Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/aJVemnNm8fB4E6i4LmpuI9BWhsk.roa
File: aJVemnNm8fB4E6i4LmpuI9BWhsk.roa (raw, json)
Hash identifier: krHg8fJEioNKnb8Qlidwf5dp7iQnC2K3ykTr/NDbcoo=
Subject key identifier: 68:95:5E:9A:73:66:F1:F0:78:13:A8:B8:2E:6A:6E:23:D0:56:86:C9
Certificate issuer: /CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Certificate serial: 01919879C40C691F34ED7A7927E8D273CCE0
Authority key identifier: 9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/aJVemnNm8fB4E6i4LmpuI9BWhsk.roa
Signing time: Wed 28 Aug 2024 10:13:22 +0000
ROA not before: Wed 28 Aug 2024 10:13:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41683
IP address blocks: 185.163.129.0/24 maxlen: 24
185.163.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:79:c4:0c:69:1f:34:ed:7a:79:27:e8:d2:73:cc:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cb80bc4b597c176bd8538c188fec73da25e6e84
Validity
Not Before: Aug 28 10:13:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=68955e9a7366f1f07813a8b82e6a6e23d05686c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:45:bf:ee:4a:af:91:3b:3e:fe:23:b8:50:41:
49:85:ec:70:e0:cd:13:09:fe:5a:b4:b2:dd:dd:51:
23:a4:86:38:6c:35:36:bf:8a:79:1c:c9:89:25:70:
8c:94:45:9b:65:a3:c3:89:f9:e3:94:cc:98:39:81:
fd:69:39:96:da:e3:46:9e:97:9e:e1:cb:61:37:f0:
04:84:b1:44:be:f5:b5:0e:86:9d:86:69:c8:47:46:
48:0c:73:16:23:7d:24:14:cf:ac:d3:e6:b0:6a:b4:
48:09:b5:dc:06:71:b0:5c:15:a3:30:3f:82:88:66:
da:06:89:bc:b1:81:75:80:ff:34:c8:e6:51:86:e0:
d4:f8:76:3c:51:f7:75:4d:79:d9:b9:c9:e3:40:e0:
26:27:7f:24:f6:8e:d6:31:80:be:1a:77:03:80:b9:
58:74:da:5d:d2:8e:21:4d:34:be:19:dc:42:e8:8c:
cf:81:1e:6f:43:ae:d8:bf:ef:a5:a0:d9:7e:11:0c:
f7:45:ce:ab:10:eb:29:48:10:23:ea:d8:ca:9c:18:
3b:d1:7e:07:a4:da:68:66:a5:54:5c:60:76:7e:1f:
ae:62:7b:25:16:c8:f0:3a:0a:f4:20:61:59:38:b2:
1e:f0:54:68:db:be:b9:3c:8a:db:70:01:e8:9f:c4:
55:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:95:5E:9A:73:66:F1:F0:78:13:A8:B8:2E:6A:6E:23:D0:56:86:C9
X509v3 Authority Key Identifier:
keyid:9C:B8:0B:C4:B5:97:C1:76:BD:85:38:C1:88:FE:C7:3D:A2:5E:6E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLgLxLWXwXa9hTjBiP7HPaJeboQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/aJVemnNm8fB4E6i4LmpuI9BWhsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/720c04-e9c7-48b2-8fec-9cfe1b57cd20/1/nLgLxLWXwXa9hTjBiP7HPaJeboQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.129.0-185.163.130.255
Signature Algorithm: sha256WithRSAEncryption
