Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/E-EyE74UGuFTFOCAg6Iq3uuDykg.roa
File: E-EyE74UGuFTFOCAg6Iq3uuDykg.roa (raw, json)
Hash identifier: ObmWxMPe7A5e1T7hl3Jeq41YKKrDu3w1pBn0Xn+M/Eo=
Subject key identifier: 13:E1:32:13:BE:14:1A:E1:53:14:E0:80:83:A2:2A:DE:EB:83:CA:48
Certificate issuer: /CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Certificate serial: 018CC649BF535AFB872E78B54BAD5892B360
Authority key identifier: A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/E-EyE74UGuFTFOCAg6Iq3uuDykg.roa
Signing time: Mon 01 Jan 2024 18:29:31 +0000
ROA not before: Mon 01 Jan 2024 18:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196976
IP address blocks: 91.133.34.0/24 maxlen: 24
91.133.32.0/19 maxlen: 19
2a04:3100::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:bf:53:5a:fb:87:2e:78:b5:4b:ad:58:92:b3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e7205f5d41257a6bb95f900eec0a1123e75164
Validity
Not Before: Jan 1 18:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=13e13213be141ae15314e08083a22adeeb83ca48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:37:da:e5:d7:be:89:9e:f5:bf:bf:28:8a:bd:
9a:e6:ce:dc:45:72:14:d4:42:9e:e7:f2:48:8a:78:
f2:82:df:f5:75:4a:c6:ae:88:16:ba:cb:03:9a:07:
66:13:9d:4c:c9:e2:14:3e:60:31:22:70:6f:3e:c2:
da:1c:b6:20:f4:d2:c4:27:ef:56:87:80:f0:bc:0c:
76:98:b0:11:7a:e1:e1:8e:68:1f:5c:2e:33:05:96:
33:6e:5a:f4:16:3b:53:df:d0:e2:8f:aa:59:e2:bd:
27:38:04:f9:3b:00:71:1c:4e:67:2a:cc:32:5a:0c:
d5:a5:a8:99:93:95:d3:23:4a:ab:d5:9a:7e:01:8a:
1d:9c:0c:45:b6:14:5e:40:fd:b7:e8:f0:f8:03:29:
f2:18:ad:72:47:89:f2:3c:5e:f3:c0:75:dc:3d:42:
1b:71:d9:cb:6b:17:68:15:2d:34:c8:b7:c2:8b:52:
ba:c0:b0:7f:1f:4a:62:20:91:0d:ae:f9:01:a3:94:
77:3c:fa:a1:03:d5:81:ab:6d:d0:62:f3:d0:2c:90:
b4:95:e0:03:4c:89:87:e9:da:47:d2:70:80:95:89:
cb:36:91:41:2b:bf:2a:32:11:23:1b:d4:d8:27:b8:
f4:eb:05:c2:18:4b:4a:70:7e:81:1a:f9:71:64:a8:
52:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:E1:32:13:BE:14:1A:E1:53:14:E0:80:83:A2:2A:DE:EB:83:CA:48
X509v3 Authority Key Identifier:
keyid:A4:E7:20:5F:5D:41:25:7A:6B:B9:5F:90:0E:EC:0A:11:23:E7:51:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOcgX11BJXpruV-QDuwKESPnUWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/E-EyE74UGuFTFOCAg6Iq3uuDykg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f761bd-5c3a-4d2f-8cd9-3e59ce445b1c/1/pOcgX11BJXpruV-QDuwKESPnUWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.133.32.0/19
IPv6:
2a04:3100::/29
