Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/KRo1xXsHejqb_b2yKlfn5DPEJ6A.roa
File: KRo1xXsHejqb_b2yKlfn5DPEJ6A.roa (raw, json)
Hash identifier: HdLsLHRbw24kWJjx2Dv94UeehnQ5pnK8Ui9lxc1swbI=
Subject key identifier: 29:1A:35:C5:7B:07:7A:3A:9B:FD:BD:B2:2A:57:E7:E4:33:C4:27:A0
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 018CC49377AA0E35F6148510FCD91A0BC0E9
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/KRo1xXsHejqb_b2yKlfn5DPEJ6A.roa
Signing time: Mon 01 Jan 2024 10:30:47 +0000
ROA not before: Mon 01 Jan 2024 10:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209923
IP address blocks: 213.190.8.0/24 maxlen: 24
213.190.11.0/24 maxlen: 24
213.190.8.0/22 maxlen: 22
213.190.8.0/23 maxlen: 23
213.190.9.0/24 maxlen: 24
213.190.10.0/24 maxlen: 24
213.190.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 22:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:77:aa:0e:35:f6:14:85:10:fc:d9:1a:0b:c0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Jan 1 10:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=291a35c57b077a3a9bfdbdb22a57e7e433c427a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a1:27:2b:30:3d:7b:99:84:f5:a6:d4:09:81:
24:18:bb:6d:2e:1f:08:4e:81:c1:0d:af:8b:ac:ee:
da:3e:a1:e2:98:37:20:e0:b9:9d:99:d9:58:00:33:
f7:ef:69:23:79:a4:8f:4e:ae:0d:c1:8b:ca:4f:4a:
f3:31:fd:73:fd:b3:88:0b:dd:2b:30:95:56:8a:96:
32:d6:3a:4d:08:3b:6e:4d:aa:73:9f:c0:da:df:65:
fa:ca:ba:c0:48:25:2b:4c:13:7f:86:d9:96:c0:b2:
96:e0:61:cb:f4:48:cc:88:c8:b8:4c:ea:4e:06:f4:
af:d4:80:ca:12:76:d5:82:ee:5a:72:d1:7c:c4:85:
b3:33:e9:ef:a8:7d:6f:40:e3:5d:c7:e5:bb:f1:6b:
ac:94:5a:c7:08:a0:4e:1a:4b:dd:8e:bf:20:cc:62:
64:9b:99:1c:4b:3d:40:a7:1c:f6:7c:47:1d:34:a4:
4e:95:46:80:4a:f8:e1:8b:b5:8c:3d:2e:2d:50:38:
e2:66:7f:8f:26:4b:d5:f8:b7:9e:1e:17:4f:26:22:
8e:9d:f7:c0:5a:8b:db:4a:d5:6f:a8:cb:2b:25:83:
ae:69:3b:1f:c4:e2:80:f2:e2:29:9e:ad:ae:7e:bb:
76:48:77:2f:88:6a:d1:c5:d2:d4:54:cf:b2:52:27:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1A:35:C5:7B:07:7A:3A:9B:FD:BD:B2:2A:57:E7:E4:33:C4:27:A0
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/KRo1xXsHejqb_b2yKlfn5DPEJ6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.190.8.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:2c:a6:40:2f:70:b2:6f:ee:00:89:b3:60:ff:5c:ad:5f:74:
c8:f6:4e:40:66:74:8f:f4:3a:ff:99:b3:71:41:5d:ea:92:97:
4e:2a:1a:94:1f:b0:fe:02:13:53:d2:68:6b:1f:e4:f5:bc:6b:
71:03:6c:53:86:53:cb:b6:7c:fa:5e:37:8d:04:1d:42:da:93:
a7:04:88:43:36:bf:e7:06:7f:88:0c:46:c4:14:5c:6c:c8:b9:
6c:ed:de:0d:53:52:e6:60:23:59:d6:13:7f:a4:b8:c2:63:de:
93:32:97:a6:69:68:bc:6a:0b:93:ea:8f:ba:d0:4a:27:ac:49:
d5:76:0a:be:dc:7c:6f:ca:0c:80:d0:01:b1:d5:f0:37:18:30:
1c:6f:05:52:af:5c:46:ca:f3:49:01:d0:74:86:ee:c8:64:42:
45:7a:51:74:b4:e3:a3:3b:32:6c:e6:40:fd:30:a9:09:6d:6c:
25:e8:75:40:68:f3:38:1e:99:93:53:c4:f0:45:fa:b0:c1:42:
eb:57:04:95:3d:b9:e0:9b:86:58:15:e4:72:cd:17:73:73:26:
df:20:0d:9c:25:59:04:60:b8:96:2b:15:2a:2b:49:02:1d:bc:
cc:6b:29:b2:e4:d9:f3:a8:65:08:4e:cc:34:35:06:80:a3:c5:
22:25:d5:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk3eqDjX2FIUQ/NkaC8DpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkODllN2M1M2U5MjQ3OWRmODExNzFlYmFhZjIzNjBhMDM3
YzMyNDgwHhcNMjQwMTAxMTAzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTFhMzVjNTdiMDc3YTNhOWJmZGJkYjIyYTU3ZTdlNDMzYzQyN2EwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKEnKzA9e5mE9abUCYEkGLttLh8I
ToHBDa+LrO7aPqHimDcg4LmdmdlYADP372kjeaSPTq4NwYvKT0rzMf1z/bOIC90r
MJVWipYy1jpNCDtuTapzn8Da32X6yrrASCUrTBN/htmWwLKW4GHL9EjMiMi4TOpO
BvSv1IDKEnbVgu5actF8xIWzM+nvqH1vQONdx+W78WuslFrHCKBOGkvdjr8gzGJk
m5kcSz1Apxz2fEcdNKROlUaASvjhi7WMPS4tUDjiZn+PJkvV+LeeHhdPJiKOnffA
WovbStVvqMsrJYOuaTsfxOKA8uIpnq2ufrt2SHcviGrRxdLUVM+yUifkqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCkaNcV7B3o6m/29sipX5+QzxCegMB8GA1UdIwQY
MBaAFJ2J58U+kked+BFx66ryNgoDfDJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMt
ODlhNjhlNWEyMTEwLzEvS1JvMXhYc0hlanFiX2IyeUtsZm41RFBFSjZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMtODlhNjhlNWEyMTEw
LzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1b4IMA0G
CSqGSIb3DQEBCwUAA4IBAQBKLKZAL3Cyb+4AibNg/1ytX3TI9k5AZnSP9Dr/mbNx
QV3qkpdOKhqUH7D+AhNT0mhrH+T1vGtxA2xThlPLtnz6XjeNBB1C2pOnBIhDNr/n
Bn+IDEbEFFxsyLls7d4NU1LmYCNZ1hN/pLjCY96TMpemaWi8aguT6o+60EonrEnV
dgq+3HxvygyA0AGx1fA3GDAcbwVSr1xGyvNJAdB0hu7IZEJFelF0tOOjOzJs5kD9
MKkJbWwl6HVAaPM4HpmTU8TwRfqwwULrVwSVPbngm4ZYFeRyzRdzcybfIA2cJVkE
YLiWKxUqK0kCHbzMaymy5NnzqGUITsw0NQaAo8UiJdVI
-----END CERTIFICATE-----
Generated at Tue Jun 25 05:25:09 2024 by rpki-client on console-ams.rpki-client.org