Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/1q61J6hDg6UxpZ-FXiDNBxljzqQ.roa
File: 1q61J6hDg6UxpZ-FXiDNBxljzqQ.roa (raw, json)
Hash identifier: 4wNMWRd9cD9GjJ3zeq/E2ukLFQNLc9eR37MIESNQyMQ=
Subject key identifier: D6:AE:B5:27:A8:43:83:A5:31:A5:9F:85:5E:20:CD:07:19:63:CE:A4
Certificate issuer: /CN=1083a6411796bf726387f7a55cf84b57ca899beb
Certificate serial: 01916A56CFB170963F12FEA98A33E3D8EBC0
Authority key identifier: 10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/1q61J6hDg6UxpZ-FXiDNBxljzqQ.roa
Signing time: Mon 19 Aug 2024 11:12:39 +0000
ROA not before: Mon 19 Aug 2024 11:12:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199285
IP address blocks: 85.90.195.0/24 maxlen: 24
91.238.193.0/24 maxlen: 24
2a13:ce80::/29 maxlen: 29
2a13:ce80::/32 maxlen: 48
2a13:ce80:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.mft
rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:6a:56:cf:b1:70:96:3f:12:fe:a9:8a:33:e3:d8:eb:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1083a6411796bf726387f7a55cf84b57ca899beb
Validity
Not Before: Aug 19 11:12:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6aeb527a84383a531a59f855e20cd071963cea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:a8:fb:8c:f8:0b:10:f2:ca:51:8f:1f:c2:
4d:d6:74:90:05:38:7c:6b:7f:02:5f:68:53:8a:8f:
24:ea:61:5e:9c:06:32:74:11:c0:8d:cf:ef:af:40:
67:b0:3b:be:01:dc:8a:d5:a2:00:d5:e6:44:5d:9f:
c3:bc:d6:19:25:78:12:eb:ab:86:ce:57:7a:d0:07:
e6:a6:32:8e:28:09:ac:ec:64:c9:49:48:c2:e9:dc:
3d:15:cf:3f:0e:df:c8:0d:a1:d7:02:3e:f5:a8:90:
03:44:75:9c:ad:10:7f:e7:05:e3:04:8f:ae:5e:1a:
26:2f:32:1a:11:36:d6:bd:24:c6:9a:11:41:51:5a:
15:98:b2:a2:7d:43:0c:90:20:b6:77:d2:81:37:78:
7e:96:fb:a2:cc:19:a6:40:9e:35:b7:01:e9:5a:0e:
4e:ad:f6:9b:73:d0:b7:8a:1f:19:3a:ed:a5:04:6c:
9c:3e:29:e2:f0:cc:a6:63:77:f6:c6:4d:ef:ed:33:
0d:02:ff:df:1a:81:5e:1f:d3:9e:3c:82:d8:de:e1:
60:b0:75:99:68:fa:4e:48:75:25:e4:44:9e:7e:6c:
f0:f4:2b:cc:55:6a:5f:dc:58:5d:6f:a7:15:11:ee:
22:09:37:ac:8f:50:db:c7:54:f7:7c:25:ea:2c:bd:
a4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AE:B5:27:A8:43:83:A5:31:A5:9F:85:5E:20:CD:07:19:63:CE:A4
X509v3 Authority Key Identifier:
keyid:10:83:A6:41:17:96:BF:72:63:87:F7:A5:5C:F8:4B:57:CA:89:9B:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EIOmQReWv3Jjh_elXPhLV8qJm-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/1q61J6hDg6UxpZ-FXiDNBxljzqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/dc330d-dad2-4e70-a149-91cf4fc703eb/1/EIOmQReWv3Jjh_elXPhLV8qJm-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.90.195.0/24
91.238.193.0/24
IPv6:
2a13:ce80::/29
