Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/soNVZ1pvMeVLhWa1ckUXQt3KND4.roa
File: soNVZ1pvMeVLhWa1ckUXQt3KND4.roa (raw, json)
Hash identifier: DC9BLbdjpPigeaYBfMMZIovspr+Vmhk3/vtRfRYxjDk=
Subject key identifier: B2:83:55:67:5A:6F:31:E5:4B:85:66:B5:72:45:17:42:DD:CA:34:3E
Certificate issuer: /CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Certificate serial: 01934892C5B243181CD3810378FF70405BA0
Authority key identifier: AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/soNVZ1pvMeVLhWa1ckUXQt3KND4.roa
Signing time: Wed 20 Nov 2024 07:56:38 +0000
ROA not before: Wed 20 Nov 2024 07:56:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397563
IP address blocks: 80.253.252.0/23 maxlen: 24
91.151.80.0/24 maxlen: 24
91.151.82.0/24 maxlen: 24
91.151.91.0/24 maxlen: 24
213.142.128.0/24 maxlen: 24
213.142.129.0/24 maxlen: 24
213.142.130.0/24 maxlen: 24
213.142.131.0/24 maxlen: 24
213.142.136.0/24 maxlen: 24
213.142.137.0/24 maxlen: 24
213.142.142.0/24 maxlen: 32
213.142.152.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:48:92:c5:b2:43:18:1c:d3:81:03:78:ff:70:40:5b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab71e9b13f5c339a58692eeabe72eaa406bbbd7d
Validity
Not Before: Nov 20 07:56:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b28355675a6f31e54b8566b572451742ddca343e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:d2:f4:1d:ec:56:6e:83:23:44:72:f6:27:
37:bf:8c:80:4c:b3:4e:ea:e0:2a:3f:41:02:97:8e:
e9:3b:73:a1:91:89:59:6d:50:9d:b4:9b:d7:a8:13:
c8:cf:72:a4:cd:00:59:c4:19:06:1b:c2:f6:5d:12:
3d:a9:ba:bf:b0:55:72:5f:84:33:33:b5:08:e0:2b:
23:23:66:d6:73:61:6c:01:a9:04:de:87:bd:42:1e:
67:05:76:94:6d:2c:3e:c9:90:f5:f8:6d:dc:7c:70:
96:89:2c:82:96:4b:e9:a6:ce:01:d5:4f:19:90:bd:
1e:be:21:21:1d:44:6c:3f:a1:65:cd:44:ba:82:e2:
92:1e:49:e5:a6:96:06:70:17:dd:9a:d5:97:b0:81:
c6:6b:72:ce:6f:db:81:69:a3:65:e4:b0:5d:60:13:
2c:fa:38:66:ad:ea:0a:5b:9d:0f:cf:e3:2d:08:69:
2a:12:11:59:ad:a9:7f:51:6a:ab:d7:e7:4d:a8:3f:
92:64:cb:d5:12:98:fc:26:fd:a4:cb:66:0a:0e:81:
99:97:5e:7d:66:63:a6:c5:06:5b:33:38:10:6d:11:
37:80:a2:fe:4a:3c:0b:79:da:ad:b1:2d:96:2d:58:
7a:60:82:a6:eb:94:d4:f5:cc:d3:78:0b:af:97:23:
0f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:83:55:67:5A:6F:31:E5:4B:85:66:B5:72:45:17:42:DD:CA:34:3E
X509v3 Authority Key Identifier:
keyid:AB:71:E9:B1:3F:5C:33:9A:58:69:2E:EA:BE:72:EA:A4:06:BB:BD:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q3HpsT9cM5pYaS7qvnLqpAa7vX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/soNVZ1pvMeVLhWa1ckUXQt3KND4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6ba39c-ef1d-4d48-982b-cf4b900997a0/1/q3HpsT9cM5pYaS7qvnLqpAa7vX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.253.252.0/23
