Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/P4TAWrUSnEp0lPbBAf4sY9m-8K8.roa
File: P4TAWrUSnEp0lPbBAf4sY9m-8K8.roa (raw, json)
Hash identifier: Pvl0l3HPp1uENZcOpUMFWt3xLi8cWVwRVu3qy88cJjI=
Subject key identifier: 3F:84:C0:5A:B5:12:9C:4A:74:94:F6:C1:01:FE:2C:63:D9:BE:F0:AF
Certificate issuer: /CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Certificate serial: 018CC4246C2960D6AEAE215410FDF6DB709B
Authority key identifier: C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/P4TAWrUSnEp0lPbBAf4sY9m-8K8.roa
Signing time: Mon 01 Jan 2024 08:29:30 +0000
ROA not before: Mon 01 Jan 2024 08:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5466
IP address blocks: 213.191.224.0/21 maxlen: 21
185.61.0.0/22 maxlen: 22
95.83.240.0/21 maxlen: 21
89.204.208.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:6c:29:60:d6:ae:ae:21:54:10:fd:f6:db:70:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1acf260d23263a7c6bb6c59c19eebc6759b60be
Validity
Not Before: Jan 1 08:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3f84c05ab5129c4a7494f6c101fe2c63d9bef0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cc:06:5f:be:3d:97:d8:8a:58:33:d6:a5:e4:
b2:b7:81:b4:21:af:e2:5c:d6:53:b9:6f:e9:ac:ae:
93:d9:1c:cc:cd:27:11:05:76:18:82:9f:13:e4:df:
8f:93:01:7c:b4:92:91:ca:7e:66:00:63:95:a2:6e:
90:51:eb:10:10:8d:51:19:41:08:71:8c:df:cf:9b:
5c:0e:74:4e:83:63:3b:a7:e5:11:d7:9b:9b:aa:03:
4d:11:ae:52:cd:b8:7e:de:a0:40:cb:02:56:1c:ca:
1d:46:15:a8:d7:a7:fc:a0:87:de:ac:b7:14:51:25:
27:5f:6c:95:f7:eb:7a:9a:3a:30:27:b7:77:20:0b:
eb:13:f5:94:d2:0a:86:ef:ab:7a:0d:26:32:ba:9a:
a7:0b:0f:5d:54:25:93:51:53:c2:b4:69:3f:4a:b3:
6b:eb:eb:8a:e1:46:63:6e:77:d9:84:1e:3e:db:f4:
6c:ef:a6:df:5b:57:06:b8:c2:93:9f:6c:51:69:c4:
89:bf:9a:b7:a4:f3:7a:60:67:18:e1:be:b2:93:8d:
20:02:d4:e7:e0:83:7e:ce:12:57:9d:2b:ab:15:d4:
13:ac:34:21:16:46:4e:24:3c:0d:90:fa:17:c3:03:
49:9c:6a:18:ce:ed:61:71:92:07:2e:a6:de:ea:c8:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:84:C0:5A:B5:12:9C:4A:74:94:F6:C1:01:FE:2C:63:D9:BE:F0:AF
X509v3 Authority Key Identifier:
keyid:C1:AC:F2:60:D2:32:63:A7:C6:BB:6C:59:C1:9E:EB:C6:75:9B:60:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wazyYNIyY6fGu2xZwZ7rxnWbYL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/P4TAWrUSnEp0lPbBAf4sY9m-8K8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/d0c17a-19b7-4142-b941-ffd646d05f67/1/wazyYNIyY6fGu2xZwZ7rxnWbYL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.204.208.0/20
95.83.240.0/21
185.61.0.0/22
