Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/e0yKkVnQQAr1fLBRFN8P3A2Miuc.roa
File: e0yKkVnQQAr1fLBRFN8P3A2Miuc.roa (raw, json)
Hash identifier: 6gy02xZ5nKFVh9CdTHXczmL6zVq+FU3q+ZoH2G/9Np0=
Subject key identifier: 7B:4C:8A:91:59:D0:40:0A:F5:7C:B0:51:14:DF:0F:DC:0D:8C:8A:E7
Certificate issuer: /CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Certificate serial: 018CC3493E4A3E98A8840AC64EFEB7EE4B78
Authority key identifier: A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/e0yKkVnQQAr1fLBRFN8P3A2Miuc.roa
Signing time: Mon 01 Jan 2024 04:30:06 +0000
ROA not before: Mon 01 Jan 2024 04:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51964
IP address blocks: 149.238.32.0/19 maxlen: 24
149.238.160.0/19 maxlen: 24
149.238.64.0/19 maxlen: 24
193.33.52.0/23 maxlen: 24
192.112.208.0/24 maxlen: 24
192.77.114.0/23 maxlen: 24
149.238.192.0/19 maxlen: 24
149.238.96.0/19 maxlen: 24
149.238.0.0/19 maxlen: 24
149.238.224.0/19 maxlen: 24
149.238.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:3e:4a:3e:98:a8:84:0a:c6:4e:fe:b7:ee:4b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4327c56e941171ea3beba26ebb9e23f4df5bcf3
Validity
Not Before: Jan 1 04:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b4c8a9159d0400af57cb05114df0fdc0d8c8ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bc:06:4d:72:ce:dc:5c:77:6f:03:f3:77:d6:
4e:f8:b2:fd:27:57:80:46:f9:3f:58:93:ce:db:5f:
9f:6a:87:2b:a2:b0:7f:3b:3e:c5:71:43:f2:df:ee:
e9:a3:8b:bd:ef:f1:c6:82:c1:b6:c3:08:cf:b5:8b:
90:b5:19:14:5a:6f:c0:74:69:94:a5:9f:20:ac:05:
1e:35:ed:41:e1:53:6d:e1:cb:d3:57:53:34:79:3c:
6d:76:d7:84:76:ea:78:78:b8:d5:fb:ed:6f:a9:13:
b4:cf:5e:5d:3a:50:c5:c9:1b:a3:6a:73:33:03:c8:
46:d7:1e:54:68:ed:77:6b:ad:e3:b9:e8:3d:a6:33:
1e:b2:33:ec:a1:e7:73:2d:0d:16:2e:3b:c1:4d:3f:
48:3d:bf:25:6a:eb:b3:ef:27:e3:99:25:76:98:1f:
39:d6:f6:37:d2:f2:38:9a:6f:47:9a:2d:e3:b3:46:
2b:01:b0:b2:a7:1a:7d:b0:74:39:07:48:ef:f8:98:
ed:8f:00:1f:a9:f8:a2:87:dd:e7:c9:1a:f3:12:8f:
f1:b2:08:d8:5e:15:a9:4e:bf:b0:41:43:c3:70:a2:
b0:b6:1d:5f:3d:ad:db:4b:42:06:24:94:fe:0c:19:
0b:84:47:a1:61:c0:d8:94:35:09:61:15:c9:df:60:
6e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:8A:91:59:D0:40:0A:F5:7C:B0:51:14:DF:0F:DC:0D:8C:8A:E7
X509v3 Authority Key Identifier:
keyid:A4:32:7C:56:E9:41:17:1E:A3:BE:BA:26:EB:B9:E2:3F:4D:F5:BC:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pDJ8VulBFx6jvrom67niP031vPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/e0yKkVnQQAr1fLBRFN8P3A2Miuc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/9a4833-6da4-4dda-b7ab-28c343ce9d5d/1/pDJ8VulBFx6jvrom67niP031vPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.238.0.0/16
