Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/rxl6tIveXaW7bVvaQk2uulZx9cg.roa
File: rxl6tIveXaW7bVvaQk2uulZx9cg.roa (raw, json)
Hash identifier: BQFq3BJxH3Zf4msRuBVynA3NPl1+XflCe2uQAznWTis=
Subject key identifier: AF:19:7A:B4:8B:DE:5D:A5:BB:6D:5B:DA:42:4D:AE:BA:56:71:F5:C8
Certificate issuer: /CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Certificate serial: 018CCA2BC13362FFA995B707A358021885EB
Authority key identifier: 68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/rxl6tIveXaW7bVvaQk2uulZx9cg.roa
Signing time: Tue 02 Jan 2024 12:35:14 +0000
ROA not before: Tue 02 Jan 2024 12:35:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203756
IP address blocks: 212.91.15.0/24 maxlen: 24
2001:1a68:53::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 02:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:c1:33:62:ff:a9:95:b7:07:a3:58:02:18:85:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68c510fc9b865d96e3afc7c56056efad9a330c5b
Validity
Not Before: Jan 2 12:35:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af197ab48bde5da5bb6d5bda424daeba5671f5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:77:72:35:df:67:36:b7:ec:c4:43:21:c4:ba:
36:00:a4:a9:0d:e8:25:e3:e7:f5:21:93:1c:ef:0f:
10:0a:d5:13:9e:a2:84:b8:02:a4:91:6f:cd:e1:40:
29:d1:1c:32:7c:83:9f:c1:d2:21:94:b3:1a:4d:9b:
dc:75:4f:37:67:6d:d8:9d:ef:a5:ff:b4:1f:a3:aa:
a6:15:ac:75:74:fd:a6:70:c6:a2:4c:6d:91:08:e0:
b3:05:db:29:83:d1:9c:50:cb:17:9c:7b:d0:8f:b8:
62:23:52:6c:1e:0c:44:7c:61:e1:03:56:f5:34:ec:
2d:47:bf:f5:41:71:2a:fa:b2:7f:17:1a:a4:4f:bb:
89:66:79:55:96:15:f8:04:32:0d:e2:3e:79:98:89:
7c:dc:e7:83:67:4d:4f:17:6d:09:bf:cc:62:47:bb:
51:fd:97:3c:10:8d:e5:af:24:45:f2:c6:b7:9e:47:
4f:c9:58:76:1d:8b:c5:e0:2b:29:2e:5c:da:ff:4a:
42:fd:2a:13:b6:0f:2b:de:1d:ab:f6:da:09:0b:47:
69:e7:32:f9:47:08:06:78:08:50:13:17:9c:c1:a3:
66:9b:a1:76:1a:7f:33:5f:34:3a:0b:1e:30:54:20:
a3:95:e2:d6:f1:fa:aa:26:66:b8:1c:6b:3b:52:a1:
4e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:19:7A:B4:8B:DE:5D:A5:BB:6D:5B:DA:42:4D:AE:BA:56:71:F5:C8
X509v3 Authority Key Identifier:
keyid:68:C5:10:FC:9B:86:5D:96:E3:AF:C7:C5:60:56:EF:AD:9A:33:0C:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aMUQ_JuGXZbjr8fFYFbvrZozDFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/rxl6tIveXaW7bVvaQk2uulZx9cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0f2f6-3a8a-4daa-8271-5d665e998f6a/1/aMUQ_JuGXZbjr8fFYFbvrZozDFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.91.15.0/24
IPv6:
2001:1a68:53::/48
Signature Algorithm: sha256WithRSAEncryption
92:09:1e:20:aa:62:21:b3:23:ce:6b:00:71:e2:93:d9:e6:bc:
74:94:44:c4:cf:56:2d:ec:f4:d4:26:fe:7a:69:b9:a5:93:ad:
e6:be:b4:31:ed:5b:1c:95:28:2b:6d:12:c4:c5:e8:2d:a7:06:
a2:b8:4c:a0:cc:52:7c:ae:3b:42:74:56:49:a0:97:6e:f9:01:
38:80:81:df:78:57:44:ea:e1:c4:4d:7c:21:db:e7:e2:19:26:
7c:ad:fe:bb:f7:83:b2:9d:59:12:26:6e:31:16:7e:ec:1e:f9:
89:69:f8:dd:e0:2e:d3:ba:92:2a:55:3d:1e:c0:d6:f2:82:d7:
cb:27:9e:24:b7:c0:b2:9e:9d:a2:14:84:03:15:a5:9b:62:9c:
5c:4b:9a:39:2a:2d:ee:cc:ec:81:f7:74:92:02:2a:be:cf:62:
4a:95:2f:5a:6f:1a:68:eb:ef:80:8e:cc:9f:37:df:1b:98:66:
c0:3a:e8:5c:b8:25:df:f1:a2:09:c6:4d:3f:56:d4:23:18:a2:
a5:a8:9e:2f:45:82:b6:0a:2a:ae:7e:ea:37:7d:09:0a:4b:44:
ff:2d:8c:b2:15:ce:00:5a:d1:e3:5d:6f:bd:61:9d:cb:7f:15:
e5:e4:b1:8f:34:c5:77:a5:c3:03:2a:7e:a0:4b:ed:13:14:ec:
9f:6e:6f:fe
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzKK8EzYv+plbcHo1gCGIXrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4YzUxMGZjOWI4NjVkOTZlM2FmYzdjNTYwNTZlZmFkOWEz
MzBjNWIwHhcNMjQwMTAyMTIzNTE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjE5N2FiNDhiZGU1ZGE1YmI2ZDViZGE0MjRkYWViYTU2NzFmNWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHdyNd9nNrfsxEMhxLo2AKSpDegl
4+f1IZMc7w8QCtUTnqKEuAKkkW/N4UAp0RwyfIOfwdIhlLMaTZvcdU83Z23Yne+l
/7Qfo6qmFax1dP2mcMaiTG2RCOCzBdspg9GcUMsXnHvQj7hiI1JsHgxEfGHhA1b1
NOwtR7/1QXEq+rJ/FxqkT7uJZnlVlhX4BDIN4j55mIl83OeDZ01PF20Jv8xiR7tR
/Zc8EI3lryRF8sa3nkdPyVh2HYvF4CspLlza/0pC/SoTtg8r3h2r9toJC0dp5zL5
RwgGeAhQExecwaNmm6F2Gn8zXzQ6Cx4wVCCjleLW8fqqJma4HGs7UqFOcwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFK8ZerSL3l2lu21b2kJNrrpWcfXIMB8GA1UdIwQY
MBaAFGjFEPybhl2W46/HxWBW762aMwxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEt
NWQ2NjVlOTk4ZjZhLzEvcnhsNnRJdmVYYVc3YlZ2YVFrMnV1bFp4OWNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lMGYyZjYtM2E4YS00ZGFhLTgyNzEtNWQ2NjVlOTk4ZjZh
LzEvYU1VUV9KdUdYWmJqcjhmRllGYnZyWm96REZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQA1FsPMA8E
AgACMAkDBwAgARpoAFMwDQYJKoZIhvcNAQELBQADggEBAJIJHiCqYiGzI85rAHHi
k9nmvHSURMTPVi3s9NQm/nppuaWTrea+tDHtWxyVKCttEsTF6C2nBqK4TKDMUnyu
O0J0Vkmgl275ATiAgd94V0Tq4cRNfCHb5+IZJnyt/rv3g7KdWRImbjEWfuwe+Ylp
+N3gLtO6kipVPR7A1vKC18snniS3wLKenaIUhAMVpZtinFxLmjkqLe7M7IH3dJIC
Kr7PYkqVL1pvGmjr74COzJ833xuYZsA66Fy4Jd/xognGTT9W1CMYoqWoni9FgrYK
Kq5+6jd9CQpLRP8tjLIVzgBa0eNdb71hnct/FeXksY80xXelwwMqfqBL7RMU7J9u
b/4=
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:53:09 2024 by rpki-client on console-fra.rpki-client.org