Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/g9UDaP1RlN68ml4Yv5uszPclni0.roa
File: g9UDaP1RlN68ml4Yv5uszPclni0.roa (raw, json)
Hash identifier: BjEkoY8/IKrWNFIf5ViuIc2XSaQMg9TQoQmD/2Ao/S4=
Subject key identifier: 83:D5:03:68:FD:51:94:DE:BC:9A:5E:18:BF:9B:AC:CC:F7:25:9E:2D
Certificate issuer: /CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Certificate serial: 0192050AD458A3BC98AE20A620695EE04521
Authority key identifier: 5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/g9UDaP1RlN68ml4Yv5uszPclni0.roa
Signing time: Wed 18 Sep 2024 12:10:48 +0000
ROA not before: Wed 18 Sep 2024 12:10:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48348
IP address blocks: 89.248.96.0/20 maxlen: 24
93.174.0.0/21 maxlen: 24
185.15.76.0/22 maxlen: 24
185.80.4.0/22 maxlen: 24
2a05:7900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:0a:d4:58:a3:bc:98:ae:20:a6:20:69:5e:e0:45:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eb42ab8de98be1c771f0a9868582fcf95dc4ac6
Validity
Not Before: Sep 18 12:10:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=83d50368fd5194debc9a5e18bf9bacccf7259e2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:5a:7b:61:7e:e3:e4:7c:5f:2f:8d:87:dd:
52:bb:80:e0:50:e5:62:46:58:a6:61:bf:53:a5:09:
50:92:2d:b0:b1:7f:17:5e:3a:e8:d9:a7:21:61:b4:
8d:52:50:ac:79:c9:55:c3:b4:b0:c2:aa:cf:4a:23:
cc:df:ba:71:14:79:e1:ca:c5:ba:0e:60:10:9e:e3:
67:34:6f:d3:95:10:f2:ba:8c:e3:18:36:7b:1b:e8:
14:0a:1c:ea:a2:3e:14:cc:e5:46:8a:14:aa:18:40:
06:22:b9:8e:ce:ab:4c:70:97:51:7c:de:a0:0f:56:
df:97:27:5f:9a:2d:94:75:6c:fe:76:c7:be:33:42:
bf:b0:b7:b0:e3:ca:8e:25:c2:85:8e:ce:44:77:66:
3c:32:74:08:09:a7:1a:10:48:17:1f:f7:f8:b0:a4:
91:1a:03:87:b2:6f:53:37:a2:8e:a3:45:57:cb:58:
84:ab:57:fa:5f:96:7a:03:bc:ed:04:2b:fb:d5:59:
ef:85:4e:4b:f5:b8:77:d0:f2:4f:a2:d4:28:e5:a1:
e2:7d:ff:f1:ad:b8:7c:f2:82:eb:69:25:7c:3b:9f:
e1:fe:7d:25:5b:83:19:43:fe:3b:c5:79:86:96:09:
d3:c2:6e:21:c2:a2:8c:07:48:95:a4:3f:6b:b3:f1:
a0:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:D5:03:68:FD:51:94:DE:BC:9A:5E:18:BF:9B:AC:CC:F7:25:9E:2D
X509v3 Authority Key Identifier:
keyid:5E:B4:2A:B8:DE:98:BE:1C:77:1F:0A:98:68:58:2F:CF:95:DC:4A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrQquN6Yvhx3HwqYaFgvz5XcSsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/g9UDaP1RlN68ml4Yv5uszPclni0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/a84e7e-c616-4ab1-a494-773c0b3c8935/1/XrQquN6Yvhx3HwqYaFgvz5XcSsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.248.96.0/20
93.174.0.0/21
185.15.76.0/22
