Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/3e3m-qGbwpm-q4kj8OF2lhgJc6E.roa
File: 3e3m-qGbwpm-q4kj8OF2lhgJc6E.roa (raw, json)
Hash identifier: d22NUE1XM5M8GS+W6Z7bM6IQc6+2+WVbGQvC5YsIVJo=
Subject key identifier: DD:ED:E6:FA:A1:9B:C2:99:BE:AB:89:23:F0:E1:76:96:18:09:73:A1
Certificate issuer: /CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Certificate serial: 018CC348E8BBD3DFA05EA5B2E15937228B50
Authority key identifier: 4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/3e3m-qGbwpm-q4kj8OF2lhgJc6E.roa
Signing time: Mon 01 Jan 2024 04:29:44 +0000
ROA not before: Mon 01 Jan 2024 04:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50532
IP address blocks: 85.234.102.0/23 maxlen: 24
85.234.114.0/23 maxlen: 24
2a0a:6f40:2::/47 maxlen: 48
2a0a:6f40:4::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:e8:bb:d3:df:a0:5e:a5:b2:e1:59:37:22:8b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2b89c3c57a3e296aa4061e962840be7ae8f018
Validity
Not Before: Jan 1 04:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ddede6faa19bc299beab8923f0e17696180973a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a8:26:03:93:45:2c:94:d3:53:f7:83:dd:3d:
d4:3f:43:70:ad:f8:60:c4:0d:f9:10:60:ad:1f:1d:
72:2b:d0:6c:9c:d0:a9:51:25:f6:5d:01:ae:72:7a:
51:ff:33:ac:0f:47:d6:47:67:53:0f:c9:01:8b:9d:
59:12:e5:06:2b:81:2c:0d:ad:ad:fc:62:27:f4:62:
35:e0:c1:4f:ce:55:a8:dd:11:a8:8f:3a:c7:42:59:
ac:0c:fc:08:13:c3:df:f3:e4:e9:a4:40:fd:8d:08:
75:20:66:a1:30:90:af:6a:e5:41:27:46:62:d7:05:
1d:b2:74:21:78:24:63:bd:11:30:78:af:c0:13:77:
a4:87:44:5d:e0:5b:26:90:18:b8:96:da:c7:a5:7e:
15:6e:7e:cb:51:fd:06:3e:a8:6b:8b:a7:91:63:af:
80:ab:ea:d4:62:99:39:95:75:03:a5:44:6c:16:b6:
1f:e0:9a:14:92:de:b2:df:b8:66:b7:28:53:02:89:
ab:13:97:cb:0c:25:0d:a0:fc:2a:3d:97:be:c7:85:
4c:c2:07:9d:dd:5c:2e:73:98:94:e2:75:2b:f1:fe:
dd:c0:33:0d:cb:aa:b0:39:09:cb:b2:41:b6:0d:1b:
06:58:cb:6f:96:b9:c4:b4:38:de:09:ef:7b:0a:8f:
27:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:ED:E6:FA:A1:9B:C2:99:BE:AB:89:23:F0:E1:76:96:18:09:73:A1
X509v3 Authority Key Identifier:
keyid:4C:2B:89:C3:C5:7A:3E:29:6A:A4:06:1E:96:28:40:BE:7A:E8:F0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCuJw8V6PilqpAYelihAvnro8Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/3e3m-qGbwpm-q4kj8OF2lhgJc6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/72155a-d109-4c2d-b974-1128e5ce6a5b/1/TCuJw8V6PilqpAYelihAvnro8Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.234.102.0/23
85.234.114.0/23
IPv6:
