Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/6ThkZwOJMcZ5TtaJ0Hx-Hv3BrQs.roa
File: 6ThkZwOJMcZ5TtaJ0Hx-Hv3BrQs.roa (raw, json)
Hash identifier: N1lsDK3Xwbbkm9KpUba6s7fVmCZ1iSv+kFwPFOpiuVM=
Subject key identifier: E9:38:64:67:03:89:31:C6:79:4E:D6:89:D0:7C:7E:1E:FD:C1:AD:0B
Certificate issuer: /CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Certificate serial: 018CC493509E10C68412F711DE85802E686A
Authority key identifier: 5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/6ThkZwOJMcZ5TtaJ0Hx-Hv3BrQs.roa
Signing time: Mon 01 Jan 2024 10:30:37 +0000
ROA not before: Mon 01 Jan 2024 10:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29622
IP address blocks: 109.160.24.0/24 maxlen: 24
109.160.24.0/21 maxlen: 21
109.160.24.0/22 maxlen: 22
109.160.30.0/24 maxlen: 24
109.160.29.0/24 maxlen: 24
109.160.31.0/24 maxlen: 24
109.160.26.0/24 maxlen: 24
109.160.25.0/24 maxlen: 24
109.160.28.0/24 maxlen: 24
109.160.28.0/22 maxlen: 22
109.160.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:50:9e:10:c6:84:12:f7:11:de:85:80:2e:68:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d88e4f7a302412c316a3bb599cdd2042b5ff485
Validity
Not Before: Jan 1 10:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e9386467038931c6794ed689d07c7e1efdc1ad0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:27:7c:76:c2:66:1b:fa:d1:b8:1a:4b:70:9b:
e8:f9:69:aa:d8:75:f0:7d:f0:91:27:25:5d:57:09:
a1:6b:7d:91:32:d5:57:9f:60:30:b7:63:a5:06:4d:
c7:4a:a0:53:9e:3a:8b:bb:94:3b:a6:a9:30:19:4b:
10:f0:70:91:ee:b4:f7:73:f2:db:6f:30:2c:74:6c:
58:7e:1f:4e:a7:ac:41:08:02:c7:69:e4:e1:ab:8b:
9b:1e:9b:b3:d8:b9:43:d4:fa:f4:23:8d:a5:4b:6e:
95:40:6a:b8:41:42:07:42:43:b6:37:01:0e:33:f3:
84:ea:ba:08:5d:c7:89:a7:20:72:35:8a:7d:0f:24:
57:03:b0:55:95:7c:2f:d2:56:dc:2c:d2:a1:3d:07:
23:7d:ba:71:2c:73:0e:6d:f8:a9:1b:cc:76:74:b8:
51:09:bd:14:ac:89:69:20:80:12:a5:78:89:2f:0d:
74:fc:0b:9b:b3:89:a8:68:12:7c:39:70:ce:a9:3d:
24:c5:07:78:c2:de:e6:9c:d0:ad:a8:10:2d:f7:24:
8e:bb:0d:60:2f:f4:3e:74:97:6d:e7:59:cc:86:3c:
d0:8b:37:ed:b3:5f:3f:f6:ae:3c:2d:e5:cf:64:2d:
af:13:64:a1:89:08:8f:01:6b:c0:d0:55:c5:22:15:
6c:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:38:64:67:03:89:31:C6:79:4E:D6:89:D0:7C:7E:1E:FD:C1:AD:0B
X509v3 Authority Key Identifier:
keyid:5D:88:E4:F7:A3:02:41:2C:31:6A:3B:B5:99:CD:D2:04:2B:5F:F4:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYjk96MCQSwxaju1mc3SBCtf9IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/6ThkZwOJMcZ5TtaJ0Hx-Hv3BrQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/760c0f-12ab-483d-8cdb-57e1d5b72b2d/1/XYjk96MCQSwxaju1mc3SBCtf9IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.24.0/21
