Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/8wGqAwuKH8Yg1PHsbzxX1YXnLbY.roa
File: 8wGqAwuKH8Yg1PHsbzxX1YXnLbY.roa (raw, json)
Hash identifier: TqQVEpgqRjbLcyusz9TUIdeB8MkaMxyoW9692pqj5sU=
Subject key identifier: F3:01:AA:03:0B:8A:1F:C6:20:D4:F1:EC:6F:3C:57:D5:85:E7:2D:B6
Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Certificate serial: 019329E7B1383D08CB4B8111A74D709E2515
Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/8wGqAwuKH8Yg1PHsbzxX1YXnLbY.roa
Signing time: Thu 14 Nov 2024 09:01:10 +0000
ROA not before: Thu 14 Nov 2024 09:01:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3271
IP address blocks: 194.39.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:29:e7:b1:38:3d:08:cb:4b:81:11:a7:4d:70:9e:25:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b
Validity
Not Before: Nov 14 09:01:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f301aa030b8a1fc620d4f1ec6f3c57d585e72db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:99:d1:10:63:3d:dd:d6:12:b6:bd:db:91:55:
10:30:57:1a:bc:54:af:b4:43:5c:7e:02:63:9a:83:
c9:08:6f:e9:d5:eb:f3:ab:e2:12:88:19:bf:cb:f2:
75:e6:b3:aa:15:d5:ba:f8:7d:3b:a4:8e:c8:1b:ab:
47:09:1d:44:46:20:ad:6d:8e:8e:4a:2d:57:65:5e:
ec:06:af:ba:5c:6a:29:e6:dc:0a:1b:d1:11:30:4f:
04:75:87:01:ee:73:d9:71:c3:6b:1b:4d:0e:4b:f6:
08:cd:67:28:e3:74:07:a5:d9:15:33:c5:d2:70:e8:
8e:a6:65:3e:5e:7d:46:36:3f:55:2f:7f:48:eb:92:
ce:23:ba:6d:61:75:dc:08:d6:53:7a:4b:97:af:4d:
ae:e9:8b:5e:37:de:6e:40:0b:ee:7f:ae:1e:e5:1e:
39:e8:e1:c4:fa:d3:5f:33:b5:9c:e9:ac:c3:da:49:
71:3c:d7:2f:77:3f:13:6b:45:af:f4:e1:4c:93:08:
9b:ce:72:12:0d:f0:12:4c:84:cf:85:7c:c4:19:c3:
f6:29:f7:10:c9:51:75:1f:b5:b2:1c:79:69:20:4d:
e3:ce:81:1c:6d:3d:22:f8:4c:85:74:b0:2e:41:8f:
10:04:ac:3f:83:09:b2:c9:7c:92:da:11:f3:98:7a:
84:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:01:AA:03:0B:8A:1F:C6:20:D4:F1:EC:6F:3C:57:D5:85:E7:2D:B6
X509v3 Authority Key Identifier:
keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/8wGqAwuKH8Yg1PHsbzxX1YXnLbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.130.0/24
Signature Algorithm: sha256WithRSAEncryption
20:58:f3:93:1a:24:ee:7c:25:76:d8:19:04:4f:63:ad:63:2e:
4e:51:3f:81:1b:90:c8:3f:b8:11:9b:ca:90:c9:8a:2e:de:5f:
71:1f:be:c4:74:18:c2:a7:3d:f0:f5:f2:83:ba:54:59:19:38:
c8:63:c6:fd:fd:2b:0b:28:31:0f:bf:f9:22:bf:25:61:a4:9b:
14:9a:32:bf:9a:b9:3c:99:01:7d:5f:fb:d9:04:1e:7c:1c:f8:
80:44:da:42:71:d4:e4:9c:7f:09:9f:61:a3:7e:82:59:6e:fe:
29:66:0a:98:c7:b5:b0:41:f2:6f:4e:f2:c2:2d:09:51:0f:1e:
d1:fb:76:79:00:e4:d8:88:40:53:87:31:06:bc:74:66:f4:c2:
fd:7d:e6:53:e7:f6:96:a7:ea:81:89:94:e9:94:ba:67:23:c8:
cf:d9:ba:6e:45:3f:5d:e8:cf:f0:59:b4:ee:19:84:64:aa:8d:
09:01:8e:72:e0:d1:16:94:b8:9d:99:7c:ad:cf:8f:24:a9:ba:
ed:80:91:28:4a:71:b2:09:3d:bf:a4:90:dc:18:4c:b2:50:65:
2d:47:4e:36:79:f7:37:59:52:c1:7e:fa:0a:4e:dd:a8:54:55:
d5:97:db:81:71:0e:54:9f:ed:50:66:aa:c4:31:2b:6c:0a:ec:
ae:ab:df:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMp57E4PQjLS4ERp01wniUVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy
MmQyNWIwHhcNMjQxMTE0MDkwMTEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzAxYWEwMzBiOGExZmM2MjBkNGYxZWM2ZjNjNTdkNTg1ZTcyZGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5nREGM93dYStr3bkVUQMFcavFSv
tENcfgJjmoPJCG/p1evzq+ISiBm/y/J15rOqFdW6+H07pI7IG6tHCR1ERiCtbY6O
Si1XZV7sBq+6XGop5twKG9ERME8EdYcB7nPZccNrG00OS/YIzWco43QHpdkVM8XS
cOiOpmU+Xn1GNj9VL39I65LOI7ptYXXcCNZTekuXr02u6YteN95uQAvuf64e5R45
6OHE+tNfM7Wc6azD2klxPNcvdz8Ta0Wv9OFMkwibznISDfASTITPhXzEGcP2KfcQ
yVF1H7WyHHlpIE3jzoEcbT0i+EyFdLAuQY8QBKw/gwmyyXyS2hHzmHqEswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPMBqgMLih/GINTx7G88V9WF5y22MB8GA1UdIwQY
MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt
ZWI1YmM3ZDk3YWEwLzEvOHdHcUF3dUtIOFlnMVBIc2J6eFgxWVhuTGJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw
LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwieCMA0G
CSqGSIb3DQEBCwUAA4IBAQAgWPOTGiTufCV22BkET2OtYy5OUT+BG5DIP7gRm8qQ
yYou3l9xH77EdBjCpz3w9fKDulRZGTjIY8b9/SsLKDEPv/kivyVhpJsUmjK/mrk8
mQF9X/vZBB58HPiARNpCcdTknH8Jn2GjfoJZbv4pZgqYx7WwQfJvTvLCLQlRDx7R
+3Z5AOTYiEBThzEGvHRm9ML9feZT5/aWp+qBiZTplLpnI8jP2bpuRT9d6M/wWbTu
GYRkqo0JAY5y4NEWlLidmXytz48kqbrtgJEoSnGyCT2/pJDcGEyyUGUtR042efc3
WVLBfvoKTt2oVFXVl9uBcQ5Un+1QZqrEMStsCuyuq9/0
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:29:13 2024 by rpki-client on console-ams.rpki-client.org