Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/2UdjdKbH756N1OnemCSL7G0Mxdc.roa
File: 2UdjdKbH756N1OnemCSL7G0Mxdc.roa (raw, json)
Hash identifier: MwQ/mR5NyJ4EtzKTxs5CcekX58iqDDqLqhMxYkotyZE=
Subject key identifier: D9:47:63:74:A6:C7:EF:9E:8D:D4:E9:DE:98:24:8B:EC:6D:0C:C5:D7
Certificate issuer: /CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Certificate serial: 018FCFC2987E32E3731545C7E2C2EF7B6A1E
Authority key identifier: E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/2UdjdKbH756N1OnemCSL7G0Mxdc.roa
Signing time: Fri 31 May 2024 17:46:27 +0000
ROA not before: Fri 31 May 2024 17:46:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211251
IP address blocks: 79.98.176.0/22 maxlen: 24
213.171.64.0/23 maxlen: 23
213.171.66.0/23 maxlen: 23
213.171.66.0/24 maxlen: 24
213.171.67.0/24 maxlen: 24
213.171.68.0/23 maxlen: 23
213.171.72.0/23 maxlen: 23
213.171.72.0/24 maxlen: 24
213.171.73.0/24 maxlen: 24
213.171.74.0/24 maxlen: 24
213.171.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:cf:c2:98:7e:32:e3:73:15:45:c7:e2:c2:ef:7b:6a:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4984f8f36ebf9f8f54c12174f463664d7b23aee
Validity
Not Before: May 31 17:46:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9476374a6c7ef9e8dd4e9de98248bec6d0cc5d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:bf:d7:43:b9:92:5f:8b:ee:3c:e2:5e:c0:c3:
32:cc:9e:51:fc:47:1c:bc:a8:7e:1b:87:0d:27:e3:
44:5d:31:aa:77:22:1a:e9:cb:21:ee:ee:c5:55:d9:
05:f9:3d:c9:30:83:05:65:6c:52:68:ba:ea:d9:87:
93:6d:87:4b:eb:6e:01:74:7c:5c:f9:ab:14:4a:08:
cc:e7:f3:a8:e5:46:dd:95:19:34:c2:10:bc:f8:88:
e3:1b:6b:32:8d:0d:93:5c:40:ce:3a:e5:6f:a3:95:
28:87:7e:60:04:cf:97:6a:6e:d2:96:1e:80:d0:62:
7a:aa:04:6c:77:6d:ac:a3:f5:5c:21:8e:d5:85:a5:
24:e3:aa:3a:10:22:08:5a:0f:8d:36:43:b7:e9:72:
d8:22:7b:23:55:dd:a1:8e:5f:3e:17:3a:80:d4:07:
ba:95:86:ac:a4:0f:b0:36:6d:eb:b1:65:bd:e2:0b:
9c:07:36:aa:96:bc:94:00:9f:7b:88:31:59:37:84:
6e:fa:fd:5b:f5:97:26:2d:5c:88:fb:ff:8b:49:16:
b7:68:b5:dd:69:58:f1:96:6c:4e:91:6a:a0:e0:4e:
5c:e7:dc:de:50:29:d9:2d:e9:6f:5e:ae:f6:cb:aa:
64:ab:ad:22:03:be:99:51:ab:96:3f:78:4b:f3:2e:
e2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:47:63:74:A6:C7:EF:9E:8D:D4:E9:DE:98:24:8B:EC:6D:0C:C5:D7
X509v3 Authority Key Identifier:
keyid:E4:98:4F:8F:36:EB:F9:F8:F5:4C:12:17:4F:46:36:64:D7:B2:3A:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/2UdjdKbH756N1OnemCSL7G0Mxdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/57d908-207d-497c-ab18-de7be1e5c776/1/5JhPjzbr-fj1TBIXT0Y2ZNeyOu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.176.0/22
