Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/iLlwFdbP182BpOXKkzU_wkSZ_vw.roa
File: iLlwFdbP182BpOXKkzU_wkSZ_vw.roa (raw, json)
Hash identifier: AsqQO3YQfQ2S2My4+7PsWHq/Nc3jXqrPizPZcBKWgjs=
Subject key identifier: 88:B9:70:15:D6:CF:D7:CD:81:A4:E5:CA:93:35:3F:C2:44:99:FE:FC
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B81F83D82D177415E487765E545F5
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/iLlwFdbP182BpOXKkzU_wkSZ_vw.roa
Signing time: Mon 01 Jan 2024 18:31:26 +0000
ROA not before: Mon 01 Jan 2024 18:31:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31165
IP address blocks: 81.168.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:81:f8:3d:82:d1:77:41:5e:48:77:65:e5:45:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88b97015d6cfd7cd81a4e5ca93353fc24499fefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:94:a4:1c:5f:43:fa:68:66:ee:ec:03:90:cf:
24:ef:0a:f2:75:6e:8a:1e:7a:c1:d7:7d:31:6a:b8:
b4:57:a9:7e:83:2c:93:83:89:e6:ba:4f:48:c5:11:
04:87:b0:6c:bf:95:60:b7:bd:bc:d2:c8:36:92:5c:
db:2e:d0:09:0a:22:ad:4a:db:a4:31:19:53:cc:06:
9e:af:eb:44:a0:5d:b6:f9:b8:43:90:07:7f:c3:5b:
6f:ba:ea:51:8f:2c:3b:5a:bb:dc:3d:8b:82:b6:ca:
e4:3f:01:95:3a:85:bc:7b:6a:a2:4d:1e:47:53:19:
dc:59:f3:c0:18:86:aa:2f:6b:ea:4b:9d:bf:41:24:
53:55:72:7f:ba:36:dd:50:2a:73:34:68:08:1a:21:
07:fc:71:0c:33:96:28:f9:bf:40:83:5f:e4:bf:77:
ac:0f:f1:de:96:f9:cd:73:13:d3:a1:0d:4f:cb:ab:
7e:fd:b9:a0:39:29:d7:92:68:93:53:ab:21:e1:f3:
7d:d1:36:87:75:dd:cf:3e:aa:1f:45:45:5e:45:cb:
b9:d6:83:4f:66:d2:fa:26:46:fd:55:6a:00:56:a8:
19:26:c3:8d:17:0d:c2:03:b3:1a:d1:15:59:75:72:
1c:ab:2f:99:13:f1:73:12:21:21:e0:0b:62:c0:1f:
21:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:B9:70:15:D6:CF:D7:CD:81:A4:E5:CA:93:35:3F:C2:44:99:FE:FC
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/iLlwFdbP182BpOXKkzU_wkSZ_vw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.254.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:da:9b:5b:6a:47:f5:2e:c3:cd:6c:76:e3:5f:bc:91:a8:7c:
18:1c:95:ea:b4:81:c7:04:46:7f:ec:56:2b:95:ab:8d:e3:96:
4a:e2:d2:f8:8d:a8:b4:ed:4c:73:5a:2f:87:34:0d:9e:39:42:
7e:3e:18:03:33:c6:c4:ba:2c:57:17:f5:07:c7:26:e0:b2:aa:
f6:be:fa:6f:c3:72:ef:ec:bf:91:41:28:f8:fc:f2:d0:39:08:
e0:bc:e9:20:ef:e6:0d:f7:c6:8c:23:1d:65:8a:64:64:a6:c7:
4a:28:b4:a0:d0:ac:e1:76:08:35:a2:8e:b7:3b:2c:ea:aa:72:
3c:fa:f5:2e:87:c3:85:1a:27:a8:66:48:5f:96:c3:05:ea:46:
5c:35:c8:3e:18:a3:64:0f:5b:a4:81:d3:2b:c9:28:9e:70:d4:
76:34:b3:cb:3c:a6:bf:49:1b:18:bf:1b:15:c5:56:52:b6:52:
4e:54:9e:e9:d7:fc:4b:51:c8:43:11:91:c6:9d:7b:c4:5f:df:
fc:71:ea:57:0c:aa:17:ff:4e:5a:4a:b6:bf:78:75:1a:8f:1f:
a9:05:9a:ed:19:93:04:82:07:c6:d2:5f:8b:69:fc:77:08:e3:
86:18:66:da:a6:84:d7:34:70:7c:7f:37:5f:07:66:78:99:28:
07:8f:6a:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGS4H4PYLRd0FeSHdl5UX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTU0NDk5OTc3Mjc4YTc1NTcwYjM0MDNmNGQzYWEwMGIx
YjM2ZTgwHhcNMjQwMTAxMTgzMTI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGI5NzAxNWQ2Y2ZkN2NkODFhNGU1Y2E5MzM1M2ZjMjQ0OTlmZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5SkHF9D+mhm7uwDkM8k7wrydW6K
HnrB130xari0V6l+gyyTg4nmuk9IxREEh7Bsv5Vgt7280sg2klzbLtAJCiKtStuk
MRlTzAaer+tEoF22+bhDkAd/w1tvuupRjyw7WrvcPYuCtsrkPwGVOoW8e2qiTR5H
UxncWfPAGIaqL2vqS52/QSRTVXJ/ujbdUCpzNGgIGiEH/HEMM5Yo+b9Ag1/kv3es
D/HelvnNcxPToQ1Py6t+/bmgOSnXkmiTU6sh4fN90TaHdd3PPqofRUVeRcu51oNP
ZtL6Jkb9VWoAVqgZJsONFw3CA7Ma0RVZdXIcqy+ZE/FzEiEh4AtiwB8hhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIi5cBXWz9fNgaTlypM1P8JEmf78MB8GA1UdIwQY
MBaAFLmVRJmXcninVXCzQD9NOqALGzboMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAt
MDI0YjE2NTVjMjQ3LzEvaUxsd0ZkYlAxODJCcE9YS2t6VV93a1NaX3Z3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83ODg4MDMtYmUxMi00MzNmLWE4ZDAtMDI0YjE2NTVjMjQ3
LzEvdVpWRW1aZHllS2RWY0xOQVAwMDZvQXNiTnVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUaj+MA0G
CSqGSIb3DQEBCwUAA4IBAQAq2ptbakf1LsPNbHbjX7yRqHwYHJXqtIHHBEZ/7FYr
lauN45ZK4tL4jai07UxzWi+HNA2eOUJ+PhgDM8bEuixXF/UHxybgsqr2vvpvw3Lv
7L+RQSj4/PLQOQjgvOkg7+YN98aMIx1limRkpsdKKLSg0Kzhdgg1oo63OyzqqnI8
+vUuh8OFGieoZkhflsMF6kZcNcg+GKNkD1ukgdMrySiecNR2NLPLPKa/SRsYvxsV
xVZStlJOVJ7p1/xLUchDEZHGnXvEX9/8cepXDKoX/05aSra/eHUajx+pBZrtGZME
ggfG0l+Lafx3COOGGGbapoTXNHB8fzdfB2Z4mSgHj2qC
-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org