Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/PNy8yuI1fBDv9COc9gESWyVVUuk.roa
File: PNy8yuI1fBDv9COc9gESWyVVUuk.roa (raw, json)
Hash identifier: a4JGOK2b0ObxFjftfe2Qxg8PnV/FsgxWH+mY4aWX2yA=
Subject key identifier: 3C:DC:BC:CA:E2:35:7C:10:EF:F4:23:9C:F6:01:12:5B:25:55:52:E9
Certificate issuer: /CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Certificate serial: 01904682C83A189A6B763A28A312724EC135
Authority key identifier: 92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/PNy8yuI1fBDv9COc9gESWyVVUuk.roa
Signing time: Sun 23 Jun 2024 19:11:34 +0000
ROA not before: Sun 23 Jun 2024 19:11:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62273
IP address blocks: 147.161.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:46:82:c8:3a:18:9a:6b:76:3a:28:a3:12:72:4e:c1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92e720465c5cd0da9c6a13b44fa0d86f649e5055
Validity
Not Before: Jun 23 19:11:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3cdcbccae2357c10eff4239cf601125b255552e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:66:4f:57:bc:c2:7b:fa:ef:40:a6:4b:64:e0:
69:75:92:3e:23:f7:21:a2:8b:5a:7c:09:43:88:d8:
0c:36:85:54:19:c4:b9:de:56:ba:1e:a0:6c:42:7a:
df:ff:70:76:fc:cc:5a:19:5d:e5:a3:6c:a8:b9:2b:
c3:2a:4a:41:34:2b:75:64:ec:a5:b7:82:cf:11:7d:
17:60:f4:9f:b0:df:4f:65:23:7c:4c:49:7b:3a:a2:
4f:98:89:5a:db:fb:4b:a5:03:82:2e:c8:ce:68:11:
fc:f3:15:67:7b:f2:ed:f5:30:d8:83:e5:39:c5:73:
58:50:74:b3:f9:e2:b7:bc:71:bf:e3:9c:1b:21:95:
f6:90:0d:59:f7:77:11:70:c8:98:83:2a:a2:d8:53:
b1:28:fd:e8:8f:70:8c:d9:6d:97:b4:1a:4f:b4:3d:
56:5c:66:13:cd:66:e2:4c:54:2d:45:be:3f:d7:75:
32:cb:98:f0:3a:f9:52:31:c4:1d:26:5c:e9:57:33:
f7:bc:e8:6e:79:bc:f7:86:ef:da:b7:86:dc:83:f4:
a5:98:7a:d4:36:b7:f6:4c:7e:1d:46:79:ec:12:fe:
2c:c4:99:48:bd:02:8f:76:d6:18:e2:16:95:d2:c3:
37:d7:92:41:ba:43:28:fb:f4:64:4b:b4:34:d1:b1:
50:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:DC:BC:CA:E2:35:7C:10:EF:F4:23:9C:F6:01:12:5B:25:55:52:E9
X509v3 Authority Key Identifier:
keyid:92:E7:20:46:5C:5C:D0:DA:9C:6A:13:B4:4F:A0:D8:6F:64:9E:50:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kucgRlxc0NqcahO0T6DYb2SeUFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/PNy8yuI1fBDv9COc9gESWyVVUuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/f8a9eb-7f8d-4bf7-83d9-9096e1674e22/1/kucgRlxc0NqcahO0T6DYb2SeUFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.161.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:ae:7a:a0:0d:56:51:8d:20:0a:b4:e0:78:2d:45:a4:fa:be:
