Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uO1YJhx_Lm_b5QNaA28Rl1Df7JA.roa
File: uO1YJhx_Lm_b5QNaA28Rl1Df7JA.roa (raw, json)
Hash identifier: vxgGTqgxDMpUNEtiZOUTySGvTrzmb7Wr3vMbG30BlkA=
Subject key identifier: B8:ED:58:26:1C:7F:2E:6F:DB:E5:03:5A:03:6F:11:97:50:DF:EC:90
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 0190CAE4EE96891E776765BFC5ED462C810C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uO1YJhx_Lm_b5QNaA28Rl1Df7JA.roa
Signing time: Fri 19 Jul 2024 12:08:39 +0000
ROA not before: Fri 19 Jul 2024 12:08:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216047
IP address blocks: 213.218.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ca:e4:ee:96:89:1e:77:67:65:bf:c5:ed:46:2c:81:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jul 19 12:08:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b8ed58261c7f2e6fdbe5035a036f119750dfec90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:b1:fa:d7:8e:06:0c:f8:a2:2d:53:4c:a0:
80:56:ef:d9:ca:50:3b:62:1d:1b:e7:13:1a:bd:0f:
24:b3:84:a8:66:74:10:6a:14:09:b1:ef:b7:13:e9:
29:e0:bb:c5:16:3a:bd:82:8d:06:6e:a6:4b:fa:5d:
60:38:0a:88:37:50:a9:76:3d:c9:e5:16:6e:f6:ae:
c8:c2:98:67:6b:35:a9:17:b3:87:8e:e1:5e:98:cc:
cc:f9:3f:05:2f:e7:97:fc:5b:d8:27:4c:0a:f4:fd:
ce:cb:98:0c:8a:52:93:44:e4:c1:c6:68:9d:f2:3b:
53:32:59:79:07:38:1b:6a:ea:96:ca:19:da:fc:7c:
b5:21:f7:82:30:10:8d:b3:c2:c7:2b:f7:bb:df:66:
f1:78:9e:3e:19:0b:a9:60:f0:79:3d:f7:58:bf:cd:
16:0e:7a:06:a9:b1:c9:b8:3a:17:64:bf:be:67:e3:
27:ca:b2:eb:a9:ac:00:c1:c3:e6:69:11:25:a2:0a:
bb:b8:dc:a0:cb:42:84:c2:c9:f5:a7:98:40:46:26:
40:01:4b:e2:81:36:34:53:c8:85:46:ae:92:67:ba:
56:8c:ae:ed:c2:0e:c5:97:3c:f4:f5:87:86:c4:5e:
5b:7c:ab:bf:ed:5b:c0:21:47:fa:53:b7:ac:e3:92:
ab:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:ED:58:26:1C:7F:2E:6F:DB:E5:03:5A:03:6F:11:97:50:DF:EC:90
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/uO1YJhx_Lm_b5QNaA28Rl1Df7JA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.216.0/24
Signature Algorithm: sha256WithRSAEncryption
89:04:07:89:6e:58:78:c2:0a:ee:7f:8b:2b:af:a1:70:53:09:
b5:19:a0:80:27:9f:a7:19:e8:c4:55:83:5d:cd:a3:b4:16:77:
4a:a8:c4:15:ae:d2:90:11:14:8d:61:73:84:91:75:db:a2:38:
d5:fc:66:45:06:ee:4c:06:5b:bc:4b:fd:f8:8a:7b:e7:83:ce:
f0:07:99:d1:15:99:de:35:de:f5:cb:36:36:3d:0a:48:dd:94:
6e:c2:9d:9e:81:03:a7:96:d8:5a:b2:f6:7b:3c:c8:54:6e:5f:
21:dd:c6:b6:33:e1:3a:38:bb:f3:53:bc:9b:fb:5f:51:5d:19:
f9:b2:e7:9a:f0:4e:78:c9:09:3e:6a:4a:87:05:5a:d5:15:e5:
8b:89:c0:ae:a7:2e:d9:e4:15:32:6a:c6:43:22:34:63:d0:81:
f5:12:d7:54:7e:e8:9d:e5:36:52:a9:c8:51:8b:06:fe:bc:b6:
d5:ea:7b:ad:26:28:74:c5:93:6d:82:58:79:d0:f1:d3:81:d2:
87:5f:6b:2a:47:3f:d8:5c:7b:51:2e:9f:d4:85:c4:b5:8f:79:
46:0e:9f:b7:05:03:52:1d:7f:8a:58:20:23:22:22:dc:37:81:
e7:b7:ba:43:ed:5a:1f:24:0b:ed:6e:3f:c4:a9:b8:9a:89:88:
3c:93:18:02
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDK5O6WiR53Z2W/xe1GLIEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNzE5MTIwODM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOGVkNTgyNjFjN2YyZTZmZGJlNTAzNWEwMzZmMTE5NzUwZGZlYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymix+teOBgz4oi1TTKCAVu/ZylA7
Yh0b5xMavQ8ks4SoZnQQahQJse+3E+kp4LvFFjq9go0GbqZL+l1gOAqIN1Cpdj3J
5RZu9q7IwphnazWpF7OHjuFemMzM+T8FL+eX/FvYJ0wK9P3Oy5gMilKTROTBxmid
8jtTMll5BzgbauqWyhna/Hy1IfeCMBCNs8LHK/e732bxeJ4+GQupYPB5PfdYv80W
DnoGqbHJuDoXZL++Z+MnyrLrqawAwcPmaRElogq7uNygy0KEwsn1p5hARiZAAUvi
gTY0U8iFRq6SZ7pWjK7twg7Flzz09YeGxF5bfKu/7VvAIUf6U7es45Kr0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLjtWCYcfy5v2+UDWgNvEZdQ3+yQMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvdU8xWUpoeF9MbV9iNVFOYUEyOFJsMURmN0pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1drYMA0G
CSqGSIb3DQEBCwUAA4IBAQCJBAeJblh4wgruf4srr6FwUwm1GaCAJ5+nGejEVYNd
zaO0FndKqMQVrtKQERSNYXOEkXXbojjV/GZFBu5MBlu8S/34invng87wB5nRFZne
Nd71yzY2PQpI3ZRuwp2egQOnlthasvZ7PMhUbl8h3ca2M+E6OLvzU7yb+19RXRn5
suea8E54yQk+akqHBVrVFeWLicCupy7Z5BUyasZDIjRj0IH1EtdUfuid5TZSqchR
iwb+vLbV6nutJih0xZNtglh50PHTgdKHX2sqRz/YXHtRLp/UhcS1j3lGDp+3BQNS
HX+KWCAjIiLcN4Hnt7pD7VofJAvtbj/EqbiaiYg8kxgC
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:34 2024 by rpki-client on console-fra.rpki-client.org