Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/c48ITznYWNOCtQnBItYbm_4wI4c.roa
File: c48ITznYWNOCtQnBItYbm_4wI4c.roa (raw, json)
Hash identifier: dcMy/kHnx3JAVi/C/fI++zs6QoCREjwrUOkNdwZwGgY=
Subject key identifier: 73:8F:08:4F:39:D8:58:D3:82:B5:09:C1:22:D6:1B:9B:FE:30:23:87
Certificate issuer: /CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Certificate serial: 018CC9BC465BE161D4E1E51E5358B7272528
Authority key identifier: 72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/c48ITznYWNOCtQnBItYbm_4wI4c.roa
Signing time: Tue 02 Jan 2024 10:33:28 +0000
ROA not before: Tue 02 Jan 2024 10:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41008
IP address blocks: 195.14.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:46:5b:e1:61:d4:e1:e5:1e:53:58:b7:27:25:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72481dd90d100bd5bc23c04b10c0a8431cc9a5b5
Validity
Not Before: Jan 2 10:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=738f084f39d858d382b509c122d61b9bfe302387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a5:55:77:a9:f5:63:58:d7:82:9c:d8:27:73:
3b:f2:be:ca:aa:f0:b3:1d:27:19:f8:c6:d8:2f:6b:
97:b0:82:6f:b5:96:32:6f:42:5e:f4:ea:c4:e4:d2:
a4:a7:4e:c6:50:fe:bf:6b:b7:ae:18:c3:c0:06:b7:
1c:f8:31:3f:7b:22:38:f5:55:69:c7:88:0a:15:49:
bf:f9:74:6e:c6:86:1f:44:31:9a:d8:50:1c:15:19:
f5:0c:3a:de:f8:3f:4b:9a:15:82:d9:8f:ec:6e:70:
99:95:cb:bc:a2:07:20:90:d4:c9:3d:63:88:a7:55:
2a:36:92:34:02:bf:3a:75:3a:f8:e5:25:6d:59:bf:
e0:c6:eb:4a:0f:9b:e5:5f:58:8a:fc:e4:33:37:3a:
80:59:76:cf:7c:2b:64:08:20:e6:68:db:6d:d3:f7:
44:54:36:ee:ce:7f:86:b5:31:ea:17:f7:bd:c6:86:
c4:ca:62:b2:47:eb:96:e5:ca:c7:09:ee:31:07:e2:
50:5c:8c:d6:c8:ca:97:12:73:57:1d:84:da:7b:e8:
0d:d7:f0:6f:8a:d1:fa:46:bf:cf:de:39:fd:6a:cd:
e9:62:7d:c9:37:d6:c2:db:14:98:1b:57:48:0f:f8:
9c:1c:48:66:50:1d:bb:49:0f:4c:44:ac:ff:e9:5e:
e8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:8F:08:4F:39:D8:58:D3:82:B5:09:C1:22:D6:1B:9B:FE:30:23:87
X509v3 Authority Key Identifier:
keyid:72:48:1D:D9:0D:10:0B:D5:BC:23:C0:4B:10:C0:A8:43:1C:C9:A5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/c48ITznYWNOCtQnBItYbm_4wI4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8300f8-9ece-47cd-837d-f1990b0c705a/1/ckgd2Q0QC9W8I8BLEMCoQxzJpbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.29.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c1:0b:89:06:06:16:e3:2a:f6:ad:93:10:d7:f5:83:a6:5b:
ec:f5:1c:1c:09:ef:c7:d9:4c:cb:b2:bf:7a:e6:cb:0c:02:eb:
f7:f3:0a:86:50:84:f6:a0:b5:64:f0:f2:9a:04:bc:be:f9:bb:
10:c4:fc:df:b0:82:39:68:30:c6:23:1a:e7:49:83:20:1b:fa:
b8:01:11:2b:08:15:86:eb:e6:4f:60:34:8d:db:e1:58:a0:8a:
31:b8:69:42:b6:76:e5:ae:f2:0e:db:60:03:77:1c:06:4d:8e:
17:4a:2b:e4:d5:a1:ce:2a:3b:01:0c:10:6d:fc:31:7b:8f:03:
e8:08:de:56:8e:22:4d:73:e5:d1:60:2a:04:1d:4c:52:f3:3e:
a1:cc:8d:ac:41:97:c6:8e:46:e3:d4:1f:2a:82:fd:9a:5e:a0:
f3:96:c3:8f:be:18:ff:19:29:79:7f:f9:1f:2b:6f:27:f2:7a:
99:00:79:40:54:ba:d3:f8:d7:60:86:4e:87:8d:24:8c:cd:66:
9a:77:80:49:75:27:77:17:a2:8b:41:c4:95:6b:6b:dc:96:08:
3f:50:f7:d4:51:f0:0b:7c:6d:1e:96:b0:47:b8:5e:bf:a3:89:
d3:d6:16:76:27:56:8d:d6:8d:5d:bf:34:a9:7f:af:52:e4:a9:
bb:bb:62:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvEZb4WHU4eUeU1i3JyUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyNDgxZGQ5MGQxMDBiZDViYzIzYzA0YjEwYzBhODQzMWNj
OWE1YjUwHhcNMjQwMTAyMTAzMzI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MzhmMDg0ZjM5ZDg1OGQzODJiNTA5YzEyMmQ2MWI5YmZlMzAyMzg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqVVd6n1Y1jXgpzYJ3M78r7KqvCz
HScZ+MbYL2uXsIJvtZYyb0Je9OrE5NKkp07GUP6/a7euGMPABrcc+DE/eyI49VVp
x4gKFUm/+XRuxoYfRDGa2FAcFRn1DDre+D9LmhWC2Y/sbnCZlcu8ogcgkNTJPWOI
p1UqNpI0Ar86dTr45SVtWb/gxutKD5vlX1iK/OQzNzqAWXbPfCtkCCDmaNtt0/dE
VDbuzn+GtTHqF/e9xobEymKyR+uW5crHCe4xB+JQXIzWyMqXEnNXHYTae+gN1/Bv
itH6Rr/P3jn9as3pYn3JN9bC2xSYG1dID/icHEhmUB27SQ9MRKz/6V7oewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHOPCE852FjTgrUJwSLWG5v+MCOHMB8GA1UdIwQY
MBaAFHJIHdkNEAvVvCPASxDAqEMcyaW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2Qt
ZjE5OTBiMGM3MDVhLzEvYzQ4SVR6bllXTk9DdFFuQkl0WWJtXzR3STRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC84MzAwZjgtOWVjZS00N2NkLTgzN2QtZjE5OTBiMGM3MDVh
LzEvY2tnZDJRMFFDOVc4SThCTEVNQ29ReHpKcGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAww4dMA0G
CSqGSIb3DQEBCwUAA4IBAQCzwQuJBgYW4yr2rZMQ1/WDplvs9RwcCe/H2UzLsr96
5ssMAuv38wqGUIT2oLVk8PKaBLy++bsQxPzfsII5aDDGIxrnSYMgG/q4ARErCBWG
6+ZPYDSN2+FYoIoxuGlCtnblrvIO22ADdxwGTY4XSivk1aHOKjsBDBBt/DF7jwPo
CN5WjiJNc+XRYCoEHUxS8z6hzI2sQZfGjkbj1B8qgv2aXqDzlsOPvhj/GSl5f/kf
K28n8nqZAHlAVLrT+Ndghk6HjSSMzWaad4BJdSd3F6KLQcSVa2vclgg/UPfUUfAL
fG0elrBHuF6/o4nT1hZ2J1aN1o1dvzSpf69S5Km7u2Id
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:45:26 2024 by rpki-client on console-fra.rpki-client.org