Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/kKj3P4KulNNsNCmnryrjMJ2stjA.roa
File: kKj3P4KulNNsNCmnryrjMJ2stjA.roa (raw, json)
Hash identifier: 4lf8ankOfJQjbNB+OcJ+U4PvAf6i8fdPrJ/3MJZ0Nqc=
Subject key identifier: 90:A8:F7:3F:82:AE:94:D3:6C:34:29:A7:AF:2A:E3:30:9D:AC:B6:30
Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Certificate serial: 018CC8017829636B9463476448A524661612
Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/kKj3P4KulNNsNCmnryrjMJ2stjA.roa
Signing time: Tue 02 Jan 2024 02:29:48 +0000
ROA not before: Tue 02 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394161
IP address blocks: 213.244.145.0/24 maxlen: 24
62.67.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:78:29:63:6b:94:63:47:64:48:a5:24:66:16:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129
Validity
Not Before: Jan 2 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=90a8f73f82ae94d36c3429a7af2ae3309dacb630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:36:e6:fe:c7:b9:0a:e4:fd:43:b8:88:06:f0:
64:f1:33:5d:d6:6b:e8:aa:27:d4:b3:e9:60:82:91:
f8:1b:93:ba:22:c2:65:08:87:ca:93:e1:3b:02:b2:
18:57:1b:1c:a1:6a:9f:d3:1a:d4:12:09:0d:71:2c:
1b:ed:2d:cf:75:bb:a0:9b:7e:1e:56:5d:c0:9c:99:
40:78:29:6c:23:10:3a:d5:78:a5:86:62:09:32:55:
90:8e:ed:12:0e:0a:fb:74:8c:4f:08:67:b3:3c:86:
de:a1:6d:cb:68:a8:41:25:a6:53:8e:21:3a:52:95:
c9:77:fa:ae:ef:65:71:14:90:f2:6d:c5:69:2f:94:
b9:89:05:ad:42:0d:07:79:6d:d5:67:46:26:c7:98:
a1:4b:7a:31:6b:f0:69:9a:23:ab:fa:e7:dc:f3:be:
cc:fc:b9:3a:c1:00:99:3f:1f:1a:07:79:09:73:cd:
08:7d:50:f4:bc:f9:65:8f:a1:08:f4:d6:d6:9c:b2:
cd:ce:ba:d5:00:7b:02:14:ef:96:f9:7b:c0:86:40:
8f:43:29:eb:8c:f3:bb:ea:33:4f:c3:dc:a9:b8:ad:
ce:a3:f3:bf:94:80:62:bd:93:d9:ea:0f:94:9c:a7:
b3:f3:12:0f:ca:e6:90:ed:a9:f5:3e:fd:a9:8d:ec:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A8:F7:3F:82:AE:94:D3:6C:34:29:A7:AF:2A:E3:30:9D:AC:B6:30
X509v3 Authority Key Identifier:
keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/kKj3P4KulNNsNCmnryrjMJ2stjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.67.197.0/24
213.244.145.0/24
Signature Algorithm: sha256WithRSAEncryption
35:87:fd:df:9f:43:f9:0a:70:7a:26:ec:04:2d:cf:16:ff:51:
73:5f:67:5e:74:59:24:7e:d5:a2:7d:11:9f:5a:37:da:fe:43:
af:18:f8:cc:c5:d3:ce:b6:83:31:9c:7b:92:18:71:ad:92:12:
74:2a:6d:bd:16:35:71:3c:d0:a7:02:f6:7f:e9:b2:a2:e7:b8:
0f:f2:bd:6f:c8:46:10:da:d8:60:6b:95:d7:e8:ed:78:78:6a:
57:bc:f9:bd:a3:8f:0f:4f:c9:2c:44:31:d1:9a:a4:de:a5:1d:
99:52:19:2e:c4:8a:f0:d8:48:4d:72:14:e2:75:fc:60:df:31:
aa:e7:c9:76:39:9a:0c:5f:85:d9:fd:85:0c:f4:a3:ff:7d:51:
7b:52:08:bb:8b:be:39:97:c3:e7:f6:31:a1:23:b8:ba:a2:20:
2a:fd:be:d4:70:b7:8e:2e:60:3d:bb:f4:b7:84:d3:ea:e9:12:
f5:ae:d8:f6:d7:cf:6c:46:df:37:a1:b1:3b:e3:c2:ef:bb:4e:
55:61:a8:da:6b:45:dd:56:88:db:91:e4:1e:8b:31:6c:60:7b:
97:f7:85:f3:65:b5:51:c1:de:7b:49:06:7e:fd:45:e6:ad:5a:
54:27:91:56:fe:b8:ff:c2:c3:4a:3e:57:2d:6b:ad:9d:ac:64:
aa:cb:98:be
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzIAXgpY2uUY0dkSKUkZhYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk
MzcxMjkwHhcNMjQwMTAyMDIyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MGE4ZjczZjgyYWU5NGQzNmMzNDI5YTdhZjJhZTMzMDlkYWNiNjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Dbm/se5CuT9Q7iIBvBk8TNd1mvo
qifUs+lggpH4G5O6IsJlCIfKk+E7ArIYVxscoWqf0xrUEgkNcSwb7S3Pdbugm34e
Vl3AnJlAeClsIxA61XilhmIJMlWQju0SDgr7dIxPCGezPIbeoW3LaKhBJaZTjiE6
UpXJd/qu72VxFJDybcVpL5S5iQWtQg0HeW3VZ0Ymx5ihS3oxa/BpmiOr+ufc877M
/Lk6wQCZPx8aB3kJc80IfVD0vPllj6EI9NbWnLLNzrrVAHsCFO+W+XvAhkCPQynr
jPO76jNPw9ypuK3Oo/O/lIBivZPZ6g+UnKez8xIPyuaQ7an1Pv2pjezw6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJCo9z+CrpTTbDQpp68q4zCdrLYwMB8GA1UdIwQY
MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt
M2JiNGQ2MjAwNTE4LzEva0tqM1A0S3VsTk5zTkNtbnJ5cmpNSjJzdGpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4
LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAPkPFAwQA
1fSRMA0GCSqGSIb3DQEBCwUAA4IBAQA1h/3fn0P5CnB6JuwELc8W/1FzX2dedFkk
ftWifRGfWjfa/kOvGPjMxdPOtoMxnHuSGHGtkhJ0Km29FjVxPNCnAvZ/6bKi57gP
8r1vyEYQ2thga5XX6O14eGpXvPm9o48PT8ksRDHRmqTepR2ZUhkuxIrw2EhNchTi
dfxg3zGq58l2OZoMX4XZ/YUM9KP/fVF7Ugi7i745l8Pn9jGhI7i6oiAq/b7UcLeO
LmA9u/S3hNPq6RL1rtj2189sRt83obE748Lvu05VYajaa0XdVojbkeQeizFsYHuX
94XzZbVRwd57SQZ+/UXmrVpUJ5FW/rj/wsNKPlcta62drGSqy5i+
-----END CERTIFICATE-----
Generated at Mon May 6 04:27:49 2024 by rpki-client on console-fra.rpki-client.org