Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/PcRtmgZltHHZlzfsc6O3w8LJBaQ.roa
File: PcRtmgZltHHZlzfsc6O3w8LJBaQ.roa (raw, json)
Hash identifier: ODIn7vaP8BmU4V1bOflKwglkhP11oR60J2buC2YCULs=
Subject key identifier: 3D:C4:6D:9A:06:65:B4:71:D9:97:37:EC:73:A3:B7:C3:C2:C9:05:A4
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01903B55C2A2F9D7D4566FF99E8AD77EC311
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/PcRtmgZltHHZlzfsc6O3w8LJBaQ.roa
Signing time: Fri 21 Jun 2024 15:06:34 +0000
ROA not before: Fri 21 Jun 2024 15:06:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 88.80.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3b:55:c2:a2:f9:d7:d4:56:6f:f9:9e:8a:d7:7e:c3:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jun 21 15:06:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3dc46d9a0665b471d99737ec73a3b7c3c2c905a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1c:17:ab:74:dd:2b:07:0e:f3:a7:26:f9:63:
00:b7:99:a3:fb:02:c7:c7:4b:5b:50:56:e6:2c:03:
44:75:40:23:9a:6d:e6:dd:bd:02:15:c4:58:4e:e3:
91:c2:e7:a1:93:96:62:95:54:6d:d9:3a:54:58:f5:
03:08:8d:30:75:f0:6e:83:31:3f:44:8e:03:18:ff:
10:49:07:4f:10:2a:ec:5a:54:58:16:ba:45:ed:26:
99:91:52:53:3c:be:9c:3a:ec:8c:91:a4:7a:be:47:
42:5f:cb:4d:bb:d7:f0:05:11:a1:a5:01:6a:30:7f:
53:2d:b8:e3:57:be:5b:88:51:d9:3e:6f:e9:52:db:
1b:60:db:23:59:8f:78:f5:be:31:f9:13:02:af:bc:
a6:07:40:b6:c7:0f:d3:d6:cc:e3:b0:78:a6:f3:93:
b6:9a:65:d0:9d:76:87:99:fe:2e:5c:c9:40:5b:a9:
1f:f5:8e:43:e8:46:ea:c9:71:1c:1f:56:41:b1:8c:
b4:a0:2b:c4:8d:bd:bd:de:44:7a:e9:32:19:c1:36:
bb:83:f2:f2:9f:7b:15:fb:cc:60:b2:da:b7:7a:96:
d4:d5:2e:d0:0a:34:14:2d:0b:3d:fa:35:18:0c:73:
81:69:b8:65:8e:b8:5e:a5:f7:31:a3:a2:84:b9:45:
84:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:C4:6D:9A:06:65:B4:71:D9:97:37:EC:73:A3:B7:C3:C2:C9:05:A4
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/PcRtmgZltHHZlzfsc6O3w8LJBaQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.80.141.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:8b:c5:88:21:e7:95:9c:07:69:1a:22:55:33:cf:c7:f2:48:
bc:2c:0f:26:0f:b2:16:6d:0f:7b:1b:09:e3:40:b3:9b:a6:5b:
c2:cd:f3:18:43:ce:26:6f:22:30:50:e3:88:67:b9:d6:8e:0f:
6e:9c:f8:d4:5f:26:a1:da:9e:f5:ac:28:0b:ff:75:4a:53:b5:
f9:8f:66:4e:3e:3e:22:d7:2c:4e:dc:a3:b5:e6:bb:81:a7:a7:
d9:e2:52:25:35:1c:87:67:84:13:8f:a1:65:41:1b:55:07:7a:
e5:04:39:36:45:0d:37:70:2e:97:fd:8d:c3:dd:93:39:6e:01:
86:b9:a1:67:0c:4b:73:4b:d7:40:d5:08:f6:24:4b:30:84:c9:
6c:9f:e8:69:11:45:9d:76:a1:d4:99:77:66:09:21:34:a5:e0:
9d:26:aa:af:e8:2e:3d:28:dd:8d:ef:04:83:25:78:d5:a7:81:
de:44:86:85:fa:88:52:78:f0:8f:10:3d:2b:3b:52:bf:c2:d2:
14:d7:3f:6c:84:da:96:71:2f:67:c5:bd:f1:a3:01:e3:d8:9a:
6a:00:b5:39:42:21:4b:f8:20:89:bf:b6:f0:33:9d:de:86:6c:
a8:5e:2d:d9:6c:e1:b4:8d:ce:68:7d:35:f0:47:23:6d:7a:5a:
ca:0e:84:e5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZA7VcKi+dfUVm/5norXfsMRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxMjRmYmExZTQwMWMwM2U1YmExY2Q3N2FlOWVlMzljZmQ2
MzFiZmIwHhcNMjQwNjIxMTUwNjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGM0NmQ5YTA2NjViNDcxZDk5NzM3ZWM3M2EzYjdjM2MyYzkwNWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxwXq3TdKwcO86cm+WMAt5mj+wLH
x0tbUFbmLANEdUAjmm3m3b0CFcRYTuORwuehk5ZilVRt2TpUWPUDCI0wdfBugzE/
RI4DGP8QSQdPECrsWlRYFrpF7SaZkVJTPL6cOuyMkaR6vkdCX8tNu9fwBRGhpQFq
MH9TLbjjV75biFHZPm/pUtsbYNsjWY949b4x+RMCr7ymB0C2xw/T1szjsHim85O2
mmXQnXaHmf4uXMlAW6kf9Y5D6EbqyXEcH1ZBsYy0oCvEjb293kR66TIZwTa7g/Ly
n3sV+8xgstq3epbU1S7QCjQULQs9+jUYDHOBabhljrhepfcxo6KEuUWErwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD3EbZoGZbRx2Zc37HOjt8PCyQWkMB8GA1UdIwQY
MBaAFFEk+6HkAcA+W6HNd66e45z9Yxv7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEt
YWI4ZjFmMzM4N2VlLzEvUGNSdG1nWmx0SEhabHpmc2M2TzN3OExKQmFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzE0YWQtMWY3OC00YTEwLThlNjEtYWI4ZjFmMzM4N2Vl
LzEvVVNUN29lUUJ3RDVib2MxM3JwN2puUDFqR19zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWFCNMA0G
CSqGSIb3DQEBCwUAA4IBAQBfi8WIIeeVnAdpGiJVM8/H8ki8LA8mD7IWbQ97Gwnj
QLObplvCzfMYQ84mbyIwUOOIZ7nWjg9unPjUXyah2p71rCgL/3VKU7X5j2ZOPj4i
1yxO3KO15ruBp6fZ4lIlNRyHZ4QTj6FlQRtVB3rlBDk2RQ03cC6X/Y3D3ZM5bgGG
uaFnDEtzS9dA1Qj2JEswhMlsn+hpEUWddqHUmXdmCSE0peCdJqqv6C49KN2N7wSD
JXjVp4HeRIaF+ohSePCPED0rO1K/wtIU1z9shNqWcS9nxb3xowHj2JpqALU5QiFL
+CCJv7bwM53ehmyoXi3ZbOG0jc5ofTXwRyNtelrKDoTl
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:42:58 2024 by rpki-client on console-fra.rpki-client.org