Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/a21ZKXc8e_LcHSzqo7n9f0b-S5g.roa
File: a21ZKXc8e_LcHSzqo7n9f0b-S5g.roa (raw, json)
Hash identifier: N34a8cJ1Yu/TptY8y02KG8mrnc0TeDGJe2hZ1IQTUO0=
Subject key identifier: 6B:6D:59:29:77:3C:7B:F2:DC:1D:2C:EA:A3:B9:FD:7F:46:FE:4B:98
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 01903ABB85FE429ACEDF1C7F9147176D322D
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/a21ZKXc8e_LcHSzqo7n9f0b-S5g.roa
Signing time: Fri 21 Jun 2024 12:18:06 +0000
ROA not before: Fri 21 Jun 2024 12:18:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53356
IP address blocks: 213.145.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:bb:85:fe:42:9a:ce:df:1c:7f:91:47:17:6d:32:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jun 21 12:18:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b6d5929773c7bf2dc1d2ceaa3b9fd7f46fe4b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:14:b3:30:70:1f:30:16:f9:28:78:47:ff:67:
e0:07:bd:83:8f:26:8e:f5:47:88:0f:f9:73:c9:f7:
32:91:43:f1:4b:48:35:58:68:46:f1:a0:ac:b4:1e:
b0:50:41:17:20:8f:98:ae:ea:c0:59:04:0c:78:9d:
06:aa:e4:8a:e1:a9:c6:30:c9:bc:a3:e6:69:d2:ab:
58:83:6a:6f:cc:5a:e1:be:16:c7:e8:4b:6e:d1:4e:
90:03:cc:77:62:f7:7b:24:ba:67:75:e2:2e:aa:44:
0d:f0:96:5d:e9:88:d5:a3:3e:e9:8d:d2:38:1e:34:
4d:dc:09:f4:b4:34:05:ea:1e:42:31:d2:02:83:51:
01:e8:9c:61:d3:cd:6e:d9:1f:0d:aa:48:45:35:cb:
ea:17:b9:4f:23:c5:de:63:4a:16:c6:27:a2:70:4c:
c3:c5:d3:65:32:15:0a:80:39:01:97:c7:c1:c9:1a:
4f:f7:91:97:94:5d:71:9b:33:2a:c7:ca:07:13:22:
ee:57:c5:e5:7e:cc:7b:e8:d5:6d:69:62:09:b4:1a:
fa:2c:b7:e2:bb:53:94:0a:6a:84:49:a4:4a:13:74:
0f:32:61:7a:db:dd:b6:b1:b7:b1:00:b0:e1:36:fd:
34:b9:1a:0c:e8:a1:df:58:a9:a5:10:56:52:e2:15:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:6D:59:29:77:3C:7B:F2:DC:1D:2C:EA:A3:B9:FD:7F:46:FE:4B:98
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/a21ZKXc8e_LcHSzqo7n9f0b-S5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.88.0/24
Signature Algorithm: sha256WithRSAEncryption
e4:f3:13:e4:fc:fc:8f:3f:c9:ab:86:cf:ad:75:18:11:f9:1d:
f3:7d:7c:f2:ad:46:40:85:3b:41:77:d7:c3:bd:81:1b:65:ab:
f0:4f:eb:3a:13:6a:f3:76:d3:4a:2a:00:38:23:3f:61:f4:24:
54:fe:c3:b4:3d:ec:53:6a:46:35:76:64:aa:4f:46:79:9f:89:
30:7c:2e:6d:e8:98:03:f7:db:79:74:d5:15:e9:78:99:c2:0b:
4d:ba:98:97:a1:98:95:8a:df:7f:9a:e2:15:0d:e7:7b:ff:cf:
dd:9c:65:9d:14:5a:a1:fa:6b:61:b0:c3:b6:1f:92:ad:d1:fd:
1d:fe:dc:5e:de:20:eb:e8:4f:98:fa:88:9f:6d:25:51:3d:0e:
df:3d:1c:74:b8:68:03:3d:cb:b2:86:81:82:4b:e1:86:05:62:
ea:0f:5f:ea:05:cf:c1:73:ef:7a:20:06:f6:e0:ae:f5:a1:f5:
ab:dc:19:ca:b9:c4:ef:f7:46:0f:2e:97:39:79:37:ab:8b:ff:
aa:a9:ea:9e:5f:03:89:f7:d7:90:7a:6d:e8:20:e5:44:16:b2:
8b:2a:e5:f3:55:50:84:ba:f5:d8:28:88:c6:7b:87:31:68:ce:
d9:03:03:e0:69:6c:5a:bb:f6:35:fd:77:25:7f:bf:66:a0:44:
c1:de:dc:93
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZA6u4X+QprO3xx/kUcXbTItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjQwNjIxMTIxODA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjZkNTkyOTc3M2M3YmYyZGMxZDJjZWFhM2I5ZmQ3ZjQ2ZmU0Yjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hSzMHAfMBb5KHhH/2fgB72DjyaO
9UeID/lzyfcykUPxS0g1WGhG8aCstB6wUEEXII+YrurAWQQMeJ0GquSK4anGMMm8
o+Zp0qtYg2pvzFrhvhbH6Etu0U6QA8x3Yvd7JLpndeIuqkQN8JZd6YjVoz7pjdI4
HjRN3An0tDQF6h5CMdICg1EB6Jxh081u2R8NqkhFNcvqF7lPI8XeY0oWxieicEzD
xdNlMhUKgDkBl8fByRpP95GXlF1xmzMqx8oHEyLuV8Xlfsx76NVtaWIJtBr6LLfi
u1OUCmqESaRKE3QPMmF62922sbexALDhNv00uRoM6KHfWKmlEFZS4hUylQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGttWSl3PHvy3B0s6qO5/X9G/kuYMB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvYTIxWktYYzhlX0xjSFN6cW83bjlmMGItUzVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ZFYMA0G
CSqGSIb3DQEBCwUAA4IBAQDk8xPk/PyPP8mrhs+tdRgR+R3zfXzyrUZAhTtBd9fD
vYEbZavwT+s6E2rzdtNKKgA4Iz9h9CRU/sO0PexTakY1dmSqT0Z5n4kwfC5t6JgD
99t5dNUV6XiZwgtNupiXoZiVit9/muIVDed7/8/dnGWdFFqh+mthsMO2H5Kt0f0d
/txe3iDr6E+Y+oifbSVRPQ7fPRx0uGgDPcuyhoGCS+GGBWLqD1/qBc/Bc+96IAb2
4K71ofWr3BnKucTv90YPLpc5eTeri/+qqeqeXwOJ99eQem3oIOVEFrKLKuXzVVCE
uvXYKIjGe4cxaM7ZAwPgaWxau/Y1/Xclf79moETB3tyT
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:34:43 2024 by rpki-client on console-ams.rpki-client.org