Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/b7K1_UVEn1n2g8BrclTekmvxed8.roa
File: b7K1_UVEn1n2g8BrclTekmvxed8.roa (raw, json)
Hash identifier: R3FNJZu3Usxohmx6UqriFXbGXpTpUlmFVoTCnZP4Nrc=
Subject key identifier: 6F:B2:B5:FD:45:44:9F:59:F6:83:C0:6B:72:54:DE:92:6B:F1:79:DF
Certificate issuer: /CN=89e21a2b8a25b971bdb741a0aae325992304194e
Certificate serial: 018CC6B7FE5844AC95CD41F31AA1A51530E8
Authority key identifier: 89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/b7K1_UVEn1n2g8BrclTekmvxed8.roa
Signing time: Mon 01 Jan 2024 20:29:56 +0000
ROA not before: Mon 01 Jan 2024 20:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140543
IP address blocks: 193.25.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:fe:58:44:ac:95:cd:41:f3:1a:a1:a5:15:30:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89e21a2b8a25b971bdb741a0aae325992304194e
Validity
Not Before: Jan 1 20:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6fb2b5fd45449f59f683c06b7254de926bf179df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:f0:e5:5d:d0:3e:f5:4e:68:0f:83:4f:63:
b3:22:f4:61:97:05:7a:4b:5e:45:9f:95:99:43:42:
fc:a3:8f:9a:02:8d:e9:66:21:f8:f3:c8:8c:14:b1:
71:af:64:d6:ac:7d:3e:78:67:ff:16:30:51:52:7e:
d0:41:bd:eb:99:22:62:b6:cf:f0:7c:d6:70:57:f0:
55:0c:63:fd:4d:cc:fd:d7:c0:f4:e8:eb:a2:b3:71:
a0:d6:9e:95:f3:16:fc:44:dc:77:f5:6f:66:0a:18:
93:5a:cb:1b:11:c2:9e:5a:cd:43:b9:64:77:c3:2b:
5c:8f:ab:44:da:69:66:37:81:cb:76:ed:8d:43:19:
ab:38:4b:d0:5e:27:b3:08:ab:39:0a:c3:20:7f:c9:
8c:a9:c9:50:ab:0f:c2:3a:61:b1:67:e1:1d:33:fe:
98:9a:37:3e:2e:49:37:d6:05:23:74:bb:41:cb:96:
c9:8c:2b:eb:e2:e8:60:37:78:af:4f:d2:98:11:10:
6a:3a:fc:ec:ed:b1:e8:49:6d:9d:c2:fe:18:7d:94:
14:95:21:3c:14:9f:71:44:c0:ad:7b:ac:27:86:68:
13:af:25:cd:04:68:2b:4e:2d:13:0f:b0:a0:98:c0:
a4:24:17:40:95:2b:11:7b:15:53:32:9d:3e:01:66:
ec:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B2:B5:FD:45:44:9F:59:F6:83:C0:6B:72:54:DE:92:6B:F1:79:DF
X509v3 Authority Key Identifier:
keyid:89:E2:1A:2B:8A:25:B9:71:BD:B7:41:A0:AA:E3:25:99:23:04:19:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieIaK4oluXG9t0GgquMlmSMEGU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/b7K1_UVEn1n2g8BrclTekmvxed8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/406991-5be3-4a05-acb2-1ad47ccd2d9a/1/ieIaK4oluXG9t0GgquMlmSMEGU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.25.253.0/24
Signature Algorithm: sha256WithRSAEncryption
