Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/0BM3JiqCzVVbpi_bm0ZRcv6T8Ww.roa
File: 0BM3JiqCzVVbpi_bm0ZRcv6T8Ww.roa (raw, json)
Hash identifier: Ymk6d9YIxlu+mMAk+wsHnFA4CPyKDeLF1MsjRpRZYYU=
Subject key identifier: D0:13:37:26:2A:82:CD:55:5B:A6:2F:DB:9B:46:51:72:FE:93:F1:6C
Certificate issuer: /CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Certificate serial: 01934F8B9C86A915C693AFD55B94C5A756CC
Authority key identifier: 4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/0BM3JiqCzVVbpi_bm0ZRcv6T8Ww.roa
Signing time: Thu 21 Nov 2024 16:26:09 +0000
ROA not before: Thu 21 Nov 2024 16:26:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54994
IP address blocks: 140.150.0.0/24 maxlen: 24
140.150.1.0/24 maxlen: 24
140.150.2.0/24 maxlen: 24
140.150.3.0/24 maxlen: 24
140.150.4.0/24 maxlen: 24
140.150.5.0/24 maxlen: 24
140.150.6.0/24 maxlen: 24
140.150.7.0/24 maxlen: 24
140.150.8.0/23 maxlen: 24
140.150.12.0/24 maxlen: 24
140.150.18.0/24 maxlen: 24
140.150.19.0/24 maxlen: 24
140.150.21.0/24 maxlen: 24
140.150.24.0/24 maxlen: 24
140.150.25.0/24 maxlen: 24
140.150.28.0/24 maxlen: 24
140.150.29.0/24 maxlen: 24
140.150.30.0/24 maxlen: 24
140.150.31.0/24 maxlen: 24
140.150.32.0/24 maxlen: 24
140.150.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4f:8b:9c:86:a9:15:c6:93:af:d5:5b:94:c5:a7:56:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b9331fa7be470dc179e16c306e98c6c731a575c
Validity
Not Before: Nov 21 16:26:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d01337262a82cd555ba62fdb9b465172fe93f16c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:52:69:e1:a2:ba:1a:79:ee:de:de:7d:f6:
86:22:3f:ef:95:be:16:4e:ed:01:0f:74:69:6e:13:
79:1e:37:b9:f3:30:2b:1c:34:3d:f4:96:e7:d7:de:
d9:1c:0c:0c:6b:58:61:2f:cb:e4:19:a8:36:9b:22:
e0:c3:8c:9e:e9:d3:0b:ee:97:86:e3:27:5d:09:37:
0c:82:3a:bb:28:7e:b0:74:52:d6:23:a2:2e:6c:33:
2e:ac:c5:55:3f:a5:82:e7:cb:b1:67:01:a3:99:4a:
93:58:11:63:5a:50:c8:22:97:e1:75:1c:44:0a:ab:
d1:23:87:96:d1:c4:e5:47:12:87:20:da:87:45:77:
59:42:72:08:05:da:c6:9d:2f:5e:53:39:20:b6:33:
64:13:14:e7:ea:38:b2:9d:31:25:7f:e8:34:35:56:
97:fc:c4:bb:ee:99:95:f9:ae:92:ff:a3:01:93:ae:
e3:c4:92:c5:a0:db:c0:18:16:5e:46:42:42:fe:da:
29:e5:1f:16:26:67:e5:95:4e:17:d1:4b:ba:78:b0:
22:ad:5d:11:86:4c:4b:4b:29:cd:a5:fd:a6:5d:f8:
97:2f:20:24:90:05:3c:ad:7f:7b:ed:47:d1:3d:68:
6a:2e:90:b2:98:f3:50:51:0f:7a:57:36:43:ad:68:
7e:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:13:37:26:2A:82:CD:55:5B:A6:2F:DB:9B:46:51:72:FE:93:F1:6C
X509v3 Authority Key Identifier:
keyid:4B:93:31:FA:7B:E4:70:DC:17:9E:16:C3:06:E9:8C:6C:73:1A:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5Mx-nvkcNwXnhbDBumMbHMaV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/0BM3JiqCzVVbpi_bm0ZRcv6T8Ww.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5b48a7-a0d7-43f2-a362-8b2b4738b1cc/1/S5Mx-nvkcNwXnhbDBumMbHMaV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.150.0.0-140.150.9.255
