Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/T69N_b0L0wKbZKMRP_ZJiBSmaKQ.roa
File: T69N_b0L0wKbZKMRP_ZJiBSmaKQ.roa (raw, json)
Hash identifier: 8DnUh9ZR7s+dOEE8WxNCq7H0/ouMTlBbawvw6YbOc8U=
Subject key identifier: 4F:AF:4D:FD:BD:0B:D3:02:9B:64:A3:11:3F:F6:49:88:14:A6:68:A4
Certificate issuer: /CN=39732dcd0c35426144f9f026754179dfaebe8958
Certificate serial: 018CC8DF9F9B64CAE5955B1A5AA2886F2E93
Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/T69N_b0L0wKbZKMRP_ZJiBSmaKQ.roa
Signing time: Tue 02 Jan 2024 06:32:27 +0000
ROA not before: Tue 02 Jan 2024 06:32:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59909
IP address blocks: 45.90.76.0/22 maxlen: 24
2a0c:b5c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:9f:9b:64:ca:e5:95:5b:1a:5a:a2:88:6f:2e:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958
Validity
Not Before: Jan 2 06:32:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4faf4dfdbd0bd3029b64a3113ff6498814a668a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:0b:87:53:d8:33:67:13:f3:9e:ea:64:88:d3:
1b:63:66:31:37:cb:5f:5e:a2:9c:93:e8:99:64:93:
f2:1e:7f:5b:3b:fe:32:96:c9:25:d1:d4:65:40:cc:
42:64:45:da:f7:2b:3e:fc:64:55:3a:2b:e7:7e:d5:
ee:07:f4:86:34:0a:b7:4b:ae:6c:cc:69:24:1f:c0:
83:9f:d6:4f:e7:08:4e:21:50:4b:93:bf:32:bd:eb:
66:69:92:ac:7f:73:66:cd:c9:fa:5c:97:24:08:cf:
68:9d:10:b1:76:d0:03:64:1c:cb:c9:b5:ad:5f:49:
87:a0:fc:c9:65:07:30:80:95:ab:d2:47:91:c1:d5:
45:cf:3d:70:5f:d5:97:38:45:e3:8e:2f:9f:2f:57:
fc:97:9d:cd:56:e9:ff:df:21:6a:cc:2c:d5:cf:bf:
bd:f5:d5:5b:8f:31:ba:68:0d:37:7f:1c:65:03:46:
17:36:7f:0b:bb:cd:de:f4:ec:b7:0e:e2:66:8a:c2:
fb:24:42:c0:c9:5f:09:09:fd:35:e8:c1:c6:58:0d:
fd:63:7a:e0:6d:c3:2a:f0:a4:94:e3:0c:e4:88:49:
ff:00:b3:a4:8b:7e:f1:a8:df:fa:8b:25:61:ae:e0:
cd:77:37:bd:55:f2:70:53:cb:38:ae:75:a6:7b:e6:
e4:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:AF:4D:FD:BD:0B:D3:02:9B:64:A3:11:3F:F6:49:88:14:A6:68:A4
X509v3 Authority Key Identifier:
keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/T69N_b0L0wKbZKMRP_ZJiBSmaKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.76.0/22
IPv6:
2a0c:b5c0::/29
Signature Algorithm: sha256WithRSAEncryption
68:21:47:1e:29:44:75:5d:59:16:0a:34:13:b0:4d:c6:47:03:
e2:41:2e:4f:c6:a6:ba:a6:53:29:f5:72:1e:4e:fb:d0:f0:cc:
ac:f4:0e:17:c4:80:88:1a:9c:fa:f1:d4:7e:ea:2d:0a:ce:56:
94:13:aa:c9:04:b4:c6:37:d7:9c:22:01:34:04:5e:5d:ec:73:
