Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/9m_gM-9aKg7DOtqVjLo4mmWy16c.roa
File: 9m_gM-9aKg7DOtqVjLo4mmWy16c.roa (raw, json)
Hash identifier: jk2b7jreM0RgtDBPZLETOwSfDV7UGdngAwjx5uCw5m0=
Subject key identifier: F6:6F:E0:33:EF:5A:2A:0E:C3:3A:DA:95:8C:BA:38:9A:65:B2:D7:A7
Certificate issuer: /CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Certificate serial: 018F53516EAA6C4D036F6691D05663738BAD
Authority key identifier: 6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/9m_gM-9aKg7DOtqVjLo4mmWy16c.roa
Signing time: Tue 07 May 2024 13:49:56 +0000
ROA not before: Tue 07 May 2024 13:49:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15600
IP address blocks: 83.97.80.0/21 maxlen: 21
185.40.216.0/22 maxlen: 22
185.163.92.0/22 maxlen: 22
193.25.102.0/23 maxlen: 23
2a0b:7800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:53:51:6e:aa:6c:4d:03:6f:66:91:d0:56:63:73:8b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b43f7a2f4368b17a5e035ce4bd926f8a142d68b
Validity
Not Before: May 7 13:49:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f66fe033ef5a2a0ec33ada958cba389a65b2d7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6c:bc:07:32:12:af:53:45:3f:4b:ac:47:26:
10:9e:f8:51:eb:76:d0:6e:af:8e:ca:bc:be:cd:87:
91:c1:a4:ac:40:88:de:f9:8e:7f:80:83:a3:73:d7:
ee:4b:64:a2:4b:95:e4:e1:b3:b7:4b:f0:d3:a4:ef:
5e:07:12:87:ab:83:c4:ae:ce:5d:f2:71:10:fb:31:
a7:9c:89:7c:0e:e2:fa:70:9e:20:25:d2:1a:65:21:
ac:68:19:9f:8d:f5:d7:a7:1b:9f:28:ef:2e:99:45:
dd:f9:86:f4:5f:42:3d:47:da:e7:77:11:7b:ba:8d:
13:94:13:af:07:60:8a:bf:21:d6:da:73:60:d3:cd:
52:8a:36:ca:80:35:2f:48:31:06:3e:32:f2:0c:8c:
d6:a7:e5:76:3a:7e:78:4a:09:76:95:be:0e:27:9f:
f7:4e:87:53:72:e9:7b:d8:13:be:8a:1d:a9:79:23:
65:1f:3f:6f:51:54:3c:63:54:0f:b6:92:d1:d7:d0:
3f:4f:5a:e4:a8:3c:cc:ef:7d:11:db:0f:36:a5:73:
4d:ad:b5:70:11:ee:00:97:b7:3e:a2:35:41:bf:eb:
89:d4:7a:11:9d:a0:a9:54:7d:6c:fa:1e:97:4d:34:
fa:bd:47:0b:6d:41:a3:f3:8d:fb:08:53:64:f7:44:
08:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6F:E0:33:EF:5A:2A:0E:C3:3A:DA:95:8C:BA:38:9A:65:B2:D7:A7
X509v3 Authority Key Identifier:
keyid:6B:43:F7:A2:F4:36:8B:17:A5:E0:35:CE:4B:D9:26:F8:A1:42:D6:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0P3ovQ2ixel4DXOS9km-KFC1os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/9m_gM-9aKg7DOtqVjLo4mmWy16c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ba7dba-474a-42fd-a9c3-35b03136dd03/1/a0P3ovQ2ixel4DXOS9km-KFC1os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.80.0/21
185.40.216.0/22
185.163.92.0/22
193.25.102.0/23
IPv6:
2a0b:7800::/29
