Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/9edY611nFXZB9j9A4nCo47uQX18.roa
File: 9edY611nFXZB9j9A4nCo47uQX18.roa (raw, json)
Hash identifier: DdetNgR5DOSjAYaFksIKGYCLaJmW7VBa9C5LzkKyBB0=
Subject key identifier: F5:E7:58:EB:5D:67:15:76:41:F6:3F:40:E2:70:A8:E3:BB:90:5F:5F
Certificate issuer: /CN=2874e46bf636ea63e5d12362f551b80b27714780
Certificate serial: 018CC7953B234E31880D72437A3C83629232
Authority key identifier: 28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/9edY611nFXZB9j9A4nCo47uQX18.roa
Signing time: Tue 02 Jan 2024 00:31:35 +0000
ROA not before: Tue 02 Jan 2024 00:31:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60109
IP address blocks: 37.16.100.0/22 maxlen: 22
37.16.109.0/24 maxlen: 24
37.16.108.0/24 maxlen: 24
185.57.180.0/22 maxlen: 22
2a00:4cc4::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.mft
rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3b:23:4e:31:88:0d:72:43:7a:3c:83:62:92:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2874e46bf636ea63e5d12362f551b80b27714780
Validity
Not Before: Jan 2 00:31:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5e758eb5d67157641f63f40e270a8e3bb905f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:d4:5c:43:09:31:57:c6:83:51:20:93:a3:53:
cc:f6:d5:7c:b6:03:6e:62:1e:61:ca:9f:80:ef:0a:
61:75:b5:65:d3:11:57:6f:52:85:64:f3:8b:9f:44:
cf:17:eb:71:8e:56:8a:e4:f1:85:ed:22:4c:f2:b5:
4c:4e:fb:4b:5e:1e:2f:cd:76:9c:b0:84:32:39:5b:
69:57:91:31:fb:43:c5:4b:0a:9e:44:a7:66:64:07:
8a:cb:ef:65:68:45:7b:71:fc:5e:0d:15:bf:c9:47:
4b:59:de:f9:08:e4:c3:e8:a7:61:b0:15:cb:eb:d4:
51:98:21:78:e4:b6:1f:12:c9:4d:bd:cd:5b:eb:25:
fc:17:20:78:44:b7:24:05:44:0a:0e:2d:b2:32:84:
78:fe:90:4f:26:32:ab:f3:02:1f:f6:45:bf:ca:5d:
22:7f:15:e6:30:9d:80:25:c7:03:d8:5e:a9:6e:1e:
a4:01:28:38:0c:2d:1a:21:28:a6:e3:ec:0e:1c:29:
e6:02:0c:79:e6:50:4f:cb:22:26:a0:21:9e:43:a4:
92:28:aa:b6:91:b5:c8:20:7c:d2:66:84:c4:be:43:
04:ef:56:00:bc:2a:09:b9:ea:a5:c3:14:26:dc:9b:
d4:2f:df:80:fd:db:b6:f4:4f:84:d5:31:30:96:d6:
8d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E7:58:EB:5D:67:15:76:41:F6:3F:40:E2:70:A8:E3:BB:90:5F:5F
X509v3 Authority Key Identifier:
keyid:28:74:E4:6B:F6:36:EA:63:E5:D1:23:62:F5:51:B8:0B:27:71:47:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KHTka_Y26mPl0SNi9VG4CydxR4A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/9edY611nFXZB9j9A4nCo47uQX18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/eddc05-402d-4da7-97ef-c10da6aac1b1/1/KHTka_Y26mPl0SNi9VG4CydxR4A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.16.100.0/22
