Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/tLlsrXPucVa_-KL_kqteq5umazo.roa
File: tLlsrXPucVa_-KL_kqteq5umazo.roa (raw, json)
Hash identifier: 5iojssIKUtrEc5pHmICim3oVd3J6Th9cZsZtBMioT0s=
Subject key identifier: B4:B9:6C:AD:73:EE:71:56:BF:F8:A2:FF:92:AB:5E:AB:9B:A6:6B:3A
Certificate issuer: /CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Certificate serial: 018CC4245421846218E6C45978B5F9C81116
Authority key identifier: 62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/tLlsrXPucVa_-KL_kqteq5umazo.roa
Signing time: Mon 01 Jan 2024 08:29:24 +0000
ROA not before: Mon 01 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39688
IP address blocks: 95.161.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:54:21:84:62:18:e6:c4:59:78:b5:f9:c8:11:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6228e7e01fada49c1a52fa13f3626c41b41a51b8
Validity
Not Before: Jan 1 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4b96cad73ee7156bff8a2ff92ab5eab9ba66b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d7:e0:74:76:c7:b8:5b:82:4e:14:c9:ec:09:
89:c0:07:d9:1c:e2:0e:da:18:a9:7f:a8:de:e9:a3:
6c:d3:c4:81:f1:3b:fe:ba:e0:6f:2a:6c:2e:7b:d4:
4f:6f:f6:67:b7:51:ce:4e:58:0e:e1:a7:f4:6b:02:
62:55:5a:d4:6c:4b:ad:67:3b:61:ce:83:ec:16:8f:
19:a5:64:f6:09:36:53:c1:42:d3:1a:53:7d:e8:61:
70:6a:47:3c:09:d6:2c:f3:22:27:8c:5d:26:8d:d7:
d0:32:2d:55:61:90:2a:16:6f:69:5c:72:64:36:19:
66:16:6a:40:3a:fc:c0:2b:19:6d:a0:7f:ef:c6:e2:
8e:9a:8f:ec:d3:70:cc:e1:15:77:8f:50:9b:bd:8b:
08:4e:1e:14:19:84:56:b5:0e:7b:b5:56:8c:aa:3c:
b2:aa:21:c0:fe:4d:17:58:d0:78:ac:ce:c2:0e:8c:
4e:aa:d5:a2:cd:11:64:26:fb:9e:5a:58:51:7e:f3:
92:d4:0b:43:c1:2d:4f:d6:97:b8:12:63:eb:11:fb:
38:20:53:0a:ed:29:6d:91:72:bd:02:20:61:b5:a4:
e0:cb:da:f3:a7:e6:39:ee:72:77:ae:3c:57:38:f3:
d9:32:52:ea:a9:7d:81:d8:05:ba:a7:91:d9:0a:37:
f5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B9:6C:AD:73:EE:71:56:BF:F8:A2:FF:92:AB:5E:AB:9B:A6:6B:3A
X509v3 Authority Key Identifier:
keyid:62:28:E7:E0:1F:AD:A4:9C:1A:52:FA:13:F3:62:6C:41:B4:1A:51:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yijn4B-tpJwaUvoT82JsQbQaUbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/tLlsrXPucVa_-KL_kqteq5umazo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/baaff3-aeb4-4616-8fb5-76741652510d/1/Yijn4B-tpJwaUvoT82JsQbQaUbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.161.82.0/24
Signature Algorithm: sha256WithRSAEncryption
