Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/TlSYXVDdJ6uk3JaNr8SrNBujz-Q.roa
File: TlSYXVDdJ6uk3JaNr8SrNBujz-Q.roa (raw, json)
Hash identifier: 4eGq0fb3FLeC8ZA4hLLfInVKkqP6ws4gIuIwv3AL/p0=
Subject key identifier: 4E:54:98:5D:50:DD:27:AB:A4:DC:96:8D:AF:C4:AB:34:1B:A3:CF:E4
Certificate issuer: /CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Certificate serial: 018DF3D8690617BE84C7052C2D79472F0347
Authority key identifier: EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/TlSYXVDdJ6uk3JaNr8SrNBujz-Q.roa
Signing time: Thu 29 Feb 2024 07:51:02 +0000
ROA not before: Thu 29 Feb 2024 07:51:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60195
IP address blocks: 91.238.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f3:d8:69:06:17:be:84:c7:05:2c:2d:79:47:2f:03:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef2a8ec03eec3bcfc33cf90f1f4f8e7e90234e69
Validity
Not Before: Feb 29 07:51:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4e54985d50dd27aba4dc968dafc4ab341ba3cfe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8c:4f:db:2c:e0:a1:e8:31:8e:30:3b:4e:c1:
20:c1:3b:e2:3c:56:64:0b:1d:ad:9d:ff:9f:9f:a3:
22:24:35:ca:df:9f:63:d0:d2:6e:c8:a3:b0:1d:db:
b6:a2:0e:98:18:06:b1:73:5c:98:6a:67:41:1b:5d:
ca:cf:cd:89:d7:f1:4a:1d:86:d2:fe:d8:3e:60:1e:
1a:ad:b0:bc:93:ae:37:08:c5:96:f0:45:2e:a9:66:
e5:e7:59:83:90:b5:99:4f:70:62:89:8e:d8:93:b4:
f7:4a:57:eb:53:95:ac:94:a4:ac:68:00:95:a5:48:
01:dc:dd:66:88:1e:a8:1d:15:7b:c3:e6:91:33:12:
dd:45:8f:aa:fe:50:55:ab:e3:63:ee:9f:ea:20:70:
88:f2:7d:08:f2:cd:96:c2:a8:a9:c6:ed:6b:49:61:
cf:80:e2:ec:01:87:62:5b:17:32:38:e1:c4:bd:4f:
bd:b0:ab:a2:11:c3:8e:48:40:a3:f9:be:c0:7d:5d:
2b:4f:f4:04:e0:d0:ae:af:70:0f:67:e5:b7:02:10:
9f:a2:7d:b9:50:c9:47:6e:a5:ac:51:d0:8e:40:55:
b5:5c:99:f4:60:cc:6d:02:0f:81:fb:5c:2a:dd:bd:
bc:db:c7:72:d6:af:70:11:7e:eb:58:4e:c1:be:24:
c7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:54:98:5D:50:DD:27:AB:A4:DC:96:8D:AF:C4:AB:34:1B:A3:CF:E4
X509v3 Authority Key Identifier:
keyid:EF:2A:8E:C0:3E:EC:3B:CF:C3:3C:F9:0F:1F:4F:8E:7E:90:23:4E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yqOwD7sO8_DPPkPH0-OfpAjTmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/TlSYXVDdJ6uk3JaNr8SrNBujz-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/7d83b9-1946-4b47-99de-05c06796e938/1/7yqOwD7sO8_DPPkPH0-OfpAjTmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.166.0/23
Signature Algorithm: sha256WithRSAEncryption
