Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/rd4SQA-lNHrTs9D8hHCtERL1TSM.roa
File: rd4SQA-lNHrTs9D8hHCtERL1TSM.roa (raw, json)
Hash identifier: 7eRUV+VX0CjRH9mMonB4h+loeoo3dxxZ6FrFxchtSH8=
Subject key identifier: AD:DE:12:40:0F:A5:34:7A:D3:B3:D0:FC:84:70:AD:11:12:F5:4D:23
Certificate issuer: /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial: 01915C3ACB2A9F00D4E8581EBC817DA10438
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/rd4SQA-lNHrTs9D8hHCtERL1TSM.roa
Signing time: Fri 16 Aug 2024 17:27:22 +0000
ROA not before: Fri 16 Aug 2024 17:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34444
IP address blocks: 84.22.64.0/19 maxlen: 19
84.22.68.0/24 maxlen: 24
84.22.69.0/24 maxlen: 24
84.22.73.0/24 maxlen: 24
84.22.77.0/24 maxlen: 24
84.22.78.0/24 maxlen: 24
84.22.80.0/24 maxlen: 24
84.22.84.0/24 maxlen: 24
84.22.85.0/24 maxlen: 24
195.234.248.0/22 maxlen: 22
213.180.225.0/24 maxlen: 24
213.180.226.0/24 maxlen: 24
213.180.228.0/24 maxlen: 24
213.180.229.0/24 maxlen: 24
213.180.240.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5c:3a:cb:2a:9f:00:d4:e8:58:1e:bc:81:7d:a1:04:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Validity
Not Before: Aug 16 17:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=adde12400fa5347ad3b3d0fc8470ad1112f54d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:28:0f:da:69:1a:39:15:7d:0d:3f:2a:ec:32:
08:03:88:35:82:c8:fe:04:dc:ec:6a:4e:e6:26:cd:
63:cf:8c:6b:3b:d6:39:7e:17:73:04:18:2e:7e:0e:
2f:bb:9f:f6:79:92:0f:b3:63:fe:05:02:ae:4f:e7:
ca:57:1f:66:ea:46:49:ea:e4:7f:57:29:6a:f9:d2:
95:cb:b7:55:81:cc:a7:a9:bf:3a:68:eb:9d:d8:81:
84:bc:a6:e3:17:a4:1b:a6:15:49:d7:45:08:b0:8c:
c1:ee:34:27:6b:d9:09:6d:fb:ad:40:6b:a4:f6:91:
9c:e0:3d:d9:3c:8c:23:2c:d1:2d:1b:8f:8f:c2:c9:
38:b6:df:be:ba:86:16:bc:0c:b5:4a:8d:46:c7:ea:
c5:c7:66:1d:64:ec:08:43:e1:12:42:7d:72:4c:2b:
e9:d4:74:ef:ae:4d:68:02:fb:3c:af:33:83:c2:26:
5f:12:3b:f3:dd:ad:33:56:3c:01:6d:97:af:af:dc:
b2:0a:50:eb:b3:85:70:05:bc:44:1b:d1:81:7d:c4:
ed:ca:c2:dd:3e:8e:05:a0:a3:ab:73:69:15:2a:b2:
08:89:1b:62:d8:6e:fd:7e:46:1e:aa:95:05:7d:70:
25:94:9e:d0:3e:00:4d:e6:da:fb:d6:f3:16:f3:47:
02:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DE:12:40:0F:A5:34:7A:D3:B3:D0:FC:84:70:AD:11:12:F5:4D:23
X509v3 Authority Key Identifier:
keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/rd4SQA-lNHrTs9D8hHCtERL1TSM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.22.64.0/19
195.234.248.0/22
213.180.225.0-213.180.226.255
213.180.228.0/23
213.180.240.0/21
