Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/tKJvDrTbPo6mtN887xHq1ApEaKQ.roa
File: tKJvDrTbPo6mtN887xHq1ApEaKQ.roa (raw, json)
Hash identifier: H5pfrhbIbrfftmUGxtYT8tpQ6zdNFv/BArKLQvoJsbc=
Subject key identifier: B4:A2:6F:0E:B4:DB:3E:8E:A6:B4:DF:3C:EF:11:EA:D4:0A:44:68:A4
Certificate issuer: /CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Certificate serial: 018CC6B8F856C0D867067C6F37CDFD90A5DB
Authority key identifier: 81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/tKJvDrTbPo6mtN887xHq1ApEaKQ.roa
Signing time: Mon 01 Jan 2024 20:31:00 +0000
ROA not before: Mon 01 Jan 2024 20:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39115
IP address blocks: 77.247.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f8:56:c0:d8:67:06:7c:6f:37:cd:fd:90:a5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=815780532ed29a3f80e7ba414efcb379d9ec97c9
Validity
Not Before: Jan 1 20:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4a26f0eb4db3e8ea6b4df3cef11ead40a4468a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:cf:e4:5b:25:73:30:fc:fa:34:9d:05:6e:b7:
9c:68:aa:a2:68:a3:aa:12:df:15:ee:48:2f:c8:f4:
a6:02:c4:74:1c:83:ec:18:df:e9:50:61:06:1b:ce:
02:38:b8:59:09:e0:8f:c9:a4:3d:43:4b:7a:f7:da:
63:c6:c5:21:8d:8f:f8:53:07:f1:9a:fd:60:3e:1f:
d2:e7:ed:ad:79:68:41:d1:99:6e:1e:3a:68:8f:5b:
c1:72:24:c5:3c:95:68:6f:c3:88:25:ea:4e:0b:af:
fb:7f:19:33:5b:2e:79:50:8d:7e:58:cc:34:c0:34:
6b:d9:ef:e4:4f:83:e9:29:52:cd:d4:a3:57:91:f2:
4f:be:25:30:97:da:e7:ed:0e:6f:c4:54:ce:39:4b:
ad:07:22:a7:c9:a1:9d:72:a3:d4:31:cb:95:ad:c2:
51:35:cb:a7:9c:c7:7e:42:59:b5:3e:64:7e:e6:34:
8f:c3:da:df:cc:dd:e2:59:f4:3a:06:94:db:d6:8f:
77:53:9d:82:9c:81:fc:7a:06:16:4c:9c:fa:f2:54:
db:cd:37:11:ee:cf:d6:0e:c1:b8:83:da:fd:83:f6:
e6:a9:cf:5b:b4:c9:8e:fd:7b:69:e8:37:9c:96:82:
a6:21:5a:d5:07:be:c5:e6:66:65:a3:4d:46:ff:37:
ae:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:A2:6F:0E:B4:DB:3E:8E:A6:B4:DF:3C:EF:11:EA:D4:0A:44:68:A4
X509v3 Authority Key Identifier:
keyid:81:57:80:53:2E:D2:9A:3F:80:E7:BA:41:4E:FC:B3:79:D9:EC:97:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gVeAUy7Smj-A57pBTvyzednsl8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/tKJvDrTbPo6mtN887xHq1ApEaKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/de31a6-aaa3-409d-8d4f-f61554c6c145/1/gVeAUy7Smj-A57pBTvyzednsl8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.247.14.0/24
Signature Algorithm: sha256WithRSAEncryption
