Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTJNzrG6mRCyCkzRUl--3uvmoXU.roa
File: pTJNzrG6mRCyCkzRUl--3uvmoXU.roa (raw, json)
Hash identifier: 3yxG3GGT1oD4gZop86MNEvpHCtmnWeTqHJs30ZoBc9I=
Subject key identifier: A5:32:4D:CE:B1:BA:99:10:B2:0A:4C:D1:52:5F:BE:DE:EB:E6:A1:75
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 018CC348FA604DA76BCBC8E95868856B26BA
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTJNzrG6mRCyCkzRUl--3uvmoXU.roa
Signing time: Mon 01 Jan 2024 04:29:48 +0000
ROA not before: Mon 01 Jan 2024 04:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199994
IP address blocks: 144.208.214.160/27 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:fa:60:4d:a7:6b:cb:c8:e9:58:68:85:6b:26:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 04:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5324dceb1ba9910b20a4cd1525fbedeebe6a175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:a0:09:b8:5a:8e:6c:a8:e3:7d:c6:bb:7c:
d8:2c:40:95:b4:fc:ed:df:7e:71:c1:60:31:c2:7e:
4b:5e:8b:a4:f1:ec:7f:1d:4e:6a:25:98:a4:6a:3e:
47:0b:9a:05:78:c4:28:13:13:e0:54:3f:3a:46:41:
7d:89:34:e9:b3:1d:00:a0:84:2a:55:84:84:5a:50:
93:d1:7f:ea:dd:c2:80:63:2e:e0:42:a2:97:60:1e:
f5:c7:38:ff:24:ad:c3:49:83:d7:d7:34:d1:37:cd:
12:0b:1c:ea:b3:7b:f3:63:7a:d7:ba:16:f4:c1:06:
a4:1e:71:d8:eb:d9:bb:6f:f5:ae:e9:a5:aa:56:5c:
f0:c4:c2:04:47:33:05:61:f9:cc:47:bd:39:47:58:
47:a5:a4:65:dc:3b:8c:f6:fa:5b:ef:b6:aa:6b:76:
4f:ae:03:02:46:2a:00:41:cf:d9:ac:aa:bd:ea:11:
2e:68:20:da:95:87:0c:89:a6:0c:ee:b6:ad:38:b0:
c7:03:f6:64:86:9e:0b:c1:b4:8e:ef:1a:c9:e1:05:
88:0d:af:49:bd:49:6c:c7:58:6d:76:91:2b:7f:41:
37:cc:fe:a0:db:3b:8d:b1:a5:3f:46:8a:3d:a3:a3:
60:ce:ba:6e:73:43:8b:90:8e:d1:ef:2d:0e:34:9d:
b6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:32:4D:CE:B1:BA:99:10:B2:0A:4C:D1:52:5F:BE:DE:EB:E6:A1:75
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTJNzrG6mRCyCkzRUl--3uvmoXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.208.214.160/27
Signature Algorithm: sha256WithRSAEncryption
4f:d7:37:82:d2:88:6a:32:c9:ad:cf:45:5c:c0:af:3a:b4:00:
4d:99:87:85:03:0f:02:fe:fb:25:53:32:99:71:78:78:d7:ac:
bd:d6:f8:01:8b:eb:be:e5:7a:cf:5a:69:33:31:98:d1:90:56:
38:9d:b7:08:90:e8:c6:83:0d:c8:75:0c:5a:b9:61:de:42:ed:
38:9a:23:59:07:c9:78:58:db:24:93:53:d5:88:51:53:6e:6b:
b0:8b:2d:c4:18:7e:37:f7:17:9a:2f:cc:af:ef:dd:0c:20:60:
69:24:4b:6a:fa:64:15:88:42:57:8f:f5:07:7d:73:f5:62:38:
9a:f3:93:fe:13:02:ab:66:a9:fa:d1:c4:80:cd:92:df:d9:c8:
a8:81:da:6d:f5:5d:92:00:62:c0:65:52:0b:31:7e:11:33:11:
30:06:a9:d5:f3:85:dd:12:a8:c1:88:8a:7d:65:3d:cd:1a:8e:
db:21:a5:fe:b9:19:24:3a:f8:de:c5:f4:f4:4d:12:c3:10:50:
bf:c7:a1:96:43:e3:33:65:bf:fb:08:08:3e:32:9a:94:e4:12:
51:2d:c4:9c:39:30:be:0a:aa:12:55:3a:d3:1a:43:c5:af:a9:
74:8b:5e:d3:7e:30:71:bd:d1:14:a6:b7:2b:7f:5d:17:0f:b6:
dd:ae:88:0e
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzDSPpgTadry8jpWGiFaya6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzlhZmViYWNlODk5YThlZTBiYjRmOGJiNDQ3NWZlMjQ3
YTE1MjgwHhcNMjQwMTAxMDQyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNTMyNGRjZWIxYmE5OTEwYjIwYTRjZDE1MjVmYmVkZWViZTZhMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJmgCbhajmyo433Gu3zYLECVtPzt
335xwWAxwn5LXouk8ex/HU5qJZikaj5HC5oFeMQoExPgVD86RkF9iTTpsx0AoIQq
VYSEWlCT0X/q3cKAYy7gQqKXYB71xzj/JK3DSYPX1zTRN80SCxzqs3vzY3rXuhb0
wQakHnHY69m7b/Wu6aWqVlzwxMIERzMFYfnMR705R1hHpaRl3DuM9vpb77aqa3ZP
rgMCRioAQc/ZrKq96hEuaCDalYcMiaYM7ratOLDHA/Zkhp4LwbSO7xrJ4QWIDa9J
vUlsx1htdpErf0E3zP6g2zuNsaU/Roo9o6Ngzrpuc0OLkI7R7y0ONJ22OQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFKUyTc6xupkQsgpM0VJfvt7r5qF1MB8GA1UdIwQY
MBaAFKU5r+us6Jmo7gu0+LtEdf4kehUoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYt
NzQxMzk1OTEzMTJlLzEvcFRKTnpyRzZtUkN5Q2t6UlVsLS0zdXZtb1hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85OGM0ZWUtMmY1OS00NWE3LWFkYjYtNzQxMzk1OTEzMTJl
LzEvcFRtdjY2em9tYWp1QzdUNHUwUjFfaVI2RlNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUFkNDWoDAN
BgkqhkiG9w0BAQsFAAOCAQEAT9c3gtKIajLJrc9FXMCvOrQATZmHhQMPAv77JVMy
mXF4eNesvdb4AYvrvuV6z1ppMzGY0ZBWOJ23CJDoxoMNyHUMWrlh3kLtOJojWQfJ
eFjbJJNT1YhRU25rsIstxBh+N/cXmi/Mr+/dDCBgaSRLavpkFYhCV4/1B31z9WI4
mvOT/hMCq2ap+tHEgM2S39nIqIHabfVdkgBiwGVSCzF+ETMRMAap1fOF3RKowYiK
fWU9zRqO2yGl/rkZJDr43sX09E0SwxBQv8ehlkPjM2W/+wgIPjKalOQSUS3EnDkw
vgqqElU60xpDxa+pdIte034wcb3RFKa3K39dFw+23a6IDg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 05:48:01 2024 by rpki-client on console-fra.rpki-client.org