eb:28:2a:ca:f6:f4:26:92:12:33:17:a1:f1:f8:cd:e0:e3:f6:
59:f5:11:2c:93:8f:d0:8c:fe:33:9d:d1:3f:1d:6b:86:61:7b:
9a:ab:77:72:58:a1:d6:30:fd:42:66:37:dd:b2:46:7d:5e:e2:
bf:19:20:d1:70:af:e2:85:d4:b8:19:99:3f:da:65:02:3d:a2:
5d:76:78:08:d3:79:9b:9c:1a:cb:d3:43:b3:47:7d:a6:01:7c:
8f:f0:1d:9d:50:df:c4:84:1b:fe:68:90:7c:32:14:27:2b:99:
e6:f2:72:b9:a8:6e:01:c0:af:67:7f:dd:fd:e8:b5:49:23:ba:
fb:f5:ea:7f:ad:a0:98:4f:23:9f:77:70:1c:0b:41:9e:f5:3a:
a2:26:c6:b0:3a:fc:38:6d:85:1a:30:90:a4:a9:7b:3a:54:65:
68:fa:70:bf:80:6b:1a:5b:30:99:13:f5:39:15:d2:07:1f:f3:
8c:00:de:e1:ce:8b:9d:0c:00:e7:ef:bb:28:e6:cd:e3:86:56:
3a:61:ee:e0:32:8e:5b:28:f6:26:53:d6:04:50:81:8e:1d:a6:
cb:ef:79:75:30:2c:21:4c:e2:32:2c:c6:ed:88:e9:82:30:95:
b0:12:24:6e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBGgsg6GJprdjoooxJyTsE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyZTcyMDQ2NWM1Y2QwZGE5YzZhMTNiNDRmYTBkODZmNjQ5
ZTUwNTUwHhcNMjQwNjIzMTkxMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzY2RjYmNjYWUyMzU3YzEwZWZmNDIzOWNmNjAxMTI1YjI1NTU1MmU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGZPV7zCe/rvQKZLZOBpdZI+I/ch
ootafAlDiNgMNoVUGcS53la6HqBsQnrf/3B2/MxaGV3lo2youSvDKkpBNCt1ZOyl
t4LPEX0XYPSfsN9PZSN8TEl7OqJPmIla2/tLpQOCLsjOaBH88xVne/Lt9TDYg+U5
xXNYUHSz+eK3vHG/45wbIZX2kA1Z93cRcMiYgyqi2FOxKP3oj3CM2W2XtBpPtD1W
XGYTzWbiTFQtRb4/13Uyy5jwOvlSMcQdJlzpVzP3vOhuebz3hu/at4bcg/SlmHrU
Nrf2TH4dRnnsEv4sxJlIvQKPdtYY4haV0sM315JBukMo+/RkS7Q00bFQdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDzcvMriNXwQ7/QjnPYBElslVVLpMB8GA1UdIwQY
MBaAFJLnIEZcXNDanGoTtE+g2G9knlBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDkt
OTA5NmUxNjc0ZTIyLzEvUE55OHl1STFmQkR2OUNPYzlnRVNXeVZWVXVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mOGE5ZWItN2Y4ZC00YmY3LTgzZDktOTA5NmUxNjc0ZTIy
LzEva3VjZ1JseGMwTnFjYWhPMFQ2RFliMlNlVUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAk6EDMA0G
CSqGSIb3DQEBCwUAA4IBAQC4rnqgDVZRjSAKtOB4LUWk+r7rKCrK9vQmkhIzF6Hx
+M3g4/ZZ9REsk4/QjP4zndE/HWuGYXuaq3dyWKHWMP1CZjfdskZ9XuK/GSDRcK/i
hdS4GZk/2mUCPaJddngI03mbnBrL00OzR32mAXyP8B2dUN/EhBv+aJB8MhQnK5nm
8nK5qG4BwK9nf9396LVJI7r79ep/raCYTyOfd3AcC0Ge9TqiJsawOvw4bYUaMJCk
qXs6VGVo+nC/gGsaWzCZE/U5FdIHH/OMAN7hzoudDADn77so5s3jhlY6Ye7gMo5b
KPYmU9YEUIGOHabL73l1MCwhTOIyLMbtiOmCMJWwEiRu
-----END CERTIFICATE-----
Generated at Fri Jun 28 20:58:02 2024 by rpki-client on console-fra.rpki-client.org