90:7c:82:2f:c7:02:08:d5:09:b5:48:4d:e3:b9:fa:7a:8e:b8:
0a:9d:78:0d:8a:9c:fc:34:94:41:0a:45:b1:7a:5e:68:62:30:
97:e1:5e:81:07:d5:9b:4b:b0:48:1e:cc:5c:74:08:3f:91:c4:
42:3b:b0:3f:48:99:bd:78:a0:35:14:b9:07:13:53:3c:f6:fd:
71:25:4b:00:83:24:d8:ea:a4:a6:42:12:cc:ce:ee:d7:d3:68:
82:bd:18:ac:84:50:ec:72:2a:99:6b:f1:a1:3e:69:05:2a:a4:
54:3e:ef:24:55:3d:9d:70:75:25:7b:b6:a3:04:d2:74:17:b0:
e2:00:d1:a8:24:4f:45:e2:97:b4:84:d5:83:82:1c:60:40:6b:
77:41:db:dc:04:af:98:45:ae:0e:94:90:ed:e9:4e:41:da:38:
cf:ee:3f:ae:f9:25:99:da:7a:df:7a:85:50:e8:96:8e:ef:fa:
ec:07:39:15:c8:7a:c9:42:8f:06:29:d5:75:f0:35:d6:9f:10:
38:b9:6a:43:1a:df:67:cb:f1:ec:07:ef:88:7d:80:8c:a2:97:
e8:5d:82:05:0d:02:2d:15:e8:79:64:11:87:b5:5a:68:42:e9:
0a:42:5a:cd:67:1f:4a:53:f4:1b:4a:19:f2:94:92:c9:a8:af:
6b:f3:58:db
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGt/5YRKyVzUHzGqGlFTDoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZTIxYTJiOGEyNWI5NzFiZGI3NDFhMGFhZTMyNTk5MjMw
NDE5NGUwHhcNMjQwMTAxMjAyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmIyYjVmZDQ1NDQ5ZjU5ZjY4M2MwNmI3MjU0ZGU5MjZiZjE3OWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnvw5V3QPvVOaA+DT2OzIvRhlwV6
S15Fn5WZQ0L8o4+aAo3pZiH488iMFLFxr2TWrH0+eGf/FjBRUn7QQb3rmSJits/w
fNZwV/BVDGP9Tcz918D06Ouis3Gg1p6V8xb8RNx39W9mChiTWssbEcKeWs1DuWR3
wytcj6tE2mlmN4HLdu2NQxmrOEvQXiezCKs5CsMgf8mMqclQqw/COmGxZ+EdM/6Y
mjc+Lkk31gUjdLtBy5bJjCvr4uhgN3ivT9KYERBqOvzs7bHoSW2dwv4YfZQUlSE8
FJ9xRMCte6wnhmgTryXNBGgrTi0TD7CgmMCkJBdAlSsRexVTMp0+AWbsuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG+ytf1FRJ9Z9oPAa3JU3pJr8XnfMB8GA1UdIwQY
MBaAFIniGiuKJblxvbdBoKrjJZkjBBlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjIt
MWFkNDdjY2QyZDlhLzEvYjdLMV9VVkVuMW4yZzhCcmNsVGVrbXZ4ZWQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi80MDY5OTEtNWJlMy00YTA1LWFjYjItMWFkNDdjY2QyZDlh
LzEvaWVJYUs0b2x1WEc5dDBHZ3F1TWxtU01FR1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRn9MA0G
CSqGSIb3DQEBCwUAA4IBAQCQfIIvxwII1Qm1SE3jufp6jrgKnXgNipz8NJRBCkWx
el5oYjCX4V6BB9WbS7BIHsxcdAg/kcRCO7A/SJm9eKA1FLkHE1M89v1xJUsAgyTY
6qSmQhLMzu7X02iCvRishFDsciqZa/GhPmkFKqRUPu8kVT2dcHUle7ajBNJ0F7Di
ANGoJE9F4pe0hNWDghxgQGt3QdvcBK+YRa4OlJDt6U5B2jjP7j+u+SWZ2nrfeoVQ
6JaO7/rsBzkVyHrJQo8GKdV18DXWnxA4uWpDGt9ny/HsB++IfYCMopfoXYIFDQIt
Feh5ZBGHtVpoQukKQlrNZx9KU/QbShnylJLJqK9r81jb
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:12:50 2024 by rpki-client on console-fra.rpki-client.org