Signature Algorithm: sha256WithRSAEncryption
62:74:17:78:56:e5:07:07:87:24:12:ce:48:ab:b4:f0:e6:f5:
22:cc:f6:e0:48:03:52:d5:2e:99:f0:94:e2:bd:4b:af:f7:46:
a2:f3:d0:d9:2f:f9:09:86:2c:45:26:c5:16:31:95:eb:de:92:
4a:73:10:3e:d6:dc:89:fe:49:a7:e0:13:10:46:22:26:a3:88:
1e:62:81:f9:f9:50:8c:ed:14:10:4f:3f:33:c1:97:c9:80:0c:
71:d0:90:5c:a9:e1:ad:14:77:56:0d:be:ad:4b:c9:43:fa:f2:
44:cf:58:48:e5:00:2d:ae:99:6f:1a:13:41:35:1f:36:bf:4a:
54:f2:bf:32:9e:4f:ea:0e:da:01:15:94:56:7f:39:62:a0:b6:
b8:38:44:f4:67:28:17:93:99:24:83:cc:6b:71:f0:b4:7d:a9:
2b:41:e9:84:68:1c:df:05:dc:a9:e4:dc:f0:67:49:6d:38:db:
71:73:3e:9f:df:b2:c6:c3:05:cc:e5:47:29:44:15:f8:64:02:
2a:f9:b2:81:20:82:bc:3a:9f:d9:6c:00:93:78:71:13:e7:59:
36:03:e6:d4:91:71:d2:42:28:c4:71:e1:cc:0b:c7:d6:8e:cd:
56:bb:69:2e:9b:18:7b:bf:d8:c4:44:ab:c8:11:82:5f:0a:27:
c7:1e:80:17
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZFqVs+xcJY/Ev6pijPj2OvAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwODNhNjQxMTc5NmJmNzI2Mzg3ZjdhNTVjZjg0YjU3Y2E4
OTliZWIwHhcNMjQwODE5MTExMjM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmFlYjUyN2E4NDM4M2E1MzFhNTlmODU1ZTIwY2QwNzE5NjNjZWE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIqo+4z4CxDyylGPH8JN1nSQBTh8
a38CX2hTio8k6mFenAYydBHAjc/vr0BnsDu+AdyK1aIA1eZEXZ/DvNYZJXgS66uG
zld60AfmpjKOKAms7GTJSUjC6dw9Fc8/Dt/IDaHXAj71qJADRHWcrRB/5wXjBI+u
XhomLzIaETbWvSTGmhFBUVoVmLKifUMMkCC2d9KBN3h+lvuizBmmQJ41twHpWg5O
rfabc9C3ih8ZOu2lBGycPini8MymY3f2xk3v7TMNAv/fGoFeH9OePILY3uFgsHWZ
aPpOSHUl5ESefmzw9CvMVWpf3Fhdb6cVEe4iCTesj1Dbx1T3fCXqLL2ktwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFNautSeoQ4OlMaWfhV4gzQcZY86kMB8GA1UdIwQY
MBaAFBCDpkEXlr9yY4f3pVz4S1fKiZvrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUlPbVFSZVd2M0pqaF9lbFhQaExWOHFKbS1zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9kYzMzMGQtZGFkMi00ZTcwLWExNDkt
OTFjZjRmYzcwM2ViLzEvMXE2MUo2aERnNlV4cFotRlhpRE5CeGxqenFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9kYzMzMGQtZGFkMi00ZTcwLWExNDktOTFjZjRmYzcwM2Vi
LzEvRUlPbVFSZVd2M0pqaF9lbFhQaExWOHFKbS1zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAVVrDAwQA
W+7BMA0EAgACMAcDBQMqE86AMA0GCSqGSIb3DQEBCwUAA4IBAQBidBd4VuUHB4ck
Es5Iq7Tw5vUizPbgSANS1S6Z8JTivUuv90ai89DZL/kJhixFJsUWMZXr3pJKcxA+
1tyJ/kmn4BMQRiImo4geYoH5+VCM7RQQTz8zwZfJgAxx0JBcqeGtFHdWDb6tS8lD
+vJEz1hI5QAtrplvGhNBNR82v0pU8r8ynk/qDtoBFZRWfzlioLa4OET0ZygXk5kk
g8xrcfC0fakrQemEaBzfBdyp5NzwZ0ltONtxcz6f37LGwwXM5UcpRBX4ZAIq+bKB
IIK8Op/ZbACTeHET51k2A+bUkXHSQijEceHMC8fWjs1Wu2kumxh7v9jERKvIEYJf
CifHHoAX
-----END CERTIFICATE-----
Generated at Tue Nov 26 20:13:32 2024 by rpki-client on console-ams.rpki-client.org