Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/i55nQstCP0qnwEzm1YkofIZbcY0.roa
File: i55nQstCP0qnwEzm1YkofIZbcY0.roa (raw, json)
Hash identifier: HHdM4yX9LhaczDTJctOLX8Kk7Q8MreFrzEGBV4jQtDk=
Subject key identifier: 8B:9E:67:42:CB:42:3F:4A:A7:C0:4C:E6:D5:89:28:7C:86:5B:71:8D
Certificate issuer: /CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Certificate serial: 01906B194CE44DE94D9DBD0CFBFB8261FABD
Authority key identifier: 3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/i55nQstCP0qnwEzm1YkofIZbcY0.roa
Signing time: Sun 30 Jun 2024 21:42:18 +0000
ROA not before: Sun 30 Jun 2024 21:42:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198694
IP address blocks: 92.249.20.0/22 maxlen: 22
2a13:62c0::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:6b:19:4c:e4:4d:e9:4d:9d:bd:0c:fb:fb:82:61:fa:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f39dd7bd73c3e1ba27d178d55c26f8a96cdb4a9
Validity
Not Before: Jun 30 21:42:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b9e6742cb423f4aa7c04ce6d589287c865b718d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:e1:a3:05:92:e6:b1:1e:03:5e:c1:66:3b:
dc:c2:d0:9c:8d:16:02:1d:6e:fa:01:c6:ed:31:d7:
b3:03:d2:63:24:af:b5:81:be:df:2b:54:9d:0a:43:
2d:4f:eb:dd:7c:90:57:ed:d1:d3:3a:55:39:33:0d:
58:7d:1f:63:b9:18:05:83:7b:b5:9b:1d:93:f6:e3:
ab:6b:ba:35:1e:5e:02:25:ce:6c:b7:92:d1:d4:34:
c6:fd:db:d6:17:6d:0a:bd:bc:1a:36:91:67:1e:ea:
14:ad:a8:de:38:57:63:7f:ef:27:3e:43:f3:06:b8:
f6:70:42:a7:b9:12:64:84:76:a2:51:40:56:10:b4:
7c:21:6e:a5:36:71:40:a3:c6:44:6a:34:8b:40:72:
b1:72:48:57:a3:6c:ad:34:66:af:22:25:66:d6:89:
f0:40:38:37:a8:40:19:5f:29:50:cb:c4:2b:e2:f1:
4a:23:54:09:f0:d4:be:01:e4:ba:40:92:0b:25:30:
c0:bd:3a:93:c4:ac:89:d0:1c:af:76:1b:f6:67:10:
1e:bf:5c:84:32:d8:59:58:93:27:10:81:ad:ae:13:
4a:b0:46:fd:ea:0e:a0:49:52:e1:aa:0b:5e:2a:b4:
1d:d0:c9:1d:19:bb:ca:e4:c9:43:7d:c4:2f:4d:72:
d1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9E:67:42:CB:42:3F:4A:A7:C0:4C:E6:D5:89:28:7C:86:5B:71:8D
X509v3 Authority Key Identifier:
keyid:3F:39:DD:7B:D7:3C:3E:1B:A2:7D:17:8D:55:C2:6F:8A:96:CD:B4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pznde9c8PhuifReNVcJvipbNtKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/i55nQstCP0qnwEzm1YkofIZbcY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/621edd-1b5a-46ac-ba13-04f9e616af60/1/Pznde9c8PhuifReNVcJvipbNtKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.20.0/22
IPv6:
2a13:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