60:ae:b9:e7:0f:e5:d5:57:c4:47:d1:0c:4f:8a:0a:86:db:bc:
32:0a:d7:9c:b5:df:46:d2:28:5a:cc:9b:88:bf:cd:09:42:ef:
02:7a:c0:68:2a:bd:52:88:05:71:7d:63:9a:ee:5f:c3:a0:c8:
4f:d9:bb:6a:1a:14:f1:d6:f9:97:6e:71:08:03:40:f8:fa:3a:
a2:28:d9:6d:b0:08:86:11:10:d2:59:ae:c2:33:63:39:ce:b7:
94:2e:87:95:7e:1e:65:f7:37:1a:d2:b8:f4:a4:7c:65:b0:7d:
58:20:c4:5a:ca:0a:9e:20:10:65:5e:57:65:07:d6:c7:66:32:
73:2b:ca:ab:c3:01:72:f8:3e:4d:e3:dc:00:f8:63:6b:7d:76:
d2:7f:30:14:85:85:d7:2e:a5:2c:73:03:c4:5d:4a:81:7b:5b:
63:0e:07:38:32:1f:c1:c3:82:1c:00:85:45:39:89:dc:8f:3b:
b3:08:7a:31
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzI35+bZMrllVsaWqKIby6TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5NzMyZGNkMGMzNTQyNjE0NGY5ZjAyNjc1NDE3OWRmYWVi
ZTg5NTgwHhcNMjQwMTAyMDYzMjI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmFmNGRmZGJkMGJkMzAyOWI2NGEzMTEzZmY2NDk4ODE0YTY2OGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQuHU9gzZxPznupkiNMbY2YxN8tf
XqKck+iZZJPyHn9bO/4ylskl0dRlQMxCZEXa9ys+/GRVOivnftXuB/SGNAq3S65s
zGkkH8CDn9ZP5whOIVBLk78yvetmaZKsf3Nmzcn6XJckCM9onRCxdtADZBzLybWt
X0mHoPzJZQcwgJWr0keRwdVFzz1wX9WXOEXjji+fL1f8l53NVun/3yFqzCzVz7+9
9dVbjzG6aA03fxxlA0YXNn8Lu83e9Oy3DuJmisL7JELAyV8JCf016MHGWA39Y3rg
bcMq8KSU4wzkiEn/ALOki37xqN/6iyVhruDNdze9VfJwU8s4rnWme+bk7QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFE+vTf29C9MCm2SjET/2SYgUpmikMB8GA1UdIwQY
MBaAFDlzLc0MNUJhRPnwJnVBed+uvolYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1hNdHpRdzFRbUZFLWZBbWRVRjUzNjYtaVZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8yMzcxMDYtZDA4ZC00YWEwLWFjODIt
ZjYwYWYyYTgyMDYwLzEvVDY5Tl9iMEwwd0tiWktNUlBfWkppQlNtYUtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8yMzcxMDYtZDA4ZC00YWEwLWFjODItZjYwYWYyYTgyMDYw
LzEvT1hNdHpRdzFRbUZFLWZBbWRVRjUzNjYtaVZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLVpMMA0E
AgACMAcDBQMqDLXAMA0GCSqGSIb3DQEBCwUAA4IBAQBoIUceKUR1XVkWCjQTsE3G
RwPiQS5Pxqa6plMp9XIeTvvQ8Mys9A4XxICIGpz68dR+6i0KzlaUE6rJBLTGN9ec
IgE0BF5d7HNgrrnnD+XVV8RH0QxPigqG27wyCtectd9G0ihazJuIv80JQu8CesBo
Kr1SiAVxfWOa7l/DoMhP2btqGhTx1vmXbnEIA0D4+jqiKNltsAiGERDSWa7CM2M5
zreULoeVfh5l9zca0rj0pHxlsH1YIMRaygqeIBBlXldlB9bHZjJzK8qrwwFy+D5N
49wA+GNrfXbSfzAUhYXXLqUscwPEXUqBe1tjDgc4Mh/Bw4IcAIVFOYncjzuzCHox
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:27:20 2024 by rpki-client on console-fra.rpki-client.org