Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/DrH5N5E5vgeb6QAVH-_XBjWA2oI.roa
File: DrH5N5E5vgeb6QAVH-_XBjWA2oI.roa (raw, json)
Hash identifier: NrgdT0InydvtAEvuN+5X/MqDtPuAaFmeVPrSYpGA4iA=
Subject key identifier: 0E:B1:F9:37:91:39:BE:07:9B:E9:00:15:1F:EF:D7:06:35:80:DA:82
Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Certificate serial: 0191E17D9474FB2BFBFEEAB6145390966243
Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/DrH5N5E5vgeb6QAVH-_XBjWA2oI.roa
Signing time: Wed 11 Sep 2024 14:29:49 +0000
ROA not before: Wed 11 Sep 2024 14:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215590
IP address blocks: 91.204.131.0/24 maxlen: 24
94.141.160.0/24 maxlen: 24
94.141.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:7d:94:74:fb:2b:fb:fe:ea:b6:14:53:90:96:62:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7
Validity
Not Before: Sep 11 14:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0eb1f9379139be079be900151fefd7063580da82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:ea:df:db:13:e0:e1:be:c4:f2:a1:bb:80:
37:85:a6:93:38:88:a8:40:c9:36:c3:e2:b0:c8:9b:
e2:0c:7a:95:fc:bf:06:ab:b6:8d:ce:e6:b1:50:b3:
1b:cb:78:7c:c8:a4:b0:55:b0:30:30:26:36:cc:8a:
31:14:6b:32:19:3e:1b:c0:0e:b7:e8:2f:63:55:03:
c4:2c:f2:34:45:71:04:34:fd:e1:28:38:ef:20:5f:
4d:3a:85:b7:6f:b7:82:b3:23:66:fd:62:65:5e:d2:
13:f7:5b:bd:a2:d7:ac:a1:02:fb:57:2d:dc:e1:42:
03:dd:5a:e4:14:bb:1c:a2:17:54:b4:8b:1e:7a:5a:
0e:a2:04:a9:c7:23:59:69:8c:16:1e:22:99:ef:c6:
2e:64:ac:19:55:be:fe:0a:80:0b:d9:d8:6a:c4:e2:
b7:2a:c7:dc:d3:b4:8e:ce:8c:2c:17:5e:66:01:eb:
8e:51:2f:2b:23:6d:b5:a0:4e:48:96:0a:c2:c4:17:
fd:a7:a0:8f:fa:65:38:4d:8a:01:5f:95:40:04:26:
5a:12:31:bb:bd:1e:e7:a4:e6:21:8c:c4:95:a8:d3:
c8:b1:bf:dc:2f:a7:fc:62:35:0c:11:27:63:55:5c:
2f:76:b6:39:67:01:c7:1f:ff:0d:f8:11:df:c2:37:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B1:F9:37:91:39:BE:07:9B:E9:00:15:1F:EF:D7:06:35:80:DA:82
X509v3 Authority Key Identifier:
keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/DrH5N5E5vgeb6QAVH-_XBjWA2oI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.131.0/24
94.141.160.0/23
Signature Algorithm: sha256WithRSAEncryption
75:97:d9:c9:c8:09:f8:ed:8d:5d:4b:52:cc:1e:84:bc:00:35:
f8:26:4c:f2:e2:a4:12:8a:64:60:f5:24:6f:ab:72:39:35:a7:
f6:9d:23:ad:dd:17:7d:df:02:2d:ea:95:54:7a:75:fa:68:53:
f0:6f:b8:3e:63:2e:b5:8b:fd:2c:c6:de:9c:ab:36:0f:be:0a:
75:69:1e:9a:9d:08:0f:cd:63:df:3b:40:e7:57:88:fc:fd:59:
9e:e6:5b:de:72:a6:4c:e0:45:5f:f4:70:87:69:16:8e:72:cf:
85:9c:79:44:9b:d8:b2:2b:4e:cc:78:f5:4c:f6:94:75:cf:cc:
10:9b:e8:6e:07:1e:4f:22:77:d0:a9:89:ca:d4:54:bf:2a:d3:
32:09:17:d4:5f:f4:58:f4:e1:48:73:aa:2a:bb:24:cd:bc:50:
5e:d9:d2:c7:5c:61:ba:cf:9b:d9:c5:54:d3:56:62:47:dd:4f:
5d:78:1f:6d:93:ff:35:c8:2c:b5:63:11:53:5c:b3:d8:20:16:
b7:21:98:08:3d:bd:fa:5d:17:db:a9:cc:8e:df:09:d0:3a:54:
9f:4a:89:1d:1e:dc:54:18:b1:37:86:a9:6b:6c:a8:99:d8:be:
e8:b4:8b:f7:a8:df:eb:d7:6a:03:69:68:7b:83:64:7e:90:3a:
a4:be:af:21
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZHhfZR0+yv7/uq2FFOQlmJDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2
ZTMxYTcwHhcNMjQwOTExMTQyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZWIxZjkzNzkxMzliZTA3OWJlOTAwMTUxZmVmZDcwNjM1ODBkYTgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvo3q39sT4OG+xPKhu4A3haaTOIio
QMk2w+KwyJviDHqV/L8Gq7aNzuaxULMby3h8yKSwVbAwMCY2zIoxFGsyGT4bwA63
6C9jVQPELPI0RXEENP3hKDjvIF9NOoW3b7eCsyNm/WJlXtIT91u9otesoQL7Vy3c
4UID3VrkFLscohdUtIseeloOogSpxyNZaYwWHiKZ78YuZKwZVb7+CoAL2dhqxOK3
Ksfc07SOzowsF15mAeuOUS8rI221oE5IlgrCxBf9p6CP+mU4TYoBX5VABCZaEjG7
vR7npOYhjMSVqNPIsb/cL6f8YjUMESdjVVwvdrY5ZwHHH/8N+BHfwjfz2wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFA6x+TeROb4Hm+kAFR/v1wY1gNqCMB8GA1UdIwQY
MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt
N2EyOGFmMjljZGMyLzEvRHJINU41RTV2Z2ViNlFBVkgtX1hCaldBMm9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy
LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8yDAwQB
Xo2gMA0GCSqGSIb3DQEBCwUAA4IBAQB1l9nJyAn47Y1dS1LMHoS8ADX4Jkzy4qQS
imRg9SRvq3I5Naf2nSOt3Rd93wIt6pVUenX6aFPwb7g+Yy61i/0sxt6cqzYPvgp1
aR6anQgPzWPfO0DnV4j8/Vme5lvecqZM4EVf9HCHaRaOcs+FnHlEm9iyK07MePVM
9pR1z8wQm+huBx5PInfQqYnK1FS/KtMyCRfUX/RY9OFIc6oquyTNvFBe2dLHXGG6
z5vZxVTTVmJH3U9deB9tk/81yCy1YxFTXLPYIBa3IZgIPb36XRfbqcyO3wnQOlSf
SokdHtxUGLE3hqlrbKiZ2L7otIv3qN/r12oDaWh7g2R+kDqkvq8h
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:16:08 2024 by rpki-client on console-fra.rpki-client.org