Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/20IfWGwQpd5_k8HTXeI-xP8Atik.roa
File: 20IfWGwQpd5_k8HTXeI-xP8Atik.roa (raw, json)
Hash identifier: 2Yp0rDiTINMjvptWQxdmgr6KZJm6Md0fT6fy19+lGQ8=
Subject key identifier: DB:42:1F:58:6C:10:A5:DE:7F:93:C1:D3:5D:E2:3E:C4:FF:00:B6:29
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F9A210027454387414CFBE249FDB1FCA1
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/20IfWGwQpd5_k8HTXeI-xP8Atik.roa
Signing time: Tue 21 May 2024 07:50:04 +0000
ROA not before: Tue 21 May 2024 07:50:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209043
IP address blocks: 89.213.115.0/24 maxlen: 24
213.152.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:9a:21:00:27:45:43:87:41:4c:fb:e2:49:fd:b1:fc:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 21 07:50:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db421f586c10a5de7f93c1d35de23ec4ff00b629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:93:89:7d:e5:a3:56:de:0f:3e:29:4f:f7:1b:
07:35:40:4b:18:50:02:b5:c0:20:76:73:b8:5d:2f:
41:c2:ef:40:5f:d5:d4:83:a2:79:2c:95:55:92:87:
29:a0:b8:6e:29:81:d3:59:e3:e5:56:d4:4b:82:1e:
ca:fe:1c:5c:e9:43:34:f4:94:81:a8:d8:e5:4b:06:
73:05:08:fd:61:0d:f2:88:44:08:a4:4a:67:f0:56:
f3:35:59:b7:63:59:c4:9d:f1:b7:17:01:b3:8b:4a:
37:83:93:08:81:86:da:1c:08:dc:0e:2c:52:bd:d7:
c7:b0:e3:d4:71:92:7f:c2:de:2e:3e:7a:88:a6:54:
bc:f3:6f:fe:ce:30:12:0b:64:62:34:b5:2c:85:eb:
f1:17:85:e4:2b:c9:83:be:0f:68:97:43:45:d9:1a:
0a:28:36:3a:ec:3a:ed:35:da:01:91:c1:3e:73:fa:
eb:94:38:ab:72:80:90:c4:9e:8d:83:8c:be:2c:43:
66:e9:d3:e9:f5:8b:2d:30:3c:3a:9f:5d:54:c8:f3:
39:6a:c6:1a:a0:17:06:ee:ef:f1:b9:4c:19:3d:6d:
c7:0d:e8:ab:20:1e:a4:4f:2a:f2:a5:a7:5b:6f:75:
50:97:76:cb:15:0b:cd:81:f0:04:db:20:22:ee:cd:
15:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:42:1F:58:6C:10:A5:DE:7F:93:C1:D3:5D:E2:3E:C4:FF:00:B6:29
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/20IfWGwQpd5_k8HTXeI-xP8Atik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.115.0/24
213.152.42.0/24
Signature Algorithm: sha256WithRSAEncryption
33:ff:61:57:6b:98:eb:f2:59:ce:f5:94:c4:b2:1e:2d:9f:47:
b2:20:8a:1b:f7:b8:cf:38:eb:e6:ba:4c:f4:0f:97:e0:d2:ac:
50:8b:e9:3e:2b:2d:f9:ed:eb:24:46:79:61:04:00:b0:e6:82:
78:0e:d9:48:2a:41:96:6e:1c:8f:4c:6e:5a:fc:f3:4d:3f:28:
a6:a0:87:bf:a7:bf:3c:9b:f2:8b:49:a0:d9:86:55:3e:b5:bd:
d5:50:da:d4:2e:9a:40:8b:8e:90:b7:f0:06:61:70:77:68:16:
5f:ff:ff:d3:ec:d1:6d:b4:ae:70:5c:89:c4:aa:1d:a7:ec:2f:
22:c8:15:9e:fa:ea:84:14:a7:84:ae:1f:99:6e:18:c9:95:93:
4c:9a:14:5d:a0:eb:ed:90:ee:00:15:13:dd:68:a7:f2:cc:b2:
60:ba:7f:07:5a:c4:f4:b6:5a:66:99:f1:e2:7f:21:2a:69:11:
95:2f:11:92:8b:38:35:9b:37:58:18:fa:50:0a:a7:48:03:28:
15:3c:d3:6d:2a:3c:4d:75:f8:bd:c4:99:4d:7e:92:15:1c:0d:
f5:1d:b6:75:fa:61:6e:b8:b1:de:7b:28:bb:7e:82:76:d1:42:
68:b1:5a:7e:ef:19:8e:63:02:19:6a:47:fe:00:35:7c:f1:10:
a9:1d:9b:ca
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY+aIQAnRUOHQUz74kn9sfyhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNTIxMDc1MDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjQyMWY1ODZjMTBhNWRlN2Y5M2MxZDM1ZGUyM2VjNGZmMDBiNjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypOJfeWjVt4PPilP9xsHNUBLGFAC
tcAgdnO4XS9Bwu9AX9XUg6J5LJVVkocpoLhuKYHTWePlVtRLgh7K/hxc6UM09JSB
qNjlSwZzBQj9YQ3yiEQIpEpn8FbzNVm3Y1nEnfG3FwGzi0o3g5MIgYbaHAjcDixS
vdfHsOPUcZJ/wt4uPnqIplS882/+zjASC2RiNLUshevxF4XkK8mDvg9ol0NF2RoK
KDY67DrtNdoBkcE+c/rrlDircoCQxJ6Ng4y+LENm6dPp9YstMDw6n11UyPM5asYa
oBcG7u/xuUwZPW3HDeirIB6kTyrypadbb3VQl3bLFQvNgfAE2yAi7s0VFwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNtCH1hsEKXef5PB013iPsT/ALYpMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvMjBJZldHd1FwZDVfazhIVFhlSS14UDhBdGlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWdVzAwQA
1ZgqMA0GCSqGSIb3DQEBCwUAA4IBAQAz/2FXa5jr8lnO9ZTEsh4tn0eyIIob97jP
OOvmukz0D5fg0qxQi+k+Ky357eskRnlhBACw5oJ4DtlIKkGWbhyPTG5a/PNNPyim
oIe/p788m/KLSaDZhlU+tb3VUNrULppAi46Qt/AGYXB3aBZf///T7NFttK5wXInE
qh2n7C8iyBWe+uqEFKeErh+ZbhjJlZNMmhRdoOvtkO4AFRPdaKfyzLJgun8HWsT0
tlpmmfHifyEqaRGVLxGSizg1mzdYGPpQCqdIAygVPNNtKjxNdfi9xJlNfpIVHA31
HbZ1+mFuuLHeeyi7foJ20UJosVp+7xmOYwIZakf+ADV88RCpHZvK
-----END CERTIFICATE-----
Generated at Wed Jun 26 05:13:02 2024 by rpki-client on console-ams.rpki-client.org