213.171.64.0-213.171.69.255
213.171.72.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:64:fd:9c:2a:7e:c3:7c:a1:78:1c:05:6d:82:92:1f:b8:2d:
3a:04:bc:6f:a4:76:43:2e:79:1b:87:11:5f:eb:3c:bb:22:2b:
50:cb:f7:e8:5c:3e:97:af:81:a4:ab:65:04:eb:d9:f4:3e:e0:
33:3b:31:49:e5:94:32:cf:0c:c7:51:25:17:34:f8:b6:6c:2f:
34:d3:df:31:71:b6:15:ad:22:05:08:d8:c4:2c:5d:74:6c:67:
0c:cf:e4:f4:be:c9:56:06:79:f3:9f:c4:56:0b:67:1d:9d:ab:
7f:b6:0f:6a:08:b2:0f:0b:f2:e1:ff:7b:3f:aa:6f:a3:21:90:
be:1f:07:fb:33:78:88:0f:4e:11:ef:43:2e:08:84:50:98:53:
5a:c1:ac:67:64:d3:fb:d5:f1:b4:af:de:5b:2b:2a:97:08:3d:
15:c6:29:9b:ee:7c:b8:4d:f5:54:90:52:89:be:99:71:7f:e6:
c6:9d:c3:0f:59:d6:2c:bf:b9:e4:6b:c5:8d:1e:4b:1c:8c:da:
2d:cb:a1:cb:b1:20:cc:6b:bf:9f:48:4c:27:c5:8b:a1:3a:18:
f9:cc:98:7c:f5:c5:8a:ba:25:a8:63:84:2c:6a:4e:ae:7c:0b:
87:3c:6b:0d:01:45:43:4f:33:a6:4f:4e:b3:ea:4d:b7:42:91:
2d:3f:58:94
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAY/Pwph+MuNzFUXH4sLve2oeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0OTg0ZjhmMzZlYmY5ZjhmNTRjMTIxNzRmNDYzNjY0ZDdi
MjNhZWUwHhcNMjQwNTMxMTc0NjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTQ3NjM3NGE2YzdlZjllOGRkNGU5ZGU5ODI0OGJlYzZkMGNjNWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxb/XQ7mSX4vuPOJewMMyzJ5R/Ecc
vKh+G4cNJ+NEXTGqdyIa6csh7u7FVdkF+T3JMIMFZWxSaLrq2YeTbYdL624BdHxc
+asUSgjM5/Oo5UbdlRk0whC8+IjjG2syjQ2TXEDOOuVvo5Uoh35gBM+Xam7Slh6A
0GJ6qgRsd22so/VcIY7VhaUk46o6ECIIWg+NNkO36XLYInsjVd2hjl8+FzqA1Ae6
lYaspA+wNm3rsWW94gucBzaqlryUAJ97iDFZN4Ru+v1b9ZcmLVyI+/+LSRa3aLXd
aVjxlmxOkWqg4E5c59zeUCnZLelvXq72y6pkq60iA76ZUauWP3hL8y7iNwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFNlHY3Smx++ejdTp3pgki+xtDMXXMB8GA1UdIwQY
MBaAFOSYT4826/n49UwSF09GNmTXsjruMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi81N2Q5MDgtMjA3ZC00OTdjLWFiMTgt
ZGU3YmUxZTVjNzc2LzEvMlVkamRLYkg3NTZOMU9uZW1DU0w3RzBNeGRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi81N2Q5MDgtMjA3ZC00OTdjLWFiMTgtZGU3YmUxZTVjNzc2
LzEvNUpoUGp6YnItZmoxVEJJWFQwWTJaTmV5T3U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQCT2KwMAwD
BAbVq0ADBAHVq0QDBALVq0gwDQYJKoZIhvcNAQELBQADggEBAApk/ZwqfsN8oXgc
BW2Ckh+4LToEvG+kdkMueRuHEV/rPLsiK1DL9+hcPpevgaSrZQTr2fQ+4DM7MUnl
lDLPDMdRJRc0+LZsLzTT3zFxthWtIgUI2MQsXXRsZwzP5PS+yVYGefOfxFYLZx2d
q3+2D2oIsg8L8uH/ez+qb6MhkL4fB/szeIgPThHvQy4IhFCYU1rBrGdk0/vV8bSv
3lsrKpcIPRXGKZvufLhN9VSQUom+mXF/5sadww9Z1iy/ueRrxY0eSxyM2i3Locux
IMxrv59ITCfFi6E6GPnMmHz1xYq6JahjhCxqTq58C4c8aw0BRUNPM6ZPTrPqTbdC
kS0/WJQ=
-----END CERTIFICATE-----
Generated at Sat Sep 28 18:40:51 2024 by rpki-client on console-fra.rpki-client.org