Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/PRgTZvZQj3IaJZxQ4BsGsboOwOQ.roa
File: PRgTZvZQj3IaJZxQ4BsGsboOwOQ.roa (raw, json)
Hash identifier: /itgWhSwWbHaXSgoJblWa+6dp/bvlGxivaAH3LfNAFc=
Subject key identifier: 3D:18:13:66:F6:50:8F:72:1A:25:9C:50:E0:1B:06:B1:BA:0E:C0:E4
Certificate issuer: /CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Certificate serial: 01926BB45014A86BFC9383BCEA997E917E8C
Authority key identifier: 9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/PRgTZvZQj3IaJZxQ4BsGsboOwOQ.roa
Signing time: Tue 08 Oct 2024 10:37:12 +0000
ROA not before: Tue 08 Oct 2024 10:37:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199856
IP address blocks: 195.88.70.0/24 maxlen: 24
2a13:c300::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:6b:b4:50:14:a8:6b:fc:93:83:bc:ea:99:7e:91:7e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a5e76f929d21b586f42e30f7d9b00399b3dcbf0
Validity
Not Before: Oct 8 10:37:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3d181366f6508f721a259c50e01b06b1ba0ec0e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e5:95:93:29:0a:ce:2e:cb:39:4f:bb:91:73:
56:de:cf:15:57:e9:1c:be:07:e3:51:83:d3:0e:5d:
59:8b:5b:ea:2a:43:e1:ea:7f:79:80:25:c3:07:d2:
2a:a3:a1:c3:23:07:d8:74:26:38:b6:e6:72:8b:a4:
d3:e7:60:a0:d4:d7:25:2a:0e:65:bf:e7:3d:73:1f:
41:48:c6:3c:7c:ae:1d:47:64:0f:ec:f1:2a:6f:36:
2e:75:c1:d5:b2:7f:f3:6f:5e:c5:cf:30:94:ca:d8:
45:80:54:33:40:ad:b5:fc:ac:7c:e4:38:7c:d7:7d:
c8:ba:37:1e:b0:83:37:a5:a7:06:cc:df:02:97:3b:
9c:c2:87:59:ca:ca:69:aa:cd:ad:9c:b7:4f:0c:99:
4b:e4:c6:9b:2c:bc:cb:57:fd:c3:e5:b0:4e:59:c2:
cf:4a:00:fe:45:96:26:e9:2f:18:14:17:e9:d6:72:
48:d7:74:7c:93:0a:e3:6d:ff:9a:a0:dd:89:47:52:
1a:28:6a:51:e7:a2:d4:f2:14:b0:a3:b3:bc:14:a4:
39:6c:4d:04:4e:64:85:b3:4b:c8:61:42:a2:d7:81:
41:96:4c:17:2f:01:ed:b5:06:6d:1e:8a:72:26:b4:
6e:b7:1a:91:d2:f1:59:f0:f8:35:a4:ce:b7:d8:2c:
fa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:18:13:66:F6:50:8F:72:1A:25:9C:50:E0:1B:06:B1:BA:0E:C0:E4
X509v3 Authority Key Identifier:
keyid:9A:5E:76:F9:29:D2:1B:58:6F:42:E3:0F:7D:9B:00:39:9B:3D:CB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ml52-SnSG1hvQuMPfZsAOZs9y_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/PRgTZvZQj3IaJZxQ4BsGsboOwOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/767d6d-36c8-403b-81b0-b4aaa23fdaa9/1/ml52-SnSG1hvQuMPfZsAOZs9y_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.70.0/24
IPv6:
2a13:c300::/29