83:03:15:e7:6b:6a:54:dd:9f:cf:cc:8c:3e:d3:6f:2e:32:64:
fc:c2:b4:22:e9:74:65:e8:27:73:9c:96:e5:0a:72:bf:f7:be:
e3:fa:43:fb:73:b4:ed:46:aa:00:27:b6:78:6a:22:0d:35:c0:
b5:1a:0f:e8:b5:f0:71:7d:2f:fd:97:f9:f6:a3:0c:7d:02:6a:
ef:9c:e5:d9:04:f6:67:f1:f5:ee:e8:84:af:a2:d1:2e:78:0d:
c0:b6:f1:ec:59:25:0f:82:0b:b7:c6:89:8b:21:66:c0:f0:c9:
22:c2:dd:e6:d0:66:78:83:01:ee:69:8f:36:a0:2d:3b:b5:86:
e7:12:91:36:c8:cb:73:e5:42:2c:2e:2b:7d:54:17:98:9c:86:
ec:ce:39:60:c3:75:83:29:23:a8:81:eb:4d:1f:3b:bd:fe:99:
e4:46:f1:4a:fe:bf:1f:7d:5f:48:cf:48:1e:dd:f2:ea:46:77:
8e:aa:67:36:29:a8:14:93:20:d4:4d:96:ad:c3:ef:db:db:05:
e5:73:ed:43:ad:eb:bc:0e:3a:db:dc:80:4e:7b:37:5b:8c:d9:
20:34:17:40:06:6b:b0:64:bf:de:75:ce:95:d6:72:79:26:74:
98:f9:26:7a:25:94:d1:64:34:b1:e8:4d:97:4b:0a:43:b8:87:
2c:33:e8:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuPhWwNhnBnxvN839kKXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxNTc4MDUzMmVkMjlhM2Y4MGU3YmE0MTRlZmNiMzc5ZDll
Yzk3YzkwHhcNMjQwMTAxMjAzMTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGEyNmYwZWI0ZGIzZThlYTZiNGRmM2NlZjExZWFkNDBhNDQ2OGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgc/kWyVzMPz6NJ0FbrecaKqiaKOq
Et8V7kgvyPSmAsR0HIPsGN/pUGEGG84COLhZCeCPyaQ9Q0t699pjxsUhjY/4Uwfx
mv1gPh/S5+2teWhB0ZluHjpoj1vBciTFPJVob8OIJepOC6/7fxkzWy55UI1+WMw0
wDRr2e/kT4PpKVLN1KNXkfJPviUwl9rn7Q5vxFTOOUutByKnyaGdcqPUMcuVrcJR
NcunnMd+Qlm1PmR+5jSPw9rfzN3iWfQ6BpTb1o93U52CnIH8egYWTJz68lTbzTcR
7s/WDsG4g9r9g/bmqc9btMmO/Xtp6DecloKmIVrVB77F5mZlo01G/zeu0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLSibw602z6OprTfPO8R6tQKRGikMB8GA1UdIwQY
MBaAFIFXgFMu0po/gOe6QU78s3nZ7JfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYt
ZjYxNTU0YzZjMTQ1LzEvdEtKdkRyVGJQbzZtdE44ODd4SHExQXBFYUtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9kZTMxYTYtYWFhMy00MDlkLThkNGYtZjYxNTU0YzZjMTQ1
LzEvZ1ZlQVV5N1Ntai1BNTdwQlR2eXplZG5zbDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATfcOMA0G
CSqGSIb3DQEBCwUAA4IBAQCDAxXna2pU3Z/PzIw+028uMmT8wrQi6XRl6CdznJbl
CnK/977j+kP7c7TtRqoAJ7Z4aiINNcC1Gg/otfBxfS/9l/n2owx9AmrvnOXZBPZn
8fXu6ISvotEueA3AtvHsWSUPggu3xomLIWbA8Mkiwt3m0GZ4gwHuaY82oC07tYbn
EpE2yMtz5UIsLit9VBeYnIbszjlgw3WDKSOogetNHzu9/pnkRvFK/r8ffV9Iz0ge
3fLqRneOqmc2KagUkyDUTZatw+/b2wXlc+1Dreu8Djrb3IBOezdbjNkgNBdABmuw
ZL/edc6V1nJ5JnSY+SZ6JZTRZDSx6E2XSwpDuIcsM+jv
-----END CERTIFICATE-----
Generated at Fri Jun 7 15:41:03 2024 by rpki-client on console-fra.rpki-client.org