Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/czfYwrfqk2I1Sm6DC_sxW4yz5vs.roa
File: czfYwrfqk2I1Sm6DC_sxW4yz5vs.roa (raw, json)
Hash identifier: pBjgze/S4gEyU+sLAz8KqTF5Mc7kcxKjMOCe7jpXlF8=
Subject key identifier: 73:37:D8:C2:B7:EA:93:62:35:4A:6E:83:0B:FB:31:5B:8C:B3:E6:FB
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 0190BAA1F52A0A3056F02865E973AB5E8CDF
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/czfYwrfqk2I1Sm6DC_sxW4yz5vs.roa
Signing time: Tue 16 Jul 2024 08:21:34 +0000
ROA not before: Tue 16 Jul 2024 08:21:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39791
IP address blocks: 89.111.64.0/18 maxlen: 18
89.111.72.0/21 maxlen: 21
89.111.72.0/22 maxlen: 22
89.111.76.0/22 maxlen: 22
89.111.102.0/24 maxlen: 24
193.109.176.0/21 maxlen: 21
2a01:a040::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:ba:a1:f5:2a:0a:30:56:f0:28:65:e9:73:ab:5e:8c:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Jul 16 08:21:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7337d8c2b7ea9362354a6e830bfb315b8cb3e6fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:58:b2:70:4f:8d:d8:09:9f:02:c7:2d:36:b5:
d0:f0:dd:38:04:ca:89:e9:27:ba:0a:18:ec:28:29:
a7:d7:80:6d:8d:98:d6:8e:cd:55:9d:62:95:f8:0f:
e1:e4:6c:18:0c:0a:41:02:31:26:ea:57:2f:29:e9:
b5:cb:08:5d:84:6e:bd:ff:51:61:57:1c:10:c6:8f:
61:c6:6c:57:fa:93:a1:d5:85:70:45:99:bf:24:5e:
ed:52:e0:c5:ad:10:9d:e7:d0:f5:8e:a5:6d:89:e4:
e8:d5:f2:6d:d9:f1:fb:4c:60:c5:09:3d:7b:d3:62:
31:41:6a:2f:38:ed:8b:cb:57:59:ff:ca:e7:2c:b2:
22:dc:f8:a0:49:3d:1e:84:85:a7:29:17:4e:27:b7:
4d:a0:a8:9f:76:59:45:62:0d:c4:f6:b7:59:f0:1c:
0f:9b:58:b5:c7:19:b6:ed:01:e7:41:28:21:4c:99:
28:9d:3a:e4:f0:43:5c:30:a6:2b:88:94:d6:91:fe:
12:89:92:77:30:92:90:69:59:7e:df:80:b8:02:69:
5e:e0:96:87:d5:04:9f:7c:f9:c3:96:2d:ae:24:e2:
47:34:49:4f:5b:5e:5d:2d:9d:28:5a:fe:f1:0f:cd:
11:65:36:68:e5:86:90:96:b2:c3:2d:8f:1f:42:e2:
b2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:37:D8:C2:B7:EA:93:62:35:4A:6E:83:0B:FB:31:5B:8C:B3:E6:FB
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/czfYwrfqk2I1Sm6DC_sxW4yz5vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.111.64.0/18
193.109.176.0/21
IPv6:
2a01:a040::/32
Signature Algorithm: sha256WithRSAEncryption
8f:c6:ee:8c:05:a3:7d:49:a0:c1:92:bb:35:aa:f9:5e:01:21:
8b:56:57:2e:7c:e2:5f:e3:ff:54:98:89:21:b5:77:f1:75:9a:
1f:1b:d9:63:bc:bf:9b:6f:99:7f:63:cf:ec:9c:64:4d:24:95:
d3:2b:95:69:71:ac:45:a0:31:45:2b:a0:d2:b4:64:df:55:ff:
99:d7:f6:1c:c9:51:df:be:5f:43:11:f9:83:b5:d6:09:49:6f:
7c:cd:98:48:f3:74:ba:0f:cb:f1:b1:cc:7f:ab:1f:31:fa:0d:
2a:c5:df:56:40:38:98:a3:49:25:0e:87:af:74:f6:63:a0:5f:
bf:c6:0c:e8:8d:3a:48:25:76:08:32:ba:80:8e:d7:ec:b4:36:
6d:16:cc:87:3e:6e:ae:46:3f:d7:8a:95:30:10:64:e8:0f:d0:
cc:b7:17:ac:91:ae:10:15:60:7d:e9:45:a1:c5:c2:b6:59:cc:
74:eb:cc:2d:d6:41:c4:e0:95:a9:29:1f:54:f0:a0:ce:8f:4b:
ef:74:45:a6:e0:83:fc:41:14:2d:7c:cb:a8:c9:41:3c:b3:ae:
8b:52:a4:67:56:ce:ea:26:7d:9d:44:5c:ff:19:03:92:77:d4:
0a:ec:1c:79:ac:44:99:1c:0a:59:3e:c5:4b:c4:87:8e:0a:35:
fe:61:7b:77
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZC6ofUqCjBW8Chl6XOrXozfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZmM5ODQyOGMyNDUxYzFhZWRmOGFmZmMwNzJhOTU4Njhl
Y2VlOGIwHhcNMjQwNzE2MDgyMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzM3ZDhjMmI3ZWE5MzYyMzU0YTZlODMwYmZiMzE1YjhjYjNlNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtViycE+N2AmfAsctNrXQ8N04BMqJ
6Se6ChjsKCmn14BtjZjWjs1VnWKV+A/h5GwYDApBAjEm6lcvKem1ywhdhG69/1Fh
VxwQxo9hxmxX+pOh1YVwRZm/JF7tUuDFrRCd59D1jqVtieTo1fJt2fH7TGDFCT17
02IxQWovOO2Ly1dZ/8rnLLIi3PigST0ehIWnKRdOJ7dNoKifdllFYg3E9rdZ8BwP
m1i1xxm27QHnQSghTJkonTrk8ENcMKYriJTWkf4SiZJ3MJKQaVl+34C4Amle4JaH
1QSffPnDli2uJOJHNElPW15dLZ0oWv7xD80RZTZo5YaQlrLDLY8fQuKydwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFHM32MK36pNiNUpugwv7MVuMs+b7MB8GA1UdIwQY
MBaAFJ/8mEKMJFHBrt+K/8ByqVho7O6LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQt
Yjk2ZDJmYmVmZWJkLzEvY3pmWXdyZnFrMkkxU202RENfc3hXNHl6NXZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83MjQzMjgtMDlkMy00OTY0LWFjYzQtYjk2ZDJmYmVmZWJk
LzEvbl95WVFvd2tVY0d1MzRyX3dIS3BXR2pzN29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQGWW9AAwQD
wW2wMA0EAgACMAcDBQAqAaBAMA0GCSqGSIb3DQEBCwUAA4IBAQCPxu6MBaN9SaDB
krs1qvleASGLVlcufOJf4/9UmIkhtXfxdZofG9ljvL+bb5l/Y8/snGRNJJXTK5Vp
caxFoDFFK6DStGTfVf+Z1/YcyVHfvl9DEfmDtdYJSW98zZhI83S6D8vxscx/qx8x
+g0qxd9WQDiYo0klDoevdPZjoF+/xgzojTpIJXYIMrqAjtfstDZtFsyHPm6uRj/X
ipUwEGToD9DMtxeska4QFWB96UWhxcK2Wcx068wt1kHE4JWpKR9U8KDOj0vvdEWm
4IP8QRQtfMuoyUE8s66LUqRnVs7qJn2dRFz/GQOSd9QK7Bx5rESZHApZPsVLxIeO
CjX+YXt3
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:58:35 2024 by rpki-client on console-ams.rpki-client.org