Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/p6goEsoBq4-uL4pKnjW-pAmFYNQ.roa
File: p6goEsoBq4-uL4pKnjW-pAmFYNQ.roa (raw, json)
Hash identifier: jT5PXjqiR0YgdeCHRVVjvTQJCGmBqQZJDNyCvDqQ4CA=
Subject key identifier: A7:A8:28:12:CA:01:AB:8F:AE:2F:8A:4A:9E:35:BE:A4:09:85:60:D4
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019277A9D6F984294D67189D2EAA83F3F65F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/p6goEsoBq4-uL4pKnjW-pAmFYNQ.roa
Signing time: Thu 10 Oct 2024 18:21:12 +0000
ROA not before: Thu 10 Oct 2024 18:21:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6762
IP address blocks: 62.197.136.0/21 maxlen: 24
89.33.85.0/24 maxlen: 24
89.39.163.0/24 maxlen: 24
89.39.164.0/24 maxlen: 24
93.114.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:77:a9:d6:f9:84:29:4d:67:18:9d:2e:aa:83:f3:f6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 10 18:21:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a7a82812ca01ab8fae2f8a4a9e35bea4098560d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d8:a4:aa:34:bc:34:1f:c1:8d:39:ce:2f:96:
d9:98:b9:ec:ab:38:b2:8b:49:91:16:05:c3:49:ef:
3c:19:d2:0f:01:4a:a9:21:65:28:08:db:32:46:3d:
fe:b9:27:4d:1a:85:28:7d:f8:0c:63:f2:b0:da:d2:
ca:54:c2:19:66:97:68:b4:87:9d:2b:0a:1f:bb:3e:
4c:fb:87:38:fc:b0:74:82:95:62:6f:23:49:5e:06:
2b:f3:ae:9b:c3:1d:2e:27:8c:f6:df:c5:b6:9e:26:
e6:ee:45:78:b7:8d:89:8c:20:75:d8:45:96:fb:ac:
85:26:d1:27:ae:d6:a6:76:b5:1b:78:44:c8:dd:e7:
de:ee:4a:98:66:91:32:95:1c:f1:1a:7e:12:49:00:
91:f7:8b:81:3a:3e:69:27:70:4c:67:29:85:53:9e:
10:49:11:ab:44:4b:e3:d3:08:a0:bf:51:79:b5:6c:
f3:ce:2f:42:c5:15:39:e5:36:40:2e:31:f3:b4:98:
ec:b3:25:a1:cb:fe:a2:2c:c6:9a:4b:a5:4d:21:14:
a0:a0:eb:17:02:1c:ff:4b:3d:31:bc:37:a2:d0:f9:
87:dc:74:3d:6c:c6:37:15:00:5c:a5:5b:f2:24:6e:
dd:d6:72:68:d6:63:67:a5:1d:7a:65:ab:61:2e:f3:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A8:28:12:CA:01:AB:8F:AE:2F:8A:4A:9E:35:BE:A4:09:85:60:D4
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/p6goEsoBq4-uL4pKnjW-pAmFYNQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.197.136.0/21
89.33.85.0/24
89.39.163.0-89.39.164.255
93.114.195.0/24
Signature Algorithm: sha256WithRSAEncryption
77:2d:c4:c4:59:d0:0e:a2:bb:94:40:db:7f:91:72:58:47:ee:
7a:b7:e7:ba:92:b7:4a:8c:2d:46:f9:6f:a4:ab:ee:a5:a0:2d:
82:66:5a:d0:84:ee:7c:85:2f:2c:c8:a3:b5:b1:8f:71:cf:a8:
62:31:47:98:95:1c:33:f4:8f:05:66:9f:43:61:d4:8d:ac:d6:
e6:04:1c:fc:26:83:a5:8d:b2:c4:51:c2:59:15:69:7d:66:9f:
3e:cd:50:61:ba:fd:81:ee:5d:08:36:17:4e:75:bf:a9:70:26:
e5:24:e3:07:e0:fc:39:af:2c:4c:7c:46:69:f4:4c:fa:bf:15:
73:6f:5a:34:8d:b6:cb:36:a3:38:24:e0:08:e6:fa:3a:42:25:
f6:cd:dd:55:08:2a:09:14:9f:80:bb:1a:b1:b3:d2:c9:c8:a2:
53:84:f4:4d:9a:81:9e:8a:b0:86:b9:08:c1:0e:43:af:ec:7e:
8e:64:ec:04:a3:d3:0f:ca:ba:c2:77:1f:d6:25:8c:b8:42:4e:
99:e1:5a:12:cd:d4:ca:d9:23:4b:4d:39:b8:f7:d4:9c:45:3f:
67:ae:db:0c:c8:79:02:4d:a8:5c:a6:56:a8:52:5e:dd:82:24:
f4:d6:7a:f5:f8:a3:d4:db:d1:dc:20:4d:76:28:f7:f2:d6:d0:
5a:b0:2b:53
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZJ3qdb5hClNZxidLqqD8/ZfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjQxMDEwMTgyMTEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2E4MjgxMmNhMDFhYjhmYWUyZjhhNGE5ZTM1YmVhNDA5ODU2MGQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitikqjS8NB/BjTnOL5bZmLnsqziy
i0mRFgXDSe88GdIPAUqpIWUoCNsyRj3+uSdNGoUoffgMY/Kw2tLKVMIZZpdotIed
Kwofuz5M+4c4/LB0gpVibyNJXgYr866bwx0uJ4z238W2nibm7kV4t42JjCB12EWW
+6yFJtEnrtamdrUbeETI3efe7kqYZpEylRzxGn4SSQCR94uBOj5pJ3BMZymFU54Q
SRGrREvj0wigv1F5tWzzzi9CxRU55TZALjHztJjssyWhy/6iLMaaS6VNIRSgoOsX
Ahz/Sz0xvDei0PmH3HQ9bMY3FQBcpVvyJG7d1nJo1mNnpR16ZathLvP/ZwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFKeoKBLKAauPri+KSp41vqQJhWDUMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvcDZnb0Vzb0JxNC11TDRwS25qVy1wQW1GWU5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQDPsWIAwQA
WSFVMAwDBABZJ6MDBABZJ6QDBABdcsMwDQYJKoZIhvcNAQELBQADggEBAHctxMRZ
0A6iu5RA23+RclhH7nq357qSt0qMLUb5b6Sr7qWgLYJmWtCE7nyFLyzIo7Wxj3HP
qGIxR5iVHDP0jwVmn0Nh1I2s1uYEHPwmg6WNssRRwlkVaX1mnz7NUGG6/YHuXQg2
F051v6lwJuUk4wfg/DmvLEx8Rmn0TPq/FXNvWjSNtss2ozgk4Ajm+jpCJfbN3VUI
KgkUn4C7GrGz0snIolOE9E2agZ6KsIa5CMEOQ6/sfo5k7ASj0w/KusJ3H9YljLhC
TpnhWhLN1MrZI0tNObj31JxFP2eu2wzIeQJNqFymVqhSXt2CJPTWevX4o9Tb0dwg
TXYo9/LW0FqwK1M=
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:48:26 2024 by rpki-client on console-fra.rpki-client.org