Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ObDXTmCjlsdr6DRerJgSqr1jiDA.roa
File: ObDXTmCjlsdr6DRerJgSqr1jiDA.roa (raw, json)
Hash identifier: FsKUazSKnRc8uznYC25o/8cuX6iWGbIziUqwj7RXDRE=
Subject key identifier: 39:B0:D7:4E:60:A3:96:C7:6B:E8:34:5E:AC:98:12:AA:BD:63:88:30
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 01933438FCCFCE70792C034BE541245425F2
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ObDXTmCjlsdr6DRerJgSqr1jiDA.roa
Signing time: Sat 16 Nov 2024 09:06:10 +0000
ROA not before: Sat 16 Nov 2024 09:06:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16125
IP address blocks: 195.177.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:34:38:fc:cf:ce:70:79:2c:03:4b:e5:41:24:54:25:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Nov 16 09:06:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=39b0d74e60a396c76be8345eac9812aabd638830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:5b:a6:c0:46:b2:85:42:1d:95:dc:aa:24:
ce:2e:0a:45:10:05:fb:1c:7c:5e:ae:4f:01:ec:27:
d1:9c:23:2c:8c:0d:44:88:42:8c:db:82:77:45:78:
8d:1f:52:38:33:07:4b:ac:71:99:45:ef:ad:6d:fa:
c3:5d:7c:ee:9a:aa:5a:cb:02:4c:84:70:83:c7:09:
0a:9f:fe:48:cb:7e:e6:86:c6:63:c2:34:f3:b2:5f:
4d:f8:e3:f6:83:a5:58:87:ec:33:59:ec:0e:64:97:
79:89:30:54:67:59:70:08:58:a9:a6:08:8b:54:ca:
33:20:ad:9a:1f:e3:15:e2:f8:d9:06:2f:64:31:82:
d0:99:8d:8e:d3:14:42:be:f2:de:14:09:e0:3e:d3:
99:57:18:56:18:4e:f3:63:75:e5:3c:9f:09:4f:fd:
da:5a:cd:d7:d4:85:78:ee:51:2a:ac:bb:b3:ad:9b:
8d:69:30:45:4f:32:50:29:5b:8f:83:e4:da:bf:6a:
e6:48:06:0d:29:43:5e:fa:c4:ef:24:4c:90:07:0d:
7e:05:86:23:ad:1b:08:2f:10:1c:6a:e9:3d:43:69:
87:c3:0a:1e:dd:34:13:d2:99:87:08:6d:22:f6:37:
2c:c5:8c:e1:53:12:a3:f1:59:fe:82:27:82:5c:83:
5c:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B0:D7:4E:60:A3:96:C7:6B:E8:34:5E:AC:98:12:AA:BD:63:88:30
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/ObDXTmCjlsdr6DRerJgSqr1jiDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:8c:c6:2e:57:aa:ed:6c:45:73:1e:b7:e9:1a:ca:e6:1c:da:
60:d2:9e:dc:e5:93:02:2a:25:47:bf:b2:45:0f:3c:d3:d2:44:
4b:e2:ce:bc:77:d0:59:77:e6:02:0e:75:02:a1:07:f3:fe:50:
08:d5:52:dd:b1:ee:f4:59:db:fb:2b:3e:f4:33:d1:e1:52:1f:
f4:ad:d4:21:01:21:fd:71:1a:3a:83:70:9b:e3:72:40:b1:b0:
5c:69:ae:13:de:71:fb:29:74:22:00:c1:36:bb:d5:71:3e:1c:
ef:61:65:f8:b9:fd:bf:d4:41:7b:0b:b7:8b:8e:39:26:49:00:
04:3f:a6:e0:ac:30:ba:2e:ab:42:25:34:a0:13:3c:f5:c6:3e:
c1:8b:4a:4a:9a:e2:b6:15:f9:b4:d5:de:76:08:c1:30:a2:ea:
9c:7f:7c:86:e0:07:e8:ad:be:73:fc:49:81:73:b3:22:9a:52:
07:a1:b9:8e:09:1a:84:f9:88:3d:6a:ce:da:cc:a9:87:24:79:
4e:9e:f0:75:30:f9:00:3f:68:3d:60:69:e9:73:db:e1:59:58:
e8:3d:eb:0f:dc:15:f9:4f:19:78:28:b2:81:4d:68:54:6c:6b:
43:87:81:7d:6a:88:c7:c1:17:5f:67:c0:3c:75:d1:2c:b1:7d:
f0:7f:2e:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZM0OPzPznB5LANL5UEkVCXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjQxMTE2MDkwNjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzOWIwZDc0ZTYwYTM5NmM3NmJlODM0NWVhYzk4MTJhYWJkNjM4ODMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMNbpsBGsoVCHZXcqiTOLgpFEAX7
HHxerk8B7CfRnCMsjA1EiEKM24J3RXiNH1I4MwdLrHGZRe+tbfrDXXzumqpaywJM
hHCDxwkKn/5Iy37mhsZjwjTzsl9N+OP2g6VYh+wzWewOZJd5iTBUZ1lwCFippgiL
VMozIK2aH+MV4vjZBi9kMYLQmY2O0xRCvvLeFAngPtOZVxhWGE7zY3XlPJ8JT/3a
Ws3X1IV47lEqrLuzrZuNaTBFTzJQKVuPg+Tav2rmSAYNKUNe+sTvJEyQBw1+BYYj
rRsILxAcauk9Q2mHwwoe3TQT0pmHCG0i9jcsxYzhUxKj8Vn+gieCXINcCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDmw105go5bHa+g0XqyYEqq9Y4gwMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvT2JEWFRtQ2psc2RyNkRSZXJKZ1NxcjFqaURBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7FfMA0G
CSqGSIb3DQEBCwUAA4IBAQA8jMYuV6rtbEVzHrfpGsrmHNpg0p7c5ZMCKiVHv7JF
DzzT0kRL4s68d9BZd+YCDnUCoQfz/lAI1VLdse70Wdv7Kz70M9HhUh/0rdQhASH9
cRo6g3Cb43JAsbBcaa4T3nH7KXQiAME2u9VxPhzvYWX4uf2/1EF7C7eLjjkmSQAE
P6bgrDC6LqtCJTSgEzz1xj7Bi0pKmuK2Ffm01d52CMEwouqcf3yG4Aforb5z/EmB
c7MimlIHobmOCRqE+Yg9as7azKmHJHlOnvB1MPkAP2g9YGnpc9vhWVjoPesP3BX5
Txl4KLKBTWhUbGtDh4F9aojHwRdfZ8A8ddEssX3wfy4z
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:33:26 2024 by rpki-client on console-ams.rpki-client.org