Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/7eU3LFTcWqtTka01F_WzfEzB9ro.roa
File: 7eU3LFTcWqtTka01F_WzfEzB9ro.roa (raw, json)
Hash identifier: 5RwMoZsHfQxJa/7M6YSRY0IpNTK5x2/elvApvp1sh10=
Subject key identifier: ED:E5:37:2C:54:DC:5A:AB:53:91:AD:35:17:F5:B3:7C:4C:C1:F6:BA
Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731
Certificate serial: 018EBE9447BD28EF8E1C817E8B1082039280
Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/7eU3LFTcWqtTka01F_WzfEzB9ro.roa
Signing time: Mon 08 Apr 2024 16:39:32 +0000
ROA not before: Mon 08 Apr 2024 16:39:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20668
IP address blocks: 89.35.0.0/23 maxlen: 24
89.40.42.0/24 maxlen: 24
93.113.205.0/24 maxlen: 24
188.213.50.0/24 maxlen: 24
188.213.213.0/24 maxlen: 24
188.214.150.0/24 maxlen: 24
194.26.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:94:47:bd:28:ef:8e:1c:81:7e:8b:10:82:03:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731
Validity
Not Before: Apr 8 16:39:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ede5372c54dc5aab5391ad3517f5b37c4cc1f6ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:f3:b5:00:98:95:b8:e3:de:34:66:fb:b2:
87:48:ca:85:10:73:fa:16:17:15:ad:3e:db:73:cb:
f6:08:99:fc:cc:d1:a0:90:2b:8d:50:b5:47:e5:24:
4d:25:c5:8b:48:10:85:a6:3d:6b:14:5c:3a:92:ba:
1c:02:3a:74:b6:1f:fc:49:84:e2:58:25:24:7d:28:
ec:ec:35:4b:cf:63:c3:a4:4e:9f:e4:81:61:94:62:
f2:88:df:0d:a7:3a:8e:82:ef:b3:6b:7d:08:57:a3:
93:17:bd:45:c6:ff:0f:21:c2:b8:f0:6e:df:45:3f:
2f:53:1c:d2:72:2a:9f:dd:ec:a6:2c:dd:d4:cd:e2:
0c:9f:57:00:4b:c2:39:09:bc:a4:17:ac:22:cd:83:
c6:8b:cf:58:ad:bf:af:7d:da:b4:0a:55:18:3a:37:
cf:46:2c:3e:c7:d6:9e:b5:0f:99:d2:5a:5c:65:e0:
c0:2e:3b:f0:88:fa:05:0c:b5:6b:a6:dc:86:40:54:
12:e9:a1:8d:6d:32:eb:38:67:81:6d:4c:3d:09:56:
6e:b5:55:0f:57:53:7c:1c:00:e9:92:2a:cd:82:ac:
71:ed:d1:bf:40:0f:37:a0:40:f9:84:4b:c1:e1:48:
37:40:cd:a8:57:57:98:8b:51:f7:f5:42:db:55:6f:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E5:37:2C:54:DC:5A:AB:53:91:AD:35:17:F5:B3:7C:4C:C1:F6:BA
X509v3 Authority Key Identifier:
keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/7eU3LFTcWqtTka01F_WzfEzB9ro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.0.0/23
89.40.42.0/24
93.113.205.0/24
188.213.50.0/24
188.213.213.0/24
188.214.150.0/24
194.26.128.0/24
Signature Algorithm: sha256WithRSAEncryption
88:91:08:fe:30:a5:68:3c:48:43:28:30:b5:5a:ab:dd:3e:39:
9a:6d:80:e3:75:55:a2:e5:10:ae:43:83:f8:a3:68:32:bd:bb:
69:57:20:74:48:6f:be:0d:ce:a9:71:22:cf:69:10:09:67:b3:
cc:cf:36:1e:7e:a9:12:c6:19:23:7c:f8:96:49:9a:b7:4c:8b:
c5:6b:a5:b0:48:32:fa:3c:b8:9b:5d:7a:c8:81:58:97:f7:ed:
1d:0d:8f:d6:7e:d1:89:ee:7e:8e:79:9d:f8:71:aa:b9:38:c3:
d0:94:60:ed:4c:e1:c7:63:d0:33:39:18:77:a2:d2:4b:d5:b0:
9d:7c:6a:6d:8b:ef:f0:b6:0b:28:d4:66:96:5f:90:22:e7:59:
d4:a6:17:b5:4e:a7:16:59:76:de:89:e5:8e:82:ed:55:e6:b2:
03:1f:a1:65:79:8f:8b:32:a0:62:98:f6:7a:b6:69:45:dd:0f:
70:63:a9:f1:98:ca:c1:da:d7:0d:66:81:ea:ed:09:91:60:65:
fb:fd:50:29:b7:88:68:9a:58:a8:3a:0e:a8:93:03:21:b1:29:
47:8f:28:6c:d2:27:19:ca:64:fe:dd:46:6e:b4:c8:dc:d3:37:
87:2d:26:ac:02:fc:d8:10:79:c5:a0:25:2d:d6:ca:3c:28:81:
98:8f:cf:21
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY6+lEe9KO+OHIF+ixCCA5KAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz
NjE3MzEwHhcNMjQwNDA4MTYzOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZGU1MzcyYzU0ZGM1YWFiNTM5MWFkMzUxN2Y1YjM3YzRjYzFmNmJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvULztQCYlbjj3jRm+7KHSMqFEHP6
FhcVrT7bc8v2CJn8zNGgkCuNULVH5SRNJcWLSBCFpj1rFFw6krocAjp0th/8SYTi
WCUkfSjs7DVLz2PDpE6f5IFhlGLyiN8NpzqOgu+za30IV6OTF71Fxv8PIcK48G7f
RT8vUxzSciqf3eymLN3UzeIMn1cAS8I5CbykF6wizYPGi89Yrb+vfdq0ClUYOjfP
Riw+x9aetQ+Z0lpcZeDALjvwiPoFDLVrptyGQFQS6aGNbTLrOGeBbUw9CVZutVUP
V1N8HADpkirNgqxx7dG/QA83oED5hEvB4Ug3QM2oV1eYi1H39ULbVW8BfQIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFO3lNyxU3FqrU5GtNRf1s3xMwfa6MB8GA1UdIwQY
MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt
ODQyODU4MTIyYmJjLzEvN2VVM0xGVGNXcXRUa2EwMUZfV3pmRXpCOXJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj
LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBWSMAAwQA
WSgqAwQAXXHNAwQAvNUyAwQAvNXVAwQAvNaWAwQAwhqAMA0GCSqGSIb3DQEBCwUA
A4IBAQCIkQj+MKVoPEhDKDC1WqvdPjmabYDjdVWi5RCuQ4P4o2gyvbtpVyB0SG++
Dc6pcSLPaRAJZ7PMzzYefqkSxhkjfPiWSZq3TIvFa6WwSDL6PLibXXrIgViX9+0d
DY/WftGJ7n6OeZ34caq5OMPQlGDtTOHHY9AzORh3otJL1bCdfGpti+/wtgso1GaW
X5Ai51nUphe1TqcWWXbeieWOgu1V5rIDH6FleY+LMqBimPZ6tmlF3Q9wY6nxmMrB
2tcNZoHq7QmRYGX7/VApt4homlioOg6okwMhsSlHjyhs0icZymT+3UZutMjc0zeH
LSasAvzYEHnFoCUt1so8KIGYj88h
-----END CERTIFICATE-----
Generated at Sat Sep 28 21:05:23 2024 by rpki-client on console-ams.rpki-client.org