95:e3:9d:63:3f:60:5c:7b:90:bf:58:08:f4:08:3c:49:68:7d:
2f:9c:2d:22:da:3b:d2:cd:c7:3c:2e:ce:f8:9f:71:56:74:bb:
b6:74:6c:b1:8d:8f:e7:eb:d1:83:86:22:92:e5:80:3d:fa:81:
90:4e:fb:8b:e8:2b:2c:62:81:be:c4:03:83:97:ec:2f:47:3d:
9e:b3:d9:50:da:f5:a0:78:b5:7c:b9:78:a7:f2:a4:0a:cf:2e:
58:5f:5a:1e:2b:77:6e:e9:29:1d:f0:2f:e2:fe:0b:02:84:94:
d9:41:76:6b:33:3f:d4:9c:f3:c4:6a:3c:69:88:49:5d:30:67:
8e:d9:6f:c6:94:8c:0d:c1:38:f0:21:69:e9:d5:c1:33:33:7f:
d2:c5:ab:f8:fd:2d:c2:57:e5:80:ea:1e:c9:af:94:bb:a4:44:
bb:d8:77:6f:f2:5e:f1:ad:8f:76:65:4f:23:3a:69:6e:97:5d:
28:39:b2:3e:ac:23:90:c6:36:14:ec:9c:d7:57:6d:23:cc:82:
cf:c1:da:f0:b4:6e:73:26:58:e2:cf:1b:9a:7e:16:13:e6:7c:
5f:1e:0b:3d:32:bd:13:98:df:72:cc:1c:d1:30:84:9b:f0:af:
45:b3:cb:63:e0:23:d6:ba:fc:32:5d:61:d4:86:f6:3e:35:84:
17:e8:7f:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3z2GkGF76ExwUsLXlHLwNHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMmE4ZWMwM2VlYzNiY2ZjMzNjZjkwZjFmNGY4ZTdlOTAy
MzRlNjkwHhcNMjQwMjI5MDc1MTAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZTU0OTg1ZDUwZGQyN2FiYTRkYzk2OGRhZmM0YWIzNDFiYTNjZmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14xP2yzgoegxjjA7TsEgwTviPFZk
Cx2tnf+fn6MiJDXK359j0NJuyKOwHdu2og6YGAaxc1yYamdBG13Kz82J1/FKHYbS
/tg+YB4arbC8k643CMWW8EUuqWbl51mDkLWZT3BiiY7Yk7T3SlfrU5WslKSsaACV
pUgB3N1miB6oHRV7w+aRMxLdRY+q/lBVq+Nj7p/qIHCI8n0I8s2Wwqipxu1rSWHP
gOLsAYdiWxcyOOHEvU+9sKuiEcOOSECj+b7AfV0rT/QE4NCur3APZ+W3AhCfon25
UMlHbqWsUdCOQFW1XJn0YMxtAg+B+1wq3b2828dy1q9wEX7rWE7BviTHxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE5UmF1Q3SerpNyWja/EqzQbo8/kMB8GA1UdIwQY
MBaAFO8qjsA+7DvPwzz5Dx9Pjn6QI05pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUt
MDVjMDY3OTZlOTM4LzEvVGxTWVhWRGRKNnVrM0phTnI4U3JOQnVqei1RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS83ZDgzYjktMTk0Ni00YjQ3LTk5ZGUtMDVjMDY3OTZlOTM4
LzEvN3lxT3dEN3NPOF9EUFBrUEgwLU9mcEFqVG1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+6mMA0G
CSqGSIb3DQEBCwUAA4IBAQCV451jP2Bce5C/WAj0CDxJaH0vnC0i2jvSzcc8Ls74
n3FWdLu2dGyxjY/n69GDhiKS5YA9+oGQTvuL6CssYoG+xAODl+wvRz2es9lQ2vWg
eLV8uXin8qQKzy5YX1oeK3du6Skd8C/i/gsChJTZQXZrMz/UnPPEajxpiEldMGeO
2W/GlIwNwTjwIWnp1cEzM3/Sxav4/S3CV+WA6h7Jr5S7pES72Hdv8l7xrY92ZU8j
Omlul10oObI+rCOQxjYU7JzXV20jzILPwdrwtG5zJljizxuafhYT5nxfHgs9Mr0T
mN9yzBzRMISb8K9Fs8tj4CPWuvwyXWHUhvY+NYQX6H8i
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:53:39 2024 by rpki-client on console-ams.rpki-client.org