Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/7Q3mhKt1L3izDM0kRvR7Rv_ztkc.roa
File: 7Q3mhKt1L3izDM0kRvR7Rv_ztkc.roa (raw, json)
Hash identifier: yfSb/Yfdcj6ZcahUdLDHXpu/2OV0PJRx5SBzAhGwz5M=
Subject key identifier: ED:0D:E6:84:AB:75:2F:78:B3:0C:CD:24:46:F4:7B:46:FF:F3:B6:47
Certificate issuer: /CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Certificate serial: 018F10EBEED086201B1E065073B31F438EFA
Authority key identifier: 80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/7Q3mhKt1L3izDM0kRvR7Rv_ztkc.roa
Signing time: Wed 24 Apr 2024 16:24:08 +0000
ROA not before: Wed 24 Apr 2024 16:24:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210986
IP address blocks: 88.151.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:10:eb:ee:d0:86:20:1b:1e:06:50:73:b3:1f:43:8e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fe5698a127964cc0e4ce8e3fdc985e2a25a663
Validity
Not Before: Apr 24 16:24:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ed0de684ab752f78b30ccd2446f47b46fff3b647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e5:74:d4:39:9c:79:8e:01:e3:c6:a4:2c:e2:
85:ff:5f:cb:c4:f0:a7:c7:12:5c:ea:4b:ed:b1:3f:
de:68:53:cb:9e:41:aa:56:3d:ac:0e:e4:57:a8:6a:
f0:48:57:f5:b6:bc:3a:69:1f:2a:b7:df:3d:29:a7:
78:23:8e:e1:06:0d:d0:bc:81:49:30:5c:dd:49:d4:
c4:5b:87:04:16:a6:dc:89:6b:3a:77:53:c6:13:d8:
25:0c:57:ff:c8:45:e8:cc:60:20:79:63:6c:3d:1e:
b9:9f:65:3e:ab:24:d7:24:5b:21:e3:6f:e0:f9:1c:
6a:c3:e2:70:fb:c0:97:f1:ce:f8:b6:ca:98:cb:1b:
18:8c:b5:2f:c6:40:b1:c5:ab:ea:1a:68:c3:57:b5:
bf:73:7b:b0:c9:44:5f:b1:20:fd:d9:41:c1:2e:c2:
a5:0b:4a:20:2f:42:ef:a0:dd:41:66:56:70:a5:01:
ff:fa:50:e5:dc:b0:f6:93:4e:22:fa:e1:3d:5c:f3:
e0:f6:23:a9:ee:e9:e5:84:7c:7b:5a:b2:91:74:57:
d8:28:2d:b3:f4:65:74:c3:15:b8:f2:b6:a2:5f:f8:
79:fd:39:a6:77:90:09:b6:04:a4:36:da:cf:93:7b:
c1:e2:d3:51:22:fd:82:0c:72:0a:b9:8c:ee:02:e4:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0D:E6:84:AB:75:2F:78:B3:0C:CD:24:46:F4:7B:46:FF:F3:B6:47
X509v3 Authority Key Identifier:
keyid:80:FE:56:98:A1:27:96:4C:C0:E4:CE:8E:3F:DC:98:5E:2A:25:A6:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gP5WmKEnlkzA5M6OP9yYXiolpmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/7Q3mhKt1L3izDM0kRvR7Rv_ztkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3f9ad1-6be5-4fa4-9e56-d701dc69863f/1/gP5WmKEnlkzA5M6OP9yYXiolpmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.151.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:c5:4c:51:86:93:fd:d6:6b:f0:63:08:cc:83:22:2c:53:fe:
f9:66:c3:b6:d1:ee:c6:c0:39:91:0b:66:75:45:ce:99:55:2d:
6e:37:a4:01:3a:7c:b0:c2:0c:a8:a9:2a:5c:c6:1e:30:5b:d8:
33:ac:d3:92:b1:bc:6f:c2:f4:e0:6d:31:d0:4f:c2:89:d3:22:
78:40:7d:53:d5:e4:1c:07:10:5e:3f:7c:1c:d1:93:fd:3a:21:
b8:65:7f:b8:a7:88:1a:8c:5a:4c:3f:d7:bf:a9:7d:79:b6:92:
e7:2f:8a:33:bf:eb:c8:ea:94:53:bf:d5:21:9f:68:84:dc:de:
67:c0:d7:93:a6:52:04:7c:7f:0a:9a:7e:6c:51:f0:27:51:98:
c4:ad:ad:f5:d2:95:e3:56:ec:e7:76:ba:bb:72:25:d6:c7:ac:
fc:4e:12:09:75:83:82:d8:55:04:ff:7e:06:c6:9f:18:cc:49:
5c:cd:c1:67:b4:8f:64:8f:91:5d:08:9e:96:92:89:f5:28:81:
cb:27:24:45:5a:1c:6e:6f:0f:47:e7:19:f3:e3:75:69:c4:a3:
f2:cf:1b:a7:f9:f0:89:86:94:c7:f6:6d:ff:d7:30:d7:d9:95:
88:bb:87:cf:28:be:54:c7:a0:d8:97:f1:11:7b:33:75:fa:e6:
52:1f:b1:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8Q6+7QhiAbHgZQc7MfQ476MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZmU1Njk4YTEyNzk2NGNjMGU0Y2U4ZTNmZGM5ODVlMmEy
NWE2NjMwHhcNMjQwNDI0MTYyNDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZDBkZTY4NGFiNzUyZjc4YjMwY2NkMjQ0NmY0N2I0NmZmZjNiNjQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuV01DmceY4B48akLOKF/1/LxPCn
xxJc6kvtsT/eaFPLnkGqVj2sDuRXqGrwSFf1trw6aR8qt989Kad4I47hBg3QvIFJ
MFzdSdTEW4cEFqbciWs6d1PGE9glDFf/yEXozGAgeWNsPR65n2U+qyTXJFsh42/g
+Rxqw+Jw+8CX8c74tsqYyxsYjLUvxkCxxavqGmjDV7W/c3uwyURfsSD92UHBLsKl
C0ogL0LvoN1BZlZwpQH/+lDl3LD2k04i+uE9XPPg9iOp7unlhHx7WrKRdFfYKC2z
9GV0wxW48raiX/h5/Tmmd5AJtgSkNtrPk3vB4tNRIv2CDHIKuYzuAuQC1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO0N5oSrdS94swzNJEb0e0b/87ZHMB8GA1UdIwQY
MBaAFID+VpihJ5ZMwOTOjj/cmF4qJaZjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zZjlhZDEtNmJlNS00ZmE0LTllNTYt
ZDcwMWRjNjk4NjNmLzEvN1EzbWhLdDFMM2l6RE0wa1J2UjdSdl96dGtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zZjlhZDEtNmJlNS00ZmE0LTllNTYtZDcwMWRjNjk4NjNm
LzEvZ1A1V21LRW5sa3pBNU02T1A5eVlYaW9scG1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWJdxMA0G
CSqGSIb3DQEBCwUAA4IBAQAPxUxRhpP91mvwYwjMgyIsU/75ZsO20e7GwDmRC2Z1
Rc6ZVS1uN6QBOnywwgyoqSpcxh4wW9gzrNOSsbxvwvTgbTHQT8KJ0yJ4QH1T1eQc
BxBeP3wc0ZP9OiG4ZX+4p4gajFpMP9e/qX15tpLnL4ozv+vI6pRTv9Uhn2iE3N5n
wNeTplIEfH8Kmn5sUfAnUZjEra310pXjVuzndrq7ciXWx6z8ThIJdYOC2FUE/34G
xp8YzElczcFntI9kj5FdCJ6Wkon1KIHLJyRFWhxubw9H5xnz43VpxKPyzxun+fCJ
hpTH9m3/1zDX2ZWIu4fPKL5Ux6DYl/ERezN1+uZSH7F4
-----END CERTIFICATE-----
Generated at Sat Sep 28 12:43:13 2024 by rpki-client on console-ams.rpki-client.org