Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/r6Tv3NlDNO32NCw862-3vRseH_I.roa
File: r6Tv3NlDNO32NCw862-3vRseH_I.roa (raw, json)
Hash identifier: IvQnLNto+EjKwOgQwI/X0TM/QI5x1dwBo5aobOHMQT8=
Subject key identifier: AF:A4:EF:DC:D9:43:34:ED:F6:34:2C:3C:EB:6F:B7:BD:1B:1E:1F:F2
Certificate issuer: /CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Certificate serial: 01919D859375389030B9778967A938F913B6
Authority key identifier: E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/r6Tv3NlDNO32NCw862-3vRseH_I.roa
Signing time: Thu 29 Aug 2024 09:44:22 +0000
ROA not before: Thu 29 Aug 2024 09:44:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20719
IP address blocks: 176.119.248.0/21 maxlen: 21
176.119.248.0/22 maxlen: 24
176.119.251.0/24 maxlen: 24
176.119.252.0/22 maxlen: 24
176.119.253.0/24 maxlen: 24
176.119.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 06:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:85:93:75:38:90:30:b9:77:89:67:a9:38:f9:13:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e34a17c35dc17e43e774f82375afd50f33c536a4
Validity
Not Before: Aug 29 09:44:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afa4efdcd94334edf6342c3ceb6fb7bd1b1e1ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ea:ad:65:ed:2f:77:4e:6c:33:a2:8a:30:1c:
75:d2:7d:fa:ea:bf:56:6a:0f:cd:9e:31:f7:4c:99:
32:82:8d:59:84:5b:a8:5b:00:1a:e4:2b:1d:ea:bc:
f1:18:37:ad:68:ad:44:d5:51:d1:17:1b:7d:f6:04:
6a:b6:11:a4:0d:1a:4c:af:97:6c:41:64:cf:90:39:
21:5f:ba:8e:f8:a3:a6:34:e3:f8:b1:31:f1:51:0b:
32:98:c9:8f:32:d1:47:68:da:c9:3f:70:40:c6:47:
dd:94:5b:8c:a0:6e:6a:07:a9:d0:4d:ab:04:71:bf:
6b:e1:55:10:ef:b3:a8:f2:9f:18:4f:f8:7e:90:a7:
dc:56:d6:a3:24:fb:d5:4b:2e:97:b9:d0:b7:43:0d:
9e:7e:27:df:f7:43:d4:c5:60:e1:31:b7:dc:7e:8c:
d1:8e:68:c6:8e:3b:b7:39:79:78:44:31:d8:68:a0:
93:f7:35:7a:a2:9d:bb:3d:a4:c9:a0:bc:53:3a:87:
d6:88:19:4f:a1:b3:09:41:8a:d1:b4:9f:af:aa:61:
a9:51:be:32:58:37:aa:c0:46:a0:27:49:3e:59:40:
50:c5:58:98:5c:0b:e8:9a:ed:7f:89:37:85:38:0f:
b2:24:61:df:65:5f:d4:2a:f1:ee:5f:52:ba:b3:bf:
04:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A4:EF:DC:D9:43:34:ED:F6:34:2C:3C:EB:6F:B7:BD:1B:1E:1F:F2
X509v3 Authority Key Identifier:
keyid:E3:4A:17:C3:5D:C1:7E:43:E7:74:F8:23:75:AF:D5:0F:33:C5:36:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/40oXw13BfkPndPgjda_VDzPFNqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/r6Tv3NlDNO32NCw862-3vRseH_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/bfe262-877b-4045-b684-e0f078e7643d/1/40oXw13BfkPndPgjda_VDzPFNqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.248.0/21
