Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/W29hdrQCrGnbOaF_M6w_DddGFB8.roa
File: W29hdrQCrGnbOaF_M6w_DddGFB8.roa (raw, json)
Hash identifier: yz8ym9ndX1jv0WYDDQ635FlbiBW0mh0XN1zQ5WlXf5s=
Subject key identifier: 5B:6F:61:76:B4:02:AC:69:DB:39:A1:7F:33:AC:3F:0D:D7:46:14:1F
Certificate issuer: /CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Certificate serial: 018CC64AA83D5070632577A0E3F93270EEF0
Authority key identifier: 12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/W29hdrQCrGnbOaF_M6w_DddGFB8.roa
Signing time: Mon 01 Jan 2024 18:30:30 +0000
ROA not before: Mon 01 Jan 2024 18:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47872
IP address blocks: 109.121.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:a8:3d:50:70:63:25:77:a0:e3:f9:32:70:ee:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12ef9e49fecf2509eb6769eee2cdd4a5253b71c5
Validity
Not Before: Jan 1 18:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5b6f6176b402ac69db39a17f33ac3f0dd746141f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:50:cd:e6:77:ac:a5:b6:d1:8c:83:e6:7c:12:
9a:32:50:7a:20:0a:1f:9f:6f:5a:b5:df:2c:f7:12:
6a:30:9b:c9:32:bc:23:4b:8d:30:3f:a3:74:f4:12:
0e:da:94:01:3f:e1:1e:4f:84:36:42:f9:d7:a9:17:
05:ee:9a:76:07:83:69:b0:bc:5c:75:7b:aa:c3:d1:
2a:c9:7a:dd:8b:66:4e:dc:8a:0f:a3:a6:79:01:6f:
ec:ad:79:24:47:d5:7c:8e:57:22:5e:66:79:ba:99:
23:1f:4e:05:f7:f1:86:71:10:86:49:0b:a2:a5:b0:
48:be:f9:ef:81:ba:4a:57:bd:97:51:7a:5f:3f:9d:
a9:5d:29:4b:75:6d:94:db:b2:08:b8:b6:27:6e:6a:
00:32:66:8c:a4:16:b5:eb:24:7f:3c:ea:dc:e4:83:
f3:e4:cc:a2:15:64:6c:2c:85:d0:d4:af:92:31:fd:
28:49:a4:1f:cd:95:7f:e4:e1:82:26:9e:b4:19:dc:
ae:31:23:c1:92:ac:c3:30:d1:4c:ba:5c:21:3a:8a:
ab:bd:b8:cc:a6:d1:b0:d2:c8:45:62:09:7c:e9:8a:
99:d0:38:16:96:69:84:33:cb:83:5d:ae:c6:a5:7e:
13:e8:39:e3:3c:42:bb:7e:d4:f4:d7:3f:f5:6c:45:
9c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6F:61:76:B4:02:AC:69:DB:39:A1:7F:33:AC:3F:0D:D7:46:14:1F
X509v3 Authority Key Identifier:
keyid:12:EF:9E:49:FE:CF:25:09:EB:67:69:EE:E2:CD:D4:A5:25:3B:71:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/W29hdrQCrGnbOaF_M6w_DddGFB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/9c27c2-fdbe-4e39-ba92-1d5d945a05a3/1/Eu-eSf7PJQnrZ2nu4s3UpSU7ccU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.152.0/24
Signature Algorithm: sha256WithRSAEncryption