2a0a:6f40:2::-2a0a:6f40:5:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
72:e6:33:72:86:68:8b:cc:b2:bb:fb:e2:a3:78:f8:08:25:f5:
2c:43:dc:c5:fa:93:45:cd:00:70:5f:fc:58:a6:49:06:8f:43:
11:7a:12:20:b9:a7:0c:12:19:9e:88:c0:f0:52:a1:7d:4b:65:
b1:4f:b9:54:59:ac:da:b0:c4:93:eb:8e:3c:50:ac:2a:65:8d:
db:f4:ff:82:59:eb:38:a1:b9:84:32:1e:b1:ce:49:eb:23:c8:
ff:07:4a:2c:c9:9b:88:ed:8d:73:5e:0e:a6:4b:5d:bb:9f:75:
c6:37:dd:57:5b:53:ac:fc:0a:f0:18:e6:25:aa:ca:ca:06:d8:
03:b9:44:a9:18:57:24:15:73:fd:87:f3:9e:29:e0:4b:b3:51:
ae:1e:a6:b3:f7:fd:9e:9a:85:89:7d:08:9f:47:f0:73:49:f1:
ed:e1:9f:36:ba:e9:d5:3b:d3:f9:b5:be:b1:ad:02:fe:34:7f:
72:a6:0a:2b:06:b9:f9:64:ce:f4:24:98:f1:52:ca:de:93:ad:
c7:58:e1:c7:f9:28:20:b7:ce:99:d2:99:59:ee:a1:0a:1a:22:
d0:fd:96:7b:b7:99:02:36:06:43:ff:b2:d8:ec:98:23:d3:b7:
e1:be:f8:e9:1c:16:1c:79:cf:49:c7:ce:d7:b8:81:37:17:60:
a6:a3:9b:40
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgISAYzDSOi709+gXqWy4Vk3IotQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmI4OWMzYzU3YTNlMjk2YWE0MDYxZTk2Mjg0MGJlN2Fl
OGYwMTgwHhcNMjQwMTAxMDQyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZGVkZTZmYWExOWJjMjk5YmVhYjg5MjNmMGUxNzY5NjE4MDk3M2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6gmA5NFLJTTU/eD3T3UP0Nwrfhg
xA35EGCtHx1yK9BsnNCpUSX2XQGucnpR/zOsD0fWR2dTD8kBi51ZEuUGK4EsDa2t
/GIn9GI14MFPzlWo3RGojzrHQlmsDPwIE8Pf8+TppED9jQh1IGahMJCvauVBJ0Zi
1wUdsnQheCRjvREweK/AE3ekh0Rd4FsmkBi4ltrHpX4Vbn7LUf0GPqhri6eRY6+A
q+rUYpk5lXUDpURsFrYf4JoUkt6y37hmtyhTAomrE5fLDCUNoPwqPZe+x4VMwged
3Vwuc5iU4nUr8f7dwDMNy6qwOQnLskG2DRsGWMtvlrnEtDjeCe97Co8ncQIDAQAB
o4ICKzCCAicwHQYDVR0OBBYEFN3t5vqhm8KZvquJI/DhdpYYCXOhMB8GA1UdIwQY
MBaAFEwricPFej4paqQGHpYoQL566PAYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQt
MTEyOGU1Y2U2YTViLzEvM2UzbS1xR2J3cG0tcTRrajhPRjJsaGdKYzZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni83MjE1NWEtZDEwOS00YzJkLWI5NzQtMTEyOGU1Y2U2YTVi
LzEvVEN1Snc4VjZQaWxxcEFZZWxpaEF2bnJvOEJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEEGCCsGAQUFBwEHAQH/BDIwMDASBAIAATAMAwQBVepmAwQB
VepyMBoEAgACMBQwEgMHASoKb0AAAgMHASoKb0AABDANBgkqhkiG9w0BAQsFAAOC
AQEAcuYzcoZoi8yyu/vio3j4CCX1LEPcxfqTRc0AcF/8WKZJBo9DEXoSILmnDBIZ
nojA8FKhfUtlsU+5VFms2rDEk+uOPFCsKmWN2/T/glnrOKG5hDIesc5J6yPI/wdK
LMmbiO2Nc14Opktdu591xjfdV1tTrPwK8BjmJarKygbYA7lEqRhXJBVz/Yfzning
S7NRrh6ms/f9npqFiX0In0fwc0nx7eGfNrrp1TvT+bW+sa0C/jR/cqYKKwa5+WTO
9CSY8VLK3pOtx1jhx/koILfOmdKZWe6hChoi0P2We7eZAjYGQ/+y2OyYI9O34b74
6RwWHHnPScfO17iBNxdgpqObQA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 18:13:25 2024 by rpki-client on console-fra.rpki-client.org