Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/DNLgZ4LOIc04oYwh1zEg8JguNgs.roa
File: DNLgZ4LOIc04oYwh1zEg8JguNgs.roa (raw, json)
Hash identifier: L+mx06L0JPg/8iXt3U0JiC5L0eClZOpeds5IwSSUZi8=
Subject key identifier: 0C:D2:E0:67:82:CE:21:CD:38:A1:8C:21:D7:31:20:F0:98:2E:36:0B
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D570FE8DCC2F47436E56DDDF5410A
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/DNLgZ4LOIc04oYwh1zEg8JguNgs.roa
Signing time: Mon 01 Jan 2024 00:29:54 +0000
ROA not before: Mon 01 Jan 2024 00:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39177
IP address blocks: 213.91.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:57:0f:e8:dc:c2:f4:74:36:e5:6d:dd:f5:41:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0cd2e06782ce21cd38a18c21d73120f0982e360b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:06:61:70:49:db:e8:0e:c9:80:6c:38:23:7d:
aa:86:ff:40:ad:6c:72:9f:1f:ad:18:cc:2b:c8:d4:
1b:82:96:11:21:8d:f9:85:04:33:00:fd:1b:0a:6c:
04:60:4a:9a:9f:d7:c0:5f:b7:b1:19:50:c9:80:89:
bc:d0:6f:8d:c5:45:5a:39:58:0d:a8:f3:66:5f:2f:
3d:b2:be:89:06:b8:9f:ac:5c:26:7e:2b:87:cf:95:
02:f5:01:4e:f4:18:32:4d:1b:fd:a9:76:08:f2:3f:
b8:89:8d:42:89:6e:f3:67:29:b8:65:1c:52:f4:09:
de:4a:29:bc:e1:c1:e4:0c:b8:57:c2:72:aa:e0:ef:
0b:90:2f:ef:cf:a8:f4:41:8b:ed:db:01:a6:2e:90:
d3:a6:96:72:33:0f:76:d3:e7:0c:56:8e:e2:a9:9b:
bc:71:96:85:87:3a:52:8c:52:2d:92:b6:54:a6:21:
55:81:fc:45:97:ad:92:5d:66:f0:08:e2:3f:54:0a:
f2:d3:0a:05:8a:f4:d9:74:f3:aa:2f:12:72:35:4f:
6d:79:22:99:47:ea:32:66:7b:10:78:70:21:22:02:
59:53:15:f2:ed:a6:21:68:b9:d9:d5:b7:51:a4:76:
6c:a5:24:80:20:87:4d:85:11:82:a0:60:48:8d:9f:
90:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:D2:E0:67:82:CE:21:CD:38:A1:8C:21:D7:31:20:F0:98:2E:36:0B
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/DNLgZ4LOIc04oYwh1zEg8JguNgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.196.0/24
Signature Algorithm: sha256WithRSAEncryption
23:a1:76:04:57:e2:25:fb:c2:2a:c7:6e:4c:2a:90:a3:93:35:
38:5e:ac:8f:c9:7a:82:d1:d8:98:a3:11:a9:2f:2a:59:71:a6:
0a:1f:16:73:d4:4b:af:37:e9:54:6c:6e:5d:db:f8:30:86:25:
86:1c:fd:5f:5f:a6:a2:0f:46:7b:0f:df:59:38:ae:43:8e:b4:
a7:a3:1f:a9:39:57:90:57:05:ce:d2:72:b1:72:a0:a4:e1:65:
1f:b3:80:44:d6:d2:9d:c7:61:5a:28:9b:fc:3d:6b:ad:a2:7a:
48:4a:98:7b:2e:6b:6e:72:0c:2d:aa:fc:1d:4c:1d:f3:89:6e:
68:32:42:81:ea:ce:6c:71:a2:b5:b0:80:44:09:24:6b:eb:aa:
ba:4d:5a:7d:af:db:06:9a:d9:17:a6:aa:d7:f9:6c:bc:84:8a:
c8:04:f5:f6:f5:88:62:c3:81:20:e2:38:15:c9:e3:05:e3:d8:
3c:e0:a1:fd:f1:72:8b:18:be:97:6a:98:18:41:ca:ae:be:b0:
ec:a5:19:c4:1c:b7:36:90:4b:6e:55:6b:19:21:e0:41:9b:07:
67:1c:95:ab:18:35:5b:4b:8a:6b:9b:80:9b:a0:0a:10:5b:d8:
ee:3d:bb:06:3b:b2:c8:11:a2:08:ca:2a:d9:9a:ed:0b:35:80:
4c:45:96:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbVcP6NzC9HQ25W3d9UEKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjQwMTAxMDAyOTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2QyZTA2NzgyY2UyMWNkMzhhMThjMjFkNzMxMjBmMDk4MmUzNjBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQZhcEnb6A7JgGw4I32qhv9ArWxy
nx+tGMwryNQbgpYRIY35hQQzAP0bCmwEYEqan9fAX7exGVDJgIm80G+NxUVaOVgN
qPNmXy89sr6JBrifrFwmfiuHz5UC9QFO9BgyTRv9qXYI8j+4iY1CiW7zZym4ZRxS
9AneSim84cHkDLhXwnKq4O8LkC/vz6j0QYvt2wGmLpDTppZyMw920+cMVo7iqZu8
cZaFhzpSjFItkrZUpiFVgfxFl62SXWbwCOI/VAry0woFivTZdPOqLxJyNU9teSKZ
R+oyZnsQeHAhIgJZUxXy7aYhaLnZ1bdRpHZspSSAIIdNhRGCoGBIjZ+QCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAzS4GeCziHNOKGMIdcxIPCYLjYLMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvRE5MZ1o0TE9JYzA0b1l3aDF6RWc4Smd1TmdzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VvEMA0G
CSqGSIb3DQEBCwUAA4IBAQAjoXYEV+Il+8Iqx25MKpCjkzU4XqyPyXqC0diYoxGp
LypZcaYKHxZz1EuvN+lUbG5d2/gwhiWGHP1fX6aiD0Z7D99ZOK5DjrSnox+pOVeQ
VwXO0nKxcqCk4WUfs4BE1tKdx2FaKJv8PWutonpISph7LmtucgwtqvwdTB3ziW5o
MkKB6s5scaK1sIBECSRr66q6TVp9r9sGmtkXpqrX+Wy8hIrIBPX29Yhiw4Eg4jgV
yeMF49g84KH98XKLGL6XapgYQcquvrDspRnEHLc2kEtuVWsZIeBBmwdnHJWrGDVb
S4prm4CboAoQW9juPbsGO7LIEaIIyirZmu0LNYBMRZYv
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:54:14 2024 by rpki-client on console-ams.rpki-client.org