Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/IxejbC5BK50ru1P-BcxTHO96gh8.roa
File: IxejbC5BK50ru1P-BcxTHO96gh8.roa (raw, json)
Hash identifier: 5u8xCJKvN7JmPqPv0Pu5/VMbvmwPO3AcJmd04HibZIk=
Subject key identifier: 23:17:A3:6C:2E:41:2B:9D:2B:BB:53:FE:05:CC:53:1C:EF:7A:82:1F
Certificate issuer: /CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Certificate serial: 019013187DE86D2E9BBDD8A42604627E9CB2
Authority key identifier: 19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/IxejbC5BK50ru1P-BcxTHO96gh8.roa
Signing time: Thu 13 Jun 2024 19:34:50 +0000
ROA not before: Thu 13 Jun 2024 19:34:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216258
IP address blocks: 92.42.98.0/24 maxlen: 26
2a13:2140::/32 maxlen: 48
2a13:2141:1::/48 maxlen: 48
2a13:2142:1::/48 maxlen: 48
2a13:2142:2::/48 maxlen: 48
2a13:2143:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:13:18:7d:e8:6d:2e:9b:bd:d8:a4:26:04:62:7e:9c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee619ef96a3afd02fc2d5d003a947e4d2d590a
Validity
Not Before: Jun 13 19:34:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2317a36c2e412b9d2bbb53fe05cc531cef7a821f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c3:64:b6:82:5a:a8:97:28:7e:e5:c1:1b:0d:
ca:47:21:d3:fc:a9:16:59:51:ce:3c:a2:b2:40:f5:
9e:66:b3:fa:f1:27:5b:cd:7b:30:5f:7a:28:7f:06:
75:7f:03:b6:42:2a:bd:c2:38:9a:11:a7:97:98:67:
89:7e:b7:f2:31:bf:25:01:5a:2d:e9:a9:fd:a1:c8:
0f:20:f8:57:c0:bd:be:72:5f:e6:3b:f4:47:1d:ac:
07:90:c3:d5:74:03:0c:b9:ce:b0:b2:6c:7e:90:78:
4c:09:a2:be:8b:1f:ea:a2:69:ea:b8:53:b3:fe:bf:
65:ef:bc:65:72:af:51:15:f3:bc:a9:1d:5c:28:0b:
3e:68:cb:26:6f:16:35:27:c0:1d:80:23:59:fd:5b:
52:8a:2b:72:08:1b:5e:af:a3:b9:ef:8a:b5:2b:46:
99:b6:1d:f8:c4:5f:5c:a4:28:10:33:c0:2a:2a:1a:
a8:7d:ed:e8:27:fe:5a:54:56:12:7f:49:0a:3f:4d:
db:f5:84:16:6e:36:08:e9:94:41:68:c6:50:e8:7d:
7e:4c:01:88:d3:d1:91:2b:d0:cc:8d:2d:81:b0:8a:
1b:7e:36:6c:9e:e3:12:03:a3:a5:a6:ce:16:be:29:
7d:e5:2d:e6:ef:c8:14:23:9c:64:80:62:66:44:d8:
f2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:17:A3:6C:2E:41:2B:9D:2B:BB:53:FE:05:CC:53:1C:EF:7A:82:1F
X509v3 Authority Key Identifier:
keyid:19:EE:61:9E:F9:6A:3A:FD:02:FC:2D:5D:00:3A:94:7E:4D:2D:59:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5hnvlqOv0C_C1dADqUfk0tWQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/IxejbC5BK50ru1P-BcxTHO96gh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/9ed6d4-7a0d-42b4-96e1-eb277a20f27f/1/Ge5hnvlqOv0C_C1dADqUfk0tWQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.98.0/24
IPv6:
2a13:2140::/32
2a13:2141:1::/48
2a13:2142:1::-2a13:2142:2:ffff:ffff:ffff:ffff:ffff