192.77.114.0/23
192.112.208.0/24
193.33.52.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:0e:1a:a6:81:80:d1:7d:96:ad:67:b8:4b:12:ef:08:f5:4f:
1b:5b:97:03:c4:2f:95:85:6b:22:e9:ff:65:49:13:55:87:d0:
ca:95:b2:d1:88:ab:01:b0:25:93:4e:5e:c6:02:dd:d3:a7:fd:
e2:9b:22:fb:08:88:19:f6:a5:a0:87:49:a7:60:ff:3c:19:42:
34:ae:89:a0:ed:27:11:ea:63:cb:e4:b7:a6:84:96:06:a7:bc:
66:8d:69:ed:71:47:5b:27:4c:f1:b4:d3:ef:db:4b:29:e5:af:
c1:37:72:58:e8:0f:79:df:3c:05:23:ba:23:d8:87:d5:22:02:
2b:68:89:39:37:53:85:fe:6a:d2:c8:18:48:1f:99:8f:86:f2:
68:08:be:ab:d3:11:d4:77:38:d8:7a:eb:76:bf:ac:b4:a7:58:
e6:e2:a8:8c:f4:f4:f0:8d:d4:84:bb:50:f1:d5:53:0e:55:22:
dc:91:b3:77:b3:5d:3a:26:ac:0b:58:12:7e:5a:ee:d2:9d:87:
be:49:5f:da:a7:aa:86:09:96:06:28:b9:4d:38:9a:98:d4:a7:
0c:f4:de:7f:a0:ff:21:02:eb:60:a1:d3:b8:7a:b9:96:2b:5b:
cf:61:6d:8a:aa:26:38:a6:c6:92:99:4f:83:43:c6:40:36:23:
e2:3a:f1:5a
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzDST5KPpiohArGTv637kt4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0MzI3YzU2ZTk0MTE3MWVhM2JlYmEyNmViYjllMjNmNGRm
NWJjZjMwHhcNMjQwMTAxMDQzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjRjOGE5MTU5ZDA0MDBhZjU3Y2IwNTExNGRmMGZkYzBkOGM4YWU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj7wGTXLO3Fx3bwPzd9ZO+LL9J1eA
Rvk/WJPO21+faocrorB/Oz7FcUPy3+7po4u97/HGgsG2wwjPtYuQtRkUWm/AdGmU
pZ8grAUeNe1B4VNt4cvTV1M0eTxtdteEdup4eLjV++1vqRO0z15dOlDFyRujanMz
A8hG1x5UaO13a63jueg9pjMesjPsoedzLQ0WLjvBTT9IPb8lauuz7yfjmSV2mB85
1vY30vI4mm9Hmi3js0YrAbCypxp9sHQ5B0jv+JjtjwAfqfiih93nyRrzEo/xsgjY
XhWpTr+wQUPDcKKwth1fPa3bS0IGJJT+DBkLhEehYcDYlDUJYRXJ32BuoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHtMipFZ0EAK9XywURTfD9wNjIrnMB8GA1UdIwQY
MBaAFKQyfFbpQRceo766Juu54j9N9bzzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWIt
MjhjMzQzY2U5ZDVkLzEvZTB5S2tWblFRQXIxZkxCUkZOOFAzQTJNaXVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS85YTQ4MzMtNmRhNC00ZGRhLWI3YWItMjhjMzQzY2U5ZDVk
LzEvcERKOFZ1bEJGeDZqdnJvbTY3bmlQMDMxdlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAdBAIAATAXAwMAle4DBAHA
TXIDBADAcNADBAHBITQwDQYJKoZIhvcNAQELBQADggEBALoOGqaBgNF9lq1nuEsS
7wj1TxtblwPEL5WFayLp/2VJE1WH0MqVstGIqwGwJZNOXsYC3dOn/eKbIvsIiBn2
paCHSadg/zwZQjSuiaDtJxHqY8vkt6aElganvGaNae1xR1snTPG00+/bSynlr8E3
cljoD3nfPAUjuiPYh9UiAitoiTk3U4X+atLIGEgfmY+G8mgIvqvTEdR3ONh663a/
rLSnWObiqIz09PCN1IS7UPHVUw5VItyRs3ezXTomrAtYEn5a7tKdh75JX9qnqoYJ
lgYouU04mpjUpwz03n+g/yEC62Ch07h6uZYrW89hbYqqJjimxpKZT4NDxkA2I+I6
8Vo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:51:17 2024 by rpki-client on console-fra.rpki-client.org