Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/xYlv16zRAkGa3qWg6D2XLkMX9HQ.roa
File: xYlv16zRAkGa3qWg6D2XLkMX9HQ.roa (raw, json)
Hash identifier: h1rSc2pNwRpcPRvqnwtYYpf7dL9PZcSPCSls3kQlDCM=
Subject key identifier: C5:89:6F:D7:AC:D1:02:41:9A:DE:A5:A0:E8:3D:97:2E:43:17:F4:74
Certificate issuer: /CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Certificate serial: 018CC5DC06149682C997E4CD53A27107B60B
Authority key identifier: B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/xYlv16zRAkGa3qWg6D2XLkMX9HQ.roa
Signing time: Mon 01 Jan 2024 16:29:40 +0000
ROA not before: Mon 01 Jan 2024 16:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207648
IP address blocks: 81.29.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:06:14:96:82:c9:97:e4:cd:53:a2:71:07:b6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b343514630dc17f3fe9b51dd434184d0b62b03c0
Validity
Not Before: Jan 1 16:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5896fd7acd102419adea5a0e83d972e4317f474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:43:89:15:99:dd:27:c7:ac:80:4e:49:52:
57:8c:01:50:0f:45:ae:8c:73:bf:45:f0:b1:a7:71:
0b:fd:4d:b0:0f:f1:4a:d2:a5:6b:2f:b4:5a:0f:13:
75:80:b0:86:98:2f:65:8d:c3:3e:e7:93:f1:f9:6b:
b7:78:12:d9:1c:ee:c7:7a:06:b9:99:c1:f1:34:de:
e2:bb:59:20:b2:69:a6:70:ca:58:86:dc:44:75:5d:
01:cd:6a:27:65:46:81:e5:e8:41:24:f9:a3:8c:04:
79:59:31:8d:9d:1c:6c:29:61:b1:52:23:ec:9b:8f:
f6:00:82:07:f4:8a:6a:bc:8e:ee:65:e4:f4:1f:ea:
3c:52:62:09:c4:71:05:f5:5a:52:f7:83:e3:5a:5e:
83:c2:9b:9a:4e:7f:d1:92:92:bc:9f:c8:07:2c:5c:
1f:42:3d:73:44:2c:20:e6:ee:df:8e:83:ee:cb:b6:
af:74:95:88:a2:02:08:97:4b:7e:db:09:32:09:74:
b8:f5:3e:27:43:30:74:5d:29:60:ed:f3:b4:8e:c0:
a3:13:fa:5f:81:86:ed:78:c3:f6:a4:50:3a:29:73:
51:5d:02:e3:5b:d1:73:26:eb:30:b6:9e:59:2b:05:
6e:3c:64:10:6d:3a:ea:91:a4:73:1e:9f:35:cc:e6:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:89:6F:D7:AC:D1:02:41:9A:DE:A5:A0:E8:3D:97:2E:43:17:F4:74
X509v3 Authority Key Identifier:
keyid:B3:43:51:46:30:DC:17:F3:FE:9B:51:DD:43:41:84:D0:B6:2B:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/xYlv16zRAkGa3qWg6D2XLkMX9HQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/138046-7be0-4017-a98b-a7247e9d5f3a/1/s0NRRjDcF_P-m1HdQ0GE0LYrA8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.133.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:7a:9d:af:1a:40:49:4a:54:41:f5:3b:36:dc:9d:31:b7:ed:
54:1c:5d:25:62:14:ba:d8:3f:5e:c1:98:51:5b:07:65:21:7d:
ff:c2:72:c1:c4:d7:24:12:11:61:35:8a:5a:a9:17:c7:12:4c:
9e:09:57:bf:49:77:fb:21:9d:16:4b:1f:5d:ef:8c:f0:ef:9c:
87:a9:74:91:02:4d:36:60:a6:92:01:13:27:14:34:2c:22:2b:
53:c4:59:ed:55:d7:48:e7:3b:0d:68:63:9b:63:7d:cd:f7:13:
d7:e2:90:04:e3:65:9a:cf:05:01:f3:38:07:b0:fe:c5:70:2c:
f6:f2:45:16:f7:58:97:0c:13:88:02:f0:e8:a7:23:26:9b:7e:
b8:69:61:6e:58:57:e2:c4:03:80:43:78:d0:75:41:8a:e5:97:
10:0d:9c:d6:c5:e4:29:87:38:54:3b:41:c4:63:c9:25:7d:12:
d3:07:30:85:39:c8:37:5a:0e:b7:6e:a4:bd:da:38:4c:55:b3:
b3:b8:0d:83:be:2f:b0:02:b8:f3:e4:40:25:89:6b:1b:92:c4:
bc:e6:99:18:b4:45:0d:70:eb:f2:a8:b9:c8:41:6c:8e:d2:22:
24:5d:0a:a3:58:69:c9:7a:25:b5:f6:a6:ae:74:f3:ba:7f:19:
74:ad:1b:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3AYUloLJl+TNU6JxB7YLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzNDM1MTQ2MzBkYzE3ZjNmZTliNTFkZDQzNDE4NGQwYjYy
YjAzYzAwHhcNMjQwMTAxMTYyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNTg5NmZkN2FjZDEwMjQxOWFkZWE1YTBlODNkOTcyZTQzMTdmNDc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQRDiRWZ3SfHrIBOSVJXjAFQD0Wu
jHO/RfCxp3EL/U2wD/FK0qVrL7RaDxN1gLCGmC9ljcM+55Px+Wu3eBLZHO7Hega5
mcHxNN7iu1kgsmmmcMpYhtxEdV0BzWonZUaB5ehBJPmjjAR5WTGNnRxsKWGxUiPs
m4/2AIIH9IpqvI7uZeT0H+o8UmIJxHEF9VpS94PjWl6DwpuaTn/RkpK8n8gHLFwf
Qj1zRCwg5u7fjoPuy7avdJWIogIIl0t+2wkyCXS49T4nQzB0XSlg7fO0jsCjE/pf
gYbteMP2pFA6KXNRXQLjW9FzJuswtp5ZKwVuPGQQbTrqkaRzHp81zOaeDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMWJb9es0QJBmt6loOg9ly5DF/R0MB8GA1UdIwQY
MBaAFLNDUUYw3Bfz/ptR3UNBhNC2KwPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGIt
YTcyNDdlOWQ1ZjNhLzEveFlsdjE2elJBa0dhM3FXZzZEMlhMa01YOUhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMzgwNDYtN2JlMC00MDE3LWE5OGItYTcyNDdlOWQ1ZjNh
LzEvczBOUlJqRGNGX1AtbTFIZFEwR0UwTFlyQThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2FMA0G
CSqGSIb3DQEBCwUAA4IBAQBuep2vGkBJSlRB9Ts23J0xt+1UHF0lYhS62D9ewZhR
WwdlIX3/wnLBxNckEhFhNYpaqRfHEkyeCVe/SXf7IZ0WSx9d74zw75yHqXSRAk02
YKaSARMnFDQsIitTxFntVddI5zsNaGObY33N9xPX4pAE42WazwUB8zgHsP7FcCz2
8kUW91iXDBOIAvDopyMmm364aWFuWFfixAOAQ3jQdUGK5ZcQDZzWxeQphzhUO0HE
Y8klfRLTBzCFOcg3Wg63bqS92jhMVbOzuA2Dvi+wArjz5EAliWsbksS85pkYtEUN
cOvyqLnIQWyO0iIkXQqjWGnJeiW19qaudPO6fxl0rRtG
-----END CERTIFICATE-----
Generated at Wed Nov 27 02:47:40 2024 by rpki-client on console-fra.rpki-client.org