Signature Algorithm: sha256WithRSAEncryption
71:48:b7:4a:51:42:b6:ce:07:20:18:3f:1b:ad:d4:31:2c:46:
92:11:51:7e:32:54:75:16:bb:9b:2f:e9:b9:4c:55:b7:5c:59:
64:6e:39:28:c4:aa:21:29:85:87:b4:86:07:3f:66:2b:a9:f7:
26:b2:d7:87:9c:cc:bf:e0:2d:23:43:96:15:dc:af:69:a5:40:
71:69:e0:ed:b3:5e:3b:f3:dc:cc:21:32:f3:63:c8:a4:6f:0a:
29:58:16:5c:ff:2f:62:b7:f4:42:03:74:82:8b:6c:2f:96:44:
c4:53:4c:11:68:d7:f9:fa:10:06:b2:b0:f1:9b:71:4f:28:1a:
a1:13:83:53:8a:22:5c:f2:7f:bc:41:d8:71:1c:fa:43:06:79:
a7:b1:61:83:82:af:83:b4:79:4d:e1:d8:8b:05:f3:83:10:0a:
b3:29:2c:f3:56:1d:4c:3f:03:a8:d7:9e:77:f2:0a:01:d7:00:
54:8d:83:9e:ae:4b:19:eb:a7:fe:9a:d8:74:72:d4:65:5a:74:
01:6f:54:12:96:a2:69:7f:8e:01:cf:c9:b2:32:50:b4:f2:59:
54:73:16:d5:e7:62:cc:9e:f7:67:d1:8b:ab:03:8d:a9:69:56:
e3:e6:12:61:5b:eb:51:ca:40:3d:86:f2:29:f5:c9:5e:1e:ad:
cb:01:3f:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk1CeEMaEEvcR3oWALmhqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODhlNGY3YTMwMjQxMmMzMTZhM2JiNTk5Y2RkMjA0MmI1
ZmY0ODUwHhcNMjQwMTAxMTAzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTM4NjQ2NzAzODkzMWM2Nzk0ZWQ2ODlkMDdjN2UxZWZkYzFhZDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyd8dsJmG/rRuBpLcJvo+Wmq2HXw
ffCRJyVdVwmha32RMtVXn2Awt2OlBk3HSqBTnjqLu5Q7pqkwGUsQ8HCR7rT3c/Lb
bzAsdGxYfh9Op6xBCALHaeThq4ubHpuz2LlD1Pr0I42lS26VQGq4QUIHQkO2NwEO
M/OE6roIXceJpyByNYp9DyRXA7BVlXwv0lbcLNKhPQcjfbpxLHMObfipG8x2dLhR
Cb0UrIlpIIASpXiJLw10/Aubs4moaBJ8OXDOqT0kxQd4wt7mnNCtqBAt9ySOuw1g
L/Q+dJdt51nMhjzQizfts18/9q48LeXPZC2vE2ShiQiPAWvA0FXFIhVskwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOk4ZGcDiTHGeU7WidB8fh79wa0LMB8GA1UdIwQY
MBaAFF2I5PejAkEsMWo7tZnN0gQrX/SFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGIt
NTdlMWQ1YjcyYjJkLzEvNlRoa1p3T0pNY1o1VHRhSjBIeC1IdjNCclFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83NjBjMGYtMTJhYi00ODNkLThjZGItNTdlMWQ1YjcyYjJk
LzEvWFlqazk2TUNRU3d4YWp1MW1jM1NCQ3RmOUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDbaAYMA0G
CSqGSIb3DQEBCwUAA4IBAQBxSLdKUUK2zgcgGD8brdQxLEaSEVF+MlR1FrubL+m5
TFW3XFlkbjkoxKohKYWHtIYHP2YrqfcmsteHnMy/4C0jQ5YV3K9ppUBxaeDts147
89zMITLzY8ikbwopWBZc/y9it/RCA3SCi2wvlkTEU0wRaNf5+hAGsrDxm3FPKBqh
E4NTiiJc8n+8QdhxHPpDBnmnsWGDgq+DtHlN4diLBfODEAqzKSzzVh1MPwOo1553
8goB1wBUjYOerksZ66f+mth0ctRlWnQBb1QSlqJpf44Bz8myMlC08llUcxbV52LM
nvdn0YurA42paVbj5hJhW+tRykA9hvIp9cleHq3LAT9J
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:11 2024 by rpki-client on console-ams.rpki-client.org