Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/L3vYaHt-JMwUyuDSnZF6MARkTgY.roa
File: L3vYaHt-JMwUyuDSnZF6MARkTgY.roa (raw, json)
Hash identifier: J3D6Eci2SgB/PEaq9mdT0nurOJlW7uOOMKfldvlNzsY=
Subject key identifier: 2F:7B:D8:68:7B:7E:24:CC:14:CA:E0:D2:9D:91:7A:30:04:64:4E:06
Certificate issuer: /CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Certificate serial: 01924238C25ABA1E812B97435DF0D08F7152
Authority key identifier: EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/L3vYaHt-JMwUyuDSnZF6MARkTgY.roa
Signing time: Mon 30 Sep 2024 09:17:48 +0000
ROA not before: Mon 30 Sep 2024 09:17:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58079
IP address blocks: 46.35.180.0/23 maxlen: 24
46.35.184.0/21 maxlen: 24
93.152.241.0/24 maxlen: 24
93.152.242.0/23 maxlen: 24
93.152.244.0/23 maxlen: 24
95.158.153.0/24 maxlen: 24
95.158.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:42:38:c2:5a:ba:1e:81:2b:97:43:5d:f0:d0:8f:71:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebec9030c70a3d4192d59c28dcc8d547694340b3
Validity
Not Before: Sep 30 09:17:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f7bd8687b7e24cc14cae0d29d917a3004644e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:52:0d:81:c8:19:e9:25:cf:01:86:eb:e2:06:
35:d7:9d:98:ba:ba:5b:18:ff:37:24:ab:e9:78:67:
27:73:3f:a8:b5:ed:3b:e1:8b:d1:e3:70:b2:f7:ba:
ed:f0:4d:ba:1b:20:5a:22:00:5c:a1:47:1b:2a:cf:
b4:7c:70:fb:94:ac:42:aa:de:04:b3:02:53:c0:3b:
66:cf:d7:f6:97:84:1c:90:f1:5e:d4:3e:30:eb:3d:
38:a1:e3:cd:11:79:66:00:ad:ac:6b:41:88:7a:f8:
89:4a:10:59:72:a6:a5:59:80:06:a8:23:3f:f1:72:
34:75:df:e6:0f:cc:4c:c9:8e:15:63:f1:ab:25:44:
5a:4c:f6:6b:13:8d:64:81:b5:bc:42:bf:48:57:62:
d7:4c:7a:43:90:3f:20:c7:07:0d:d0:ef:60:fe:08:
23:7d:43:a1:f6:94:8b:cf:c1:9f:8e:c5:6d:ff:9c:
fe:29:b3:87:fa:7a:a1:0a:b0:88:47:5b:7e:48:b2:
da:9c:d1:91:8b:b4:50:6a:a7:b8:6a:1c:f1:5c:a0:
24:c8:9e:d5:35:00:a0:bf:86:84:d0:dc:11:0a:8a:
09:fb:75:d3:c4:53:47:0d:28:b9:9c:78:e2:a6:8d:
b0:7d:1b:29:67:f1:57:76:34:b0:0f:c3:08:6f:15:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7B:D8:68:7B:7E:24:CC:14:CA:E0:D2:9D:91:7A:30:04:64:4E:06
X509v3 Authority Key Identifier:
keyid:EB:EC:90:30:C7:0A:3D:41:92:D5:9C:28:DC:C8:D5:47:69:43:40:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/L3vYaHt-JMwUyuDSnZF6MARkTgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/372b87-95f4-4c98-a6f4-4a6f8683265c/1/6-yQMMcKPUGS1Zwo3MjVR2lDQLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.35.180.0/23
46.35.184.0/21
93.152.241.0-93.152.245.255
