Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bQFVw4GyfmJm69VfnANbupdecp8.roa
File: bQFVw4GyfmJm69VfnANbupdecp8.roa (raw, json)
Hash identifier: qZhEi5YgGc0QIF1qTVkYeDTPkBGXp82lvJz6wQrYVLo=
Subject key identifier: 6D:01:55:C3:81:B2:7E:62:66:EB:D5:5F:9C:03:5B:BA:97:5E:72:9F
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01931EA3C787B6D4475586561E48ACBD8212
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bQFVw4GyfmJm69VfnANbupdecp8.roa
Signing time: Tue 12 Nov 2024 04:31:09 +0000
ROA not before: Tue 12 Nov 2024 04:31:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 37.202.209.0/24 maxlen: 24
37.202.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1e:a3:c7:87:b6:d4:47:55:86:56:1e:48:ac:bd:82:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Nov 12 04:31:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d0155c381b27e6266ebd55f9c035bba975e729f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:09:99:b5:76:80:45:66:88:b6:db:64:4a:60:
c1:cf:24:00:78:30:57:b0:90:48:54:a0:31:7c:84:
15:6b:0c:8f:4d:92:c3:0e:4a:d4:f8:37:ad:2b:19:
0e:cd:32:6f:10:9b:c5:b5:c1:a4:13:e7:8d:36:01:
4b:d7:34:d6:4c:3a:bc:62:22:2c:f1:9d:ea:85:83:
41:84:f7:15:9d:54:6b:59:7e:fa:e9:42:2c:d5:c3:
42:f1:57:8b:9c:37:6c:34:bc:a5:58:78:09:c1:e3:
f5:2a:9e:7b:02:6c:90:39:a2:3f:8b:8f:12:8a:49:
06:6e:9a:a5:7f:6c:74:e8:20:54:d8:33:85:7e:4b:
98:ac:91:e7:25:27:ba:1a:a1:53:65:7b:93:ea:cc:
82:2a:10:d3:f4:0b:3e:c5:76:a4:e9:67:33:46:7e:
aa:2b:9b:df:5a:79:64:e9:83:46:40:7a:9f:f9:e6:
90:9b:e4:25:d8:5a:41:7e:d1:f0:2e:5a:50:43:f9:
57:1d:0e:21:5b:aa:a9:1e:84:3e:5c:26:1b:9d:f2:
b6:d1:d4:30:9a:25:56:e1:08:30:3c:2d:5e:d0:11:
9d:54:b5:fa:6c:fb:e4:db:7c:58:c0:ca:9c:ff:ea:
55:ae:cc:7b:20:d2:0f:a5:16:c4:14:0e:42:8d:7c:
3f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:01:55:C3:81:B2:7E:62:66:EB:D5:5F:9C:03:5B:BA:97:5E:72:9F
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/bQFVw4GyfmJm69VfnANbupdecp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.202.209.0-37.202.210.255
Signature Algorithm: sha256WithRSAEncryption
7a:d9:f3:65:0c:4f:e3:ca:6b:3c:63:71:56:0b:29:d6:71:50:
13:da:d4:15:cd:23:57:61:24:f3:3a:e5:7c:ec:10:2f:c8:83:
cf:a2:15:a4:25:6f:e0:09:08:47:45:60:95:e9:7e:a9:56:52:
11:70:39:83:cf:99:0a:45:00:c6:29:a3:85:64:de:4c:77:81:
28:be:60:ea:0c:04:5d:ea:b1:87:a5:be:93:b2:6b:4b:b4:fe:
06:0c:b2:6d:79:f8:cc:ed:4d:b6:de:f0:39:ea:fc:ad:27:02:
1c:ec:3a:3e:9e:16:ce:0f:a3:35:f2:0b:c0:4a:97:e2:71:c4:
12:8f:0c:c2:55:3a:64:7c:ee:8b:9e:95:9b:62:47:13:e7:b6:
1c:ca:f2:85:f3:16:4f:9a:22:cf:1c:d7:41:93:be:46:8f:68:
bf:56:aa:56:54:94:9b:16:1d:4c:69:b2:ae:5b:8c:25:4d:49:
5d:0e:b3:3b:44:31:a3:48:1e:c3:db:0b:90:6f:99:b5:71:5a:
97:0a:29:7c:e9:07:1c:7e:f3:ad:76:57:81:b6:b7:f2:6c:1d:
04:ef:a2:5a:41:60:a8:e6:a0:98:e2:78:90:30:bf:cc:d0:13:
18:30:8e:ba:53:7a:05:f6:c3:ce:c6:76:be:d1:8d:68:a1:a6:
b4:5c:ea:e6
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZMeo8eHttRHVYZWHkisvYISMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjQxMTEyMDQzMTA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZDAxNTVjMzgxYjI3ZTYyNjZlYmQ1NWY5YzAzNWJiYTk3NWU3MjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgmZtXaARWaItttkSmDBzyQAeDBX
sJBIVKAxfIQVawyPTZLDDkrU+DetKxkOzTJvEJvFtcGkE+eNNgFL1zTWTDq8YiIs
8Z3qhYNBhPcVnVRrWX766UIs1cNC8VeLnDdsNLylWHgJweP1Kp57AmyQOaI/i48S
ikkGbpqlf2x06CBU2DOFfkuYrJHnJSe6GqFTZXuT6syCKhDT9As+xXak6WczRn6q
K5vfWnlk6YNGQHqf+eaQm+Ql2FpBftHwLlpQQ/lXHQ4hW6qpHoQ+XCYbnfK20dQw
miVW4QgwPC1e0BGdVLX6bPvk23xYwMqc/+pVrsx7INIPpRbEFA5CjXw/pwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFG0BVcOBsn5iZuvVX5wDW7qXXnKfMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvYlFGVnc0R3lmbUptNjlWZm5BTmJ1cGRlY3A4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAlytED
BAAlytIwDQYJKoZIhvcNAQELBQADggEBAHrZ82UMT+PKazxjcVYLKdZxUBPa1BXN
I1dhJPM65XzsEC/Ig8+iFaQlb+AJCEdFYJXpfqlWUhFwOYPPmQpFAMYpo4Vk3kx3
gSi+YOoMBF3qsYelvpOya0u0/gYMsm15+MztTbbe8Dnq/K0nAhzsOj6eFs4PozXy
C8BKl+JxxBKPDMJVOmR87ouelZtiRxPnthzK8oXzFk+aIs8c10GTvkaPaL9WqlZU
lJsWHUxpsq5bjCVNSV0OsztEMaNIHsPbC5BvmbVxWpcKKXzpBxx+8612V4G2t/Js
HQTvolpBYKjmoJjieJAwv8zQExgwjrpTegX2w87Gdr7RjWihprRc6uY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:52:19 2024 by rpki-client on console-fra.rpki-client.org