140.150.12.0/24
140.150.18.0/23
140.150.21.0/24
140.150.24.0/23
140.150.28.0-140.150.33.255
Signature Algorithm: sha256WithRSAEncryption
9f:e6:06:8d:6b:11:99:7c:90:8f:53:8a:ed:94:6f:de:53:da:
72:9e:a4:8d:c1:29:bf:a9:2e:d2:d9:33:b8:c6:2e:fb:a6:9e:
e8:ac:71:b1:50:4a:26:b8:16:09:15:07:cb:ee:31:03:b8:a9:
a1:13:65:59:92:81:56:55:f0:e8:3e:40:8a:21:f4:ca:ac:2c:
86:60:3b:e1:1b:d0:cb:36:28:fe:e5:86:35:f5:4e:f3:36:16:
44:56:30:da:3f:57:8e:96:42:56:be:35:56:32:39:c6:ca:50:
38:77:e7:a2:0f:6b:d1:5a:c1:f0:54:f7:be:29:33:8b:4e:bc:
36:f9:77:3f:ac:70:bf:c7:26:92:26:48:36:82:83:4d:b1:ff:
87:79:f7:71:be:f5:26:65:a6:8e:17:da:d8:d1:2b:97:9f:0b:
93:fc:59:c6:a7:fd:1c:9e:1a:71:87:bd:e1:a3:cc:e7:36:85:
95:f3:7b:bd:f6:8d:03:cc:3c:46:8b:0d:dc:08:99:35:73:17:
b0:85:4d:43:23:e7:41:43:ea:5c:36:5c:4b:58:3a:ee:1f:68:
8a:04:ed:a8:36:10:66:47:c3:fc:07:b4:c8:10:02:c9:59:64:
64:c3:99:7f:d6:5b:cd:40:2d:00:07:4b:66:41:2d:08:7b:94:
a4:02:a1:49
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZNPi5yGqRXGk6/VW5TFp1bMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTMzMWZhN2JlNDcwZGMxNzllMTZjMzA2ZTk4YzZjNzMx
YTU3NWMwHhcNMjQxMTIxMTYyNjA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDEzMzcyNjJhODJjZDU1NWJhNjJmZGI5YjQ2NTE3MmZlOTNmMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlBSaeGiuhp57t7effaGIj/vlb4W
Tu0BD3RpbhN5Hje58zArHDQ99Jbn197ZHAwMa1hhL8vkGag2myLgw4ye6dML7peG
4yddCTcMgjq7KH6wdFLWI6IubDMurMVVP6WC58uxZwGjmUqTWBFjWlDIIpfhdRxE
CqvRI4eW0cTlRxKHINqHRXdZQnIIBdrGnS9eUzkgtjNkExTn6jiynTElf+g0NVaX
/MS77pmV+a6S/6MBk67jxJLFoNvAGBZeRkJC/top5R8WJmfllU4X0Uu6eLAirV0R
hkxLSynNpf2mXfiXLyAkkAU8rX977UfRPWhqLpCymPNQUQ96VzZDrWh+bQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFNATNyYqgs1VW6Yv25tGUXL+k/FsMB8GA1UdIwQY
MBaAFEuTMfp75HDcF54WwwbpjGxzGldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjIt
OGIyYjQ3MzhiMWNjLzEvMEJNM0ppcUN6VlZicGlfYm0wWlJjdjZUOFd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81YjQ4YTctYTBkNy00M2YyLWEzNjItOGIyYjQ3MzhiMWNj
LzEvUzVNeC1udmtjTndYbmhiREJ1bU1iSE1hVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzA5BAIAATAzMAsDAwGMlgME
AYyWCAMEAIyWDAMEAYyWEgMEAIyWFQMEAYyWGDAMAwQCjJYcAwQBjJYgMA0GCSqG
SIb3DQEBCwUAA4IBAQCf5gaNaxGZfJCPU4rtlG/eU9pynqSNwSm/qS7S2TO4xi77
pp7orHGxUEomuBYJFQfL7jEDuKmhE2VZkoFWVfDoPkCKIfTKrCyGYDvhG9DLNij+
5YY19U7zNhZEVjDaP1eOlkJWvjVWMjnGylA4d+eiD2vRWsHwVPe+KTOLTrw2+Xc/
rHC/xyaSJkg2goNNsf+HefdxvvUmZaaOF9rY0SuXnwuT/FnGp/0cnhpxh73ho8zn
NoWV83u99o0DzDxGiw3cCJk1cxewhU1DI+dBQ+pcNlxLWDruH2iKBO2oNhBmR8P8
B7TIEALJWWRkw5l/1lvNQC0AB0tmQS0Ie5SkAqFJ
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:50:07 2024 by rpki-client on console-fra.rpki-client.org