Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/4EpMWM0gpT8j5snm8tf30ydQcDo.roa
File: 4EpMWM0gpT8j5snm8tf30ydQcDo.roa (raw, json)
Hash identifier: T+IdXISkQTiU3K/87UJr7aEH+r6hPzyJOk1t0xh8uaU=
Subject key identifier: E0:4A:4C:58:CD:20:A5:3F:23:E6:C9:E6:F2:D7:F7:D3:27:50:70:3A
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01930097631BDD6BF236462EE0CC60FD41FB
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/4EpMWM0gpT8j5snm8tf30ydQcDo.roa
Signing time: Wed 06 Nov 2024 08:29:01 +0000
ROA not before: Wed 06 Nov 2024 08:29:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43260
IP address blocks: 86.104.199.0/24 maxlen: 24
89.35.14.0/24 maxlen: 24
93.117.131.0/24 maxlen: 24
93.119.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:97:63:1b:dd:6b:f2:36:46:2e:e0:cc:60:fd:41:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Nov 6 08:29:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e04a4c58cd20a53f23e6c9e6f2d7f7d32750703a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:04:c4:94:d8:d0:2d:21:3f:0f:b6:59:3d:0a:
8d:d3:46:7e:80:db:94:8b:c5:c8:5a:e6:12:75:3b:
e7:f1:40:a1:90:51:46:42:d6:af:af:3d:ec:b5:4b:
df:34:28:a8:e9:93:3b:be:07:c5:c8:c2:b2:7d:d6:
bb:24:28:c3:13:9b:e6:81:51:7a:60:67:ca:54:60:
4a:68:af:35:a3:71:81:ef:5d:72:3b:b1:3a:f3:f1:
7f:14:45:78:46:03:45:d5:1e:88:68:98:fa:11:e0:
1c:d3:44:f8:56:52:24:dd:50:54:56:be:4c:06:b1:
3e:6c:b4:ea:d8:54:15:36:73:fd:fb:f2:e6:5b:42:
9f:a8:e9:e8:e9:eb:0b:19:02:33:83:fc:91:34:0e:
9e:77:5f:8f:27:f8:d9:f7:c5:a5:73:3d:87:7d:37:
82:90:39:4f:86:ca:a5:49:00:62:b4:ab:87:98:dd:
4b:26:8b:86:20:77:6f:79:c0:02:6a:26:25:6f:40:
0d:78:21:a9:96:7f:e6:cf:9e:c0:f7:3d:0e:6c:cb:
13:26:2d:a7:45:14:c4:f8:d9:bc:85:e4:55:45:bf:
7b:ce:55:ca:28:9d:14:2a:01:0e:a2:7a:b5:32:ee:
2b:81:88:5a:71:11:5d:f1:20:d4:4b:f2:4b:8c:fd:
2a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:4A:4C:58:CD:20:A5:3F:23:E6:C9:E6:F2:D7:F7:D3:27:50:70:3A
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/4EpMWM0gpT8j5snm8tf30ydQcDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.199.0/24
89.35.14.0/24
93.117.131.0/24
93.119.144.0/24
Signature Algorithm: sha256WithRSAEncryption
46:5b:1a:47:02:1c:29:df:9a:08:46:5d:eb:83:a0:da:6d:fb:
7d:fe:ff:f5:c0:03:85:0e:ec:6f:29:c9:94:66:3e:2e:48:aa:
ab:f7:bc:24:f3:d1:c5:01:2e:35:61:49:a2:e6:65:42:41:68:
ff:02:16:38:ac:90:10:66:23:d3:2b:66:9b:b6:cd:e6:d6:e5:
ff:22:52:f5:e4:85:f0:f1:b4:e1:dc:ea:1c:02:1b:aa:fc:ad:
3b:52:fe:b9:80:a8:eb:5f:1c:69:a9:ae:13:9f:a9:4c:f5:03:
57:90:3b:40:b4:c2:e7:fc:a4:81:06:2f:a1:94:2d:2b:81:cc:
53:9d:83:4e:6f:71:ad:39:c5:d8:9c:30:0e:98:40:12:38:b2:
78:c9:92:30:f1:5f:43:c7:bf:ae:1d:e2:df:22:4c:50:c5:aa:
85:97:88:93:22:4a:8e:94:5e:59:d6:6e:28:84:fb:04:dd:9b:
61:af:1a:03:7f:35:cb:11:95:6a:a5:cc:3c:36:34:50:e6:85:
b6:73:8b:06:08:2e:dd:7c:5a:27:0d:9b:dc:c0:35:c4:4d:a6:
cd:a6:f0:2c:37:6d:d8:66:f2:61:cc:34:cd:60:50:b6:96:80:
63:68:b0:d9:ca:7c:9d:c5:6d:89:f2:6e:fe:60:b4:c7:e6:09:
d0:b5:29:c9
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZMAl2Mb3WvyNkYu4Mxg/UH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjQxMTA2MDgyOTAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDRhNGM1OGNkMjBhNTNmMjNlNmM5ZTZmMmQ3ZjdkMzI3NTA3MDNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wTElNjQLSE/D7ZZPQqN00Z+gNuU
i8XIWuYSdTvn8UChkFFGQtavrz3stUvfNCio6ZM7vgfFyMKyfda7JCjDE5vmgVF6
YGfKVGBKaK81o3GB711yO7E68/F/FEV4RgNF1R6IaJj6EeAc00T4VlIk3VBUVr5M
BrE+bLTq2FQVNnP9+/LmW0KfqOno6esLGQIzg/yRNA6ed1+PJ/jZ98Wlcz2HfTeC
kDlPhsqlSQBitKuHmN1LJouGIHdvecACaiYlb0ANeCGpln/mz57A9z0ObMsTJi2n
RRTE+Nm8heRVRb97zlXKKJ0UKgEOonq1Mu4rgYhacRFd8SDUS/JLjP0qBQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOBKTFjNIKU/I+bJ5vLX99MnUHA6MB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvNEVwTVdNMGdwVDhqNXNubTh0ZjMweWRRY0RvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAVmjHAwQA
WSMOAwQAXXWDAwQAXXeQMA0GCSqGSIb3DQEBCwUAA4IBAQBGWxpHAhwp35oIRl3r
g6Dabft9/v/1wAOFDuxvKcmUZj4uSKqr97wk89HFAS41YUmi5mVCQWj/AhY4rJAQ
ZiPTK2abts3m1uX/IlL15IXw8bTh3OocAhuq/K07Uv65gKjrXxxpqa4Tn6lM9QNX
kDtAtMLn/KSBBi+hlC0rgcxTnYNOb3GtOcXYnDAOmEASOLJ4yZIw8V9Dx7+uHeLf
IkxQxaqFl4iTIkqOlF5Z1m4ohPsE3ZthrxoDfzXLEZVqpcw8NjRQ5oW2c4sGCC7d
fFonDZvcwDXETabNpvAsN23YZvJhzDTNYFC2loBjaLDZynydxW2J8m7+YLTH5gnQ
tSnJ
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:18:11 2024 by rpki-client on console-ams.rpki-client.org