37.16.108.0/23
185.57.180.0/22
IPv6:
2a00:4cc4::/32
Signature Algorithm: sha256WithRSAEncryption
13:d9:5f:7a:49:3b:e0:d3:29:03:ce:aa:27:a3:95:f1:0b:41:
ee:68:6a:75:84:62:5b:5d:e8:c8:37:3a:8b:96:47:2b:35:78:
e4:4a:63:bf:e5:42:62:1b:a1:6e:4e:1f:8f:22:d3:cd:49:01:
6b:c6:74:3f:7b:65:da:1c:53:e1:bb:30:17:e9:1c:aa:ba:a5:
29:38:c6:9a:8d:6c:03:7c:3e:37:de:7a:86:fb:c3:16:11:19:
57:ad:80:21:58:a8:a9:19:a2:f9:d6:16:8c:5d:c5:85:fd:02:
ca:fd:84:55:78:08:54:d5:8f:d9:d4:78:4d:f3:51:b8:8e:14:
ef:aa:25:1a:1b:d5:4b:3e:19:05:0a:72:69:03:8c:1c:e4:25:
ec:c7:dd:66:3d:ab:df:6f:24:01:be:c6:a5:ff:95:da:ad:e5:
b0:fb:eb:e9:80:d3:f9:2e:a4:a9:e1:c9:19:85:4c:e5:7d:c4:
cd:69:be:7f:a3:b7:9f:e5:48:ac:64:30:42:9d:2e:2a:3c:96:
aa:e6:48:a6:71:16:bf:5c:f4:42:df:f3:b3:02:a7:1a:03:87:
15:b3:21:c4:98:d6:d2:d7:bb:d8:2f:03:06:3a:98:2f:c9:3b:
c9:cb:c3:51:8c:ca:80:b0:cd:a2:de:eb:bd:9c:d1:44:96:7e:
61:26:d3:c1
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYzHlTsjTjGIDXJDejyDYpIyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4NzRlNDZiZjYzNmVhNjNlNWQxMjM2MmY1NTFiODBiMjc3
MTQ3ODAwHhcNMjQwMTAyMDAzMTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWU3NThlYjVkNjcxNTc2NDFmNjNmNDBlMjcwYThlM2JiOTA1ZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09RcQwkxV8aDUSCTo1PM9tV8tgNu
Yh5hyp+A7wphdbVl0xFXb1KFZPOLn0TPF+txjlaK5PGF7SJM8rVMTvtLXh4vzXac
sIQyOVtpV5Ex+0PFSwqeRKdmZAeKy+9laEV7cfxeDRW/yUdLWd75COTD6KdhsBXL
69RRmCF45LYfEslNvc1b6yX8FyB4RLckBUQKDi2yMoR4/pBPJjKr8wIf9kW/yl0i
fxXmMJ2AJccD2F6pbh6kASg4DC0aISim4+wOHCnmAgx55lBPyyImoCGeQ6SSKKq2
kbXIIHzSZoTEvkME71YAvCoJueqlwxQm3JvUL9+A/du29E+E1TEwltaNpQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFPXnWOtdZxV2QfY/QOJwqOO7kF9fMB8GA1UdIwQY
MBaAFCh05Gv2Nupj5dEjYvVRuAsncUeAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYt
YzEwZGE2YWFjMWIxLzEvOWVkWTYxMW5GWFpCOWo5QTRuQ280N3VRWDE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9lZGRjMDUtNDAyZC00ZGE3LTk3ZWYtYzEwZGE2YWFjMWIx
LzEvS0hUa2FfWTI2bVBsMFNOaTlWRzRDeWR4UjRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCJRBkAwQB
JRBsAwQCuTm0MA0EAgACMAcDBQAqAEzEMA0GCSqGSIb3DQEBCwUAA4IBAQAT2V96
STvg0ykDzqono5XxC0HuaGp1hGJbXejINzqLlkcrNXjkSmO/5UJiG6FuTh+PItPN
SQFrxnQ/e2XaHFPhuzAX6RyquqUpOMaajWwDfD433nqG+8MWERlXrYAhWKipGaL5
1haMXcWF/QLK/YRVeAhU1Y/Z1HhN81G4jhTvqiUaG9VLPhkFCnJpA4wc5CXsx91m
PavfbyQBvsal/5XareWw++vpgNP5LqSp4ckZhUzlfcTNab5/o7ef5UisZDBCnS4q
PJaq5kimcRa/XPRC3/OzAqcaA4cVsyHEmNbS17vYLwMGOpgvyTvJy8NRjMqAsM2i
3uu9nNFEln5hJtPB
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:19 2024 by rpki-client on console-ams.rpki-client.org