59:15:f1:f4:06:ef:11:3d:f2:82:d4:e3:b8:7f:1e:53:f9:d1:
b0:e9:f4:fc:a1:41:89:d0:44:17:4a:33:aa:54:2e:b8:7f:4b:
68:b0:22:88:65:62:36:16:9c:fb:31:83:78:3c:a7:2f:08:af:
ec:1b:7b:25:73:ff:17:ec:58:0b:6f:20:4e:8c:d8:c7:54:05:
d7:91:f3:89:29:bc:83:b8:43:b8:ab:64:d0:ef:b7:da:01:50:
8b:55:e3:e8:0a:fc:fd:1c:2d:de:db:ce:03:be:8c:69:46:dd:
bc:ba:ab:82:de:b9:f3:d0:14:6e:08:84:e5:16:66:86:ba:ba:
19:4d:29:dd:0a:90:41:7a:c2:ba:3d:41:1a:4d:d7:6d:e0:6c:
99:10:ab:d0:0f:9c:eb:cd:97:ef:42:30:ac:e2:67:c3:8a:99:
96:38:85:fb:3d:b9:76:32:46:b7:ce:0a:12:23:47:2d:83:a3:
39:45:47:ab:17:26:22:c8:cf:6a:2b:5b:d2:dd:50:46:95:e8:
91:02:b5:ab:9b:dc:f8:87:47:a0:3a:4c:73:50:b5:b1:26:98:
bf:8f:dd:7c:f1:56:17:43:0a:c5:dd:24:01:e3:61:51:4d:03:
09:4c:fc:6c:2c:31:04:e8:2d:fa:25:d5:6c:95:51:ba:05:17:
34:40:87:84
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJFQhhGIY5sRZeLX5yBEWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyMjhlN2UwMWZhZGE0OWMxYTUyZmExM2YzNjI2YzQxYjQx
YTUxYjgwHhcNMjQwMTAxMDgyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGI5NmNhZDczZWU3MTU2YmZmOGEyZmY5MmFiNWVhYjliYTY2YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNfgdHbHuFuCThTJ7AmJwAfZHOIO
2hipf6je6aNs08SB8Tv+uuBvKmwue9RPb/Znt1HOTlgO4af0awJiVVrUbEutZzth
zoPsFo8ZpWT2CTZTwULTGlN96GFwakc8CdYs8yInjF0mjdfQMi1VYZAqFm9pXHJk
NhlmFmpAOvzAKxltoH/vxuKOmo/s03DM4RV3j1CbvYsITh4UGYRWtQ57tVaMqjyy
qiHA/k0XWNB4rM7CDoxOqtWizRFkJvueWlhRfvOS1AtDwS1P1pe4EmPrEfs4IFMK
7SltkXK9AiBhtaTgy9rzp+Y57nJ3rjxXOPPZMlLqqX2B2AW6p5HZCjf1gwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLS5bK1z7nFWv/ii/5KrXqubpms6MB8GA1UdIwQY
MBaAFGIo5+AfraScGlL6E/NibEG0GlG4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUt
NzY3NDE2NTI1MTBkLzEvdExsc3JYUHVjVmFfLUtMX2txdGVxNXVtYXpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iYWFmZjMtYWViNC00NjE2LThmYjUtNzY3NDE2NTI1MTBk
LzEvWWlqbjRCLXRwSndhVXZvVDgySnNRYlFhVWJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6FSMA0G
CSqGSIb3DQEBCwUAA4IBAQBZFfH0Bu8RPfKC1OO4fx5T+dGw6fT8oUGJ0EQXSjOq
VC64f0tosCKIZWI2Fpz7MYN4PKcvCK/sG3slc/8X7FgLbyBOjNjHVAXXkfOJKbyD
uEO4q2TQ77faAVCLVePoCvz9HC3e284DvoxpRt28uquC3rnz0BRuCITlFmaGuroZ
TSndCpBBesK6PUEaTddt4GyZEKvQD5zrzZfvQjCs4mfDipmWOIX7Pbl2Mka3zgoS
I0ctg6M5RUerFyYiyM9qK1vS3VBGleiRArWrm9z4h0egOkxzULWxJpi/j9188VYX
QwrF3SQB42FRTQMJTPxsLDEE6C36JdVslVG6BRc0QIeE
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:10:05 2024 by rpki-client on console-fra.rpki-client.org