Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/r9P3Bnr0eVoCN8FUd5t7t97tGHE.roa
File: r9P3Bnr0eVoCN8FUd5t7t97tGHE.roa (raw, json)
Hash identifier: +iRBktTVK+/chbMBJCc+5dm43ti7nm75fDjVfq1k4ow=
Subject key identifier: AF:D3:F7:06:7A:F4:79:5A:02:37:C1:54:77:9B:7B:B7:DE:ED:18:71
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 018CC72766870030BAED19BAA1002FDD63FB
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/r9P3Bnr0eVoCN8FUd5t7t97tGHE.roa
Signing time: Mon 01 Jan 2024 22:31:37 +0000
ROA not before: Mon 01 Jan 2024 22:31:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200428
IP address blocks: 185.107.188.0/22 maxlen: 22
2a06:4540::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:66:87:00:30:ba:ed:19:ba:a1:00:2f:dd:63:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Jan 1 22:31:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=afd3f7067af4795a0237c154779b7bb7deed1871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:21:a6:84:fe:6a:93:1b:7f:a3:e6:ac:7b:6a:
3d:ee:4c:9f:d7:d1:2a:2a:59:08:8a:e4:9f:43:f0:
cc:e0:21:37:04:56:c9:1f:94:eb:32:78:42:e6:e0:
24:05:2e:88:16:5d:1e:9f:54:de:3c:05:c4:e6:cb:
f1:a1:e7:60:6a:bd:c3:0b:72:a5:d3:d6:45:3a:6e:
b5:c3:9d:59:8c:3e:62:cd:b5:e2:6b:b3:dc:e3:8b:
88:ac:c0:54:bc:26:fe:1f:a2:00:7b:91:97:b7:be:
d4:39:6a:79:3f:e4:a8:6e:17:24:7b:62:7b:4a:de:
c7:00:6e:7c:c8:0b:70:9e:7f:9e:59:29:f7:a6:a9:
29:54:b8:e7:a0:7c:8f:46:a0:06:4a:f4:df:0e:10:
80:f4:7e:34:f7:66:c7:af:3d:90:a1:7d:db:b1:13:
46:fa:ea:20:81:41:de:41:7a:82:1d:74:c3:cc:9b:
3e:70:8c:82:bf:98:9b:8f:56:8f:f6:4b:09:4a:dd:
bf:f7:26:80:d8:57:a8:04:60:3e:b0:64:6d:e6:91:
32:d4:4a:27:3f:19:55:66:33:5d:9f:b8:dd:58:d3:
12:7f:d7:52:38:b5:a6:fe:fd:57:de:6b:a9:47:b0:
60:83:06:92:ab:fe:ba:ac:19:5b:e6:7a:30:67:81:
58:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:D3:F7:06:7A:F4:79:5A:02:37:C1:54:77:9B:7B:B7:DE:ED:18:71
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/r9P3Bnr0eVoCN8FUd5t7t97tGHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.188.0/22
IPv6:
2a06:4540::/29
Signature Algorithm: sha256WithRSAEncryption
3b:79:50:ae:41:ed:30:46:ab:e4:9b:e2:f4:64:ae:68:5e:95:
76:0c:77:81:f6:02:17:7a:23:de:33:c8:7e:aa:d5:11:f4:57:
a9:c9:fc:d4:dc:58:b8:f8:c3:a7:d3:0d:dc:94:20:ef:0a:a9:
15:20:96:80:9b:37:83:4f:b6:80:ee:6a:e7:64:4d:3f:68:c2:
de:61:69:ce:93:11:a4:f2:a5:9c:7c:7f:62:b9:d7:15:c4:4e:
1f:96:b3:3f:d7:8d:c3:52:54:8c:8b:20:2e:6b:73:d4:74:e4:
b8:22:d0:4b:f7:ba:dc:ca:a3:0b:99:d9:db:4b:eb:5f:08:de:
af:c2:79:1b:fe:69:f0:23:6e:32:0d:a0:56:6b:de:57:28:ae:
b7:ac:30:4e:55:a6:25:06:21:d1:ed:92:88:3b:9b:5f:c1:63:
8d:d7:c1:f1:62:f4:fc:a5:61:35:b2:0d:a0:e5:0a:f7:72:79:
28:1e:0a:68:00:d8:71:c0:fc:90:14:39:11:17:c7:af:7a:18:
eb:5d:63:c0:b9:43:38:cb:3e:ae:f8:e4:6b:ab:7b:66:50:2c:
26:47:97:a8:db:eb:aa:d2:61:c1:44:89:71:5f:c9:58:de:ec:
9e:d4:32:36:18:a0:20:b0:ae:a6:99:a0:39:5b:0b:55:21:cd:
1f:1b:31:25
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzHJ2aHADC67Rm6oQAv3WP7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOTM5ZWI3NGFiYmNkMjIyN2MyMTkyYWEyYTM3ZTZkY2I4
OThlNTMwHhcNMjQwMTAxMjIzMTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZmQzZjcwNjdhZjQ3OTVhMDIzN2MxNTQ3NzliN2JiN2RlZWQxODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiyGmhP5qkxt/o+ase2o97kyf19Eq
KlkIiuSfQ/DM4CE3BFbJH5TrMnhC5uAkBS6IFl0en1TePAXE5svxoedgar3DC3Kl
09ZFOm61w51ZjD5izbXia7Pc44uIrMBUvCb+H6IAe5GXt77UOWp5P+Sobhcke2J7
St7HAG58yAtwnn+eWSn3pqkpVLjnoHyPRqAGSvTfDhCA9H4092bHrz2QoX3bsRNG
+uoggUHeQXqCHXTDzJs+cIyCv5ibj1aP9ksJSt2/9yaA2FeoBGA+sGRt5pEy1Eon
PxlVZjNdn7jdWNMSf9dSOLWm/v1X3mupR7BggwaSq/66rBlb5nowZ4FYDQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFK/T9wZ69HlaAjfBVHebe7fe7RhxMB8GA1UdIwQY
MBaAFG2TnrdKu80iJ8IZKqKjfm3LiY5TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTIt
ZTk1ZTJkM2QyM2UwLzEvcjlQM0JucjBlVm9DTjhGVWQ1dDd0OTd0R0hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mZmMzYzYtZjY0Zi00MDkwLTgyOTItZTk1ZTJkM2QyM2Uw
LzEvYlpPZXQwcTd6U0lud2hrcW9xTi1iY3VKamxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuWu8MA0E
AgACMAcDBQMqBkVAMA0GCSqGSIb3DQEBCwUAA4IBAQA7eVCuQe0wRqvkm+L0ZK5o
XpV2DHeB9gIXeiPeM8h+qtUR9FepyfzU3Fi4+MOn0w3clCDvCqkVIJaAmzeDT7aA
7mrnZE0/aMLeYWnOkxGk8qWcfH9iudcVxE4flrM/143DUlSMiyAua3PUdOS4ItBL
97rcyqMLmdnbS+tfCN6vwnkb/mnwI24yDaBWa95XKK63rDBOVaYlBiHR7ZKIO5tf
wWON18HxYvT8pWE1sg2g5Qr3cnkoHgpoANhxwPyQFDkRF8evehjrXWPAuUM4yz6u
+ORrq3tmUCwmR5eo2+uq0mHBRIlxX8lY3uye1DI2GKAgsK6mmaA5WwtVIc0fGzEl
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:01:20 2024 by rpki-client on console-ams.rpki-client.org