Signature Algorithm: sha256WithRSAEncryption
84:87:16:f0:6b:36:43:81:5b:55:bc:26:39:d8:f7:ae:d7:d4:
3a:46:89:8e:82:9d:1a:21:4e:96:6e:8b:2c:fa:89:0b:15:49:
1c:68:e3:29:87:ff:64:02:de:15:6e:31:8e:69:4d:3f:06:fd:
aa:52:5c:91:e1:d7:d9:5c:b8:bf:d2:a0:df:ab:e8:ba:97:1b:
d5:db:fc:a8:5d:1c:aa:8f:10:04:d6:be:cc:43:2c:6b:a8:f8:
c2:bf:0d:00:5f:c4:9c:ce:aa:34:c1:fd:68:db:b5:c0:8b:e0:
e5:19:1b:45:9e:7b:83:28:9a:86:f6:b9:de:14:ec:d2:bb:15:
10:44:48:21:69:50:3a:a8:65:c1:e9:03:7a:a3:75:98:dc:be:
d0:ce:07:24:f7:41:be:12:36:d4:98:c4:1c:e0:eb:ec:12:ef:
76:0b:40:0c:16:46:55:bd:fd:2a:43:1c:96:05:f1:6b:de:6b:
27:fb:5b:fc:25:2c:02:34:6a:62:15:0a:f6:c7:79:16:1d:da:
0e:51:71:3c:07:3c:42:e9:0a:92:3e:12:6b:0a:81:f9:8f:70:
9d:fc:54:18:8a:b4:a5:f5:57:2b:fa:65:bd:a3:15:4b:e7:9e:
d7:60:19:38:75:9b:b0:34:35:a5:e3:35:92:25:9a:1f:9b:c4:
c7:af:9b:44
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGSb9TWvuHLni1S61YkrNgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTcyMDVmNWQ0MTI1N2E2YmI5NWY5MDBlZWMwYTExMjNl
NzUxNjQwHhcNMjQwMTAxMTgyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2UxMzIxM2JlMTQxYWUxNTMxNGUwODA4M2EyMmFkZWViODNjYTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozfa5de+iZ71v78oir2a5s7cRXIU
1EKe5/JIinjygt/1dUrGrogWussDmgdmE51MyeIUPmAxInBvPsLaHLYg9NLEJ+9W
h4DwvAx2mLAReuHhjmgfXC4zBZYzblr0FjtT39Dij6pZ4r0nOAT5OwBxHE5nKswy
WgzVpaiZk5XTI0qr1Zp+AYodnAxFthReQP236PD4AynyGK1yR4nyPF7zwHXcPUIb
cdnLaxdoFS00yLfCi1K6wLB/H0piIJENrvkBo5R3PPqhA9WBq23QYvPQLJC0leAD
TImH6dpH0nCAlYnLNpFBK78qMhEjG9TYJ7j06wXCGEtKcH6BGvlxZKhSmQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBPhMhO+FBrhUxTggIOiKt7rg8pIMB8GA1UdIwQY
MBaAFKTnIF9dQSV6a7lfkA7sChEj51FkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDkt
M2U1OWNlNDQ1YjFjLzEvRS1FeUU3NFVHdUZURk9DQWc2SXEzdXVEeWtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9mNzYxYmQtNWMzYS00ZDJmLThjZDktM2U1OWNlNDQ1YjFj
LzEvcE9jZ1gxMUJKWHBydVYtUUR1d0tFU1BuVVdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFW4UgMA0E
AgACMAcDBQMqBDEAMA0GCSqGSIb3DQEBCwUAA4IBAQCEhxbwazZDgVtVvCY52Peu
19Q6RomOgp0aIU6Wboss+okLFUkcaOMph/9kAt4VbjGOaU0/Bv2qUlyR4dfZXLi/
0qDfq+i6lxvV2/yoXRyqjxAE1r7MQyxrqPjCvw0AX8Sczqo0wf1o27XAi+DlGRtF
nnuDKJqG9rneFOzSuxUQREghaVA6qGXB6QN6o3WY3L7Qzgck90G+EjbUmMQc4Ovs
Eu92C0AMFkZVvf0qQxyWBfFr3msn+1v8JSwCNGpiFQr2x3kWHdoOUXE8BzxC6QqS
PhJrCoH5j3Cd/FQYirSl9Vcr+mW9oxVL557XYBk4dZuwNDWl4zWSJZofm8THr5tE
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:01:01 2024 by rpki-client on console-ams.rpki-client.org