Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/enM9vBn1hwi6cEgBjWqbnart_q8.roa
File: enM9vBn1hwi6cEgBjWqbnart_q8.roa (raw, json)
Hash identifier: osfJdcDDKc/AxBSylJokgYZkRXRcwQbkKkShCmg6X3Q=
Subject key identifier: 7A:73:3D:BC:19:F5:87:08:BA:70:48:01:8D:6A:9B:9D:AA:ED:FE:AF
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 018CC64B627F347256D0D7910718A6B0B7D4
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/enM9vBn1hwi6cEgBjWqbnart_q8.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42970
IP address blocks: 193.200.182.0/24 maxlen: 24
91.213.25.0/24 maxlen: 24
185.140.196.0/22 maxlen: 22
2a07:1fc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:62:7f:34:72:56:d0:d7:91:07:18:a6:b0:b7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a733dbc19f58708ba7048018d6a9b9daaedfeaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:f5:2b:bc:be:22:6c:7b:e6:d3:05:54:f9:54:
af:42:f4:9b:00:73:05:0e:d6:8d:cf:e4:d0:c4:1b:
19:26:40:2d:48:6e:74:5b:08:6b:b1:b4:a0:3a:c0:
da:fd:c5:08:b9:be:82:5a:51:4d:07:90:09:55:ca:
62:89:41:6c:9e:de:9c:f2:94:68:5f:2c:0a:47:49:
b2:cc:05:ae:df:53:0e:20:93:74:4a:ba:4f:55:ca:
03:04:69:bc:6e:ea:50:01:14:e1:0c:6e:38:b6:42:
37:41:d9:03:b3:fe:6d:75:9f:e9:82:6a:31:dd:ba:
0d:c6:cb:25:5f:63:ec:db:65:2f:31:c8:ed:37:61:
e5:b9:0a:70:f9:19:78:75:5e:70:00:0d:2c:16:26:
81:a6:b1:15:3a:9d:d8:8e:0c:60:af:9e:45:e3:86:
93:b8:f4:0c:19:d9:00:60:51:95:4c:90:d4:c7:ac:
23:55:be:a6:9a:e9:44:c2:70:60:59:73:05:7b:23:
b9:bd:15:5c:8b:90:84:ee:78:2c:c4:9e:14:82:08:
41:98:87:63:06:8d:86:11:c3:63:89:ba:30:06:e9:
e4:e7:84:c0:3d:9f:fb:1f:c1:98:1a:5c:9b:b1:8e:
b6:16:17:8f:ce:2e:a0:5d:cc:1f:b1:4c:19:e0:de:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:73:3D:BC:19:F5:87:08:BA:70:48:01:8D:6A:9B:9D:AA:ED:FE:AF
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/enM9vBn1hwi6cEgBjWqbnart_q8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.25.0/24
185.140.196.0/22
193.200.182.0/24
IPv6:
2a07:1fc0::/29
Signature Algorithm: sha256WithRSAEncryption
9d:c9:ad:3b:ac:78:a1:5f:46:3a:5f:b6:5f:49:ef:88:49:40:
89:f8:9d:f7:37:24:25:53:9a:32:1f:a3:5f:39:86:7b:35:4d:
d7:48:b3:45:ad:6a:db:a7:d2:b1:4e:f0:bb:e7:cb:74:35:38:
99:33:c7:96:1c:3e:e9:b3:81:cb:46:1a:d9:79:03:0d:af:16:
4d:26:a3:f9:16:7a:98:96:3e:37:4e:a3:3f:8a:e6:e4:12:3a:
f7:26:6b:95:3b:0e:88:b6:df:ad:dd:4c:8c:3b:6e:6d:56:74:
02:a1:aa:4f:5f:db:b0:d4:68:2a:84:74:18:1f:70:e3:d1:4a:
6a:51:ee:1e:09:25:b8:06:58:e8:e9:85:0f:40:4c:32:3f:5e:
4a:2c:10:ac:ad:6a:91:24:7d:04:ab:a4:a6:44:b3:9d:23:04:
fb:5a:b4:c6:e5:e4:14:34:f8:7b:4a:69:73:1b:64:27:8f:c8:
41:0f:3b:d5:6b:96:46:0f:2d:98:ad:8e:0d:ec:18:c1:40:fd:
64:8d:44:ae:28:f0:a5:74:0c:2a:77:1b:fc:00:30:ef:b4:4f:
b0:ad:ce:43:92:8c:d5:fc:d1:cb:83:73:58:bb:86:9b:10:f2:
4d:f7:e3:00:21:c9:40:0d:64:1a:d2:11:7d:ce:e9:a7:97:61:
94:58:79:25
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzGS2J/NHJW0NeRBximsLfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmEwZGIwODMwMzM4ZDJkMjk2MWU0YzhmZmIwYWI1YTAz
ZmZlNWYwHhcNMjQwMTAxMTgzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTczM2RiYzE5ZjU4NzA4YmE3MDQ4MDE4ZDZhOWI5ZGFhZWRmZWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgvUrvL4ibHvm0wVU+VSvQvSbAHMF
DtaNz+TQxBsZJkAtSG50WwhrsbSgOsDa/cUIub6CWlFNB5AJVcpiiUFsnt6c8pRo
XywKR0myzAWu31MOIJN0SrpPVcoDBGm8bupQARThDG44tkI3QdkDs/5tdZ/pgmox
3boNxsslX2Ps22UvMcjtN2HluQpw+Rl4dV5wAA0sFiaBprEVOp3Yjgxgr55F44aT
uPQMGdkAYFGVTJDUx6wjVb6mmulEwnBgWXMFeyO5vRVci5CE7ngsxJ4UgghBmIdj
Bo2GEcNjibowBunk54TAPZ/7H8GYGlybsY62FhePzi6gXcwfsUwZ4N7hTQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHpzPbwZ9YcIunBIAY1qm52q7f6vMB8GA1UdIwQY
MBaAFMdqDbCDAzjS0pYeTI/7CrWgP/5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJvTnNJTURPTkxTbGg1TWpfc0t0YUFfX2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mNzE4OWYtOWQzYi00ZmE5LWIyYzEt
NTIxN2RmMzY5MWFiLzEvZW5NOXZCbjFod2k2Y0VnQmpXcWJuYXJ0X3E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mNzE4OWYtOWQzYi00ZmE5LWIyYzEtNTIxN2RmMzY5MWFi
LzEveDJvTnNJTURPTkxTbGg1TWpfc0t0YUFfX2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAW9UZAwQC
uYzEAwQAwci2MA0EAgACMAcDBQMqBx/AMA0GCSqGSIb3DQEBCwUAA4IBAQCdya07
rHihX0Y6X7ZfSe+ISUCJ+J33NyQlU5oyH6NfOYZ7NU3XSLNFrWrbp9KxTvC758t0
NTiZM8eWHD7ps4HLRhrZeQMNrxZNJqP5FnqYlj43TqM/iubkEjr3JmuVOw6Itt+t
3UyMO25tVnQCoapPX9uw1GgqhHQYH3Dj0UpqUe4eCSW4Bljo6YUPQEwyP15KLBCs
rWqRJH0Eq6SmRLOdIwT7WrTG5eQUNPh7SmlzG2Qnj8hBDzvVa5ZGDy2YrY4N7BjB
QP1kjUSuKPCldAwqdxv8ADDvtE+wrc5DkozV/NHLg3NYu4abEPJN9+MAIclADWQa
0hF9zumnl2GUWHkl
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:10:43 2024 by rpki-client on console-ams.rpki-client.org