Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mV4IbPlnri5syKU5-iU5cPgYttw.roa
File: mV4IbPlnri5syKU5-iU5cPgYttw.roa (raw, json)
Hash identifier: dH9Q5akoS14IcWXOdq9Pa5qtbqyQXLET467YlV+mzZY=
Subject key identifier: 99:5E:08:6C:F9:67:AE:2E:6C:C8:A5:39:FA:25:39:70:F8:18:B6:DC
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC4256EB6A926B59D66ADBD41567870F1
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mV4IbPlnri5syKU5-iU5cPgYttw.roa
Signing time: Mon 01 Jan 2024 08:30:36 +0000
ROA not before: Mon 01 Jan 2024 08:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210715
IP address blocks: 78.108.218.0/24 maxlen: 24
193.31.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:6e:b6:a9:26:b5:9d:66:ad:bd:41:56:78:70:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=995e086cf967ae2e6cc8a539fa253970f818b6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:fd:6e:5b:84:26:b8:fd:d1:9f:5f:d5:92:
4c:c5:f5:ad:24:35:a6:a0:16:46:d9:4e:96:c9:65:
5e:aa:a1:29:59:3a:08:1e:f8:8f:52:80:a0:01:4a:
86:d3:23:fa:e0:85:de:4a:04:c1:1d:81:9d:43:f0:
9a:63:56:f1:9e:36:bd:ab:5f:1c:00:d3:ec:63:a3:
c9:d8:ef:5c:13:d3:be:6a:b7:10:d3:1d:cb:ff:20:
50:37:ff:b0:7c:3a:74:e9:bd:e5:5e:93:34:e5:9a:
2e:e9:9a:71:6b:cb:bd:28:50:a4:d9:c5:e1:13:04:
2f:6b:f3:ef:76:3c:16:57:99:62:db:c2:ee:6d:68:
ef:79:d0:00:89:d7:7e:dd:c4:66:1e:cd:1f:4d:0f:
4b:57:c8:a7:de:c1:e9:e8:51:c0:f7:aa:2e:4e:69:
6b:b4:aa:12:fb:6b:98:56:68:a6:0e:81:65:4b:33:
ed:a9:cb:7f:ab:11:13:48:f5:ee:f9:3b:2b:11:93:
e8:07:6d:5a:d4:97:7d:97:3b:de:d0:58:ca:75:10:
de:43:3c:24:70:14:b2:66:79:b3:08:27:ea:08:3a:
28:2d:a0:c9:d0:5e:ae:b9:fb:c8:f0:b8:9d:eb:12:
4c:bc:f0:f0:74:70:20:a9:41:5f:3a:b8:15:46:85:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:5E:08:6C:F9:67:AE:2E:6C:C8:A5:39:FA:25:39:70:F8:18:B6:DC
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/mV4IbPlnri5syKU5-iU5cPgYttw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.108.218.0/24
193.31.31.0/24
Signature Algorithm: sha256WithRSAEncryption
78:7d:fb:04:c7:41:db:e2:28:0c:34:13:b0:a8:39:c2:6f:b6:
86:4d:5a:14:a8:a2:c5:97:16:1a:70:86:85:fa:8b:3f:d6:ae:
c7:2f:91:2b:58:d4:d1:b3:ae:5a:b7:ea:d6:e1:23:bd:13:4c:
3b:a6:aa:80:09:c9:d9:b8:ea:68:16:96:ca:b8:f7:ac:ef:58:
f9:63:16:51:04:cd:75:21:71:54:21:2e:33:54:19:90:7b:c6:
d4:dc:81:83:ef:c1:4f:10:ac:2b:b9:88:14:7c:6c:ed:cf:15:
22:6a:98:5d:7e:d9:6d:53:f1:29:9b:36:fb:98:bb:31:a7:2d:
b0:33:99:85:3a:8c:32:04:4c:2e:14:aa:67:e7:6f:3d:d1:82:
50:bd:60:c0:ef:d7:19:ec:30:6e:8e:f0:c8:cd:55:b9:ab:e1:
29:a1:61:cc:c2:9b:c9:dd:d1:56:51:ea:39:d0:9a:d9:d9:e1:
7b:23:98:d3:a4:32:4b:9c:e4:fb:97:68:b2:16:f4:d4:a7:5e:
d0:db:02:ef:aa:b0:05:52:51:11:e6:13:d2:32:8e:4a:16:0c:
87:26:40:62:4a:c9:39:af:9d:61:70:85:e7:b7:89:be:8e:46:
77:da:c5:ac:67:31:73:4f:f8:7c:f2:07:0c:51:1e:f2:58:22:
23:85:33:e6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzEJW62qSa1nWatvUFWeHDxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQwMTAxMDgzMDM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTVlMDg2Y2Y5NjdhZTJlNmNjOGE1MzlmYTI1Mzk3MGY4MThiNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlz/9bluEJrj90Z9f1ZJMxfWtJDWm
oBZG2U6WyWVeqqEpWToIHviPUoCgAUqG0yP64IXeSgTBHYGdQ/CaY1bxnja9q18c
ANPsY6PJ2O9cE9O+arcQ0x3L/yBQN/+wfDp06b3lXpM05Zou6Zpxa8u9KFCk2cXh
EwQva/PvdjwWV5li28LubWjvedAAidd+3cRmHs0fTQ9LV8in3sHp6FHA96ouTmlr
tKoS+2uYVmimDoFlSzPtqct/qxETSPXu+TsrEZPoB21a1Jd9lzve0FjKdRDeQzwk
cBSyZnmzCCfqCDooLaDJ0F6uufvI8Lid6xJMvPDwdHAgqUFfOrgVRoXGnwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFJleCGz5Z64ubMilOfolOXD4GLbcMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvbVY0SWJQbG5yaTVzeUtVNS1pVTVjUGdZdHR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2ItMzk0YWNkMjFmMzli
LzEvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQATmzaAwQA
wR8fMA0GCSqGSIb3DQEBCwUAA4IBAQB4ffsEx0Hb4igMNBOwqDnCb7aGTVoUqKLF
lxYacIaF+os/1q7HL5ErWNTRs65at+rW4SO9E0w7pqqACcnZuOpoFpbKuPes71j5
YxZRBM11IXFUIS4zVBmQe8bU3IGD78FPEKwruYgUfGztzxUiaphdftltU/Epmzb7
mLsxpy2wM5mFOowyBEwuFKpn52890YJQvWDA79cZ7DBujvDIzVW5q+EpoWHMwpvJ
3dFWUeo50JrZ2eF7I5jTpDJLnOT7l2iyFvTUp17Q2wLvqrAFUlER5hPSMo5KFgyH
JkBiSsk5r51hcIXnt4m+jkZ32sWsZzFzT/h88gcMUR7yWCIjhTPm
-----END CERTIFICATE-----
Generated at Wed May 15 17:59:06 2024 by rpki-client on console-fra.rpki-client.org