Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/tZ6PA_tGZe9C-Sg6wuirf2FlRZM.roa
File: tZ6PA_tGZe9C-Sg6wuirf2FlRZM.roa (raw, json)
Hash identifier: uZ7aDG411d0GUZ+ylXixykUi8NNQ7GSS0R4wVCemGM4=
Subject key identifier: B5:9E:8F:03:FB:46:65:EF:42:F9:28:3A:C2:E8:AB:7F:61:65:45:93
Certificate issuer: /CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Certificate serial: 018CC34939D9B82D7B0FC6772706026434F3
Authority key identifier: 4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/tZ6PA_tGZe9C-Sg6wuirf2FlRZM.roa
Signing time: Mon 01 Jan 2024 04:30:05 +0000
ROA not before: Mon 01 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 63140
IP address blocks: 195.244.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:39:d9:b8:2d:7b:0f:c6:77:27:06:02:64:34:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d7683d6ea539fef1b6b6dbdd74a31d05e5f0a23
Validity
Not Before: Jan 1 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b59e8f03fb4665ef42f9283ac2e8ab7f61654593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dd:8a:be:4b:4c:05:ce:b7:59:63:fe:d8:04:
c9:03:ce:f3:66:72:1b:9e:45:a2:cf:23:a5:36:47:
1f:43:e2:a4:0c:3a:be:a2:98:4e:d5:ec:8b:85:d1:
b7:8f:c6:d2:61:0a:bc:ea:e1:30:9a:96:44:2b:3b:
51:0b:b1:47:c6:4a:20:62:49:93:17:39:ae:d3:e0:
44:30:ac:0b:49:f0:86:d7:18:82:17:76:9a:84:b3:
57:14:f9:73:11:77:6c:b3:62:ad:57:5f:74:c9:bd:
ad:88:f1:37:97:06:bc:92:81:0f:7c:b0:4d:77:e4:
e8:dd:c0:c0:e9:7e:15:73:34:df:12:ac:6c:23:99:
d0:c8:af:28:99:bc:71:55:f6:af:31:c2:42:1c:61:
f8:cc:c0:6e:f3:cf:24:c2:d6:17:1f:af:a0:c5:c8:
b5:e4:93:30:75:2b:8a:b1:b3:ef:7f:58:41:04:85:
35:c3:bc:86:57:48:40:e1:f4:3d:f5:5f:ec:52:71:
35:b4:82:23:95:47:63:51:2b:86:d2:eb:6b:d2:65:
6a:36:5c:e1:26:2a:32:7b:45:f1:4c:79:b7:6d:22:
e9:ee:c5:7a:fc:d9:e5:65:05:46:fe:1c:16:dc:0d:
2a:b8:c7:60:40:06:e0:33:61:92:4b:8c:1e:68:93:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9E:8F:03:FB:46:65:EF:42:F9:28:3A:C2:E8:AB:7F:61:65:45:93
X509v3 Authority Key Identifier:
keyid:4D:76:83:D6:EA:53:9F:EF:1B:6B:6D:BD:D7:4A:31:D0:5E:5F:0A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXaD1upTn-8ba22910ox0F5fCiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/tZ6PA_tGZe9C-Sg6wuirf2FlRZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e5195d-6698-4604-9114-68b3768f50dc/1/TXaD1upTn-8ba22910ox0F5fCiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.244.30.0/23
Signature Algorithm: sha256WithRSAEncryption
78:33:38:e7:d3:bd:c1:8a:79:6c:fd:b3:21:3e:20:b6:11:df:
b1:d9:cb:0b:f1:8b:ff:55:2a:4e:1e:5a:e3:04:cc:7f:a8:85:
de:c9:31:1a:16:b5:c3:7d:2c:6c:6c:48:d2:47:6f:25:09:75:
29:31:d9:33:47:df:9f:69:09:9b:f1:09:f9:73:b6:7c:63:9d:
93:97:f0:d8:a9:68:9b:9f:49:5c:56:c6:0f:9c:aa:51:b1:8b:
74:41:2d:ad:99:ca:e1:13:8c:ef:24:38:e7:3f:3f:34:59:35:
94:94:9a:a9:20:b1:70:60:14:6f:19:77:3e:ab:a4:fe:3a:c7:
70:ca:8e:98:c1:e7:41:43:09:83:fa:d8:ae:73:c2:d3:34:8b:
da:7a:35:5e:d3:b7:3c:10:d3:b0:ac:2c:7c:db:91:1d:b1:5a:
d7:84:3a:80:cc:a7:67:a1:4b:80:98:72:16:ea:ef:f7:e6:7f:
82:2b:ae:d1:5b:5e:37:da:db:ae:4d:d4:7f:b3:8c:23:41:31:
ec:38:d6:7e:ba:80:97:cf:13:b5:9d:ff:10:d1:dc:96:03:e4:
4b:05:7d:77:70:bb:b6:e3:62:42:93:1f:c4:1a:b1:d6:ca:65:
07:58:da:c5:a6:ae:0b:4f:34:06:5c:f2:ee:58:17:e0:a5:c3:
b5:d2:e4:2a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSTnZuC17D8Z3JwYCZDTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNzY4M2Q2ZWE1MzlmZWYxYjZiNmRiZGQ3NGEzMWQwNWU1
ZjBhMjMwHhcNMjQwMTAxMDQzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTllOGYwM2ZiNDY2NWVmNDJmOTI4M2FjMmU4YWI3ZjYxNjU0NTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsd2KvktMBc63WWP+2ATJA87zZnIb
nkWizyOlNkcfQ+KkDDq+ophO1eyLhdG3j8bSYQq86uEwmpZEKztRC7FHxkogYkmT
Fzmu0+BEMKwLSfCG1xiCF3aahLNXFPlzEXdss2KtV190yb2tiPE3lwa8koEPfLBN
d+To3cDA6X4VczTfEqxsI5nQyK8ombxxVfavMcJCHGH4zMBu888kwtYXH6+gxci1
5JMwdSuKsbPvf1hBBIU1w7yGV0hA4fQ99V/sUnE1tIIjlUdjUSuG0utr0mVqNlzh
Jioye0XxTHm3bSLp7sV6/NnlZQVG/hwW3A0quMdgQAbgM2GSS4weaJP3GwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLWejwP7RmXvQvkoOsLoq39hZUWTMB8GA1UdIwQY
MBaAFE12g9bqU5/vG2ttvddKMdBeXwojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFhhRDF1cFRuLThiYTIyOTEwb3gwRjVmQ2lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lNTE5NWQtNjY5OC00NjA0LTkxMTQt
NjhiMzc2OGY1MGRjLzEvdFo2UEFfdEdaZTlDLVNnNnd1aXJmMkZsUlpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lNTE5NWQtNjY5OC00NjA0LTkxMTQtNjhiMzc2OGY1MGRj
LzEvVFhhRDF1cFRuLThiYTIyOTEwb3gwRjVmQ2lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw/QeMA0G
CSqGSIb3DQEBCwUAA4IBAQB4Mzjn073Binls/bMhPiC2Ed+x2csL8Yv/VSpOHlrj
BMx/qIXeyTEaFrXDfSxsbEjSR28lCXUpMdkzR9+faQmb8Qn5c7Z8Y52Tl/DYqWib
n0lcVsYPnKpRsYt0QS2tmcrhE4zvJDjnPz80WTWUlJqpILFwYBRvGXc+q6T+Osdw
yo6YwedBQwmD+tiuc8LTNIvaejVe07c8ENOwrCx825EdsVrXhDqAzKdnoUuAmHIW
6u/35n+CK67RW1432tuuTdR/s4wjQTHsONZ+uoCXzxO1nf8Q0dyWA+RLBX13cLu2
42JCkx/EGrHWymUHWNrFpq4LTzQGXPLuWBfgpcO10uQq
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:34:05 2024 by rpki-client on console-ams.rpki-client.org