Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/y0E0OEBz63q2kYvg_XX_gY1gra0.roa
File: y0E0OEBz63q2kYvg_XX_gY1gra0.roa (raw, json)
Hash identifier: QScVpO5qgHrguoeGYhFVk1Lhjbd8jNMMt9z9KeMaG3o=
Subject key identifier: CB:41:34:38:40:73:EB:7A:B6:91:8B:E0:FD:75:FF:81:8D:60:AD:AD
Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1
Certificate serial: 0190A26916C135DFDE72AF044581D348A3B3
Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/y0E0OEBz63q2kYvg_XX_gY1gra0.roa
Signing time: Thu 11 Jul 2024 15:28:34 +0000
ROA not before: Thu 11 Jul 2024 15:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60337
IP address blocks: 87.252.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft
rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a2:69:16:c1:35:df:de:72:af:04:45:81:d3:48:a3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1
Validity
Not Before: Jul 11 15:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb4134384073eb7ab6918be0fd75ff818d60adad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:45:aa:84:19:51:49:72:a6:70:60:76:05:a7:
27:bf:98:b3:49:a6:cb:ae:8f:5a:6f:67:2f:ff:8c:
0b:f3:88:0a:0f:c3:64:0f:00:50:b6:cb:10:43:97:
60:3f:fd:03:8c:4a:5b:ee:b7:ab:8f:87:d2:78:f0:
9c:c2:8f:a9:fe:04:a7:26:7c:55:36:80:ff:e8:c1:
cb:17:86:09:82:9f:ee:94:bd:56:b3:44:b9:68:e8:
a0:dc:f0:cb:0d:72:64:2a:5b:ac:72:99:ac:40:cd:
33:8a:98:0e:b2:0f:cd:a2:cf:f2:aa:e0:92:24:b2:
1f:52:81:1a:d0:d9:d5:e4:f8:5e:8e:69:7b:6a:48:
64:d6:ba:3b:a4:ca:1d:b5:d5:0b:d8:bd:c9:85:d7:
84:19:8e:6c:f7:d4:38:1b:02:15:32:d6:65:bb:d5:
a0:f9:79:26:45:1a:74:8a:ea:7b:61:65:7c:c9:93:
f9:4b:74:cd:d9:40:51:0e:4d:35:d7:96:85:16:04:
8c:f1:79:0c:12:5f:17:2e:4a:94:51:9b:f7:19:d3:
4c:22:fa:40:1e:72:fc:e0:97:5e:a9:57:e4:4d:9d:
22:1b:2b:1c:70:ab:f5:ea:88:cd:ab:ff:c1:16:47:
18:4d:31:fd:71:8a:29:4a:a4:0a:c6:b1:0e:0d:bb:
8a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:34:38:40:73:EB:7A:B6:91:8B:E0:FD:75:FF:81:8D:60:AD:AD
X509v3 Authority Key Identifier:
keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/y0E0OEBz63q2kYvg_XX_gY1gra0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.252.240.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ca:40:6a:6a:21:8c:62:b9:4b:5e:c4:c6:19:3c:7b:b9:54:
5e:14:dd:3a:fb:1e:55:bf:51:04:07:c2:f8:00:57:dc:a1:e4:
af:04:c1:c0:dc:db:52:97:ba:7c:13:59:2e:e9:7b:6a:b2:d6:
39:9f:05:be:36:ed:c8:e5:a4:9a:23:5f:28:5f:53:84:90:9b:
c6:f0:59:d6:44:2a:fd:30:c8:44:8d:7e:0e:ab:5f:0f:05:0c:
07:2a:ce:01:75:1d:e8:26:8d:86:fb:7e:ff:f6:ee:98:10:0e:
71:2d:cd:85:32:0b:13:6e:96:4b:95:a3:72:7e:f0:9a:e3:bc:
53:ee:ef:4b:1d:e5:90:a7:99:f6:cd:68:6d:25:91:d0:f5:d7:
aa:f0:61:ce:21:0d:45:00:09:2c:11:88:e2:86:2c:37:a8:f3:
cf:58:20:ef:ae:90:a8:d1:fb:ec:6a:4d:3e:db:91:f9:05:54:
31:f5:69:c2:92:cc:1d:84:c8:6d:42:a5:8f:5f:0a:a4:f8:e5:
97:70:a4:0c:48:15:4a:b9:96:c5:9d:1d:1c:47:2a:8b:45:77:
2a:da:3b:53:2c:25:1d:73:94:7c:fe:d0:89:91:21:ef:dd:29:
85:67:97:ee:48:cc:06:99:d5:27:cd:d9:5e:58:2f:ee:e4:65:
40:d5:04:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCiaRbBNd/ecq8ERYHTSKOzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj
ZmViYzEwHhcNMjQwNzExMTUyODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYjQxMzQzODQwNzNlYjdhYjY5MThiZTBmZDc1ZmY4MThkNjBhZGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykWqhBlRSXKmcGB2Bacnv5izSabL
ro9ab2cv/4wL84gKD8NkDwBQtssQQ5dgP/0DjEpb7rerj4fSePCcwo+p/gSnJnxV
NoD/6MHLF4YJgp/ulL1Ws0S5aOig3PDLDXJkKluscpmsQM0zipgOsg/Nos/yquCS
JLIfUoEa0NnV5Phejml7akhk1ro7pModtdUL2L3JhdeEGY5s99Q4GwIVMtZlu9Wg
+XkmRRp0iup7YWV8yZP5S3TN2UBRDk0115aFFgSM8XkMEl8XLkqUUZv3GdNMIvpA
HnL84JdeqVfkTZ0iGysccKv16ojNq//BFkcYTTH9cYopSqQKxrEODbuK3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMtBNDhAc+t6tpGL4P11/4GNYK2tMB8GA1UdIwQY
MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct
YWFiMGU0MTRjYzYzLzEveTBFME9FQno2M3Eya1l2Z19YWF9nWTFncmEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz
LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/zwMA0G
CSqGSIb3DQEBCwUAA4IBAQAHykBqaiGMYrlLXsTGGTx7uVReFN06+x5Vv1EEB8L4
AFfcoeSvBMHA3NtSl7p8E1ku6XtqstY5nwW+Nu3I5aSaI18oX1OEkJvG8FnWRCr9
MMhEjX4Oq18PBQwHKs4BdR3oJo2G+37/9u6YEA5xLc2FMgsTbpZLlaNyfvCa47xT
7u9LHeWQp5n2zWhtJZHQ9deq8GHOIQ1FAAksEYjihiw3qPPPWCDvrpCo0fvsak0+
25H5BVQx9WnCkswdhMhtQqWPXwqk+OWXcKQMSBVKuZbFnR0cRyqLRXcq2jtTLCUd
c5R8/tCJkSHv3SmFZ5fuSMwGmdUnzdleWC/u5GVA1QRs
-----END CERTIFICATE-----
Generated at Thu Sep 19 20:13:10 2024 by rpki-client on console-ams.rpki-client.org