Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0ajXqUe1RH5AiNl2BmcbbaXMkkU.roa
File: 0ajXqUe1RH5AiNl2BmcbbaXMkkU.roa (raw, json)
Hash identifier: 6583MAWzdrncQ6gg9ZZNT3+LbZAfBtuGoqf64TVeLb0=
Subject key identifier: D1:A8:D7:A9:47:B5:44:7E:40:88:D9:76:06:67:1B:6D:A5:CC:92:45
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC72754D6589A0824D470C18B68C551EB
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0ajXqUe1RH5AiNl2BmcbbaXMkkU.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207459
IP address blocks: 213.238.167.0/24 maxlen: 24
213.238.182.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:54:d6:58:9a:08:24:d4:70:c1:8b:68:c5:51:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d1a8d7a947b5447e4088d97606671b6da5cc9245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f9:4f:de:4f:77:68:18:c2:fc:ff:08:61:2b:
c3:4e:fc:70:a8:8c:0d:b5:b3:d3:74:ef:6f:5e:61:
d1:8b:21:40:b9:9d:5e:79:92:10:f1:2b:c8:0d:7a:
47:bd:bd:b2:74:62:ef:51:74:6a:38:0b:8f:85:82:
41:66:b3:a7:c7:31:c4:b0:4a:a4:96:66:e4:e8:73:
d9:13:f0:27:6c:d5:20:9f:3f:d3:01:4b:ea:dd:98:
e6:24:11:42:04:ad:77:35:6c:40:73:56:c3:22:fd:
66:64:eb:37:4a:71:e2:55:27:1b:c5:d5:55:c1:b8:
d6:13:9c:bc:a0:19:2d:88:43:37:fa:79:f1:74:47:
5b:c4:5f:dd:15:d0:59:0e:70:68:34:ee:e1:77:dc:
54:5b:d7:20:ea:2a:3b:6e:f9:2d:37:53:f4:8c:ee:
63:e7:b9:8f:89:c5:f9:52:07:cb:88:95:ef:a3:24:
4d:8d:c3:8b:fd:ad:ab:28:22:9a:77:de:d3:c1:25:
78:4f:91:80:20:f2:6f:c0:45:65:63:bb:d5:8f:ce:
b8:9d:d4:5b:c9:03:0e:cc:20:10:db:22:c9:e6:26:
3a:1d:e2:12:de:36:5f:54:42:34:93:51:4d:1e:9d:
67:0e:97:00:d3:98:99:10:f9:20:aa:da:68:92:f3:
42:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A8:D7:A9:47:B5:44:7E:40:88:D9:76:06:67:1B:6D:A5:CC:92:45
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/0ajXqUe1RH5AiNl2BmcbbaXMkkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.167.0/24
213.238.182.0/24
Signature Algorithm: sha256WithRSAEncryption
83:a6:43:c9:40:9f:c9:47:c9:44:9e:09:f8:fd:e5:ae:d9:8f:
ac:d0:a1:32:f4:13:95:7b:04:c2:f3:b2:b3:4b:7e:50:83:11:
a1:8a:3f:0d:dc:da:ff:25:03:bb:4a:fa:5b:58:64:ef:78:65:
01:30:30:c8:5a:af:8a:9b:9a:9a:1a:a6:e9:9e:c8:f1:ff:13:
de:f1:15:a1:40:8a:17:19:62:9c:c8:42:f5:b7:46:65:45:3e:
73:e5:30:37:42:00:d6:96:66:67:c6:04:64:28:e3:10:94:0f:
88:67:74:6a:f2:25:a3:d9:0c:d5:88:b1:d4:78:8c:ae:da:df:
6d:c6:1d:03:0c:bc:c6:92:ea:35:33:c4:ef:cd:82:ce:6c:ca:
56:ff:60:b8:47:70:d9:99:19:40:76:60:77:de:e7:fa:34:9d:
d0:e3:d1:f7:ea:ad:64:0b:2d:2d:ba:02:f3:42:e3:8d:29:9d:
f2:e9:e4:49:f5:2c:40:8b:49:52:e8:61:7b:6e:f3:13:38:73:
bb:93:9c:50:f7:ac:97:a3:7c:71:3c:20:b7:9f:95:3f:17:5e:
71:98:a6:8f:f2:f5:03:5f:73:21:12:ec:da:ee:26:86:a3:bd:
c2:3a:a8:2c:98:8c:db:f7:b2:cb:a5:4b:ea:f1:ee:95:92:43:
38:e5:b7:5a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHJ1TWWJoIJNRwwYtoxVHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Y2JkYTc4YjFkMWI2MTNkZjU2NWZmOTk3MDBiNmFlZTk0
MGRlM2YwHhcNMjQwMTAxMjIzMTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMWE4ZDdhOTQ3YjU0NDdlNDA4OGQ5NzYwNjY3MWI2ZGE1Y2M5MjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/lP3k93aBjC/P8IYSvDTvxwqIwN
tbPTdO9vXmHRiyFAuZ1eeZIQ8SvIDXpHvb2ydGLvUXRqOAuPhYJBZrOnxzHEsEqk
lmbk6HPZE/AnbNUgnz/TAUvq3ZjmJBFCBK13NWxAc1bDIv1mZOs3SnHiVScbxdVV
wbjWE5y8oBktiEM3+nnxdEdbxF/dFdBZDnBoNO7hd9xUW9cg6io7bvktN1P0jO5j
57mPicX5UgfLiJXvoyRNjcOL/a2rKCKad97TwSV4T5GAIPJvwEVlY7vVj864ndRb
yQMOzCAQ2yLJ5iY6HeIS3jZfVEI0k1FNHp1nDpcA05iZEPkgqtpokvNCVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNGo16lHtUR+QIjZdgZnG22lzJJFMB8GA1UdIwQY
MBaAFFTL2nix0bYT31Zf+ZcAtq7pQN4/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYt
Y2QzMTYxNWQwMWE5LzEvMGFqWHFVZTFSSDVBaU5sMkJtY2JiYVhNa2tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82ZDYxZDktMGJmNy00NGJiLWI4MGYtY2QzMTYxNWQwMWE5
LzEvVk12YWVMSFJ0aFBmVmxfNWx3QzJydWxBM2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1e6nAwQA
1e62MA0GCSqGSIb3DQEBCwUAA4IBAQCDpkPJQJ/JR8lEngn4/eWu2Y+s0KEy9BOV
ewTC87KzS35QgxGhij8N3Nr/JQO7SvpbWGTveGUBMDDIWq+Km5qaGqbpnsjx/xPe
8RWhQIoXGWKcyEL1t0ZlRT5z5TA3QgDWlmZnxgRkKOMQlA+IZ3Rq8iWj2QzViLHU
eIyu2t9txh0DDLzGkuo1M8TvzYLObMpW/2C4R3DZmRlAdmB33uf6NJ3Q49H36q1k
Cy0tugLzQuONKZ3y6eRJ9SxAi0lS6GF7bvMTOHO7k5xQ96yXo3xxPCC3n5U/F15x
mKaP8vUDX3MhEuza7iaGo73COqgsmIzb97LLpUvq8e6VkkM45bda
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:11:26 2024 by rpki-client on console-fra.rpki-client.org