Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/9Xt-cq6YELgnq0kwsxswAviY38Y.roa
File: 9Xt-cq6YELgnq0kwsxswAviY38Y.roa (raw, json)
Hash identifier: hjMBMeYjSwLL2vqvq8IeN7isjJMa0VprBvPmh8vesbw=
Subject key identifier: F5:7B:7E:72:AE:98:10:B8:27:AB:49:30:B3:1B:30:02:F8:98:DF:C6
Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial: 018CC9BCF0FE2089AE099E5238BD1948C0A5
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/9Xt-cq6YELgnq0kwsxswAviY38Y.roa
Signing time: Tue 02 Jan 2024 10:34:12 +0000
ROA not before: Tue 02 Jan 2024 10:34:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47678
IP address blocks: 213.110.160.0/19 maxlen: 22
94.45.64.0/19 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:f0:fe:20:89:ae:09:9e:52:38:bd:19:48:c0:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Validity
Not Before: Jan 2 10:34:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f57b7e72ae9810b827ab4930b31b3002f898dfc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:20:30:c2:de:ab:ad:a5:e4:34:ae:0e:2a:d5:
4d:5c:4f:df:51:e6:d9:57:24:a4:c3:f0:2f:1c:04:
25:d5:ad:c2:be:d8:ea:39:b9:42:f3:24:0b:cb:17:
77:c4:89:e6:3a:0e:60:d7:03:ed:75:ea:37:08:76:
da:dc:6b:89:78:16:c8:23:66:e6:bb:00:f7:96:17:
b0:85:8f:a1:24:5c:86:6a:7e:b4:08:fe:46:65:f7:
28:28:57:df:35:04:82:6f:fc:0f:30:20:9b:66:b3:
30:c5:d4:75:31:01:09:3a:08:d5:24:43:8c:ed:fd:
ce:6e:dc:32:f1:bf:b5:83:e7:7b:bb:01:16:1e:de:
98:50:a3:df:7d:0d:77:13:b3:58:db:30:a9:ac:e1:
a3:f1:9b:80:e3:8a:fd:6e:7c:e0:46:c2:a2:83:39:
b6:4b:11:0c:a8:e1:6d:b1:bf:37:f9:20:aa:cf:c6:
82:d7:67:e7:d4:da:c2:17:55:97:09:fd:0a:ca:93:
96:a6:a3:f7:2f:46:da:9b:17:1f:98:86:43:45:22:
64:80:10:fa:33:02:cb:22:17:79:6d:13:a4:cd:0a:
36:a9:41:7c:bc:3b:ba:9e:38:f1:6f:87:22:5d:4b:
46:db:a1:7a:6a:d2:e2:29:ae:fc:e0:e3:5a:d2:8a:
8d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:7B:7E:72:AE:98:10:B8:27:AB:49:30:B3:1B:30:02:F8:98:DF:C6
X509v3 Authority Key Identifier:
keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/9Xt-cq6YELgnq0kwsxswAviY38Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.64.0/19
213.110.160.0/19
Signature Algorithm: sha256WithRSAEncryption
43:ed:89:4c:7d:42:5a:08:1e:97:ca:86:18:59:c7:98:65:f0:
0a:04:7a:3e:5d:fd:42:72:5e:87:e4:e9:0f:52:32:e2:f0:c9:
f4:a0:cf:b4:71:48:fc:ac:4b:93:3e:e0:7f:fa:98:9f:bc:23:
26:9b:e3:66:c3:75:38:19:2a:24:33:75:68:db:28:79:95:a9:
6e:1a:6a:ef:01:5f:bf:d5:af:ed:7d:fd:7c:4b:54:54:cd:0f:
3b:c6:1e:66:11:20:47:c0:ca:5d:e2:4d:25:ba:31:b4:d3:69:
62:18:35:7a:25:17:1f:3c:91:2a:a3:ed:28:7f:ca:e8:49:92:
b2:63:39:84:a5:8e:0b:55:4f:b4:70:c4:91:06:f7:54:72:16:
2d:15:5b:45:a9:0a:a2:fc:50:4b:76:1b:4c:95:71:96:d8:ae:
35:90:55:77:bb:eb:38:d1:a7:29:26:36:6c:26:10:3b:5e:9f:
6a:fe:1b:c5:71:ae:ec:65:0a:ef:51:8b:0b:53:0a:ee:59:42:
63:a5:85:f3:df:3e:c3:e1:1f:37:9c:0c:d2:3a:ac:10:b8:b0:
6e:13:81:fc:e7:4a:43:1e:50:c1:0e:7e:70:21:d9:b4:4d:97:
a3:79:29:3c:a9:95:81:ce:76:7d:e9:44:6e:f3:ed:b6:32:25:
72:52:f6:34
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJvPD+IImuCZ5SOL0ZSMClMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzc4OWVjZjY3ZTA0Mjk4YzVlZTQ0YzY3ZDhmYjdmNWQ2
ZDk1YTEwHhcNMjQwMTAyMTAzNDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTdiN2U3MmFlOTgxMGI4MjdhYjQ5MzBiMzFiMzAwMmY4OThkZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyAwwt6rraXkNK4OKtVNXE/fUebZ
VySkw/AvHAQl1a3CvtjqOblC8yQLyxd3xInmOg5g1wPtdeo3CHba3GuJeBbII2bm
uwD3lhewhY+hJFyGan60CP5GZfcoKFffNQSCb/wPMCCbZrMwxdR1MQEJOgjVJEOM
7f3Obtwy8b+1g+d7uwEWHt6YUKPffQ13E7NY2zCprOGj8ZuA44r9bnzgRsKigzm2
SxEMqOFtsb83+SCqz8aC12fn1NrCF1WXCf0KypOWpqP3L0bamxcfmIZDRSJkgBD6
MwLLIhd5bROkzQo2qUF8vDu6njjxb4ciXUtG26F6atLiKa784ONa0oqNRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPV7fnKumBC4J6tJMLMbMAL4mN/GMB8GA1UdIwQY
MBaAFEw3iez2fgQpjF7kTGfY+39dbZWhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMt
MWRjNTRkMWMwM2EzLzEvOVh0LWNxNllFTGducTBrd3N4c3dBdmlZMzhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC83ZWQ3YjEtYjhmMy00M2YzLTk2ZTMtMWRjNTRkMWMwM2Ez
LzEvVERlSjdQWi1CQ21NWHVSTVo5ajdmMTF0bGFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFXi1AAwQF
1W6gMA0GCSqGSIb3DQEBCwUAA4IBAQBD7YlMfUJaCB6XyoYYWceYZfAKBHo+Xf1C
cl6H5OkPUjLi8Mn0oM+0cUj8rEuTPuB/+pifvCMmm+Nmw3U4GSokM3Vo2yh5lalu
GmrvAV+/1a/tff18S1RUzQ87xh5mESBHwMpd4k0lujG002liGDV6JRcfPJEqo+0o
f8roSZKyYzmEpY4LVU+0cMSRBvdUchYtFVtFqQqi/FBLdhtMlXGW2K41kFV3u+s4
0acpJjZsJhA7Xp9q/hvFca7sZQrvUYsLUwruWUJjpYXz3z7D4R83nAzSOqwQuLBu
E4H850pDHlDBDn5wIdm0TZejeSk8qZWBznZ96URu8+22MiVyUvY0
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:49:12 2024 by rpki-client on console-fra.rpki-client.org