213.191.224.0/21
Signature Algorithm: sha256WithRSAEncryption
68:13:e3:37:df:40:bb:42:f0:7a:48:f1:88:51:4c:26:1a:86:
0e:0d:22:37:81:f4:7c:c1:c3:69:63:65:f2:1c:8d:b5:f0:76:
0a:f7:78:53:4c:36:21:c9:66:15:19:6e:a5:c0:42:a1:33:4b:
2d:37:96:5e:70:67:e0:03:3c:d0:60:cb:22:2a:26:17:0a:4e:
d8:19:1a:e1:41:59:18:f1:18:c0:50:58:5d:e7:a2:31:d9:78:
c5:72:7e:8b:43:ac:f1:00:07:bd:d4:f9:d8:54:cf:a3:20:d4:
e5:03:e1:d8:77:2a:e7:9a:a6:39:20:0b:c3:65:82:65:44:b4:
fe:36:e5:74:13:7d:51:43:7b:47:98:14:3e:1c:a3:d3:46:08:
85:91:27:90:e3:55:37:e3:60:27:e3:54:3f:42:f6:bd:cd:55:
0c:95:8d:36:c5:61:dc:4f:09:c0:66:26:b7:2d:09:93:a0:7d:
94:42:3a:d4:dc:5c:5f:56:00:60:20:cd:0d:38:fb:47:a2:aa:
ee:f4:37:ba:d1:18:32:00:1e:01:43:a9:02:f1:13:88:da:7c:
dc:55:0e:d4:37:93:b9:6a:b0:28:81:d2:44:8a:40:be:30:69:
2a:65:46:70:af:8e:63:b0:35:26:d4:0a:d2:9b:c6:62:de:ab:
af:11:6e:8c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzEJGwpYNauriFUEP3223CbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxYWNmMjYwZDIzMjYzYTdjNmJiNmM1OWMxOWVlYmM2NzU5
YjYwYmUwHhcNMjQwMTAxMDgyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZjg0YzA1YWI1MTI5YzRhNzQ5NGY2YzEwMWZlMmM2M2Q5YmVmMGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8wGX749l9iKWDPWpeSyt4G0Ia/i
XNZTuW/prK6T2RzMzScRBXYYgp8T5N+PkwF8tJKRyn5mAGOVom6QUesQEI1RGUEI
cYzfz5tcDnROg2M7p+UR15ubqgNNEa5Szbh+3qBAywJWHModRhWo16f8oIferLcU
USUnX2yV9+t6mjowJ7d3IAvrE/WU0gqG76t6DSYyupqnCw9dVCWTUVPCtGk/SrNr
6+uK4UZjbnfZhB4+2/Rs76bfW1cGuMKTn2xRacSJv5q3pPN6YGcY4b6yk40gAtTn
4IN+zhJXnSurFdQTrDQhFkZOJDwNkPoXwwNJnGoYzu1hcZIHLqbe6siQ5QIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFD+EwFq1EpxKdJT2wQH+LGPZvvCvMB8GA1UdIwQY
MBaAFMGs8mDSMmOnxrtsWcGe68Z1m2C+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEt
ZmZkNjQ2ZDA1ZjY3LzEvUDRUQVdyVVNuRXAwbFBiQkFmNHNZOW0tOEs4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS9kMGMxN2EtMTliNy00MTQyLWI5NDEtZmZkNjQ2ZDA1ZjY3
LzEvd2F6eVlOSXlZNmZHdTJ4WndaN3J4bldiWUw0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQEWczQAwQD
X1PwAwQCuT0AAwQD1b/gMA0GCSqGSIb3DQEBCwUAA4IBAQBoE+M330C7QvB6SPGI
UUwmGoYODSI3gfR8wcNpY2XyHI218HYK93hTTDYhyWYVGW6lwEKhM0stN5ZecGfg
AzzQYMsiKiYXCk7YGRrhQVkY8RjAUFhd56Ix2XjFcn6LQ6zxAAe91PnYVM+jINTl
A+HYdyrnmqY5IAvDZYJlRLT+NuV0E31RQ3tHmBQ+HKPTRgiFkSeQ41U342An41Q/
Qva9zVUMlY02xWHcTwnAZia3LQmToH2UQjrU3FxfVgBgIM0NOPtHoqru9De60Rgy
AB4BQ6kC8ROI2nzcVQ7UN5O5arAogdJEikC+MGkqZUZwr45jsDUm1ArSm8Zi3quv
EW6M
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:15:28 2024 by rpki-client on console-ams.rpki-client.org