Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/4DA5U9RJDxz0PlwrFQsCc0H3MqE.roa
File: 4DA5U9RJDxz0PlwrFQsCc0H3MqE.roa (raw, json)
Hash identifier: kNinE8BKHY+J3y1cvP9lVb5qIE4xYvZTfRXEBvviJJ0=
Subject key identifier: E0:30:39:53:D4:49:0F:1C:F4:3E:5C:2B:15:0B:02:73:41:F7:32:A1
Certificate issuer: /CN=7415fec4ae76b24e4f02991649917b99b740044a
Certificate serial: 0191D71A3B1E09D15B06BD4CF7B352006513
Authority key identifier: 74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/4DA5U9RJDxz0PlwrFQsCc0H3MqE.roa
Signing time: Mon 09 Sep 2024 14:05:06 +0000
ROA not before: Mon 09 Sep 2024 14:05:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216309
IP address blocks: 77.105.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d7:1a:3b:1e:09:d1:5b:06:bd:4c:f7:b3:52:00:65:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7415fec4ae76b24e4f02991649917b99b740044a
Validity
Not Before: Sep 9 14:05:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0303953d4490f1cf43e5c2b150b027341f732a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:f6:05:11:df:0f:e6:6f:76:01:24:b7:d9:dd:
50:b0:e8:ae:69:42:ca:89:23:cd:44:57:33:ec:84:
e0:ed:40:17:8d:00:6b:67:8c:56:5c:eb:e1:33:0b:
69:07:2e:76:75:be:65:50:b4:31:0e:25:af:c1:c9:
32:44:ae:b4:42:78:bb:33:04:0f:13:5c:1c:92:0d:
71:2a:34:96:4b:90:1e:d4:7b:ce:07:a8:15:7b:c5:
af:f6:3e:c7:3e:b6:93:f9:d0:d6:87:7b:32:37:6b:
96:8c:99:1c:b2:68:3b:be:ab:e4:f6:e9:23:62:ec:
f0:e6:6e:98:9c:dc:bb:84:41:e5:c4:26:a3:2f:9f:
f9:20:3c:5f:33:62:e4:2a:91:25:75:e4:f6:0a:80:
97:34:85:01:43:32:64:7d:a8:6e:3a:5c:40:75:f9:
1a:73:f2:d8:93:d8:96:a0:14:09:c4:83:6e:26:ca:
78:2d:7c:46:26:8a:72:6d:0e:02:2a:ae:62:57:ad:
73:4a:8e:55:40:dc:bf:9d:9f:25:ac:33:93:9a:9f:
19:68:e4:7c:f9:26:14:d2:68:8b:36:72:c4:ef:d9:
b1:34:e5:ae:65:ca:79:a2:de:3f:79:11:6e:24:d9:
19:b4:01:15:66:d0:04:90:e8:73:ec:d6:e7:87:af:
9a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:30:39:53:D4:49:0F:1C:F4:3E:5C:2B:15:0B:02:73:41:F7:32:A1
X509v3 Authority Key Identifier:
keyid:74:15:FE:C4:AE:76:B2:4E:4F:02:99:16:49:91:7B:99:B7:40:04:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBX-xK52sk5PApkWSZF7mbdABEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/4DA5U9RJDxz0PlwrFQsCc0H3MqE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/987979-9693-45e3-85ba-ed5358b6da31/1/dBX-xK52sk5PApkWSZF7mbdABEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.105.135.0/24
Signature Algorithm: sha256WithRSAEncryption