Signature Algorithm: sha256WithRSAEncryption
98:7f:53:e2:a4:51:c0:f6:63:7b:3a:2d:b4:b7:05:54:45:f0:
7c:fa:84:58:79:1f:d2:39:86:aa:1d:63:5e:b8:b2:4e:ce:dd:
10:41:dc:05:f4:10:69:ec:77:a3:48:ed:87:1c:ed:48:32:83:
c8:e8:54:b9:c0:0a:6f:b5:68:15:32:cb:fb:ee:68:d2:09:fc:
1e:87:77:61:b7:1f:29:d1:cb:30:ee:a6:98:1d:a2:bf:20:c6:
00:c5:14:a9:fc:6b:c8:1f:de:1f:0b:50:53:9c:48:c4:a2:31:
08:0c:6f:2c:1e:64:94:07:5e:84:92:c6:f5:d1:e2:49:ae:6a:
72:cf:10:10:4a:fb:c4:32:48:0b:15:22:fa:7f:4f:dd:d7:c7:
3a:0b:53:31:56:80:be:a1:62:1e:e4:af:63:5c:41:99:a3:da:
e7:d9:f9:e5:44:e2:a6:e9:52:c3:ea:6e:9c:2f:b8:d6:ab:e8:
ab:8c:9c:07:7e:62:4e:e5:62:65:c8:9c:02:2d:aa:67:dc:c0:
6d:d7:14:bc:f1:66:a4:59:68:71:25:e9:37:e3:58:46:1e:3a:
3d:44:4c:c0:fa:c7:da:f3:fb:63:d8:99:28:86:32:c1:65:6c:
59:5d:41:f7:64:31:22:18:c6:98:82:00:6d:90:70:c9:1c:31:
5a:b2:1c:b4
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZJrtFAUqGv8k4O86pl+kX6MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNWU3NmY5MjlkMjFiNTg2ZjQyZTMwZjdkOWIwMDM5OWIz
ZGNiZjAwHhcNMjQxMDA4MTAzNzEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDE4MTM2NmY2NTA4ZjcyMWEyNTljNTBlMDFiMDZiMWJhMGVjMGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+WVkykKzi7LOU+7kXNW3s8VV+kc
vgfjUYPTDl1Zi1vqKkPh6n95gCXDB9Iqo6HDIwfYdCY4tuZyi6TT52Cg1NclKg5l
v+c9cx9BSMY8fK4dR2QP7PEqbzYudcHVsn/zb17FzzCUythFgFQzQK21/Kx85Dh8
133IujcesIM3pacGzN8ClzucwodZysppqs2tnLdPDJlL5MabLLzLV/3D5bBOWcLP
SgD+RZYm6S8YFBfp1nJI13R8kwrjbf+aoN2JR1IaKGpR56LU8hSwo7O8FKQ5bE0E
TmSFs0vIYUKi14FBlkwXLwHttQZtHopyJrRutxqR0vFZ8Pg1pM632Cz6bQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFD0YE2b2UI9yGiWcUOAbBrG6DsDkMB8GA1UdIwQY
MBaAFJpedvkp0htYb0LjD32bADmbPcvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAt
YjRhYWEyM2ZkYWE5LzEvUFJnVFp2WlFqM0lhSlp4UTRCc0dzYm9Pd09RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83NjdkNmQtMzZjOC00MDNiLTgxYjAtYjRhYWEyM2ZkYWE5
LzEvbWw1Mi1TblNHMWh2UXVNUGZac0FPWnM5eV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAw1hGMA0E
AgACMAcDBQMqE8MAMA0GCSqGSIb3DQEBCwUAA4IBAQCYf1PipFHA9mN7Oi20twVU
RfB8+oRYeR/SOYaqHWNeuLJOzt0QQdwF9BBp7HejSO2HHO1IMoPI6FS5wApvtWgV
Msv77mjSCfweh3dhtx8p0csw7qaYHaK/IMYAxRSp/GvIH94fC1BTnEjEojEIDG8s
HmSUB16Eksb10eJJrmpyzxAQSvvEMkgLFSL6f0/d18c6C1MxVoC+oWIe5K9jXEGZ
o9rn2fnlROKm6VLD6m6cL7jWq+irjJwHfmJO5WJlyJwCLapn3MBt1xS88WakWWhx
Jek341hGHjo9REzA+sfa8/tj2JkohjLBZWxZXUH3ZDEiGMaYggBtkHDJHDFashy0
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:52:56 2024 by rpki-client on console-ams.rpki-client.org