Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/33YQnAck7Ib5YXaoj7RDLoSXpu8.roa
File: 33YQnAck7Ib5YXaoj7RDLoSXpu8.roa (raw, json)
Hash identifier: sS22881+18cKR8gR+qLdkZPNG8eNKjKciEVQy8uk04Y=
Subject key identifier: DF:76:10:9C:07:24:EC:86:F9:61:76:A8:8F:B4:43:2E:84:97:A6:EF
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018CC72761D5D1408FEB0DE0095D13B6BE70
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/33YQnAck7Ib5YXaoj7RDLoSXpu8.roa
Signing time: Mon 01 Jan 2024 22:31:36 +0000
ROA not before: Mon 01 Jan 2024 22:31:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210512
IP address blocks: 193.9.17.0/24 maxlen: 24
213.108.133.0/24 maxlen: 24
91.229.112.0/23 maxlen: 23
81.161.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:61:d5:d1:40:8f:eb:0d:e0:09:5d:13:b6:be:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 22:31:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=df76109c0724ec86f96176a88fb4432e8497a6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e5:54:aa:93:69:64:3d:b6:25:c1:b5:32:50:
eb:ba:dc:e6:75:f2:2c:5f:08:0b:17:63:c7:55:c1:
b1:cd:a4:87:0c:fe:c0:f3:e4:9b:d1:43:2c:2f:e2:
27:47:c8:78:37:64:c2:37:4e:3c:70:f9:db:64:a6:
4c:37:b3:ea:8c:79:4b:22:a2:b7:40:64:43:a7:43:
d4:da:c0:b5:02:47:11:44:90:d5:61:61:f2:7c:92:
07:34:2f:b7:3b:21:e7:2f:5d:fe:c8:ba:fd:8b:33:
bd:12:ff:98:31:37:f4:a2:34:c9:25:8b:1b:3a:dc:
ee:9d:7f:6a:6f:b4:ad:be:bc:9b:dd:9b:e1:3b:1e:
8e:e8:4c:44:3f:b6:aa:7b:72:f3:27:b4:ce:02:bd:
c0:59:00:9d:b4:62:ec:75:26:6c:03:7c:0f:26:01:
a1:3a:d7:b7:f0:b4:b2:1d:20:51:41:0b:11:d5:4e:
49:e1:7d:b4:85:84:e7:4b:f8:93:21:3c:ba:39:ab:
b6:af:c8:6c:08:52:cd:5c:e4:60:24:f2:cb:79:f3:
55:8d:c0:a2:b9:62:ed:57:1a:aa:97:60:08:98:d9:
22:ef:9c:64:76:65:b4:cf:17:79:c3:74:de:f8:b8:
33:7a:2a:87:58:e6:00:e3:c6:df:01:25:bd:74:54:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:76:10:9C:07:24:EC:86:F9:61:76:A8:8F:B4:43:2E:84:97:A6:EF
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/33YQnAck7Ib5YXaoj7RDLoSXpu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.63.0/24
91.229.112.0/23
193.9.17.0/24
213.108.133.0/24
Signature Algorithm: sha256WithRSAEncryption
38:2b:8d:c3:18:c7:81:8d:03:1e:4b:ba:a2:78:d5:44:a0:ff:
60:a0:6d:55:e0:5b:a4:c6:e3:83:76:e1:e7:51:1c:e6:99:63:
05:96:98:76:ab:ad:5e:8b:06:c3:31:c9:13:89:36:2d:ea:39:
8d:26:61:9c:c1:1d:b7:68:5c:08:c1:4b:10:3a:45:c3:9c:b5:
b8:35:d4:f9:cc:63:3a:ff:f0:99:08:9c:53:f2:d2:b6:32:b3:
d3:bb:4b:c1:d4:4e:29:90:d9:8f:e0:11:eb:0c:71:aa:4f:d6:
d5:6e:ab:3a:70:e3:76:e6:3b:68:fb:43:9c:39:98:53:02:0b:
bc:01:94:1f:27:07:c0:c0:97:7e:b6:c5:e4:43:b1:ad:67:f5:
e2:21:70:59:2c:8a:db:a6:57:96:76:7a:a3:53:86:9e:6f:8d:
fe:23:59:35:96:ad:b0:51:21:6d:d9:b5:f5:eb:bb:0e:ae:d9:
64:99:49:7a:cb:7d:14:e7:d1:14:9b:d1:b6:f9:5b:ce:79:9b:
d6:d9:6b:8f:1b:91:2e:08:b5:9f:89:2c:52:76:bd:64:a6:9d:
0d:63:6a:91:e4:28:57:12:b3:0a:73:ea:7b:c3:14:53:76:27:
71:9e:35:d5:ea:fd:83:8c:ba:f0:04:ce:c5:eb:bd:2b:6c:f0:
cc:d8:fb:6a
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzHJ2HV0UCP6w3gCV0Ttr5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjQwMTAxMjIzMTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZjc2MTA5YzA3MjRlYzg2Zjk2MTc2YTg4ZmI0NDMyZTg0OTdhNmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+VUqpNpZD22JcG1MlDrutzmdfIs
XwgLF2PHVcGxzaSHDP7A8+Sb0UMsL+InR8h4N2TCN048cPnbZKZMN7PqjHlLIqK3
QGRDp0PU2sC1AkcRRJDVYWHyfJIHNC+3OyHnL13+yLr9izO9Ev+YMTf0ojTJJYsb
OtzunX9qb7Stvryb3ZvhOx6O6ExEP7aqe3LzJ7TOAr3AWQCdtGLsdSZsA3wPJgGh
Ote38LSyHSBRQQsR1U5J4X20hYTnS/iTITy6Oau2r8hsCFLNXORgJPLLefNVjcCi
uWLtVxqql2AImNki75xkdmW0zxd5w3Te+LgzeiqHWOYA48bfASW9dFQRNQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFN92EJwHJOyG+WF2qI+0Qy6El6bvMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvMzNZUW5BY2s3SWI1WVhhb2o3UkRMb1NYcHU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUaE/AwQB
W+VwAwQAwQkRAwQA1WyFMA0GCSqGSIb3DQEBCwUAA4IBAQA4K43DGMeBjQMeS7qi
eNVEoP9goG1V4FukxuODduHnURzmmWMFlph2q61eiwbDMckTiTYt6jmNJmGcwR23
aFwIwUsQOkXDnLW4NdT5zGM6//CZCJxT8tK2MrPTu0vB1E4pkNmP4BHrDHGqT9bV
bqs6cON25jto+0OcOZhTAgu8AZQfJwfAwJd+tsXkQ7GtZ/XiIXBZLIrbpleWdnqj
U4aeb43+I1k1lq2wUSFt2bX167sOrtlkmUl6y30U59EUm9G2+VvOeZvW2WuPG5Eu
CLWfiSxSdr1kpp0NY2qR5ChXErMKc+p7wxRTdidxnjXV6v2DjLrwBM7F670rbPDM
2Ptq
-----END CERTIFICATE-----
Generated at Sat Jun 1 14:03:26 2024 by rpki-client on console-ams.rpki-client.org