Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/y_26punhBOEqX7EzN8dqNyZ2tgg.roa
File: y_26punhBOEqX7EzN8dqNyZ2tgg.roa (raw, json)
Hash identifier: 6vEKxP+txtZbNXqBB3/Ego81e8Pob/UG7e/zVV1ifGc=
Subject key identifier: CB:FD:BA:A6:E9:E1:04:E1:2A:5F:B1:33:37:C7:6A:37:26:76:B6:08
Certificate issuer: /CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Certificate serial: 019045932DCAC5F8E20906E828ED322E7336
Authority key identifier: 87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/y_26punhBOEqX7EzN8dqNyZ2tgg.roa
Signing time: Sun 23 Jun 2024 14:49:51 +0000
ROA not before: Sun 23 Jun 2024 14:49:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48235
IP address blocks: 85.158.240.0/21 maxlen: 21
94.127.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:93:2d:ca:c5:f8:e2:09:06:e8:28:ed:32:2e:73:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878477d8b62d09f9ae8bfdbd812a53f97ed4c576
Validity
Not Before: Jun 23 14:49:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbfdbaa6e9e104e12a5fb13337c76a372676b608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:69:c6:80:6e:57:33:7b:d5:c1:b5:c8:06:12:
85:96:25:91:5c:0c:2b:2b:22:38:0d:d8:16:88:cb:
f3:f1:b4:4e:3b:63:29:28:b5:9f:14:31:90:5d:04:
de:cd:f0:f7:e7:ed:17:17:0b:d5:94:17:0f:f5:39:
37:1a:73:85:d9:51:ad:12:a0:ec:fd:29:80:53:62:
0f:d0:2f:24:d5:71:69:43:f1:61:f6:6d:1b:9a:8e:
bb:ef:65:78:ba:33:1a:0c:cf:22:ca:27:31:b7:a0:
e7:cb:40:17:00:fe:c1:63:68:cd:83:68:62:bb:64:
a7:a4:99:0b:3f:98:7b:0f:78:c2:20:a3:94:30:a2:
4d:96:f5:4f:cd:a8:1f:67:ac:af:7d:c6:ac:2c:bc:
c7:70:9d:02:26:0e:7f:89:ba:99:a1:62:62:5e:7f:
61:18:1d:7a:c3:2a:d0:7c:c5:74:68:7e:3f:87:ee:
fe:90:3a:2f:a3:fa:3c:bd:67:c6:36:f0:2b:95:90:
ce:b0:ab:18:fa:9a:91:64:a5:43:f7:bc:2e:5a:7e:
31:7e:61:83:23:d0:a5:c7:05:b1:90:79:a3:c8:8c:
5d:27:8b:71:ce:45:3b:c2:fb:e7:17:37:a7:40:fa:
89:1f:6d:e4:b1:2f:cb:04:5f:68:67:0c:35:04:97:
f3:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:FD:BA:A6:E9:E1:04:E1:2A:5F:B1:33:37:C7:6A:37:26:76:B6:08
X509v3 Authority Key Identifier:
keyid:87:84:77:D8:B6:2D:09:F9:AE:8B:FD:BD:81:2A:53:F9:7E:D4:C5:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h4R32LYtCfmui_29gSpT-X7UxXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/y_26punhBOEqX7EzN8dqNyZ2tgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e83ac5-448b-4e49-8ebf-8842e5edce02/1/h4R32LYtCfmui_29gSpT-X7UxXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.240.0/21
94.127.64.0/21
Signature Algorithm: sha256WithRSAEncryption