37:13:1b:5a:61:de:64:5f:90:0f:84:79:e2:7d:e6:d9:29:e5:
04:80:a6:b5:7e:89:fd:ff:64:63:7e:92:34:d7:07:7b:af:5f:
ef:3b:d2:c9:21:35:95:d9:de:2a:fa:c4:36:27:8d:f3:76:0a:
2c:64:76:ee:4c:f4:d3:ad:49:39:e4:11:33:21:95:e6:3c:26:
a1:60:9d:82:26:16:e2:ba:73:94:d7:ad:ac:ab:6a:36:70:9c:
74:03:ab:f8:d9:58:62:bf:90:a9:de:cc:a7:a3:74:3d:bc:0c:
46:f9:f8:4b:a5:aa:ff:63:19:0b:3e:04:04:de:b6:d6:f3:21:
c0:6b:31:6b:63:55:0f:87:94:fe:c0:c3:07:91:83:59:2e:58:
9f:d2:1e:70:3d:15:c0:71:d8:c0:08:5e:c0:6d:cc:4c:e9:3a:
df:d1:7f:d8:f1:0d:d7:e7:d1:5d:ec:65:26:08:c9:a9:9a:78:
1c:a4:03:0a:d2:ab:be:dd:a5:0a:bc:7a:8d:96:ee:05:35:26:
18:df:b1:54:c5:3d:10:b5:ab:7e:42:57:71:e7:1e:a9:4e:00:
44:e7:6f:07:5c:db:d8:81:64:0c:4f:19:ec:bc:ef:52:61:e3:
3f:2a:d7:83:65:86:b3:97:63:9d:33:cb:6e:84:90:2a:fd:d5:
89:d3:84:5e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHXGjseCdFbBr1M97NSAGUTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0MTVmZWM0YWU3NmIyNGU0ZjAyOTkxNjQ5OTE3Yjk5Yjc0
MDA0NGEwHhcNMjQwOTA5MTQwNTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMDMwMzk1M2Q0NDkwZjFjZjQzZTVjMmIxNTBiMDI3MzQxZjczMmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6vYFEd8P5m92ASS32d1QsOiuaULK
iSPNRFcz7ITg7UAXjQBrZ4xWXOvhMwtpBy52db5lULQxDiWvwckyRK60Qni7MwQP
E1wckg1xKjSWS5Ae1HvOB6gVe8Wv9j7HPraT+dDWh3syN2uWjJkcsmg7vqvk9ukj
Yuzw5m6YnNy7hEHlxCajL5/5IDxfM2LkKpEldeT2CoCXNIUBQzJkfahuOlxAdfka
c/LYk9iWoBQJxINuJsp4LXxGJopybQ4CKq5iV61zSo5VQNy/nZ8lrDOTmp8ZaOR8
+SYU0miLNnLE79mxNOWuZcp5ot4/eRFuJNkZtAEVZtAEkOhz7Nbnh6+a3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOAwOVPUSQ8c9D5cKxULAnNB9zKhMB8GA1UdIwQY
MBaAFHQV/sSudrJOTwKZFkmRe5m3QARKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEt
ZWQ1MzU4YjZkYTMxLzEvNERBNVU5UkpEeHowUGx3ckZRc0NjMEgzTXFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy85ODc5NzktOTY5My00NWUzLTg1YmEtZWQ1MzU4YjZkYTMx
LzEvZEJYLXhLNTJzazVQQXBrV1NaRjdtYmRBQkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATWmHMA0G
CSqGSIb3DQEBCwUAA4IBAQA3ExtaYd5kX5APhHnifebZKeUEgKa1fon9/2RjfpI0
1wd7r1/vO9LJITWV2d4q+sQ2J43zdgosZHbuTPTTrUk55BEzIZXmPCahYJ2CJhbi
unOU162sq2o2cJx0A6v42Vhiv5Cp3syno3Q9vAxG+fhLpar/YxkLPgQE3rbW8yHA
azFrY1UPh5T+wMMHkYNZLlif0h5wPRXAcdjACF7AbcxM6Trf0X/Y8Q3X59Fd7GUm
CMmpmngcpAMK0qu+3aUKvHqNlu4FNSYY37FUxT0Qtat+Qldx5x6pTgBE528HXNvY
gWQMTxnsvO9SYeM/KteDZYazl2OdM8tuhJAq/dWJ04Re
-----END CERTIFICATE-----
Generated at Tue Nov 26 00:52:27 2024 by rpki-client on console-fra.rpki-client.org