Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/pTrcpQZFE3h-VmEdpWPLU4bad5o.roa
File: pTrcpQZFE3h-VmEdpWPLU4bad5o.roa (raw, json)
Hash identifier: Jk2viaI+01Do2IkryDaDW5C4dSDzJPApuo+MJd50x6E=
Subject key identifier: A5:3A:DC:A5:06:45:13:78:7E:56:61:1D:A5:63:CB:53:86:DA:77:9A
Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881
Certificate serial: 018CC64B56BE44368ABB13DBAD82B2C8F0B4
Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/pTrcpQZFE3h-VmEdpWPLU4bad5o.roa
Signing time: Mon 01 Jan 2024 18:31:15 +0000
ROA not before: Mon 01 Jan 2024 18:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62057
IP address blocks: 78.153.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:56:be:44:36:8a:bb:13:db:ad:82:b2:c8:f0:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881
Validity
Not Before: Jan 1 18:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a53adca5064513787e56611da563cb5386da779a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:9e:97:33:f0:2c:b7:85:ba:e0:9b:f4:3a:8f:
b9:00:c9:f7:5a:ec:29:a6:4e:60:73:81:83:f8:73:
c5:91:95:c0:34:31:f1:8d:28:e6:d9:cf:76:12:15:
08:d8:8f:c9:81:01:2b:42:b0:87:20:36:e8:ae:31:
26:57:41:6e:dd:55:05:ea:be:0a:c9:81:5c:fd:1d:
f9:66:49:b6:65:fe:cd:cf:ff:49:50:76:70:8e:14:
aa:43:45:1b:f1:10:bd:ea:8d:75:00:5e:6e:af:b2:
1d:e5:cf:c7:c5:7e:28:f9:d0:6d:94:17:e8:63:dc:
00:3e:c6:24:8d:95:19:31:0f:f3:cb:b2:27:95:2d:
e1:3a:a8:10:66:91:0f:ec:6e:c9:75:1d:53:28:4d:
7c:70:3f:da:09:bd:5d:b7:97:da:bc:55:e1:07:7d:
c2:4c:47:97:c2:56:c7:87:43:11:0f:21:f7:69:d2:
df:6c:8a:66:87:91:c8:5f:63:e8:74:9d:28:4a:5b:
ad:62:3d:53:d4:f8:35:54:54:19:e9:86:cc:4f:d3:
2f:2e:b8:cb:9c:e9:80:22:8e:d5:40:20:7c:2c:2c:
49:43:e0:46:c0:b8:8c:ed:4f:f7:b3:be:1a:ca:bf:
7c:6a:c3:4a:11:a1:da:9a:f7:17:96:42:30:cf:9f:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3A:DC:A5:06:45:13:78:7E:56:61:1D:A5:63:CB:53:86:DA:77:9A
X509v3 Authority Key Identifier:
keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/pTrcpQZFE3h-VmEdpWPLU4bad5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.153.247.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:33:e4:16:8b:93:99:62:e9:06:ef:60:00:0d:24:49:d6:5c:
53:11:f5:d8:c6:70:f5:41:06:84:4b:47:62:0f:eb:9e:40:c1:
6e:df:c4:fe:d2:b1:cd:aa:13:cb:81:3e:97:56:28:a1:80:9f:
71:09:35:40:97:67:a5:31:3f:6b:3c:f4:70:c2:b9:f5:df:ea:
bd:93:7b:9e:06:ba:fa:d4:87:23:02:df:6f:6c:ea:dc:c3:a0:
3c:c0:cd:69:c2:02:ce:56:8c:ee:4a:96:24:c0:86:80:75:f1:
0e:30:20:5b:fe:21:c1:32:95:97:34:6b:ba:80:cd:84:2f:64:
4c:0a:6b:8e:0d:18:d9:26:59:f7:9d:13:59:ab:fe:98:c5:0d:
7f:2b:e6:16:03:b0:36:ff:e3:34:07:88:18:2f:d8:22:d9:09:
1d:b6:a8:7b:9b:6b:40:a1:f0:a8:33:3d:af:cc:4b:08:f7:ea:
5e:3b:68:41:0c:58:47:0f:79:bf:8b:dd:2d:70:ed:c1:c6:0e:
c8:89:33:8c:e7:62:b9:ff:3e:08:ed:38:d8:c1:2d:49:c0:82:
64:de:6d:9c:3e:10:bd:68:f6:15:b3:15:64:52:64:8f:97:36:
3e:ca:e3:2e:c1:d3:08:ed:d1:83:6a:fc:e0:6a:4b:66:37:ac:
9f:f7:a1:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS1a+RDaKuxPbrYKyyPC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5
ODk4ODEwHhcNMjQwMTAxMTgzMTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTNhZGNhNTA2NDUxMzc4N2U1NjYxMWRhNTYzY2I1Mzg2ZGE3NzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAop6XM/Ast4W64Jv0Oo+5AMn3Wuwp
pk5gc4GD+HPFkZXANDHxjSjm2c92EhUI2I/JgQErQrCHIDborjEmV0Fu3VUF6r4K
yYFc/R35Zkm2Zf7Nz/9JUHZwjhSqQ0Ub8RC96o11AF5ur7Id5c/HxX4o+dBtlBfo
Y9wAPsYkjZUZMQ/zy7InlS3hOqgQZpEP7G7JdR1TKE18cD/aCb1dt5favFXhB33C
TEeXwlbHh0MRDyH3adLfbIpmh5HIX2PodJ0oSlutYj1T1Pg1VFQZ6YbMT9MvLrjL
nOmAIo7VQCB8LCxJQ+BGwLiM7U/3s74ayr98asNKEaHamvcXlkIwz5+5pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKU63KUGRRN4flZhHaVjy1OG2neaMB8GA1UdIwQY
MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt
ZGQxMTVmOWUzMzAxLzEvcFRyY3BRWkZFM2gtVm1FZHBXUExVNGJhZDVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx
LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATpn3MA0G
CSqGSIb3DQEBCwUAA4IBAQC9M+QWi5OZYukG72AADSRJ1lxTEfXYxnD1QQaES0di
D+ueQMFu38T+0rHNqhPLgT6XViihgJ9xCTVAl2elMT9rPPRwwrn13+q9k3ueBrr6
1IcjAt9vbOrcw6A8wM1pwgLOVozuSpYkwIaAdfEOMCBb/iHBMpWXNGu6gM2EL2RM
CmuODRjZJln3nRNZq/6YxQ1/K+YWA7A2/+M0B4gYL9gi2Qkdtqh7m2tAofCoMz2v
zEsI9+peO2hBDFhHD3m/i90tcO3Bxg7IiTOM52K5/z4I7TjYwS1JwIJk3m2cPhC9
aPYVsxVkUmSPlzY+yuMuwdMI7dGDavzgaktmN6yf96F0
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:32:22 2024 by rpki-client on console-ams.rpki-client.org