91.151.80.0/24
91.151.82.0/24
91.151.91.0/24
213.142.128.0/22
213.142.136.0/23
213.142.142.0/24
213.142.152.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:96:84:a5:12:13:f6:81:db:03:8c:7b:76:c3:bd:43:88:0e:
c8:ad:29:79:1e:6e:27:d7:08:a7:42:83:ea:2d:ea:d5:12:36:
13:5c:4d:cb:8e:a9:d5:03:86:c1:1c:ab:fc:0c:88:73:30:dc:
69:8d:d7:78:cc:6a:2f:5f:36:43:89:0b:17:d8:4d:e4:0d:8c:
4f:b6:2a:e9:52:52:b4:96:2e:c9:c1:f8:c7:83:ee:70:50:aa:
9e:14:7d:a0:8b:e9:95:40:7f:b3:c7:a8:20:ad:1b:2a:0f:f9:
de:d1:30:ea:9d:0a:dc:4b:7e:4b:7a:e3:49:d2:94:dd:0b:42:
dc:7c:c2:ac:eb:af:eb:93:92:15:81:47:b1:a6:9a:89:22:5b:
f9:8e:04:1f:f5:4f:70:93:c9:4d:80:8f:08:3b:5d:33:99:1e:
a1:ec:92:3f:9e:5d:33:89:71:14:80:a9:64:36:38:37:af:6e:
ab:e7:4b:35:de:9a:f2:3a:77:56:49:82:d3:a0:3f:87:7a:5f:
14:f1:e5:67:5e:b3:61:38:92:4e:e1:99:37:b3:84:aa:3e:f3:
bb:13:b0:e4:56:c2:be:58:e1:5a:19:0b:68:e4:09:42:9c:f3:
f4:15:7d:f8:53:e9:b1:ed:c3:03:f3:47:d0:91:e6:72:96:63:
e8:2e:f2:63
-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgISAZNIksWyQxgc04EDeP9wQFugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiNzFlOWIxM2Y1YzMzOWE1ODY5MmVlYWJlNzJlYWE0MDZi
YmJkN2QwHhcNMjQxMTIwMDc1NjM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMjgzNTU2NzVhNmYzMWU1NGI4NTY2YjU3MjQ1MTc0MmRkY2EzNDNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1X7S9B3sVm6DI0Ry9ic3v4yATLNO
6uAqP0ECl47pO3OhkYlZbVCdtJvXqBPIz3KkzQBZxBkGG8L2XRI9qbq/sFVyX4Qz
M7UI4CsjI2bWc2FsAakE3oe9Qh5nBXaUbSw+yZD1+G3cfHCWiSyClkvpps4B1U8Z
kL0eviEhHURsP6FlzUS6guKSHknlppYGcBfdmtWXsIHGa3LOb9uBaaNl5LBdYBMs
+jhmreoKW50Pz+MtCGkqEhFZral/UWqr1+dNqD+SZMvVEpj8Jv2ky2YKDoGZl159
ZmOmxQZbMzgQbRE3gKL+SjwLedqtsS2WLVh6YIKm65TU9czTeAuvlyMPcwIDAQAB
o4ICMzCCAi8wHQYDVR0OBBYEFLKDVWdabzHlS4VmtXJFF0LdyjQ+MB8GA1UdIwQY
MBaAFKtx6bE/XDOaWGku6r5y6qQGu719MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmIt
Y2Y0YjkwMDk5N2EwLzEvc29OVloxcHZNZVZMaFdhMWNrVVhRdDNLTkQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82YmEzOWMtZWYxZC00ZDQ4LTk4MmItY2Y0YjkwMDk5N2Ew
LzEvcTNIcHNUOWNNNXBZYVM3cXZuTHFwQWE3dlgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEkGCCsGAQUFBwEHAQH/BDowODA2BAIAATAwAwQBUP38AwQA
W5dQAwQAW5dSAwQAW5dbAwQC1Y6AAwQB1Y6IAwQA1Y6OAwQB1Y6YMA0GCSqGSIb3
DQEBCwUAA4IBAQBcloSlEhP2gdsDjHt2w71DiA7IrSl5Hm4n1winQoPqLerVEjYT
XE3LjqnVA4bBHKv8DIhzMNxpjdd4zGovXzZDiQsX2E3kDYxPtirpUlK0li7JwfjH
g+5wUKqeFH2gi+mVQH+zx6ggrRsqD/ne0TDqnQrcS35LeuNJ0pTdC0LcfMKs66/r
k5IVgUexppqJIlv5jgQf9U9wk8lNgI8IO10zmR6h7JI/nl0ziXEUgKlkNjg3r26r
50s13pryOndWSYLToD+Hel8U8eVnXrNhOJJO4Zk3s4SqPvO7E7DkVsK+WOFaGQto
5AlCnPP0FX34U+mx7cMD80fQkeZylmPoLvJj
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:41:18 2024 by rpki-client on console-ams.rpki-client.org