Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/REnh0MB8jHLdt5_9_pI7FuJlJBQ.roa
File: REnh0MB8jHLdt5_9_pI7FuJlJBQ.roa (raw, json)
Hash identifier: 5RxJoJJsc2f+dOoRSfSSTdmH9pMybftfGyIcpkuvQa4=
Subject key identifier: 44:49:E1:D0:C0:7C:8C:72:DD:B7:9F:FD:FE:92:3B:16:E2:65:24:14
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 01933AB3EC07154D4FFF05AB216A5A4734E1
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/REnh0MB8jHLdt5_9_pI7FuJlJBQ.roa
Signing time: Sun 17 Nov 2024 15:18:10 +0000
ROA not before: Sun 17 Nov 2024 15:18:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31435
IP address blocks: 82.146.20.0/23 maxlen: 23
82.146.22.0/24 maxlen: 24
82.146.26.0/23 maxlen: 23
84.238.208.0/21 maxlen: 21
84.238.220.0/22 maxlen: 22
84.238.220.0/23 maxlen: 23
84.238.222.0/24 maxlen: 24
84.238.224.0/22 maxlen: 22
185.240.152.0/23 maxlen: 23
185.240.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3a:b3:ec:07:15:4d:4f:ff:05:ab:21:6a:5a:47:34:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Nov 17 15:18:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4449e1d0c07c8c72ddb79ffdfe923b16e2652414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ba:9c:98:5b:34:05:53:22:6b:17:da:ea:7e:
13:1e:65:bf:62:64:bb:47:b3:db:08:ee:1c:c6:8a:
7f:66:bd:21:d5:b5:56:8b:fa:b2:cb:5e:7a:05:3f:
29:d2:21:02:21:f7:51:65:5f:59:cc:32:6c:c7:a2:
ec:38:29:76:db:3d:5e:7f:9a:63:15:23:75:93:2e:
d8:fc:de:41:bd:00:ba:31:28:54:ea:29:35:b8:ac:
07:82:78:a7:79:3e:d2:b7:ec:05:84:ff:24:84:df:
13:c4:97:06:f6:20:5b:80:3b:c7:a6:78:89:cd:83:
4b:64:7a:78:9c:61:b6:f8:69:11:84:2a:29:7c:a5:
80:bc:3f:4e:bb:68:79:e1:75:78:08:53:fe:97:36:
9c:3a:51:75:19:50:af:86:e7:ca:6b:0a:5d:7d:96:
b0:32:e5:31:b6:3b:ec:ff:a6:07:47:f0:72:05:a6:
37:0f:8c:05:35:df:be:0e:f1:88:44:8a:4f:4c:23:
2c:4d:d7:6d:7f:7a:9a:46:4f:94:49:37:8f:b9:01:
11:b6:a0:ea:93:4b:2e:6b:5c:9a:cb:21:66:2f:94:
ad:17:c2:7f:69:78:ba:13:d3:74:74:b2:e0:81:c1:
a3:f1:c8:18:9f:34:7a:f8:c2:4e:b1:86:dc:84:39:
5f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:49:E1:D0:C0:7C:8C:72:DD:B7:9F:FD:FE:92:3B:16:E2:65:24:14
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/REnh0MB8jHLdt5_9_pI7FuJlJBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.146.20.0-82.146.22.255
82.146.26.0/23
84.238.208.0/21
84.238.220.0-84.238.227.255
185.240.152.0/22
Signature Algorithm: sha256WithRSAEncryption
94:1c:c8:ba:3a:85:bf:f0:2d:31:17:62:59:67:1a:cd:9b:c7:
0b:91:ae:76:98:ee:95:15:7b:a8:bd:c6:70:71:4d:68:0f:8b:
e6:ae:0e:ec:bb:90:86:51:cf:43:3f:63:0f:de:2e:7e:b2:fa:
c8:01:4c:fc:cc:0d:d4:bb:af:a0:94:27:7e:6b:c0:49:48:fe:
1f:f6:d8:a7:e1:cf:b6:9d:e5:7b:61:e2:10:96:56:76:88:a6:
cc:46:8a:c7:06:7f:a0:63:21:03:23:86:40:f9:1a:7c:fa:1a:
a2:77:7b:97:58:1c:a2:8c:d3:8b:4a:10:af:64:98:e0:73:04:
68:32:a7:bb:82:a3:ad:3e:47:ee:84:04:0b:ad:7b:78:83:05:
da:e7:52:4b:be:ab:75:75:51:f6:d4:2d:e1:00:ea:5d:21:af:
df:19:9d:d0:a7:a9:4b:ee:b2:77:5c:cb:b9:e5:62:fb:81:5d:
6d:f0:a1:89:77:a0:ed:0a:e8:a6:c5:6f:be:64:2a:6e:d8:df:
c3:2b:65:5f:b5:83:55:0f:4d:81:15:3b:a9:fe:56:76:ea:db:
fd:6a:67:89:2d:bd:4e:db:8e:f0:04:80:07:c0:79:3c:ab:65:
c0:ae:4f:1a:31:61:3c:2f:99:74:3f:79:ee:a0:48:b6:83:a5:
6e:22:97:b9
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAZM6s+wHFU1P/wWrIWpaRzThMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ZGMzY2IxZTA3ZDcxNGI3MjVmNTFhNjZkMWRjZmQ4N2Fl
MWM1MWEwHhcNMjQxMTE3MTUxODEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDQ5ZTFkMGMwN2M4YzcyZGRiNzlmZmRmZTkyM2IxNmUyNjUyNDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjrqcmFs0BVMiaxfa6n4THmW/YmS7
R7PbCO4cxop/Zr0h1bVWi/qyy156BT8p0iECIfdRZV9ZzDJsx6LsOCl22z1ef5pj
FSN1ky7Y/N5BvQC6MShU6ik1uKwHgnineT7St+wFhP8khN8TxJcG9iBbgDvHpniJ
zYNLZHp4nGG2+GkRhCopfKWAvD9Ou2h54XV4CFP+lzacOlF1GVCvhufKawpdfZaw
MuUxtjvs/6YHR/ByBaY3D4wFNd++DvGIRIpPTCMsTddtf3qaRk+USTePuQERtqDq
k0sua1yayyFmL5StF8J/aXi6E9N0dLLggcGj8cgYnzR6+MJOsYbchDlfOQIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFERJ4dDAfIxy3bef/f6SOxbiZSQUMB8GA1UdIwQY
MBaAFBXcPLHgfXFLcl9Rpm0dz9h64cUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmR3OHNlQjljVXR5WDFHbWJSM1AySHJoeFJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9hOWNjNWQtNjllMC00NTk3LWFkNjQt
ZmUyY2I0MzFjZjJmLzEvUkVuaDBNQjhqSExkdDVfOV9wSTdGdUpsSkJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9hOWNjNWQtNjllMC00NTk3LWFkNjQtZmUyY2I0MzFjZjJm
LzEvRmR3OHNlQjljVXR5WDFHbWJSM1AySHJoeFJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjA0BAIAATAuMAwDBAJSkhQD
BABSkhYDBAFSkhoDBANU7tAwDAMEAlTu3AMEAlTu4AMEArnwmDANBgkqhkiG9w0B
AQsFAAOCAQEAlBzIujqFv/AtMRdiWWcazZvHC5GudpjulRV7qL3GcHFNaA+L5q4O
7LuQhlHPQz9jD94ufrL6yAFM/MwN1LuvoJQnfmvASUj+H/bYp+HPtp3le2HiEJZW
doimzEaKxwZ/oGMhAyOGQPkafPoaond7l1gcoozTi0oQr2SY4HMEaDKnu4KjrT5H
7oQEC617eIMF2udSS76rdXVR9tQt4QDqXSGv3xmd0KepS+6yd1zLueVi+4FdbfCh
iXeg7QropsVvvmQqbtjfwytlX7WDVQ9NgRU7qf5Wdurb/WpniS29TtuO8ASAB8B5
PKtlwK5PGjFhPC+ZdD957qBItoOlbiKXuQ==
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:31 2024 by rpki-client on console-ams.rpki-client.org