Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/10n_pxE9nx-D_X84x5_znYMR44U.roa
File: 10n_pxE9nx-D_X84x5_znYMR44U.roa (raw, json)
Hash identifier: x4+B4Vm7L69CMr+Y3CPyKe8jNgLXKlIFIEr2i7Hp5dY=
Subject key identifier: D7:49:FF:A7:11:3D:9F:1F:83:FD:7F:38:C7:9F:F3:9D:83:11:E3:85
Certificate issuer: /CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Certificate serial: 018E3D897FDF3AECD41B5B9228FFC779002C
Authority key identifier: 42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/10n_pxE9nx-D_X84x5_znYMR44U.roa
Signing time: Thu 14 Mar 2024 15:16:44 +0000
ROA not before: Thu 14 Mar 2024 15:16:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42130
IP address blocks: 93.88.20.0/22 maxlen: 22
93.88.20.0/23 maxlen: 23
93.88.22.0/23 maxlen: 23
195.245.72.0/24 maxlen: 24
195.245.88.0/24 maxlen: 24
2a13:b2c0::/32 maxlen: 32
2a13:b2c1:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 29 Jun 2024 16:26:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:89:7f:df:3a:ec:d4:1b:5b:92:28:ff:c7:79:00:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429361cd181d86ef54ebe2fc91a80ec534ceac78
Validity
Not Before: Mar 14 15:16:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d749ffa7113d9f1f83fd7f38c79ff39d8311e385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c9:e5:18:77:0e:38:2e:b5:fa:4a:1a:91:51:
e9:2b:db:d7:22:2b:4a:8f:ef:3e:6d:91:dd:83:36:
af:e1:23:9e:3d:84:9b:45:71:99:16:b9:16:33:49:
2f:bc:7a:33:df:8d:96:c1:16:09:a7:59:a4:1f:79:
80:c2:ed:e9:dd:1a:51:83:44:dc:97:50:57:22:75:
9f:83:6d:34:d5:57:09:e2:01:bd:f9:9c:f1:6c:c1:
a1:b9:5e:83:2c:ac:cb:4a:7f:d8:ad:dc:8c:f4:95:
e7:aa:0b:2d:8b:a9:6a:c1:28:b2:ef:05:46:9d:19:
f5:45:40:03:1c:f1:4b:13:c0:eb:3a:e2:f9:6e:c8:
67:8d:4e:88:33:bf:bb:87:9a:25:37:86:76:4d:56:
6d:8e:e1:3c:5e:29:7e:c4:f1:db:3c:19:c7:7d:17:
ff:da:eb:4c:24:36:fa:48:8f:1d:a7:fe:cf:bd:34:
f6:f2:3b:17:5c:27:f6:ad:41:0a:f5:0a:01:b9:24:
43:e7:e9:41:03:df:e2:da:45:22:00:29:75:2e:ad:
ec:76:7d:2b:be:08:12:5a:b5:21:12:1a:d8:ff:48:
d6:57:34:b9:d1:ec:11:e8:74:03:9d:f6:eb:2e:26:
a5:13:ca:c3:0d:64:99:ee:c5:ff:70:bc:19:01:b0:
d3:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:49:FF:A7:11:3D:9F:1F:83:FD:7F:38:C7:9F:F3:9D:83:11:E3:85
X509v3 Authority Key Identifier:
keyid:42:93:61:CD:18:1D:86:EF:54:EB:E2:FC:91:A8:0E:C5:34:CE:AC:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpNhzRgdhu9U6-L8kagOxTTOrHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/10n_pxE9nx-D_X84x5_znYMR44U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7230bd-0c7c-4a02-adb9-9bbb42fa8ced/1/QpNhzRgdhu9U6-L8kagOxTTOrHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.88.20.0/22
