Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tR7PJW8qIjFHdMzp8DRFlpGPNoY.roa
File: tR7PJW8qIjFHdMzp8DRFlpGPNoY.roa (raw, json)
Hash identifier: pUY4ZyuhS8M/ehgrJtfe8LBMF0WTiN0+3n//OAnp6R8=
Subject key identifier: B5:1E:CF:25:6F:2A:22:31:47:74:CC:E9:F0:34:45:96:91:8F:36:86
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0191B35DA0B42FEC586DEFCD127E243E7D8C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tR7PJW8qIjFHdMzp8DRFlpGPNoY.roa
Signing time: Mon 02 Sep 2024 15:32:23 +0000
ROA not before: Mon 02 Sep 2024 15:32:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211415
IP address blocks: 109.176.29.0/24 maxlen: 24
109.176.31.0/24 maxlen: 24
213.218.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b3:5d:a0:b4:2f:ec:58:6d:ef:cd:12:7e:24:3e:7d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Sep 2 15:32:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b51ecf256f2a22314774cce9f0344596918f3686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:fb:e7:0d:84:bf:47:e3:9e:a0:ea:e3:6b:
36:92:3c:3e:b2:37:76:8f:1d:e1:bf:0f:52:94:63:
86:ee:b6:58:16:03:55:ae:aa:6e:a7:35:0f:1c:6d:
1c:c8:84:2c:68:d2:63:0f:b3:13:0e:6c:d8:4d:36:
6f:06:98:8c:7c:71:55:65:2d:a4:4b:73:9e:02:85:
13:e1:0e:9f:9e:42:5a:1e:f4:eb:10:b2:3d:97:94:
20:15:bb:7f:cf:13:81:bc:7f:f1:19:5c:16:22:0b:
44:68:60:3a:09:15:fb:bf:f4:f0:2c:6b:19:35:28:
e9:b1:13:ec:4f:20:84:75:3a:f5:34:0d:94:b5:2f:
e4:86:31:02:45:85:92:eb:2e:64:33:3d:e7:31:c1:
34:b6:6b:65:98:83:7c:d2:45:8d:3f:6e:71:fb:24:
e7:0b:99:60:60:91:76:9f:ce:3c:fc:71:99:62:04:
09:bf:af:8d:30:df:90:36:5f:24:c6:e8:36:84:28:
84:53:12:da:dd:57:d0:f7:33:aa:f8:b9:6c:22:65:
cf:4a:60:ad:51:77:00:18:fa:b8:3a:de:48:3c:af:
ef:b3:47:c5:0e:b9:2d:e7:4b:eb:0f:19:db:7e:c7:
a3:cc:f1:40:ae:12:5b:bd:ed:f5:9c:13:a1:18:53:
77:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:1E:CF:25:6F:2A:22:31:47:74:CC:E9:F0:34:45:96:91:8F:36:86
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/tR7PJW8qIjFHdMzp8DRFlpGPNoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.29.0/24
109.176.31.0/24
213.218.242.0/24
Signature Algorithm: sha256WithRSAEncryption
36:d4:8b:7a:50:0c:00:5c:c6:df:c1:ce:69:8b:31:99:18:11:
fc:99:4d:ee:16:84:0e:14:1b:8b:c1:68:51:06:c9:40:ac:7b:
62:0f:a9:f2:4b:d2:aa:b0:d1:31:9c:97:df:2c:72:c0:c5:aa:
ee:7e:f5:7e:46:98:b5:31:49:31:74:f5:a6:64:8d:bd:c5:61:
ac:dc:da:0d:7e:1e:e3:19:d7:4d:68:5e:bb:3f:ca:b9:ab:f0:
d2:8b:c7:ad:4d:47:d6:15:e1:b4:29:26:65:70:4e:ce:89:f9:
1b:67:3a:fa:a6:41:77:2e:79:53:36:39:d4:27:55:7b:39:bd:
32:c3:cf:a0:bf:ea:fc:37:b6:84:03:61:a8:17:29:76:a7:32:
8b:fd:90:f3:ed:3b:3b:05:41:1b:38:0e:9b:e4:9c:71:cb:5b:
dd:42:e7:5c:7e:d4:ad:f4:fb:0d:6d:47:f6:b2:aa:a4:c6:eb:
26:5b:83:20:06:41:05:77:82:94:9e:9e:30:c4:a4:43:8e:e8:
eb:99:d5:3d:ca:8b:11:2f:b2:bd:74:ea:f4:2e:c5:68:1f:28:
0b:10:66:1c:f6:31:58:9c:d1:8a:dd:4c:3a:b2:f4:cc:39:fc:
4a:b3:c7:3e:c4:64:35:62:89:5a:df:a2:5e:0e:fa:08:6a:db:
8a:5a:22:c1
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZGzXaC0L+xYbe/NEn4kPn2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwOTAyMTUzMjIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTFlY2YyNTZmMmEyMjMxNDc3NGNjZTlmMDM0NDU5NjkxOGYzNjg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtin75w2Ev0fjnqDq42s2kjw+sjd2
jx3hvw9SlGOG7rZYFgNVrqpupzUPHG0cyIQsaNJjD7MTDmzYTTZvBpiMfHFVZS2k
S3OeAoUT4Q6fnkJaHvTrELI9l5QgFbt/zxOBvH/xGVwWIgtEaGA6CRX7v/TwLGsZ
NSjpsRPsTyCEdTr1NA2UtS/khjECRYWS6y5kMz3nMcE0tmtlmIN80kWNP25x+yTn
C5lgYJF2n848/HGZYgQJv6+NMN+QNl8kxug2hCiEUxLa3VfQ9zOq+LlsImXPSmCt
UXcAGPq4Ot5IPK/vs0fFDrkt50vrDxnbfsejzPFArhJbve31nBOhGFN3CQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLUezyVvKiIxR3TM6fA0RZaRjzaGMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvdFI3UEpXOHFJakZIZE16cDhEUkZscEdQTm9ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAbbAdAwQA
bbAfAwQA1dryMA0GCSqGSIb3DQEBCwUAA4IBAQA21It6UAwAXMbfwc5pizGZGBH8
mU3uFoQOFBuLwWhRBslArHtiD6nyS9KqsNExnJffLHLAxarufvV+Rpi1MUkxdPWm
ZI29xWGs3NoNfh7jGddNaF67P8q5q/DSi8etTUfWFeG0KSZlcE7OifkbZzr6pkF3
LnlTNjnUJ1V7Ob0yw8+gv+r8N7aEA2GoFyl2pzKL/ZDz7Ts7BUEbOA6b5Jxxy1vd
QudcftSt9PsNbUf2sqqkxusmW4MgBkEFd4KUnp4wxKRDjujrmdU9yosRL7K9dOr0
LsVoHygLEGYc9jFYnNGK3Uw6svTMOfxKs8c+xGQ1Yola36JeDvoIatuKWiLB
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:45:01 2024 by rpki-client on console-fra.rpki-client.org