Signature Algorithm: sha256WithRSAEncryption
8a:18:3b:6d:71:ae:2f:cf:48:7d:f7:c8:02:d6:35:f2:8f:55:
b0:14:73:d1:db:23:56:d3:4e:56:41:58:50:d6:d0:79:ce:6f:
12:35:34:32:12:7e:7b:17:98:e0:05:ee:a2:48:df:98:2c:1e:
72:b6:32:8c:47:e8:5d:2c:c1:4c:7e:0f:0b:f6:62:2f:f5:b8:
c8:3b:83:90:c4:ab:95:40:39:71:58:96:da:5d:71:59:09:f9:
0d:cb:13:ce:ca:ae:7c:37:a0:58:4f:a7:b6:4f:a7:d5:e3:ae:
74:8d:65:36:9f:67:ef:f4:a3:47:74:d2:3f:32:41:18:51:59:
9d:8f:ab:5e:a6:9e:fe:f8:c5:9b:9b:b0:28:54:8a:5f:15:87:
b5:f0:38:17:5f:15:94:64:63:01:ca:cd:1b:ef:b9:25:30:f2:
be:d9:e3:81:47:e8:1c:49:ec:dc:31:8e:ae:d8:81:d1:18:f6:
e9:87:fc:69:42:4f:9b:83:b4:c5:9c:64:2a:24:40:8d:ae:6e:
1b:f8:b5:0f:7d:b7:82:b6:22:68:ec:e6:5f:fd:9a:d7:80:ec:
db:00:ae:ad:93:e3:49:b8:0d:20:79:b1:0d:0a:ec:58:ba:51:
d9:28:8b:b8:73:e4:8a:7e:47:69:d9:2a:22:b8:99:2d:6e:f0:
31:47:5f:38
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAY9TUW6qbE0Db2aR0FZjc4utMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNDNmN2EyZjQzNjhiMTdhNWUwMzVjZTRiZDkyNmY4YTE0
MmQ2OGIwHhcNMjQwNTA3MTM0OTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjZmZTAzM2VmNWEyYTBlYzMzYWRhOTU4Y2JhMzg5YTY1YjJkN2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2y8BzISr1NFP0usRyYQnvhR63bQ
bq+Oyry+zYeRwaSsQIje+Y5/gIOjc9fuS2SiS5Xk4bO3S/DTpO9eBxKHq4PErs5d
8nEQ+zGnnIl8DuL6cJ4gJdIaZSGsaBmfjfXXpxufKO8umUXd+Yb0X0I9R9rndxF7
uo0TlBOvB2CKvyHW2nNg081SijbKgDUvSDEGPjLyDIzWp+V2On54Sgl2lb4OJ5/3
TodTcul72BO+ih2peSNlHz9vUVQ8Y1QPtpLR19A/T1rkqDzM730R2w82pXNNrbVw
Ee4Al7c+ojVBv+uJ1HoRnaCpVH1s+h6XTTT6vUcLbUGj8437CFNk90QI4wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFPZv4DPvWioOwzralYy6OJplstenMB8GA1UdIwQY
MBaAFGtD96L0NosXpeA1zkvZJvihQtaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTBQM292UTJpeGVsNERYT1M5a20tS0ZDMW9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9iYTdkYmEtNDc0YS00MmZkLWE5YzMt
MzViMDMxMzZkZDAzLzEvOW1fZ00tOWFLZzdET3RxVmpMbzRtbVd5MTZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9iYTdkYmEtNDc0YS00MmZkLWE5YzMtMzViMDMxMzZkZDAz
LzEvYTBQM292UTJpeGVsNERYT1M5a20tS0ZDMW9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDU2FQAwQC
uSjYAwQCuaNcAwQBwRlmMA0EAgACMAcDBQMqC3gAMA0GCSqGSIb3DQEBCwUAA4IB
AQCKGDttca4vz0h998gC1jXyj1WwFHPR2yNW005WQVhQ1tB5zm8SNTQyEn57F5jg
Be6iSN+YLB5ytjKMR+hdLMFMfg8L9mIv9bjIO4OQxKuVQDlxWJbaXXFZCfkNyxPO
yq58N6BYT6e2T6fV4650jWU2n2fv9KNHdNI/MkEYUVmdj6tepp7++MWbm7AoVIpf
FYe18DgXXxWUZGMBys0b77klMPK+2eOBR+gcSezcMY6u2IHRGPbph/xpQk+bg7TF
nGQqJECNrm4b+LUPfbeCtiJo7OZf/ZrXgOzbAK6tk+NJuA0gebENCuxYulHZKIu4
c+SKfkdp2SoiuJktbvAxR184
-----END CERTIFICATE-----
Generated at Wed Jun 26 13:54:58 2024 by rpki-client on console-ams.rpki-client.org