185.80.4.0/22
IPv6:
2a05:7900::/29
Signature Algorithm: sha256WithRSAEncryption
ae:52:2e:af:1d:09:2a:e7:7a:a9:84:6d:ca:c4:e5:c3:07:e6:
6c:72:33:97:ea:da:a9:1e:41:56:9d:2f:16:d2:26:a3:a0:15:
7b:ac:43:75:a0:42:82:96:45:7f:85:49:34:f6:13:42:63:72:
58:9d:b4:22:f0:70:f5:f4:53:89:87:f1:6f:45:ee:1e:28:4d:
32:89:61:e8:63:fe:54:66:cf:b6:b9:91:4c:a0:e7:9b:94:cc:
2b:ba:98:37:92:c6:6c:19:5c:a4:09:2d:82:5d:3c:f0:17:fd:
94:07:65:76:67:ca:0a:7b:22:a2:9e:b3:34:2b:91:ba:e1:b0:
ed:02:58:66:91:98:04:92:ca:62:fc:38:fc:4c:7c:39:6d:4b:
f2:2f:14:fe:6e:31:7c:09:ce:ad:93:81:94:a9:b6:d6:a1:98:
6f:30:99:2c:a5:b1:04:e9:c5:8d:d7:ee:16:a0:b3:0c:af:5d:
4d:0f:01:02:da:11:f7:56:c7:e0:b1:68:c3:08:51:2e:ae:0f:
70:b0:f8:fc:db:af:36:5a:ea:59:ce:af:85:5b:56:e6:d2:ab:
16:b0:e5:24:44:e2:56:28:d4:94:6a:df:e1:03:ee:5a:fc:f8:
3d:01:38:27:bb:75:24:25:65:fa:6c:ee:97:0c:74:f8:23:96:
c9:b6:84:91
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZIFCtRYo7yYriCmIGle4EUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYjQyYWI4ZGU5OGJlMWM3NzFmMGE5ODY4NTgyZmNmOTVk
YzRhYzYwHhcNMjQwOTE4MTIxMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4M2Q1MDM2OGZkNTE5NGRlYmM5YTVlMThiZjliYWNjY2Y3MjU5ZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXNae2F+4+R8Xy+Nh91Su4DgUOVi
RlimYb9TpQlQki2wsX8XXjro2achYbSNUlCseclVw7SwwqrPSiPM37pxFHnhysW6
DmAQnuNnNG/TlRDyuozjGDZ7G+gUChzqoj4UzOVGihSqGEAGIrmOzqtMcJdRfN6g
D1bflydfmi2UdWz+dse+M0K/sLew48qOJcKFjs5Ed2Y8MnQICacaEEgXH/f4sKSR
GgOHsm9TN6KOo0VXy1iEq1f6X5Z6A7ztBCv71VnvhU5L9bh30PJPotQo5aHiff/x
rbh88oLraSV8O5/h/n0lW4MZQ/47xXmGlgnTwm4hwqKMB0iVpD9rs/GgbQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFIPVA2j9UZTevJpeGL+brMz3JZ4tMB8GA1UdIwQY
MBaAFF60KrjemL4cdx8KmGhYL8+V3ErGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQt
NzczYzBiM2M4OTM1LzEvZzlVRGFQMVJsTjY4bWw0WXY1dXN6UGNsbmkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9hODRlN2UtYzYxNi00YWIxLWE0OTQtNzczYzBiM2M4OTM1
LzEvWHJRcXVONll2aHgzSHdxWWFGZ3Z6NVhjU3NZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQEWfhgAwQD
Xa4AAwQCuQ9MAwQCuVAEMA0EAgACMAcDBQMqBXkAMA0GCSqGSIb3DQEBCwUAA4IB
AQCuUi6vHQkq53qphG3KxOXDB+ZscjOX6tqpHkFWnS8W0iajoBV7rEN1oEKClkV/
hUk09hNCY3JYnbQi8HD19FOJh/FvRe4eKE0yiWHoY/5UZs+2uZFMoOeblMwrupg3
ksZsGVykCS2CXTzwF/2UB2V2Z8oKeyKinrM0K5G64bDtAlhmkZgEkspi/Dj8THw5
bUvyLxT+bjF8Cc6tk4GUqbbWoZhvMJkspbEE6cWN1+4WoLMMr11NDwEC2hH3Vsfg
sWjDCFEurg9wsPj82682WupZzq+FW1bm0qsWsOUkROJWKNSUat/hA+5a/Pg9ATgn
u3UkJWX6bO6XDHT4I5bJtoSR
-----END CERTIFICATE-----
Generated at Sun Sep 29 02:03:24 2024 by rpki-client on console-ams.rpki-client.org