Signature Algorithm: sha256WithRSAEncryption
07:4b:3d:52:cb:a9:4b:1d:10:09:44:8a:f8:9c:9b:ed:0a:79:
be:9c:b7:d7:85:e3:20:d0:7b:a7:5c:35:6f:18:93:24:63:c2:
e9:1b:c3:f2:f7:34:55:0c:7d:4f:86:0a:b9:de:9e:6c:59:8f:
dc:24:bb:9b:6e:00:a3:68:4e:56:bf:7f:96:be:33:ee:85:67:
0a:fd:92:23:ab:b4:17:2f:ef:4f:4b:e3:94:28:3f:af:ce:0a:
a3:a4:85:81:6d:9a:ed:a8:07:f6:34:bd:2d:00:29:22:89:d9:
d2:f7:3a:00:59:3c:f7:43:c2:e7:f0:d0:bc:c2:3a:29:6f:e9:
81:c6:01:9c:13:bd:d1:5a:de:d1:5e:fc:34:dc:f0:c8:fd:71:
89:9a:98:2c:b0:34:20:a4:da:45:fa:88:e6:d1:7e:c3:df:48:
15:b5:8b:07:51:6c:05:d6:e0:24:40:e2:c8:11:77:41:83:7f:
81:c1:52:a3:56:d3:16:36:d3:14:7c:ef:4a:9c:58:d3:c4:d3:
0d:30:b9:bc:81:fc:80:63:64:b3:8d:9b:2d:23:da:06:45:8c:
73:04:a6:26:52:b0:18:90:31:75:82:d6:f4:c0:95:11:a0:02:
4e:4d:d5:37:79:08:b4:dc:c9:8f:51:8c:15:cb:34:43:59:6b:
74:f3:85:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGdhZN1OJAwuXeJZ6k4+RO2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNGExN2MzNWRjMTdlNDNlNzc0ZjgyMzc1YWZkNTBmMzNj
NTM2YTQwHhcNMjQwODI5MDk0NDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmE0ZWZkY2Q5NDMzNGVkZjYzNDJjM2NlYjZmYjdiZDFiMWUxZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+qtZe0vd05sM6KKMBx10n366r9W
ag/NnjH3TJkygo1ZhFuoWwAa5Csd6rzxGDetaK1E1VHRFxt99gRqthGkDRpMr5ds
QWTPkDkhX7qO+KOmNOP4sTHxUQsymMmPMtFHaNrJP3BAxkfdlFuMoG5qB6nQTasE
cb9r4VUQ77Oo8p8YT/h+kKfcVtajJPvVSy6XudC3Qw2efiff90PUxWDhMbfcfozR
jmjGjju3OXl4RDHYaKCT9zV6op27PaTJoLxTOofWiBlPobMJQYrRtJ+vqmGpUb4y
WDeqwEagJ0k+WUBQxViYXAvomu1/iTeFOA+yJGHfZV/UKvHuX1K6s78EkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK+k79zZQzTt9jQsPOtvt70bHh/yMB8GA1UdIwQY
MBaAFONKF8NdwX5D53T4I3Wv1Q8zxTakMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQt
ZTBmMDc4ZTc2NDNkLzEvcjZUdjNObEROTzMyTkN3ODYyLTN2UnNlSF9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9iZmUyNjItODc3Yi00MDQ1LWI2ODQtZTBmMDc4ZTc2NDNk
LzEvNDBvWHcxM0Jma1BuZFBnamRhX1ZEelBGTnFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsHf4MA0G
CSqGSIb3DQEBCwUAA4IBAQAHSz1Sy6lLHRAJRIr4nJvtCnm+nLfXheMg0HunXDVv
GJMkY8LpG8Py9zRVDH1Phgq53p5sWY/cJLubbgCjaE5Wv3+WvjPuhWcK/ZIjq7QX
L+9PS+OUKD+vzgqjpIWBbZrtqAf2NL0tACkiidnS9zoAWTz3Q8Ln8NC8wjopb+mB
xgGcE73RWt7RXvw03PDI/XGJmpgssDQgpNpF+ojm0X7D30gVtYsHUWwF1uAkQOLI
EXdBg3+BwVKjVtMWNtMUfO9KnFjTxNMNMLm8gfyAY2SzjZstI9oGRYxzBKYmUrAY
kDF1gtb0wJURoAJOTdU3eQi03MmPUYwVyzRDWWt084XP
-----END CERTIFICATE-----
Generated at Tue Nov 26 14:56:31 2024 by rpki-client on console-ams.rpki-client.org