Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/1-oFLc_rZHoax8zy-0Y0F5iKX-5U.roa
File: 1-oFLc_rZHoax8zy-0Y0F5iKX-5U.roa (raw, json)
Hash identifier: D7c5cY6GfgyFQ376FROMod+da6S63FfXZtaFQkVHyO8=
Subject key identifier: FA:81:4B:73:FA:D9:1E:86:B1:F3:3C:BE:D1:8D:05:E6:22:97:FB:95
Certificate issuer: /CN=e680a5610112df203987f32f0e5e15ad35e710d2
Certificate serial: 01924395BD570585A9D450DD111E9E3CA1BE
Authority key identifier: E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/1-oFLc_rZHoax8zy-0Y0F5iKX-5U.roa
Signing time: Mon 30 Sep 2024 15:38:59 +0000
ROA not before: Mon 30 Sep 2024 15:38:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21100
IP address blocks: 213.134.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:43:95:bd:57:05:85:a9:d4:50:dd:11:1e:9e:3c:a1:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680a5610112df203987f32f0e5e15ad35e710d2
Validity
Not Before: Sep 30 15:38:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa814b73fad91e86b1f33cbed18d05e62297fb95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:92:10:3d:46:92:40:49:67:4f:19:7e:e2:bd:
1d:65:44:c2:fe:2d:d9:5b:f2:a1:2a:1f:c6:ed:56:
d1:31:15:d5:be:c1:eb:ff:d1:46:ef:45:e3:f8:92:
8f:cd:6b:6e:6e:4f:06:f1:34:4b:3b:a5:11:80:ea:
9e:75:22:0d:88:2d:f8:ca:a3:cd:0d:5e:8b:f1:bc:
72:5f:39:e7:b9:81:1f:d6:f8:3f:0e:81:c3:a0:d8:
23:2b:eb:e1:14:74:7d:c5:6a:9c:f4:9a:c2:6c:9f:
63:d7:75:a6:3d:f3:f5:29:f8:9e:62:fe:7f:43:07:
cc:80:77:9c:3e:6f:ab:d4:aa:e0:e2:6c:09:67:e8:
f3:fa:a7:02:a8:12:30:38:30:72:9f:20:24:d0:7f:
4f:ce:94:d6:07:96:6e:04:2c:24:e2:d7:ae:51:e7:
dc:ca:60:21:cb:e5:09:1c:01:5d:f6:08:b9:a4:db:
3b:3d:99:36:c5:fa:bb:49:fe:9f:f5:50:8d:2c:57:
99:7c:87:fe:b0:df:a9:36:9a:4a:1d:55:79:08:e6:
20:60:90:32:d8:c9:8a:e7:79:e2:c6:c7:d8:5a:be:
2c:f0:24:f1:4a:83:4b:84:59:ba:95:64:9b:af:e4:
05:66:f2:9d:3c:8a:4c:2a:61:6c:53:c8:63:f3:2f:
ef:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:81:4B:73:FA:D9:1E:86:B1:F3:3C:BE:D1:8D:05:E6:22:97:FB:95
X509v3 Authority Key Identifier:
keyid:E6:80:A5:61:01:12:DF:20:39:87:F3:2F:0E:5E:15:AD:35:E7:10:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oClYQES3yA5h_MvDl4VrTXnENI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/1-oFLc_rZHoax8zy-0Y0F5iKX-5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/b40d25-f444-4f60-b162-d1502f7cf234/1/5oClYQES3yA5h_MvDl4VrTXnENI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.134.2.0/24
Signature Algorithm: sha256WithRSAEncryption
63:2c:16:4f:b5:95:84:7e:ba:db:63:a6:74:0f:9c:74:09:f3:
ca:e9:11:5e:b8:d3:ed:f4:9d:5e:44:df:1e:ab:8f:8a:a8:c8:
14:5e:42:e0:3b:ae:bc:82:f9:01:a1:d3:ae:8e:35:96:ac:76:
d7:5f:62:e5:cb:0f:58:4a:71:07:e8:e3:a6:38:55:21:8e:36:
42:db:45:4b:74:24:64:93:fa:35:e0:83:a2:e1:55:b6:17:23:
93:6b:fd:fd:d2:e7:9b:19:7c:a8:dd:14:07:6e:fe:6d:7d:bf:
a1:53:7d:06:44:8e:8d:4d:18:3f:7b:8a:02:cd:38:2f:8e:de:
dd:d3:62:62:25:48:04:6b:1f:db:c5:47:61:e5:ae:e9:31:ed:
70:9a:fd:b2:2b:af:6f:0c:7c:94:e9:46:37:36:f9:5d:68:a0:
37:74:f0:db:46:97:f0:aa:ee:4b:3e:c5:b7:ca:ec:4f:3a:75:
0a:15:3d:1a:0f:78:7e:6c:48:c3:41:fe:75:23:3b:e4:32:22:
c8:29:4c:79:1f:55:9d:ce:41:f0:26:1f:f0:1b:9f:34:c3:41:
63:32:68:48:c0:d3:5b:32:3f:06:f9:6c:ee:fb:f9:cd:d6:85:
d9:9b:c1:a3:32:92:f1:ba:18:60:cb:25:79:e2:b9:95:73:62:
c5:2d:93:fb
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZJDlb1XBYWp1FDdER6ePKG+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ODBhNTYxMDExMmRmMjAzOTg3ZjMyZjBlNWUxNWFkMzVl
NzEwZDIwHhcNMjQwOTMwMTUzODU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTgxNGI3M2ZhZDkxZTg2YjFmMzNjYmVkMThkMDVlNjIyOTdmYjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJIQPUaSQElnTxl+4r0dZUTC/i3Z
W/KhKh/G7VbRMRXVvsHr/9FG70Xj+JKPzWtubk8G8TRLO6URgOqedSINiC34yqPN
DV6L8bxyXznnuYEf1vg/DoHDoNgjK+vhFHR9xWqc9JrCbJ9j13WmPfP1KfieYv5/
QwfMgHecPm+r1Krg4mwJZ+jz+qcCqBIwODBynyAk0H9PzpTWB5ZuBCwk4teuUefc
ymAhy+UJHAFd9gi5pNs7PZk2xfq7Sf6f9VCNLFeZfIf+sN+pNppKHVV5COYgYJAy
2MmK53nixsfYWr4s8CTxSoNLhFm6lWSbr+QFZvKdPIpMKmFsU8hj8y/v0wIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPqBS3P62R6GsfM8vtGNBeYil/uVMB8GA1UdIwQY
MBaAFOaApWEBEt8gOYfzLw5eFa015xDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNW9DbFlRRVMzeUE1aF9NdkRsNFZyVFhuRU5JLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9iNDBkMjUtZjQ0NC00ZjYwLWIxNjIt
ZDE1MDJmN2NmMjM0LzEvMS1vRkxjX3JaSG9heDh6eS0wWTBGNWlLWC01VS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjkvYjQwZDI1LWY0NDQtNGY2MC1iMTYyLWQxNTAyZjdjZjIz
NC8xLzVvQ2xZUUVTM3lBNWhfTXZEbDRWclRYbkVOSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEANWGAjAN
BgkqhkiG9w0BAQsFAAOCAQEAYywWT7WVhH6622OmdA+cdAnzyukRXrjT7fSdXkTf
HquPiqjIFF5C4DuuvIL5AaHTro41lqx2119i5csPWEpxB+jjpjhVIY42QttFS3Qk
ZJP6NeCDouFVthcjk2v9/dLnmxl8qN0UB27+bX2/oVN9BkSOjU0YP3uKAs04L47e
3dNiYiVIBGsf28VHYeWu6THtcJr9siuvbwx8lOlGNzb5XWigN3Tw20aX8KruSz7F
t8rsTzp1ChU9Gg94fmxIw0H+dSM75DIiyClMeR9Vnc5B8CYf8BufNMNBYzJoSMDT
WzI/Bvls7vv5zdaF2ZvBozKS8boYYMsleeK5lXNixS2T+w==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:50:10 2024 by rpki-client on console-ams.rpki-client.org