Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/tHrY1X_lhbPISR2RofDXdRWqe24.roa
File: tHrY1X_lhbPISR2RofDXdRWqe24.roa (raw, json)
Hash identifier: pXLfEN1AtLoj3JfV1wf+mS+3P1ChyHR0IzgTLWBsaqU=
Subject key identifier: B4:7A:D8:D5:7F:E5:85:B3:C8:49:1D:91:A1:F0:D7:75:15:AA:7B:6E
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 018CC56E0447ADD723D3DA515A5B6D793A86
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/tHrY1X_lhbPISR2RofDXdRWqe24.roa
Signing time: Mon 01 Jan 2024 14:29:30 +0000
ROA not before: Mon 01 Jan 2024 14:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44050
IP address blocks: 95.215.0.0/22 maxlen: 24
5.101.89.0/24 maxlen: 24
188.143.128.0/17 maxlen: 24
195.2.240.0/23 maxlen: 24
2a00:1d78::/32 maxlen: 48
2a0c:8700::/29 maxlen: 29
2a0d:8fc0::/29 maxlen: 29
2a00:1d78:666::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:04:47:ad:d7:23:d3:da:51:5a:5b:6d:79:3a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 1 14:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b47ad8d57fe585b3c8491d91a1f0d77515aa7b6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c8:80:e8:a1:03:d4:61:68:b3:d9:8f:c2:6a:
7a:d3:f5:1d:27:ba:36:97:9f:09:40:20:85:c3:60:
28:21:32:a7:46:e7:ca:9d:ca:d0:71:83:b9:a7:87:
ea:ae:7d:5c:25:e8:06:af:41:0f:68:94:ad:57:69:
35:e6:35:87:0e:ff:5a:42:ff:a2:80:b8:58:f3:e2:
d6:83:95:5a:92:1d:07:57:1d:56:75:57:f1:56:91:
5a:d1:a2:70:8d:f6:be:da:3b:70:7b:3a:64:75:00:
7f:58:e4:4e:15:77:60:6a:e7:fe:be:18:73:db:61:
d1:ce:8a:13:c8:bc:81:f3:79:bf:df:0f:ac:a8:de:
73:3b:c8:fa:59:ba:98:6b:91:db:cc:67:9a:94:5a:
1a:76:64:ce:ca:60:13:a5:e3:7f:76:bf:95:d2:fc:
6b:c9:0d:f9:3f:91:17:2d:c3:5c:2d:7c:c9:14:ae:
9f:4e:4f:f4:a5:c7:c2:0c:7b:77:a8:3d:70:b2:8d:
54:7b:2c:67:1a:f5:5d:43:6c:5f:a8:b0:ff:76:e7:
ee:e9:a0:56:51:a4:5f:bb:51:81:99:09:69:f9:21:
0f:a8:d1:82:ab:c8:9e:19:a0:28:bc:9f:88:0b:b1:
49:c9:d8:8a:41:80:07:9c:67:e4:25:69:d7:8d:17:
b5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:7A:D8:D5:7F:E5:85:B3:C8:49:1D:91:A1:F0:D7:75:15:AA:7B:6E
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/tHrY1X_lhbPISR2RofDXdRWqe24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.101.89.0/24
95.215.0.0/22
188.143.128.0/17
195.2.240.0/23
IPv6:
2a00:1d78::/32
2a0c:8700::/29
2a0d:8fc0::/29
Signature Algorithm: sha256WithRSAEncryption
44:33:bc:9c:ad:c8:11:d6:63:c6:e4:cf:a0:84:36:75:2a:27:
29:72:9f:b5:ad:0f:56:bd:0a:84:b1:a2:1d:24:f1:29:b8:55:
41:8b:e2:10:0f:39:49:76:a8:ce:61:ed:9e:59:9f:5e:4d:1b:
59:c2:e2:6f:df:17:ae:a0:5f:e6:25:fe:d6:2a:53:ee:a1:dd:
6f:ab:a9:19:1c:40:62:69:99:8a:16:a9:3c:ae:0f:7d:a7:d6:
4c:91:97:ff:46:f9:40:20:72:da:3f:0e:e7:e5:b8:ca:fe:b0:
83:48:c5:d8:b7:1d:80:22:fc:22:26:11:b6:b3:81:a6:9b:63:
93:50:a7:37:db:20:5c:22:6e:81:ba:2e:44:0b:06:c3:1e:f1:
b4:3c:7c:85:02:13:d0:fe:10:4c:0f:62:55:0b:4f:56:1c:c1:
38:7d:5c:42:8e:56:e0:94:1b:75:3f:47:68:f5:0c:ee:40:78:
e3:2c:48:a8:11:0a:5b:6f:f6:51:ef:a1:4e:5d:8e:71:8b:ad:
a2:20:01:8d:ec:31:8c:60:43:ec:df:4b:a8:e3:14:81:82:98:
8d:51:e3:85:2d:b1:58:f6:13:86:c1:29:a7:3c:09:fd:b0:9e:
94:8a:9a:16:80:65:6a:1d:ac:1a:ae:00:97:a8:28:04:13:71:
6d:50:ae:6a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgISAYzFbgRHrdcj09pRWltteTqGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYWE4YTBhNWZkZmQ2OThlMTA0YmUzNmEyYWVlYzgxM2Fl
Y2EwNzEwHhcNMjQwMTAxMTQyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDdhZDhkNTdmZTU4NWIzYzg0OTFkOTFhMWYwZDc3NTE1YWE3YjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsiA6KED1GFos9mPwmp60/UdJ7o2
l58JQCCFw2AoITKnRufKncrQcYO5p4fqrn1cJegGr0EPaJStV2k15jWHDv9aQv+i
gLhY8+LWg5Vakh0HVx1WdVfxVpFa0aJwjfa+2jtwezpkdQB/WOROFXdgauf+vhhz
22HRzooTyLyB83m/3w+sqN5zO8j6WbqYa5HbzGealFoadmTOymATpeN/dr+V0vxr
yQ35P5EXLcNcLXzJFK6fTk/0pcfCDHt3qD1wso1UeyxnGvVdQ2xfqLD/dufu6aBW
UaRfu1GBmQlp+SEPqNGCq8ieGaAovJ+IC7FJydiKQYAHnGfkJWnXjRe1EQIDAQAB
o4ICODCCAjQwHQYDVR0OBBYEFLR62NV/5YWzyEkdkaHw13UVqntuMB8GA1UdIwQY
MBaAFOqqigpf39aY4QS+NqKu7IE67KBxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQt
ODlkMDkyNDBjNDNiLzEvdEhyWTFYX2xoYlBJU1IyUm9mRFhkUldxZTI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yOTMyZGYtYTRiZC00YWY1LWE0ZDQtODlkMDkyNDBjNDNi
LzEvNnFxS0NsX2YxcGpoQkw0Mm9xN3NnVHJzb0hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME4GCCsGAQUFBwEHAQH/BD8wPTAeBAIAATAYAwQABWVZAwQC
X9cAAwQHvI+AAwQBwwLwMBsEAgACMBUDBQAqAB14AwUDKgyHAAMFAyoNj8AwDQYJ
KoZIhvcNAQELBQADggEBAEQzvJytyBHWY8bkz6CENnUqJylyn7WtD1a9CoSxoh0k
8Sm4VUGL4hAPOUl2qM5h7Z5Zn15NG1nC4m/fF66gX+Yl/tYqU+6h3W+rqRkcQGJp
mYoWqTyuD32n1kyRl/9G+UAgcto/DufluMr+sINIxdi3HYAi/CImEbazgaabY5NQ
pzfbIFwiboG6LkQLBsMe8bQ8fIUCE9D+EEwPYlULT1YcwTh9XEKOVuCUG3U/R2j1
DO5AeOMsSKgRCltv9lHvoU5djnGLraIgAY3sMYxgQ+zfS6jjFIGCmI1R44UtsVj2
E4bBKac8Cf2wnpSKmhaAZWodrBquAJeoKAQTcW1Qrmo=
-----END CERTIFICATE-----
Generated at Mon May 13 10:23:34 2024 by rpki-client on console-fra.rpki-client.org