Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/DVdCCWbIEjcETINW_LZxmL-Vf_M.roa
File: DVdCCWbIEjcETINW_LZxmL-Vf_M.roa (raw, json)
Hash identifier: 6XZAnl1oPe2/3hZsJe5hnXCQsmSZExnhAQqQ6lAGGII=
Subject key identifier: 0D:57:42:09:66:C8:12:37:04:4C:83:56:FC:B6:71:98:BF:95:7F:F3
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 0191E13D7E3F63B85AC0440AFA8A14B261B3
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/DVdCCWbIEjcETINW_LZxmL-Vf_M.roa
Signing time: Wed 11 Sep 2024 13:19:49 +0000
ROA not before: Wed 11 Sep 2024 13:19:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44390
IP address blocks: 80.92.239.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:3d:7e:3f:63:b8:5a:c0:44:0a:fa:8a:14:b2:61:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Sep 11 13:19:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d57420966c81237044c8356fcb67198bf957ff3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:9c:8e:f7:48:e4:3a:b0:f6:ba:32:3c:00:
fe:2b:04:8c:fe:66:56:31:4f:87:7e:a8:c6:1a:3c:
8a:82:12:78:40:d9:56:c9:e6:c7:a4:7d:60:7c:ee:
79:6b:86:dd:35:be:d7:c0:92:3d:c6:b3:15:b7:f4:
c7:9a:b0:7d:27:10:fb:16:14:f3:6a:83:75:90:a6:
89:d8:6e:b4:40:3c:dd:8a:69:ed:74:c2:22:32:fd:
06:ed:07:ca:5c:82:16:78:c2:88:c5:fc:59:5a:bf:
8a:30:1b:c0:05:35:ce:80:2c:82:02:7c:d2:ea:a9:
37:72:e6:03:c7:62:dd:4a:c8:5e:ed:8c:fd:0e:14:
45:6b:cd:b1:7f:fb:23:03:d6:ed:ae:4f:a0:bf:d2:
d3:7e:d9:bc:57:02:15:8a:0b:16:bc:be:cc:01:99:
bf:d2:77:d1:32:07:a8:39:78:05:05:d3:89:90:32:
2a:10:97:69:90:56:a1:7b:48:b6:6c:cd:ef:bb:f6:
4a:e9:c6:9b:67:cf:e5:1a:48:cd:28:0e:b5:19:94:
43:9b:66:b1:6d:14:20:35:41:b1:61:56:68:4f:04:
f2:bd:43:e8:28:8c:3f:3c:6e:8e:2b:fb:8e:07:19:
c0:fb:9e:8a:9b:06:6a:48:5f:41:d5:64:49:00:ec:
f0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:57:42:09:66:C8:12:37:04:4C:83:56:FC:B6:71:98:BF:95:7F:F3
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/DVdCCWbIEjcETINW_LZxmL-Vf_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.92.239.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2b:27:e4:1b:03:97:e1:3f:85:46:71:9d:07:dd:3d:7b:5e:
be:e0:58:17:24:d7:5d:64:21:99:e0:e5:f2:f0:fb:40:8f:7d:
c0:53:f4:78:bc:9c:5d:f1:f5:e6:f4:8c:ad:85:65:ea:d6:60:
17:60:ea:f2:4e:94:bf:32:2b:42:f9:a4:2d:ec:39:25:42:da:
36:3c:51:39:2c:7b:59:7d:7e:ca:2b:96:bd:fd:ad:ca:9f:68:
0a:e9:2c:6a:5a:de:29:a7:d4:b1:95:62:84:d9:48:b6:fa:5f:
99:85:d0:68:11:93:85:ac:c3:b5:86:b9:8d:99:b9:47:93:f4:
67:b8:c9:dc:07:35:4a:1a:ed:c2:2b:0e:2d:8e:26:67:22:3c:
85:b8:f5:a0:b8:15:16:db:41:cc:2b:2b:3d:00:56:8e:2d:ea:
dd:b6:5a:16:16:7e:41:cb:fa:16:14:62:b2:31:a5:55:f4:8f:
75:01:dc:73:80:49:7f:24:21:cc:ac:3f:74:d7:e9:dd:46:fe:
c8:3d:8c:28:2d:bc:61:9e:36:aa:8c:d0:24:8a:ec:9b:91:00:
1e:34:fe:b7:e2:ae:1d:1c:cc:aa:42:8f:5c:81:d6:ce:d8:30:
f4:69:a8:32:57:a0:97:2c:de:89:d9:02:43:b7:f9:f8:0f:63:
f8:38:1a:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHhPX4/Y7hawEQK+ooUsmGzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTk1M2MwODk4MGFkYzk0ZjJmYTNhM2MxYmE5NWM0MGQy
MWU3ZDMwHhcNMjQwOTExMTMxOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDU3NDIwOTY2YzgxMjM3MDQ0YzgzNTZmY2I2NzE5OGJmOTU3ZmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0acjvdI5Dqw9royPAD+KwSM/mZW
MU+HfqjGGjyKghJ4QNlWyebHpH1gfO55a4bdNb7XwJI9xrMVt/THmrB9JxD7FhTz
aoN1kKaJ2G60QDzdimntdMIiMv0G7QfKXIIWeMKIxfxZWr+KMBvABTXOgCyCAnzS
6qk3cuYDx2LdSshe7Yz9DhRFa82xf/sjA9btrk+gv9LTftm8VwIVigsWvL7MAZm/
0nfRMgeoOXgFBdOJkDIqEJdpkFahe0i2bM3vu/ZK6cabZ8/lGkjNKA61GZRDm2ax
bRQgNUGxYVZoTwTyvUPoKIw/PG6OK/uOBxnA+56KmwZqSF9B1WRJAOzwgwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA1XQglmyBI3BEyDVvy2cZi/lX/zMB8GA1UdIwQY
MBaAFMYZU8CJgK3JTy+jo8G6lcQNIefTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYt
NjI1MjQ1YTAwYWJmLzEvRFZkQ0NXYklFamNFVElOV19MWnhtTC1WZl9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lMDEyODUtNjYwZC00Y2QyLWFkMWYtNjI1MjQ1YTAwYWJm
LzEveGhsVHdJbUFyY2xQTDZPandicVZ4QTBoNTlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFzvMA0G
CSqGSIb3DQEBCwUAA4IBAQBZKyfkGwOX4T+FRnGdB909e16+4FgXJNddZCGZ4OXy
8PtAj33AU/R4vJxd8fXm9IythWXq1mAXYOryTpS/MitC+aQt7DklQto2PFE5LHtZ
fX7KK5a9/a3Kn2gK6SxqWt4pp9SxlWKE2Ui2+l+ZhdBoEZOFrMO1hrmNmblHk/Rn
uMncBzVKGu3CKw4tjiZnIjyFuPWguBUW20HMKys9AFaOLerdtloWFn5By/oWFGKy
MaVV9I91AdxzgEl/JCHMrD901+ndRv7IPYwoLbxhnjaqjNAkiuybkQAeNP634q4d
HMyqQo9cgdbO2DD0aagyV6CXLN6J2QJDt/n4D2P4OBqo
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:41:15 2024 by rpki-client on console-fra.rpki-client.org