03:1c:6c:27:f8:22:b8:c3:84:0d:d7:84:a6:58:a5:cc:92:be:
d5:11:c4:a7:6a:e2:3c:ac:b0:d9:0f:79:03:cb:ba:de:16:ff:
c5:f3:51:74:cc:4f:fa:3b:23:00:99:05:83:b6:16:b4:b9:aa:
57:d8:9a:42:2d:0b:ed:12:e2:dc:66:15:e4:9e:85:27:b2:95:
4d:99:d9:76:46:ab:f7:d3:20:26:25:14:3e:bf:14:4b:54:65:
d7:28:4a:df:a1:92:62:99:e7:7b:c4:fa:cd:1f:71:ba:7d:2b:
22:c9:44:ae:19:0e:9e:ee:47:6c:c2:a5:82:03:f7:8a:a6:e6:
a0:b4:e2:51:45:0f:f7:fb:5c:09:7a:f2:6c:50:95:6d:bd:f3:
6b:07:26:d9:a2:90:33:1f:da:a1:ef:1b:37:78:74:04:48:ab:
22:32:f1:5a:aa:aa:50:f3:de:b3:5c:2d:08:8f:4e:c2:01:30:
ac:49:e3:21:d9:5b:4f:5b:dc:f9:6b:dc:ff:c0:22:2b:a7:30:
9c:07:67:23:60:41:d9:f2:c2:bc:ed:c6:3b:32:5a:5e:a6:a1:
39:06:f6:94:40:f7:0b:5f:33:83:fd:fc:6c:a6:63:d8:b6:49:
bc:af:4f:17:0f:1d:79:f0:8e:09:02:fd:49:94:7d:f2:69:ae:
60:4b:0a:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSqg9UHBjJXeg4/kycO7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyZWY5ZTQ5ZmVjZjI1MDllYjY3NjllZWUyY2RkNGE1MjUz
YjcxYzUwHhcNMjQwMTAxMTgzMDMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YjZmNjE3NmI0MDJhYzY5ZGIzOWExN2YzM2FjM2YwZGQ3NDYxNDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVDN5nespbbRjIPmfBKaMlB6IAof
n29atd8s9xJqMJvJMrwjS40wP6N09BIO2pQBP+EeT4Q2QvnXqRcF7pp2B4NpsLxc
dXuqw9EqyXrdi2ZO3IoPo6Z5AW/srXkkR9V8jlciXmZ5upkjH04F9/GGcRCGSQui
pbBIvvnvgbpKV72XUXpfP52pXSlLdW2U27IIuLYnbmoAMmaMpBa16yR/POrc5IPz
5MyiFWRsLIXQ1K+SMf0oSaQfzZV/5OGCJp60GdyuMSPBkqzDMNFMulwhOoqrvbjM
ptGw0shFYgl86YqZ0DgWlmmEM8uDXa7GpX4T6DnjPEK7ftT01z/1bEWcVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFtvYXa0Aqxp2zmhfzOsPw3XRhQfMB8GA1UdIwQY
MBaAFBLvnkn+zyUJ62dp7uLN1KUlO3HFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTIt
MWQ1ZDk0NWEwNWEzLzEvVzI5aGRyUUNyR25iT2FGX002d19EZGRHRkI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS85YzI3YzItZmRiZS00ZTM5LWJhOTItMWQ1ZDk0NWEwNWEz
LzEvRXUtZVNmN1BKUW5yWjJudTRzM1VwU1U3Y2NVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXmYMA0G
CSqGSIb3DQEBCwUAA4IBAQADHGwn+CK4w4QN14SmWKXMkr7VEcSnauI8rLDZD3kD
y7reFv/F81F0zE/6OyMAmQWDtha0uapX2JpCLQvtEuLcZhXknoUnspVNmdl2Rqv3
0yAmJRQ+vxRLVGXXKErfoZJimed7xPrNH3G6fSsiyUSuGQ6e7kdswqWCA/eKpuag
tOJRRQ/3+1wJevJsUJVtvfNrBybZopAzH9qh7xs3eHQESKsiMvFaqqpQ896zXC0I
j07CATCsSeMh2VtPW9z5a9z/wCIrpzCcB2cjYEHZ8sK87cY7MlpepqE5BvaUQPcL
XzOD/fxspmPYtkm8r08XDx158I4JAv1JlH3yaa5gSwo+
-----END CERTIFICATE-----
Generated at Thu May 2 13:31:35 2024 by rpki-client on console-fra.rpki-client.org