Signature Algorithm: sha256WithRSAEncryption
15:17:78:1d:f9:52:28:ff:68:7c:61:b3:4a:14:96:02:4e:14:
ef:01:70:c4:b6:74:00:45:e1:13:4d:57:dd:d8:dc:3b:b9:55:
e9:5b:94:f8:d8:1d:0d:46:a1:15:92:0a:fc:9a:4d:9b:f6:f0:
a0:9b:42:66:7c:e3:a6:e6:48:f6:6a:1c:2e:a4:24:ab:75:ac:
18:df:b4:e1:99:b5:63:00:34:69:be:59:95:d1:78:e2:7d:c5:
2d:f2:22:4a:bd:c0:57:7c:0b:79:3c:f1:79:71:05:27:4d:a5:
4d:66:09:3f:e1:83:a1:64:d9:08:9a:c9:a3:bb:0f:3b:34:0b:
a1:45:96:ad:d5:17:50:87:90:d2:5b:2b:ff:7d:3e:2d:04:95:
01:e3:3d:b0:0d:e0:1b:83:69:db:25:38:63:f6:c7:4a:5f:3d:
aa:0d:97:da:46:75:2f:44:1f:d1:6f:e9:15:48:4d:c9:0e:31:
73:d7:df:dc:05:98:e6:74:f0:a2:10:b0:84:44:96:b6:20:34:
93:32:c2:03:c3:4b:12:6c:29:c8:ba:c8:1d:9a:54:09:ef:8e:
2b:03:ed:90:d9:f4:af:e3:00:8f:ae:8b:f8:8f:56:d7:21:d5:
de:b2:d3:2b:d8:7c:18:f4:bb:f9:a4:af:90:6a:72:40:a4:4c:
9a:57:61:a7
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZFcOssqnwDU6FgevIF9oQQ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZTk0Y2NiN2I2MDFkYTBjYTA5NDY5ZjYwZjY1MzY0MGZl
ZDhjMWMwHhcNMjQwODE2MTcyNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZGRlMTI0MDBmYTUzNDdhZDNiM2QwZmM4NDcwYWQxMTEyZjU0ZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlSgP2mkaORV9DT8q7DIIA4g1gsj+
BNzsak7mJs1jz4xrO9Y5fhdzBBgufg4vu5/2eZIPs2P+BQKuT+fKVx9m6kZJ6uR/
Vylq+dKVy7dVgcynqb86aOud2IGEvKbjF6QbphVJ10UIsIzB7jQna9kJbfutQGuk
9pGc4D3ZPIwjLNEtG4+Pwsk4tt++uoYWvAy1So1Gx+rFx2YdZOwIQ+ESQn1yTCvp
1HTvrk1oAvs8rzODwiZfEjvz3a0zVjwBbZevr9yyClDrs4VwBbxEG9GBfcTtysLd
Po4FoKOrc2kVKrIIiRti2G79fkYeqpUFfXAllJ7QPgBN5tr71vMW80cC1wIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFK3eEkAPpTR607PQ/IRwrRES9U0jMB8GA1UdIwQY
MBaAFEfpTMt7YB2gyglGn2D2U2QP7YwcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQt
YmQ5MGEzZjA2ZTE2LzEvcmQ0U1FBLWxOSHJUczlEOGhIQ3RFUkwxVFNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC85ZTI5ZGMtY2VjOS00OWUyLWJjZTQtYmQ5MGEzZjA2ZTE2
LzEvUi1sTXkzdGdIYURLQ1VhZllQWlRaQV90akJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjAsBAIAATAmAwQFVBZAAwQC
w+r4MAwDBADVtOEDBADVtOIDBAHVtOQDBAPVtPAwDQYJKoZIhvcNAQELBQADggEB
ABUXeB35Uij/aHxhs0oUlgJOFO8BcMS2dABF4RNNV93Y3Du5VelblPjYHQ1GoRWS
CvyaTZv28KCbQmZ846bmSPZqHC6kJKt1rBjftOGZtWMANGm+WZXReOJ9xS3yIkq9
wFd8C3k88XlxBSdNpU1mCT/hg6Fk2QiayaO7Dzs0C6FFlq3VF1CHkNJbK/99Pi0E
lQHjPbAN4BuDadslOGP2x0pfPaoNl9pGdS9EH9Fv6RVITckOMXPX39wFmOZ08KIQ
sIRElrYgNJMywgPDSxJsKci6yB2aVAnvjisD7ZDZ9K/jAI+ui/iPVtch1d6y0yvY
fBj0u/mkr5BqckCkTJpXYac=
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:24:07 2024 by rpki-client on console-ams.rpki-client.org