2a13:2143:1::/48
Signature Algorithm: sha256WithRSAEncryption
87:e8:2f:74:71:42:e8:1c:a7:7b:31:99:ca:9c:d9:35:b1:78:
fa:2f:f9:4d:60:64:b9:9f:f8:05:29:37:b3:82:06:58:7d:0a:
16:0e:11:d3:bb:82:35:9d:09:71:b4:95:76:25:81:77:c3:a5:
d7:3e:b4:c7:8c:83:c7:72:37:52:74:28:ca:00:ee:6a:8f:4e:
01:b0:b7:8a:af:e5:9f:1c:e2:0f:ef:e6:9e:8c:10:64:20:4c:
dc:b5:71:9e:ed:20:ea:f5:86:24:05:11:b1:04:66:22:5d:bf:
51:88:54:83:58:a8:eb:11:ca:62:fc:0e:4b:65:d2:09:9b:9c:
f6:84:5a:93:c9:1d:e0:82:7a:b7:b7:04:d3:6e:83:3a:b8:7d:
50:b6:ba:24:47:0e:43:e4:ad:d8:57:d2:14:ba:56:1d:01:13:
3c:12:67:58:7b:04:e4:15:2e:00:18:b3:2a:47:f8:68:9b:98:
55:ce:f5:e6:f3:c3:89:d2:ae:8a:08:66:a8:d5:08:86:9f:06:
fc:d3:32:a1:cc:94:ed:65:b0:01:22:fb:03:b5:bf:6f:a8:80:
7b:09:32:9a:65:d3:4b:4d:99:79:be:17:ea:60:93:39:51:24:
d0:b7:ed:9a:d4:3b:a4:e2:a0:bc:ba:f9:3a:9e:1f:e6:b9:57:
d1:57:da:3e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgISAZATGH3obS6bvdikJgRifpyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZWU2MTllZjk2YTNhZmQwMmZjMmQ1ZDAwM2E5NDdlNGQy
ZDU5MGEwHhcNMjQwNjEzMTkzNDUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzE3YTM2YzJlNDEyYjlkMmJiYjUzZmUwNWNjNTMxY2VmN2E4MjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMNktoJaqJcofuXBGw3KRyHT/KkW
WVHOPKKyQPWeZrP68SdbzXswX3oofwZ1fwO2Qiq9wjiaEaeXmGeJfrfyMb8lAVot
6an9ocgPIPhXwL2+cl/mO/RHHawHkMPVdAMMuc6wsmx+kHhMCaK+ix/qomnquFOz
/r9l77xlcq9RFfO8qR1cKAs+aMsmbxY1J8AdgCNZ/VtSiityCBter6O574q1K0aZ
th34xF9cpCgQM8AqKhqofe3oJ/5aVFYSf0kKP03b9YQWbjYI6ZRBaMZQ6H1+TAGI
09GRK9DMjS2BsIobfjZsnuMSA6Olps4Wvil95S3m78gUI5xkgGJmRNjyLQIDAQAB
o4ICPjCCAjowHQYDVR0OBBYEFCMXo2wuQSudK7tT/gXMUxzveoIfMB8GA1UdIwQY
MBaAFBnuYZ75ajr9AvwtXQA6lH5NLVkKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC85ZWQ2ZDQtN2EwZC00MmI0LTk2ZTEt
ZWIyNzdhMjBmMjdmLzEvSXhlamJDNUJLNTBydTFQLUJjeFRITzk2Z2g4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC85ZWQ2ZDQtN2EwZC00MmI0LTk2ZTEtZWIyNzdhMjBmMjdm
LzEvR2U1aG52bHFPdjBDX0MxZEFEcVVmazB0V1FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFQGCCsGAQUFBwEHAQH/BEUwQzAMBAIAATAGAwQAXCpiMDME
AgACMC0DBQAqEyFAAwcAKhMhQQABMBIDBwAqEyFCAAEDBwAqEyFCAAIDBwAqEyFD
AAEwDQYJKoZIhvcNAQELBQADggEBAIfoL3RxQugcp3sxmcqc2TWxePov+U1gZLmf
+AUpN7OCBlh9ChYOEdO7gjWdCXG0lXYlgXfDpdc+tMeMg8dyN1J0KMoA7mqPTgGw
t4qv5Z8c4g/v5p6MEGQgTNy1cZ7tIOr1hiQFEbEEZiJdv1GIVINYqOsRymL8Dktl
0gmbnPaEWpPJHeCCere3BNNugzq4fVC2uiRHDkPkrdhX0hS6Vh0BEzwSZ1h7BOQV
LgAYsypH+GibmFXO9ebzw4nSrooIZqjVCIafBvzTMqHMlO1lsAEi+wO1v2+ogHsJ
Mppl00tNmXm+F+pgkzlRJNC37ZrUO6TioLy6+TqeH+a5V9FX2j4=
-----END CERTIFICATE-----
Generated at Fri Jun 14 13:30:47 2024 by rpki-client on console-ams.rpki-client.org