8a:0a:75:f7:d1:c2:d9:6e:17:d1:d5:0f:38:32:68:1c:ad:94:
89:cf:14:ba:8e:98:57:b7:42:cc:6f:9d:30:d5:26:5d:b9:3e:
20:08:42:c6:d1:0c:94:a3:50:e9:f7:2e:00:b9:10:fe:49:86:
39:f8:06:ee:91:0a:c7:50:b8:7d:b6:13:16:c3:44:7f:cb:16:
62:7f:9b:8a:51:08:53:19:61:d2:3b:3f:5a:4d:df:4a:4a:af:
36:40:c4:30:8a:55:78:29:b4:9a:4f:0f:ce:b4:8c:7b:3d:58:
1f:ee:7a:1e:db:0c:17:eb:9b:ad:bd:f9:2c:92:45:8d:61:64:
41:d6:11:f9:48:11:2a:a0:68:7d:00:d8:bb:d3:d5:cc:2a:7b:
8c:2a:f3:fa:d8:c3:50:b9:51:68:97:06:0c:f7:27:8a:07:54:
53:bc:c2:c1:c0:04:b1:3d:91:5a:0f:2b:24:ca:9d:4a:ce:89:
dc:6e:5c:1c:b1:61:f4:17:23:f6:4d:e7:f8:95:34:05:16:47:
07:ff:87:1e:6e:2c:5e:b4:7f:86:f6:bc:9b:c0:72:3b:9e:55:
d6:75:2e:4d:48:22:ed:77:e8:b9:3e:05:44:99:03:13:fa:2f:
c0:4a:65:71:9d:37:83:17:2a:86:de:14:bd:82:e8:5c:f5:3e:
6d:35:35:83
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZBrGUzkTelNnb0M+/uCYfq9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmMzlkZDdiZDczYzNlMWJhMjdkMTc4ZDU1YzI2ZjhhOTZj
ZGI0YTkwHhcNMjQwNjMwMjE0MjE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjllNjc0MmNiNDIzZjRhYTdjMDRjZTZkNTg5Mjg3Yzg2NWI3MThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotHhowWS5rEeA17BZjvcwtCcjRYC
HW76AcbtMdezA9JjJK+1gb7fK1SdCkMtT+vdfJBX7dHTOlU5Mw1YfR9juRgFg3u1
mx2T9uOra7o1Hl4CJc5st5LR1DTG/dvWF20KvbwaNpFnHuoUrajeOFdjf+8nPkPz
Brj2cEKnuRJkhHaiUUBWELR8IW6lNnFAo8ZEajSLQHKxckhXo2ytNGavIiVm1onw
QDg3qEAZXylQy8Qr4vFKI1QJ8NS+AeS6QJILJTDAvTqTxKyJ0Byvdhv2ZxAev1yE
MthZWJMnEIGtrhNKsEb96g6gSVLhqgteKrQd0MkdGbvK5MlDfcQvTXLRtwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFIueZ0LLQj9Kp8BM5tWJKHyGW3GNMB8GA1UdIwQY
MBaAFD853XvXPD4bon0XjVXCb4qWzbSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMt
MDRmOWU2MTZhZjYwLzEvaTU1blFzdENQMHFud0V6bTFZa29mSVpiY1kwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi82MjFlZGQtMWI1YS00NmFjLWJhMTMtMDRmOWU2MTZhZjYw
LzEvUHpuZGU5YzhQaHVpZlJlTlZjSnZpcGJOdEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXPkUMA0E
AgACMAcDBQMqE2LAMA0GCSqGSIb3DQEBCwUAA4IBAQCKCnX30cLZbhfR1Q84Mmgc
rZSJzxS6jphXt0LMb50w1SZduT4gCELG0QyUo1Dp9y4AuRD+SYY5+AbukQrHULh9
thMWw0R/yxZif5uKUQhTGWHSOz9aTd9KSq82QMQwilV4KbSaTw/OtIx7PVgf7noe
2wwX65utvfkskkWNYWRB1hH5SBEqoGh9ANi709XMKnuMKvP62MNQuVFolwYM9yeK
B1RTvMLBwASxPZFaDyskyp1KzoncblwcsWH0FyP2Tef4lTQFFkcH/4cebixetH+G
9rybwHI7nlXWdS5NSCLtd+i5PgVEmQMT+i/ASmVxnTeDFyqG3hS9guhc9T5tNTWD
-----END CERTIFICATE-----
Generated at Sun Nov 24 05:25:52 2024 by rpki-client on console-fra.rpki-client.org