Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/e82ZVuhDr-JCFKgIkHBvc-DcI0o.roa
File: e82ZVuhDr-JCFKgIkHBvc-DcI0o.roa (raw, json)
Hash identifier: Tx7fBosWkL3qnMhGmYB08/u3KvJ816tO1zftE/Yh3G0=
Subject key identifier: 7B:CD:99:56:E8:43:AF:E2:42:14:A8:08:90:70:6F:73:E0:DC:23:4A
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01921003AB0F335677B28715E1677A09EA59
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/e82ZVuhDr-JCFKgIkHBvc-DcI0o.roa
Signing time: Fri 20 Sep 2024 15:18:48 +0000
ROA not before: Fri 20 Sep 2024 15:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201909
IP address blocks: 37.35.53.0/24 maxlen: 24
91.235.122.0/24 maxlen: 24
178.157.111.0/24 maxlen: 24
188.119.158.0/24 maxlen: 24
188.119.159.0/24 maxlen: 24
188.119.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:10:03:ab:0f:33:56:77:b2:87:15:e1:67:7a:09:ea:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Sep 20 15:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7bcd9956e843afe24214a80890706f73e0dc234a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:85:c5:a5:79:22:b8:3d:5d:97:a6:e5:fc:54:
25:14:f6:b3:6d:df:1a:b6:fe:b4:51:a2:95:84:bf:
a6:47:6e:de:e4:a8:83:73:4c:9d:67:26:ed:d0:59:
78:79:75:b2:d8:75:ec:3d:41:65:45:23:38:f2:11:
5b:7f:59:dc:ae:b8:90:d5:2b:37:6d:9f:8b:d0:ea:
09:14:fb:90:a1:47:80:36:b7:83:8b:53:aa:a7:c1:
8f:b0:c0:74:e3:57:57:87:ec:62:f5:96:24:6d:0d:
09:30:03:df:5a:e5:05:19:e2:50:ec:22:1e:b3:3b:
7b:bb:ec:a8:a6:56:45:9d:98:fc:a3:a1:6c:34:fc:
c7:02:ec:3e:ff:55:3b:51:bf:dd:9b:19:07:92:aa:
82:6d:59:e1:71:c2:60:34:60:d0:dc:b2:30:23:72:
1a:63:9d:5f:1a:5d:32:cf:fe:5e:22:e9:89:6c:5c:
fe:ba:45:8e:16:26:c0:de:1c:54:a3:ef:cf:16:5e:
70:40:39:1a:c6:c5:3e:13:9e:71:d5:88:fd:90:6b:
e1:93:7a:e5:bc:bc:c4:10:11:3e:a9:29:d1:02:f4:
f1:5d:6f:a4:30:f9:c4:50:7d:e4:d3:c2:c7:32:7c:
e7:f6:f0:99:d9:f4:d1:0b:87:6e:30:28:65:dd:97:
d8:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:CD:99:56:E8:43:AF:E2:42:14:A8:08:90:70:6F:73:E0:DC:23:4A
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/e82ZVuhDr-JCFKgIkHBvc-DcI0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.35.53.0/24
91.235.122.0/24
178.157.111.0/24
188.119.158.0/23
188.119.163.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f8:1a:1f:c4:2c:f2:92:80:16:ff:31:22:47:a8:03:63:45:
39:ab:6e:60:aa:b6:61:a8:fe:f1:cf:ef:ac:5b:2f:a5:d0:05:
1b:9c:6b:74:86:bc:ed:ff:1c:34:af:87:27:90:74:a0:fa:ee:
1a:80:0c:a2:50:de:f8:2d:c7:1d:f6:75:fa:2c:d3:8d:c8:55:
f5:fc:26:9b:83:31:80:9a:01:8c:07:87:a1:04:b3:da:36:5a:
ed:df:04:f0:23:06:eb:6b:32:a1:b8:f7:93:05:95:46:d3:f9:
1d:ea:e4:a2:ff:46:18:64:c2:20:84:f9:cd:c5:af:90:9c:e5:
51:97:62:e7:ea:ab:76:a8:93:c7:18:73:af:5b:05:39:db:3a:
2d:ce:20:62:d3:1c:b5:de:04:d1:21:85:78:39:1d:85:98:27:
d6:24:6d:00:cf:d9:86:1c:1e:c4:55:4f:03:49:74:86:68:fc:
69:90:c7:30:8d:80:f9:f6:83:9e:27:66:7f:50:06:01:94:b4:
db:be:be:8f:3f:f5:52:ad:26:ab:86:86:41:bd:b6:39:95:ce:
88:bf:47:92:ce:a6:ee:47:99:be:57:70:5d:c5:f9:bb:3f:82:
75:d5:20:69:97:d3:42:70:f3:ff:80:85:09:b3:a8:b9:2d:85:
43:88:28:75
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZIQA6sPM1Z3socV4Wd6CepZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiMjMzZDc1NTA4YjRlODVjY2NmNDQzNDlhN2NiNzAzMTk4
ZDFkMjYwHhcNMjQwOTIwMTUxODQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmNkOTk1NmU4NDNhZmUyNDIxNGE4MDg5MDcwNmY3M2UwZGMyMzRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4XFpXkiuD1dl6bl/FQlFPazbd8a
tv60UaKVhL+mR27e5KiDc0ydZybt0Fl4eXWy2HXsPUFlRSM48hFbf1ncrriQ1Ss3
bZ+L0OoJFPuQoUeANreDi1Oqp8GPsMB041dXh+xi9ZYkbQ0JMAPfWuUFGeJQ7CIe
szt7u+yoplZFnZj8o6FsNPzHAuw+/1U7Ub/dmxkHkqqCbVnhccJgNGDQ3LIwI3Ia
Y51fGl0yz/5eIumJbFz+ukWOFibA3hxUo+/PFl5wQDkaxsU+E55x1Yj9kGvhk3rl
vLzEEBE+qSnRAvTxXW+kMPnEUH3k08LHMnzn9vCZ2fTRC4duMChl3ZfYbwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFHvNmVboQ6/iQhSoCJBwb3Pg3CNKMB8GA1UdIwQY
MBaAFGsjPXVQi06FzM9ENJp8twMZjR0mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEt
ZmE5Y2I1MWNkMGYxLzEvZTgyWlZ1aERyLUpDRktnSWtIQnZjLURjSTBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC85ZDkxOTItMjczYy00Y2E5LWIyYmEtZmE5Y2I1MWNkMGYx
LzEvYXlNOWRWQ0xUb1hNejBRMG1ueTNBeG1OSFNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAJSM1AwQA
W+t6AwQAsp1vAwQBvHeeAwQAvHejMA0GCSqGSIb3DQEBCwUAA4IBAQCk+BofxCzy
koAW/zEiR6gDY0U5q25gqrZhqP7xz++sWy+l0AUbnGt0hrzt/xw0r4cnkHSg+u4a
gAyiUN74Lccd9nX6LNONyFX1/CabgzGAmgGMB4ehBLPaNlrt3wTwIwbrazKhuPeT
BZVG0/kd6uSi/0YYZMIghPnNxa+QnOVRl2Ln6qt2qJPHGHOvWwU52zotziBi0xy1
3gTRIYV4OR2FmCfWJG0Az9mGHB7EVU8DSXSGaPxpkMcwjYD59oOeJ2Z/UAYBlLTb
vr6PP/VSrSarhoZBvbY5lc6Iv0eSzqbuR5m+V3Bdxfm7P4J11SBpl9NCcPP/gIUJ
s6i5LYVDiCh1
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:18:11 2024 by rpki-client on console-fra.rpki-client.org