76:dd:0c:60:83:72:cc:8c:61:77:d1:76:8f:56:4e:a7:d4:cf:
da:9a:01:32:9d:d6:c4:38:a9:bc:ca:29:0f:7d:24:09:d2:fb:
b8:ac:bc:a6:b1:40:9f:a2:7c:e9:36:6b:55:45:31:98:37:4d:
9b:10:13:e8:2d:b7:30:ac:4c:de:e7:53:47:f2:ff:b0:9e:a9:
30:3e:85:8d:48:01:f4:28:df:39:07:3c:c9:69:78:93:04:95:
f1:61:d2:11:16:63:02:bb:5f:32:09:01:fa:20:9b:9d:f2:bc:
d9:4b:1c:46:7b:4b:b1:37:23:66:b7:67:0a:36:bf:b9:17:e4:
e7:11:a2:66:a1:e0:96:b8:d9:c8:83:df:a2:ed:ab:c0:f1:a0:
c7:8d:84:48:ae:b7:57:b0:68:c4:b4:05:ac:a6:00:30:9f:55:
2c:71:a6:5c:ce:40:fe:7c:ae:36:da:f0:93:f8:a7:30:67:f3:
92:02:c5:e5:c8:fe:19:30:27:c2:a7:a0:a8:52:98:22:84:e5:
d3:fc:5a:a6:92:d8:e1:7f:8b:4b:dc:ba:4f:bf:f8:37:f8:ac:
bd:42:ac:3f:03:fe:b1:35:18:19:b1:95:87:30:32:1d:77:ec:
30:3b:55:4c:af:da:51:b2:77:31:a6:d4:85:61:8f:45:0a:86:
29:36:0a:1c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZGYecQMaR807Xp5J+jSc8zgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYjgwYmM0YjU5N2MxNzZiZDg1MzhjMTg4ZmVjNzNkYTI1
ZTZlODQwHhcNMjQwODI4MTAxMzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODk1NWU5YTczNjZmMWYwNzgxM2E4YjgyZTZhNmUyM2QwNTY4NmM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkW/7kqvkTs+/iO4UEFJhexw4M0T
Cf5atLLd3VEjpIY4bDU2v4p5HMmJJXCMlEWbZaPDifnjlMyYOYH9aTmW2uNGnpee
4cthN/AEhLFEvvW1DoadhmnIR0ZIDHMWI30kFM+s0+awarRICbXcBnGwXBWjMD+C
iGbaBom8sYF1gP80yOZRhuDU+HY8Ufd1TXnZucnjQOAmJ38k9o7WMYC+GncDgLlY
dNpd0o4hTTS+GdxC6IzPgR5vQ67Yv++loNl+EQz3Rc6rEOspSBAj6tjKnBg70X4H
pNpoZqVUXGB2fh+uYnslFsjwOgr0IGFZOLIe8FRo2765PIrbcAHon8RVPwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFGiVXppzZvHweBOouC5qbiPQVobJMB8GA1UdIwQY
MBaAFJy4C8S1l8F2vYU4wYj+xz2iXm6EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkxnTHhMV1h3WGE5aFRqQmlQN0hQYUplYm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi83MjBjMDQtZTljNy00OGIyLThmZWMt
OWNmZTFiNTdjZDIwLzEvYUpWZW1uTm04ZkI0RTZpNExtcHVJOUJXaHNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi83MjBjMDQtZTljNy00OGIyLThmZWMtOWNmZTFiNTdjZDIw
LzEvbkxnTHhMV1h3WGE5aFRqQmlQN0hQYUplYm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAC5o4ED
BAC5o4IwDQYJKoZIhvcNAQELBQADggEBAHbdDGCDcsyMYXfRdo9WTqfUz9qaATKd
1sQ4qbzKKQ99JAnS+7isvKaxQJ+ifOk2a1VFMZg3TZsQE+gttzCsTN7nU0fy/7Ce
qTA+hY1IAfQo3zkHPMlpeJMElfFh0hEWYwK7XzIJAfogm53yvNlLHEZ7S7E3I2a3
Zwo2v7kX5OcRomah4Ja42ciD36Ltq8DxoMeNhEiut1ewaMS0BaymADCfVSxxplzO
QP58rjba8JP4pzBn85ICxeXI/hkwJ8KnoKhSmCKE5dP8WqaS2OF/i0vcuk+/+Df4
rL1CrD8D/rE1GBmxlYcwMh137DA7VUyv2lGydzGm1IVhj0UKhik2Chw=
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:56:33 2024 by rpki-client on console-fra.rpki-client.org