36:87:50:3b:43:61:06:46:e0:c5:d6:80:6c:3a:7c:d3:37:b2:
11:c1:76:6d:a4:aa:84:10:d7:8f:0b:f0:4c:22:24:17:f6:3c:
6d:c2:21:49:88:24:46:50:da:84:0e:e7:8e:c5:57:8c:45:9b:
4d:e7:f4:24:96:6d:03:12:3c:3f:47:83:7e:50:15:ea:19:02:
73:73:2e:95:7e:04:e8:a2:c8:6b:63:cb:70:2e:30:6b:97:16:
4f:81:08:82:90:fd:db:cb:53:0a:91:1f:16:ee:ad:d8:cf:ee:
75:81:7c:21:9a:b1:83:50:ff:73:b9:21:f0:29:34:4d:64:d4:
04:83:c4:0e:58:08:50:01:73:aa:c4:c2:6d:0d:69:78:e1:73:
4e:e3:4b:f9:30:15:6f:8b:18:b6:b0:c8:ed:3e:2c:73:30:dd:
8a:16:24:7c:7e:ed:a2:57:6f:e7:89:d3:7e:02:c8:6a:2e:f0:
80:ab:c4:f7:0b:c7:da:be:5c:69:14:c9:04:db:22:dd:0d:83:
1a:87:44:d5:fd:f7:03:38:fa:c2:ce:a2:0f:fa:95:0e:d3:ba:
86:64:a0:a1:d5:af:92:5d:e2:3b:c9:28:0d:c1:48:e1:94:31:
e4:a4:f1:d2:dd:4b:01:8d:de:33:5a:72:51:a5:bc:a7:0e:d5:
d6:58:76:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZBFky3KxfjiCQboKO0yLnM2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ODQ3N2Q4YjYyZDA5ZjlhZThiZmRiZDgxMmE1M2Y5N2Vk
NGM1NzYwHhcNMjQwNjIzMTQ0OTUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYmZkYmFhNmU5ZTEwNGUxMmE1ZmIxMzMzN2M3NmEzNzI2NzZiNjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWnGgG5XM3vVwbXIBhKFliWRXAwr
KyI4DdgWiMvz8bROO2MpKLWfFDGQXQTezfD35+0XFwvVlBcP9Tk3GnOF2VGtEqDs
/SmAU2IP0C8k1XFpQ/Fh9m0bmo6772V4ujMaDM8iyicxt6Dny0AXAP7BY2jNg2hi
u2SnpJkLP5h7D3jCIKOUMKJNlvVPzagfZ6yvfcasLLzHcJ0CJg5/ibqZoWJiXn9h
GB16wyrQfMV0aH4/h+7+kDovo/o8vWfGNvArlZDOsKsY+pqRZKVD97wuWn4xfmGD
I9ClxwWxkHmjyIxdJ4txzkU7wvvnFzenQPqJH23ksS/LBF9oZww1BJfzywIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMv9uqbp4QThKl+xMzfHajcmdrYIMB8GA1UdIwQY
MBaAFIeEd9i2LQn5rov9vYEqU/l+1MV2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDRSMzJMWXRDZm11aV8yOWdTcFQtWDdVeFhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lODNhYzUtNDQ4Yi00ZTQ5LThlYmYt
ODg0MmU1ZWRjZTAyLzEveV8yNnB1bmhCT0VxWDdFek44ZHFOeVoydGdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lODNhYzUtNDQ4Yi00ZTQ5LThlYmYtODg0MmU1ZWRjZTAy
LzEvaDRSMzJMWXRDZm11aV8yOWdTcFQtWDdVeFhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDVZ7wAwQD
Xn9AMA0GCSqGSIb3DQEBCwUAA4IBAQA2h1A7Q2EGRuDF1oBsOnzTN7IRwXZtpKqE
ENePC/BMIiQX9jxtwiFJiCRGUNqEDueOxVeMRZtN5/Qklm0DEjw/R4N+UBXqGQJz
cy6VfgTooshrY8twLjBrlxZPgQiCkP3by1MKkR8W7q3Yz+51gXwhmrGDUP9zuSHw
KTRNZNQEg8QOWAhQAXOqxMJtDWl44XNO40v5MBVvixi2sMjtPixzMN2KFiR8fu2i
V2/nidN+AshqLvCAq8T3C8favlxpFMkE2yLdDYMah0TV/fcDOPrCzqIP+pUO07qG
ZKCh1a+SXeI7ySgNwUjhlDHkpPHS3UsBjd4zWnJRpbynDtXWWHal
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:59:23 2024 by rpki-client on console-fra.rpki-client.org