:47:be:ad:59:dc:2d:9e:
41:5b:ec:e3:43:ef:be:fc:09:76:5d:ac:e0:60:c3:
76:b3:38:20:78:f0:60:4c:6c:71:bc:3c:7c:70:68:
d0:4a:9f:0e:71:a3:b9:1c:e9:39:e2:7b:d7:d7:33:
06:e7:3a:db:de:2f:44:ae:2b:a3:2f:4d:b7:9d:4e:
3a:87:20:b1:3e:0d:83:fa:fb:80:8c:c7:84:c7:87:
c6:56:e9:f9:e2:c8:cf:cb:9f:ef:7d:3f:aa:7e:8b:
15:92:2c:3e:5f:28:a4:45:ec:ff:81:6a:55:13:3b:
93:69:48:be:8d:ef:71:56:1e:e8:67:c9:ef:ff:18:
81:e8:bd:3d:73:c0:93:57:fc:8e:fc:78:d6:cf:cd:
a8:5b:54:e1:6e:55:2c:2a:98:82:8f:36:8c:4f:47:
0b:71:a5:e0:92:81:60:74:73:d5:b0:25:b9:67:e5:
e3:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:75:30:71:69:53:D6:68:07:1E:95:99:A5:7C:5B:85:1E:C2:F4:90
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/enUwcWlT1mgHHpWZpXxbhR7C9JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.112.0/22
91.228.140.0/22
91.234.56.0/22
151.248.95.0/24
178.212.207.0/24
194.40.204.0/22
IPv6:
2a04:2041::/32
2a04:2043::/32
2a04:2045::/32
2a04:2047::/32
Signature Algorithm: sha256WithRSAEncryption
83:e4:aa:31:07:f1:77:25:5b:a2:7e:0e:5c:b3:04:c9:93:d9:
66:c5:69:e1:ac:c8:98:34:fa:d5:36:8e:cd:6c:5c:01:b5:be:
3b:f6:41:ca:cb:05:79:a3:3d:01:70:46:c0:fb:62:60:d8:9b:
09:f7:a1:a4:c1:fd:4d:93:55:51:2d:50:a1:c9:f4:2b:1f:a2:
06:e0:6e:2e:ec:b9:60:80:a9:f8:71:ee:2f:b3:99:26:6f:8f:
7d:0c:75:b7:1f:24:b3:5d:49:ba:fb:10:06:b9:5e:4f:01:29:
94:1a:c0:b4:7e:ac:7e:da:6e:2d:56:ac:ba:c8:a7:e0:2b:09:
96:bd:3b:5c:e2:ef:98:87:69:f8:01:0a:00:e9:32:61:cc:e8:
db:1b:5e:4c:60:7b:72:55:0b:82:52:ee:34:ef:26:bc:b7:46:
02:75:09:97:fd:ca:6b:e7:c1:e2:41:25:38:01:bd:ab:8b:e4:
ba:d6:9e:cb:0d:08:9f:2c:c8:82:2d:36:0a:3a:e6:e7:5f:84:
da:d7:8b:89:2b:b5:09:8f:de:5e:99:27:76:db:80:31:d7:0f:
6f:c4:e9:57:9d:b3:f8:3a:d0:f1:0e:06:dd:fa:d6:f4:6d:55:
d9:53:3e:44:5c:6b:87:8b:4f:e3:b7:ae:70:34:8b:d4:20:63:
f2:43:69:e5
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZLjsQJKpbkDBueQIboAiNYtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyZjJjMmU3YmMxZGE1NGQ5MTljYTViNTk0MWQzNzg4OTJi
MmNjYjIwHhcNMjQxMDMxMTc0ODAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTc1MzA3MTY5NTNkNjY4MDcxZTk1OTlhNTdjNWI4NTFlYzJmNDkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1MrmYQnd4qsxSsgs1vpUn/ic9Eqr
qQuFN551FojWJu3Onrx7AcL2jDTKP5cirounmqtcDDHg7Jk10HLqEqNuWg+27ZbM
PBSYLAcP53JKu23xg0e+rVncLZ5BW+zjQ+++/Al2XazgYMN2szggePBgTGxxvDx8
cGjQSp8OcaO5HOk54nvX1zMG5zrb3i9EriujL023nU46hyCxPg2D+vuAjMeEx4fG
Vun54sjPy5/vfT+qfosVkiw+XyikRez/gWpVEzuTaUi+je9xVh7oZ8nv/xiB6L09
c8CTV/yO/HjWz82oW1ThblUsKpiCjzaMT0cLcaXgkoFgdHPVsCW5Z+XjFwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFHp1MHFpU9ZoBx6VmaV8W4UewvSQMB8GA1UdIwQY
MBaAFCLywue8HaVNkZyltZQdN4iSssyyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUt
MDJkZWY2ZTg0YzkxLzEvZW5Vd2NXbFQxbWdISHBXWnBYeGJoUjdDOUpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi82MDI1MzAtNmQyMi00NmYxLThlMDUtMDJkZWY2ZTg0Yzkx
LzEvSXZMQzU3d2RwVTJSbktXMWxCMDNpSkt5ekxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDAqBAIAATAkAwQCVf9wAwQC
W+SMAwQCW+o4AwQAl/hfAwQAstTPAwQCwijMMCIEAgACMBwDBQAqBCBBAwUAKgQg
QwMFACoEIEUDBQAqBCBHMA0GCSqGSIb3DQEBCwUAA4IBAQCD5KoxB/F3JVuifg5c
swTJk9lmxWnhrMiYNPrVNo7NbFwBtb479kHKywV5oz0BcEbA+2Jg2JsJ96Gkwf1N
k1VRLVChyfQrH6IG4G4u7LlggKn4ce4vs5kmb499DHW3HySzXUm6+xAGuV5PASmU
GsC0fqx+2m4tVqy6yKfgKwmWvTtc4u+Yh2n4AQoA6TJhzOjbG15MYHtyVQuCUu40
7ya8t0YCdQmX/cpr58HiQSU4Ab2ri+S61p7LDQifLMiCLTYKOubnX4Ta14uJK7UJ
j95emSd224Ax1w9vxOlXnbP4OtDxDgbd+tb0bVXZUz5EXGuHi0/jt65wNIvUIGPy
Q2nl
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:16:22 2024 by rpki-client on console-fra.rpki-client.org