Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7e9aq8vnhI2jwgbYVilH1oAHXi4.roa
File: 7e9aq8vnhI2jwgbYVilH1oAHXi4.roa (raw, json)
Hash identifier: CJdvVJprX+rRHEJiCNAkyLT5SSxlx8Qe/JJeGVhxSCE=
Subject key identifier: ED:EF:5A:AB:CB:E7:84:8D:A3:C2:06:D8:56:29:47:D6:80:07:5E:2E
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018FDEAD43128FE67DA6962396EAC3EACBF8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7e9aq8vnhI2jwgbYVilH1oAHXi4.roa
Signing time: Mon 03 Jun 2024 15:17:27 +0000
ROA not before: Mon 03 Jun 2024 15:17:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209336
IP address blocks: 89.213.62.0/24 maxlen: 24
212.38.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:de:ad:43:12:8f:e6:7d:a6:96:23:96:ea:c3:ea:cb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 3 15:17:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=edef5aabcbe7848da3c206d8562947d680075e2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cb:f7:f6:25:77:ae:2a:8a:a9:75:e7:ce:6c:
f8:7c:86:92:01:b3:56:51:69:40:cc:ff:42:52:76:
d8:12:bd:66:de:2b:82:0f:f6:42:44:4d:6a:33:30:
78:d8:6c:65:1a:8a:eb:2c:47:76:e0:cc:ac:ac:61:
b4:fa:f7:67:d5:b0:d4:3f:fb:39:c3:f7:86:96:14:
f3:1d:7c:a3:46:f5:d4:a6:46:18:39:81:2b:75:72:
28:70:68:86:a0:bc:7a:e4:d7:b8:00:35:a2:63:e0:
54:48:aa:87:ba:87:7f:97:6a:f6:1a:c3:79:9a:9a:
5e:82:6f:5b:47:cd:b5:ac:1d:7b:4e:94:e4:a5:d3:
89:84:dc:a2:62:3e:3e:80:12:17:f6:fc:ff:34:6c:
ac:80:c9:75:5f:c2:2b:8f:81:ef:67:92:06:26:81:
64:c3:c4:c7:f3:51:40:d8:73:08:ae:aa:a2:89:dd:
30:8b:b8:e1:99:f5:e0:6f:5a:06:6f:48:dc:82:18:
dd:1e:3d:79:ed:7c:bc:2a:dc:31:38:3f:74:3f:fc:
8e:bf:b6:74:fb:a2:9d:3f:e8:91:6a:ef:b0:b3:7c:
64:2d:67:7f:b2:49:61:53:ed:f1:c6:35:8f:0c:3e:
4f:08:d7:22:68:8e:32:89:9d:c5:8e:80:70:15:7d:
91:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EF:5A:AB:CB:E7:84:8D:A3:C2:06:D8:56:29:47:D6:80:07:5E:2E
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/7e9aq8vnhI2jwgbYVilH1oAHXi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.62.0/24
212.38.71.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:15:05:c9:f6:d4:e5:81:0d:77:a9:24:29:6e:5d:ee:21:10:
c6:48:ff:7f:fb:98:7e:4f:3a:70:26:5c:d2:04:41:b2:dd:ec:
c9:74:66:f9:19:41:ec:16:a3:06:7c:58:e8:98:9e:f9:74:78:
3b:f4:c5:d0:79:cc:19:cc:41:b2:6a:22:c7:4c:e7:56:c3:eb:
51:a9:12:6f:bd:84:d2:0c:75:64:32:ae:f9:6c:a6:6e:26:e3:
bc:92:9e:69:54:69:3e:9e:76:60:41:ba:f2:a2:89:6c:46:3c:
d5:ce:ff:c2:2f:5c:4a:40:f0:d3:14:fa:b0:b0:94:de:54:58:
9b:1d:62:68:85:6f:51:95:1b:1a:51:2a:88:ff:c2:8d:0b:2a:
a0:44:06:21:32:5b:15:e8:b7:03:70:3c:4f:75:6c:35:76:6a:
16:49:0b:bc:ef:b2:9a:bb:f4:d6:be:19:98:bb:d9:ba:32:5d:
54:da:eb:2c:8a:9f:e7:7d:25:29:96:b7:00:36:e2:a8:56:87:
57:bc:70:05:04:05:4f:4c:73:d5:13:a4:ab:76:b9:b8:86:f5:
ae:04:d1:94:35:09:be:ac:59:05:90:fa:aa:ad:df:2b:9e:1a:
dc:ea:23:da:6b:ce:65:cd:53:a0:1c:84:bb:08:15:19:1e:c5:
9d:39:03:c6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY/erUMSj+Z9ppYjlurD6sv4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNjAzMTUxNzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGVmNWFhYmNiZTc4NDhkYTNjMjA2ZDg1NjI5NDdkNjgwMDc1ZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8v39iV3riqKqXXnzmz4fIaSAbNW
UWlAzP9CUnbYEr1m3iuCD/ZCRE1qMzB42GxlGorrLEd24MysrGG0+vdn1bDUP/s5
w/eGlhTzHXyjRvXUpkYYOYErdXIocGiGoLx65Ne4ADWiY+BUSKqHuod/l2r2GsN5
mppegm9bR821rB17TpTkpdOJhNyiYj4+gBIX9vz/NGysgMl1X8Irj4HvZ5IGJoFk
w8TH81FA2HMIrqqiid0wi7jhmfXgb1oGb0jcghjdHj157Xy8KtwxOD90P/yOv7Z0
+6KdP+iRau+ws3xkLWd/sklhU+3xxjWPDD5PCNciaI4yiZ3FjoBwFX2RJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO3vWqvL54SNo8IG2FYpR9aAB14uMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvN2U5YXE4dm5oSTJqd2diWVZpbEgxb0FIWGk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAWdU+AwQA
1CZHMA0GCSqGSIb3DQEBCwUAA4IBAQBKFQXJ9tTlgQ13qSQpbl3uIRDGSP9/+5h+
TzpwJlzSBEGy3ezJdGb5GUHsFqMGfFjomJ75dHg79MXQecwZzEGyaiLHTOdWw+tR
qRJvvYTSDHVkMq75bKZuJuO8kp5pVGk+nnZgQbryoolsRjzVzv/CL1xKQPDTFPqw
sJTeVFibHWJohW9RlRsaUSqI/8KNCyqgRAYhMlsV6LcDcDxPdWw1dmoWSQu877Ka
u/TWvhmYu9m6Ml1U2ussip/nfSUplrcANuKoVodXvHAFBAVPTHPVE6Srdrm4hvWu
BNGUNQm+rFkFkPqqrd8rnhrc6iPaa85lzVOgHIS7CBUZHsWdOQPG
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:00 2024 by rpki-client on console-fra.rpki-client.org