195.245.72.0/24
195.245.88.0/24
IPv6:
2a13:b2c0::/32
2a13:b2c1:1::/48
Signature Algorithm: sha256WithRSAEncryption
17:04:87:d5:0c:13:31:9c:76:79:09:78:20:05:f7:a4:bc:d1:
46:5c:d1:01:43:40:60:ff:20:4f:e8:3b:0f:3f:37:1b:2f:32:
c9:be:29:4e:b3:ca:b9:65:36:91:c0:a4:66:31:3d:fd:36:f9:
94:79:d9:a3:80:42:d1:f5:2b:df:8c:db:4d:d8:81:84:e2:ac:
18:c5:87:19:94:52:2a:aa:be:a3:68:75:1d:22:1f:1f:2f:0f:
e4:6c:f3:29:7f:d0:29:01:ba:0b:91:10:1d:0e:88:f1:4d:d8:
c7:db:b9:ee:d5:4f:50:9d:42:14:50:ed:16:67:1f:63:5b:ad:
bd:81:c1:f9:4c:0f:37:0e:bf:60:e0:1e:5a:8e:95:7f:ed:ad:
c2:1a:53:4b:32:c3:9c:6c:95:57:0a:d8:cd:a0:f6:b1:e3:63:
26:7e:96:c2:2b:2d:0f:71:64:f5:91:da:64:fd:76:57:fe:f5:
13:fa:55:c1:00:ce:f7:b0:d4:7c:ca:81:1d:13:65:de:d8:60:
50:22:61:53:e1:17:c2:bd:e9:74:49:ea:63:ec:06:4a:32:d2:
70:13:73:d7:6f:6f:b4:72:ed:97:4a:62:75:87:58:37:7f:15:
ce:aa:e7:e9:51:6d:b9:4d:0c:1e:2c:a4:d7:19:ad:36:5f:29:
50:20:48:1c
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAY49iX/fOuzUG1uSKP/HeQAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyOTM2MWNkMTgxZDg2ZWY1NGViZTJmYzkxYTgwZWM1MzRj
ZWFjNzgwHhcNMjQwMzE0MTUxNjQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNzQ5ZmZhNzExM2Q5ZjFmODNmZDdmMzhjNzlmZjM5ZDgzMTFlMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcnlGHcOOC61+koakVHpK9vXIitK
j+8+bZHdgzav4SOePYSbRXGZFrkWM0kvvHoz342WwRYJp1mkH3mAwu3p3RpRg0Tc
l1BXInWfg2001VcJ4gG9+ZzxbMGhuV6DLKzLSn/YrdyM9JXnqgsti6lqwSiy7wVG
nRn1RUADHPFLE8DrOuL5bshnjU6IM7+7h5olN4Z2TVZtjuE8Xil+xPHbPBnHfRf/
2utMJDb6SI8dp/7PvTT28jsXXCf2rUEK9QoBuSRD5+lBA9/i2kUiACl1Lq3sdn0r
vggSWrUhEhrY/0jWVzS50ewR6HQDnfbrLialE8rDDWSZ7sX/cLwZAbDTfwIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFNdJ/6cRPZ8fg/1/OMef852DEeOFMB8GA1UdIwQY
MBaAFEKTYc0YHYbvVOvi/JGoDsU0zqx4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjkt
OWJiYjQyZmE4Y2VkLzEvMTBuX3B4RTlueC1EX1g4NHg1X3puWU1SNDRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83MjMwYmQtMGM3Yy00YTAyLWFkYjktOWJiYjQyZmE4Y2Vk
LzEvUXBOaHpSZ2RodTlVNi1MOGthZ094VFRPckhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAYBAIAATASAwQCXVgUAwQA
w/VIAwQAw/VYMBYEAgACMBADBQAqE7LAAwcAKhOywQABMA0GCSqGSIb3DQEBCwUA
A4IBAQAXBIfVDBMxnHZ5CXggBfekvNFGXNEBQ0Bg/yBP6DsPPzcbLzLJvilOs8q5
ZTaRwKRmMT39NvmUedmjgELR9SvfjNtN2IGE4qwYxYcZlFIqqr6jaHUdIh8fLw/k
bPMpf9ApAboLkRAdDojxTdjH27nu1U9QnUIUUO0WZx9jW629gcH5TA83Dr9g4B5a
jpV/7a3CGlNLMsOcbJVXCtjNoPax42MmfpbCKy0PcWT1kdpk/XZX/vUT+lXBAM73
sNR8yoEdE2Xe2GBQImFT4RfCvel0Sepj7AZKMtJwE3PXb2+0cu2XSmJ1h1g3fxXO
qufpUW25TQweLKTXGa02XylQIEgc
-----END CERTIFICATE-----
Generated at Fri Jun 28 23:11:46 2024 by rpki-client on console-fra.rpki-client.org