Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/n5m7jjnb8hD7bY6VrpYP68201Wc.roa
File: n5m7jjnb8hD7bY6VrpYP68201Wc.roa (raw, json)
Hash identifier: ATNhK6zclZ8IS32gvabX/pIXvsrHboZY2fCkShNxRJo=
Subject key identifier: 9F:99:BB:8E:39:DB:F2:10:FB:6D:8E:95:AE:96:0F:EB:CD:B4:D5:67
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 0190FE697E6C534BC87E3977E53C6229508E
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/n5m7jjnb8hD7bY6VrpYP68201Wc.roa
Signing time: Mon 29 Jul 2024 12:14:04 +0000
ROA not before: Mon 29 Jul 2024 12:14:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 89.185.80.0/24 maxlen: 24
89.185.81.0/24 maxlen: 24
89.185.82.0/24 maxlen: 24
89.185.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft
rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fe:69:7e:6c:53:4b:c8:7e:39:77:e5:3c:62:29:50:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jul 29 12:14:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f99bb8e39dbf210fb6d8e95ae960febcdb4d567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:79:e0:ee:91:91:e8:47:c3:41:ea:86:42:37:
d5:ab:46:c2:64:55:b1:cc:f1:cf:77:ae:3e:8b:42:
f0:e9:94:5f:d3:8b:03:ab:53:b6:ee:ce:47:bf:e9:
11:c9:3d:c8:76:e5:f3:b9:48:27:90:6a:27:2a:e5:
c2:b1:86:36:9e:1d:bf:dd:ad:02:93:db:7d:ec:ff:
6c:74:4c:46:82:38:43:b2:1f:78:87:53:c5:c4:22:
48:2c:42:6d:9c:ce:0f:df:60:f9:cf:e9:5b:40:84:
1d:79:6f:66:13:52:23:44:a9:ff:75:e7:f4:68:21:
17:e0:b6:07:d2:65:22:aa:68:ec:1c:67:b5:6a:9e:
fa:14:dd:f3:b3:21:4e:b6:e5:8b:cc:eb:15:02:d7:
74:88:96:a7:5e:39:50:b1:de:f7:96:20:c6:f9:e9:
01:95:a2:8c:1d:5c:97:9d:58:88:36:06:fe:d0:fe:
bf:13:8f:0b:5f:b1:ca:80:00:1d:13:c1:c6:ac:fe:
5e:51:ce:ba:db:03:a4:86:d9:10:dd:e5:f2:8a:93:
5c:66:50:7d:3c:e6:9c:f3:a4:9e:17:29:17:34:da:
af:66:d0:90:66:e6:96:a8:df:63:69:7f:24:7a:4f:
6f:e9:3a:e0:0a:f6:d1:05:1d:95:40:eb:de:4c:b6:
20:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:99:BB:8E:39:DB:F2:10:FB:6D:8E:95:AE:96:0F:EB:CD:B4:D5:67
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/n5m7jjnb8hD7bY6VrpYP68201Wc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.185.80.0-89.185.82.255
89.185.84.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:97:19:38:a0:7d:0b:e9:b2:36:1e:96:6b:f6:71:26:74:b9:
63:06:c1:c7:67:ce:b2:e2:47:0f:1b:c8:69:a7:60:43:eb:0c:
ac:06:d8:4f:01:b1:3f:b0:7d:96:b5:5b:97:d7:c7:ab:35:e0:
8c:c0:c6:8c:e0:19:2a:f5:89:73:42:7c:3b:4a:51:9b:bf:7b:
7e:ac:93:1a:c3:f4:ae:91:3d:86:bc:c4:05:71:07:20:2f:ca:
6c:87:43:d1:7d:9d:d1:8a:b3:b5:88:0c:fb:f8:2e:8b:76:0d:
5f:4d:41:60:5f:0d:dc:2c:6b:0b:0c:fd:7d:9d:0f:77:58:a8:
6d:e2:12:7c:84:69:6f:e7:6d:36:8d:41:20:d8:57:44:39:4e:
32:96:d1:cc:32:44:50:81:7b:f1:76:17:16:11:86:ff:79:99:
84:c4:a6:3e:b1:b3:d3:31:41:d4:12:54:e4:96:43:f2:b8:ea:
94:11:45:6e:72:45:47:2f:f6:86:05:ac:cc:15:1b:91:dd:ac:
29:1e:32:00:1e:7c:da:b9:2a:f2:b3:7b:84:8c:14:d3:db:15:
57:2b:25:f6:ea:60:ab:4f:bf:09:95:00:c0:fb:03:65:b3:2d:
73:f5:84:5a:9e:f0:07:bf:86:b4:8f:6e:18:90:01:40:ea:83:
d6:42:fc:6b
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZD+aX5sU0vIfjl35TxiKVCOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi
MzliOWQwHhcNMjQwNzI5MTIxNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Zjk5YmI4ZTM5ZGJmMjEwZmI2ZDhlOTVhZTk2MGZlYmNkYjRkNTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnng7pGR6EfDQeqGQjfVq0bCZFWx
zPHPd64+i0Lw6ZRf04sDq1O27s5Hv+kRyT3IduXzuUgnkGonKuXCsYY2nh2/3a0C
k9t97P9sdExGgjhDsh94h1PFxCJILEJtnM4P32D5z+lbQIQdeW9mE1IjRKn/def0
aCEX4LYH0mUiqmjsHGe1ap76FN3zsyFOtuWLzOsVAtd0iJanXjlQsd73liDG+ekB
laKMHVyXnViINgb+0P6/E48LX7HKgAAdE8HGrP5eUc662wOkhtkQ3eXyipNcZlB9
POac86SeFykXNNqvZtCQZuaWqN9jaX8kek9v6TrgCvbRBR2VQOveTLYgjwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFJ+Zu4452/IQ+22Ola6WD+vNtNVnMB8GA1UdIwQY
MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct
OGU2Zjg3OGRiNWY0LzEvbjVtN2pqbmI4aEQ3Ylk2VnJwWVA2ODIwMVdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0
LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBARZuVAD
BABZuVIDBABZuVQwDQYJKoZIhvcNAQELBQADggEBADqXGTigfQvpsjYelmv2cSZ0
uWMGwcdnzrLiRw8byGmnYEPrDKwG2E8BsT+wfZa1W5fXx6s14IzAxozgGSr1iXNC
fDtKUZu/e36skxrD9K6RPYa8xAVxByAvymyHQ9F9ndGKs7WIDPv4Lot2DV9NQWBf
DdwsawsM/X2dD3dYqG3iEnyEaW/nbTaNQSDYV0Q5TjKW0cwyRFCBe/F2FxYRhv95
mYTEpj6xs9MxQdQSVOSWQ/K46pQRRW5yRUcv9oYFrMwVG5HdrCkeMgAefNq5KvKz
e4SMFNPbFVcrJfbqYKtPvwmVAMD7A2WzLXP1hFqe8Ae/hrSPbhiQAUDqg9ZC/Gs=
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:44:49 2024 by rpki-client on console-fra.rpki-client.org