95.158.153.0/24
95.158.184.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:3a:3a:80:27:74:c1:84:b5:f9:b4:b0:01:00:80:68:3f:e6:
d9:14:9b:3b:89:e4:91:6d:97:79:08:02:d8:40:eb:28:7a:44:
b4:f0:5b:67:d4:63:90:ad:14:46:c9:b9:f7:1c:a4:b5:b8:39:
05:94:77:4b:98:9e:ec:18:d8:c9:cc:3f:9a:bc:ee:e4:dd:36:
8f:22:99:85:87:dc:ac:1b:04:b1:f4:55:bc:8b:0b:d0:66:26:
f1:e6:a8:11:b1:1e:52:01:90:79:14:8c:0a:c5:9f:7f:be:28:
18:a5:5f:b9:52:38:d5:8f:8f:b9:7f:ae:32:25:38:d4:c0:82:
16:29:7b:ba:3e:f4:19:7c:6d:b7:33:9e:34:06:ab:2c:21:6d:
3f:f4:13:70:84:a5:d1:74:26:19:f0:81:7c:5d:25:64:20:40:
01:c5:e2:a0:13:9e:31:88:ba:63:4b:15:e6:e9:eb:65:a7:ae:
32:b8:63:2d:9f:46:6d:eb:56:dd:e3:c1:0d:a3:51:17:5c:38:
f0:47:cd:ec:d6:18:78:2d:58:5d:e8:f1:e2:43:83:4a:91:d3:
16:0c:18:fa:8c:c3:48:c8:44:af:de:89:6f:01:fe:bd:05:4d:
ea:b8:7c:92:6f:45:02:5f:7a:8c:79:7a:83:d7:3e:db:1e:4e:
13:61:97:b7
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZJCOMJauh6BK5dDXfDQj3FSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViZWM5MDMwYzcwYTNkNDE5MmQ1OWMyOGRjYzhkNTQ3Njk0
MzQwYjMwHhcNMjQwOTMwMDkxNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjdiZDg2ODdiN2UyNGNjMTRjYWUwZDI5ZDkxN2EzMDA0NjQ0ZTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVINgcgZ6SXPAYbr4gY1152Yurpb
GP83JKvpeGcncz+ote074YvR43Cy97rt8E26GyBaIgBcoUcbKs+0fHD7lKxCqt4E
swJTwDtmz9f2l4QckPFe1D4w6z04oePNEXlmAK2sa0GIeviJShBZcqalWYAGqCM/
8XI0dd/mD8xMyY4VY/GrJURaTPZrE41kgbW8Qr9IV2LXTHpDkD8gxwcN0O9g/ggj
fUOh9pSLz8GfjsVt/5z+KbOH+nqhCrCIR1t+SLLanNGRi7RQaqe4ahzxXKAkyJ7V
NQCgv4aE0NwRCooJ+3XTxFNHDSi5nHjipo2wfRspZ/FXdjSwD8MIbxU/YwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFC972Gh7fiTMFMrg0p2RejAEZE4GMB8GA1UdIwQY
MBaAFOvskDDHCj1BktWcKNzI1UdpQ0CzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQt
NGE2Zjg2ODMyNjVjLzEvTDN2WWFIdC1KTXdVeXVEU25aRjZNQVJrVGdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS8zNzJiODctOTVmNC00Yzk4LWE2ZjQtNGE2Zjg2ODMyNjVj
LzEvNi15UU1NY0tQVUdTMVp3bzNNalZSMmxEUUxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQBLiO0AwQD
LiO4MAwDBABdmPEDBAFdmPQDBABfnpkDBAJfnrgwDQYJKoZIhvcNAQELBQADggEB
AF06OoAndMGEtfm0sAEAgGg/5tkUmzuJ5JFtl3kIAthA6yh6RLTwW2fUY5CtFEbJ
ufccpLW4OQWUd0uYnuwY2MnMP5q87uTdNo8imYWH3KwbBLH0VbyLC9BmJvHmqBGx
HlIBkHkUjArFn3++KBilX7lSONWPj7l/rjIlONTAghYpe7o+9Bl8bbcznjQGqywh
bT/0E3CEpdF0JhnwgXxdJWQgQAHF4qATnjGIumNLFebp62WnrjK4Yy2fRm3rVt3j
wQ2jURdcOPBHzezWGHgtWF3o8eJDg0qR0xYMGPqMw0jIRK/eiW8B/r0FTeq4fJJv
RQJfeox5eoPXPtseThNhl7c=
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:12:56 2024 by rpki-client on console-ams.rpki-client.org