Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/TEk_FA6o2pbt1p51ZxzSAe76zMo.roa
File: TEk_FA6o2pbt1p51ZxzSAe76zMo.roa (raw, json)
Hash identifier: 08xiBx17omWGybU4wMg/hoTFzhhTfqGKrTFbCpJLz9s=
Subject key identifier: 4C:49:3F:14:0E:A8:DA:96:ED:D6:9E:75:67:1C:D2:01:EE:FA:CC:CA
Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748
Certificate serial: 018CC500BAE075E6D708B304DA9F74A78DFF
Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/TEk_FA6o2pbt1p51ZxzSAe76zMo.roa
Signing time: Mon 01 Jan 2024 12:30:08 +0000
ROA not before: Mon 01 Jan 2024 12:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60162
IP address blocks: 213.128.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:ba:e0:75:e6:d7:08:b3:04:da:9f:74:a7:8d:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748
Validity
Not Before: Jan 1 12:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c493f140ea8da96edd69e75671cd201eefaccca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:12:20:a6:66:37:8f:e9:ea:f8:f7:3b:72:f3:
be:3e:40:8d:42:4e:6e:93:38:57:27:cc:c7:53:67:
d7:ff:62:8b:08:96:31:17:ad:83:13:12:f9:62:26:
83:4c:32:a2:6d:3a:dc:14:03:ea:05:6f:f5:dd:d7:
35:05:12:64:e1:96:06:7e:83:51:95:92:b2:3a:6a:
8b:5a:a7:ef:8e:67:b5:dc:f5:5c:7f:b3:b5:c8:7d:
57:c4:cd:60:29:68:bb:3f:74:8c:e5:f8:26:d8:f9:
c5:78:eb:9c:62:fa:ed:af:93:3c:33:20:bc:8e:e6:
ed:a4:c4:b7:5f:bb:5c:0b:5b:8a:58:d7:65:14:ad:
47:25:d1:6a:8d:6a:7c:c0:ce:de:b1:50:7f:6e:14:
26:ba:e1:41:cc:ec:e2:33:e6:f7:32:2e:f9:dc:eb:
42:85:be:71:72:6f:5d:a7:f0:33:4b:c9:7b:86:5d:
5f:c7:e5:52:99:d8:0f:7e:5a:75:06:58:1b:82:a8:
b6:07:35:6f:ff:bc:71:ac:fb:17:21:f7:f1:ff:a4:
f9:c1:e6:c8:e8:78:6f:99:5e:86:c7:04:d1:00:75:
26:c4:24:9a:69:61:8e:a0:6a:c4:91:9f:24:9f:c8:
e6:d4:4a:8a:36:d5:66:f0:f1:ae:0d:e6:94:79:61:
59:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:49:3F:14:0E:A8:DA:96:ED:D6:9E:75:67:1C:D2:01:EE:FA:CC:CA
X509v3 Authority Key Identifier:
keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/TEk_FA6o2pbt1p51ZxzSAe76zMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.128.208.0/24
Signature Algorithm: sha256WithRSAEncryption
be:78:6b:be:ba:9a:7d:5f:4d:f5:2e:3f:93:d0:ee:67:57:a3:
29:fc:93:bb:a3:fe:70:49:a6:65:48:0f:c5:ea:24:e1:91:bb:
bc:6d:42:0c:d0:0c:64:09:88:14:5f:df:ec:0b:12:50:21:e9:
99:a6:fc:69:67:4e:92:d5:c1:98:05:e6:16:2c:b6:12:b7:20:
7c:04:07:88:42:d5:c1:42:af:97:1e:a1:30:0a:09:4d:fa:b6:
98:59:c5:31:48:cb:17:33:a2:45:b7:75:8b:31:26:0d:91:48:
91:8c:ab:6d:d1:1e:d4:25:27:26:e1:ab:d9:72:7e:44:7e:55:
9a:c0:4e:c7:79:f3:5f:c0:50:11:5d:be:8c:76:03:33:6b:78:
32:b3:44:72:5c:cf:dd:25:c4:5d:96:91:1b:63:57:67:a6:5f:
15:9d:27:95:c5:ca:38:9d:74:b6:22:86:96:7d:17:2c:f1:c4:
72:f7:42:91:b1:b8:19:70:7a:c6:fb:d9:e6:c9:66:44:fc:18:
9f:ec:59:c5:54:ec:0e:c0:32:b3:fd:e6:3c:a8:d3:69:1e:95:
5c:ca:24:4d:43:f2:99:8c:4f:09:c2:2d:d1:84:ff:bf:a0:a1:
33:ad:40:b8:1a:7b:4e:d0:c3:50:12:4b:85:98:40:4a:1b:1f:
ac:10:0a:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFALrgdebXCLME2p90p43/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4
NzU3NDgwHhcNMjQwMTAxMTIzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzQ5M2YxNDBlYThkYTk2ZWRkNjllNzU2NzFjZDIwMWVlZmFjY2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhIgpmY3j+nq+Pc7cvO+PkCNQk5u
kzhXJ8zHU2fX/2KLCJYxF62DExL5YiaDTDKibTrcFAPqBW/13dc1BRJk4ZYGfoNR
lZKyOmqLWqfvjme13PVcf7O1yH1XxM1gKWi7P3SM5fgm2PnFeOucYvrtr5M8MyC8
jubtpMS3X7tcC1uKWNdlFK1HJdFqjWp8wM7esVB/bhQmuuFBzOziM+b3Mi753OtC
hb5xcm9dp/AzS8l7hl1fx+VSmdgPflp1Blgbgqi2BzVv/7xxrPsXIffx/6T5webI
6HhvmV6GxwTRAHUmxCSaaWGOoGrEkZ8kn8jm1EqKNtVm8PGuDeaUeWFZyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFExJPxQOqNqW7daedWcc0gHu+szKMB8GA1UdIwQY
MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt
N2YyMzMzNjA0OTk3LzEvVEVrX0ZBNm8ycGJ0MXA1MVp4elNBZTc2ek1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3
LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1YDQMA0G
CSqGSIb3DQEBCwUAA4IBAQC+eGu+upp9X031Lj+T0O5nV6Mp/JO7o/5wSaZlSA/F
6iThkbu8bUIM0AxkCYgUX9/sCxJQIemZpvxpZ06S1cGYBeYWLLYStyB8BAeIQtXB
Qq+XHqEwCglN+raYWcUxSMsXM6JFt3WLMSYNkUiRjKtt0R7UJScm4avZcn5EflWa
wE7HefNfwFARXb6MdgMza3gys0RyXM/dJcRdlpEbY1dnpl8VnSeVxco4nXS2IoaW
fRcs8cRy90KRsbgZcHrG+9nmyWZE/Bif7FnFVOwOwDKz/eY8qNNpHpVcyiRNQ/KZ
jE8Jwi3RhP+/oKEzrUC4GntO0MNQEkuFmEBKGx+sEApQ
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:57:28 2024 by rpki-client on console-ams.rpki-client.org