Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/U0TWlmtPqTX_NlisWg_tL47faPw.roa
File: U0TWlmtPqTX_NlisWg_tL47faPw.roa (raw, json)
Hash identifier: CJCRbquDdauB8+p9/AP22elsBB1/KlwajrK6SftzHVs=
Subject key identifier: 53:44:D6:96:6B:4F:A9:35:FF:36:58:AC:5A:0F:ED:2F:8E:DF:68:FC
Certificate issuer: /CN=bd611e1cabe0db5643a5d2945160f45ed84a807a
Certificate serial: 019276B4A1D102D571159EF894FE1B0B0524
Authority key identifier: BD:61:1E:1C:AB:E0:DB:56:43:A5:D2:94:51:60:F4:5E:D8:4A:80:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWEeHKvg21ZDpdKUUWD0XthKgHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/U0TWlmtPqTX_NlisWg_tL47faPw.roa
Signing time: Thu 10 Oct 2024 13:53:22 +0000
ROA not before: Thu 10 Oct 2024 13:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51815
IP address blocks: 91.226.180.0/24 maxlen: 24
194.48.213.0/24 maxlen: 24
2001:67c:5f4::/48 maxlen: 48
2a0a:b780::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/vWEeHKvg21ZDpdKUUWD0XthKgHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/vWEeHKvg21ZDpdKUUWD0XthKgHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWEeHKvg21ZDpdKUUWD0XthKgHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:76:b4:a1:d1:02:d5:71:15:9e:f8:94:fe:1b:0b:05:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd611e1cabe0db5643a5d2945160f45ed84a807a
Validity
Not Before: Oct 10 13:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5344d6966b4fa935ff3658ac5a0fed2f8edf68fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:2b:0e:bd:9f:5f:1b:88:b4:ba:f2:3c:9c:d4:
9a:bb:71:3f:4e:e7:2b:27:ff:0a:17:24:3e:16:19:
10:bf:83:3c:51:5a:08:fe:85:ab:7a:60:83:32:b7:
ba:5f:c3:9c:2a:7a:7f:3e:8d:88:35:e3:92:f1:0a:
2c:02:74:98:65:4d:1f:e9:d6:27:d3:05:7b:0c:c5:
80:3b:26:99:06:90:fd:b1:70:99:b9:48:e8:ce:8b:
1b:44:50:d7:bd:06:5a:e8:83:f8:28:71:81:bd:8a:
b7:ca:a4:72:a0:52:bb:8f:d4:7d:28:16:2e:73:6d:
f2:f2:51:9a:57:e2:95:f4:06:b9:90:75:59:e2:b0:
de:49:2b:b4:61:71:eb:4f:96:c5:af:2b:a3:0b:a0:
b8:fc:ed:9e:de:5d:0a:aa:12:a9:7d:7d:4d:e0:6b:
74:94:21:bf:b4:93:f8:93:01:27:d8:12:38:91:80:
1f:7b:92:98:6b:61:15:0c:a3:83:95:6b:21:e6:79:
a1:e1:f7:b0:b8:15:0e:93:38:be:12:5b:71:46:da:
fe:d3:31:a6:dc:25:29:ad:26:91:56:36:26:c8:92:
0d:f6:03:b5:b3:59:4f:85:5a:8e:24:df:dd:ac:81:
2d:8e:7c:75:45:c8:bb:be:b0:ec:85:86:1a:d4:2c:
6a:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:44:D6:96:6B:4F:A9:35:FF:36:58:AC:5A:0F:ED:2F:8E:DF:68:FC
X509v3 Authority Key Identifier:
keyid:BD:61:1E:1C:AB:E0:DB:56:43:A5:D2:94:51:60:F4:5E:D8:4A:80:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEeHKvg21ZDpdKUUWD0XthKgHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/U0TWlmtPqTX_NlisWg_tL47faPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/vWEeHKvg21ZDpdKUUWD0XthKgHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.180.0/24
194.48.213.0/24
IPv6:
2001:67c:5f4::/48
2a0a:b780::/29
Signature Algorithm: sha256WithRSAEncryption
1e:86:d7:77:b4:74:90:d6:13:9a:d0:6e:b7:7f:36:8e:a9:91:
32:74:20:13:fd:8d:65:aa:a7:27:60:06:bc:42:ac:ae:3e:61:
ef:74:2c:ba:2f:cb:48:e1:73:db:92:6b:be:57:b0:e5:bb:c9:
79:c4:0f:e8:4b:2b:28:b2:1f:dd:82:62:4a:2f:39:5e:67:eb:
65:89:04:82:85:07:95:a5:1a:b1:f6:95:20:fd:0f:fe:f7:5e:
00:4f:3a:d6:23:c0:7a:af:49:f9:e7:1e:2f:66:68:c4:6a:5e:
ae:0c:96:a9:84:e2:b8:a3:ee:72:60:ef:81:f4:19:c4:90:3f:
35:4f:c4:0c:58:69:c7:3f:0e:8f:69:8c:88:79:38:78:db:9e:
01:e3:17:62:d6:07:d3:d5:05:7e:82:09:6a:64:05:0a:a9:55:
d4:72:0a:fb:73:0d:14:ad:dc:5a:b7:62:bb:2e:54:06:34:54:
4f:bc:64:1c:9a:db:d5:17:2d:f5:77:20:79:29:5f:48:2f:34:
4a:a9:fe:2a:25:51:80:b1:26:f4:6b:80:58:c4:be:6c:de:43:
eb:43:6e:4a:f8:0c:ca:a5:44:ed:44:be:f8:d9:5b:d9:58:0b:
6b:34:c7:b6:21:49:cc:2c:e7:3e:05:4f:ea:99:a6:69:dc:69:
1e:c0:51:3d
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZJ2tKHRAtVxFZ74lP4bCwUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjExZTFjYWJlMGRiNTY0M2E1ZDI5NDUxNjBmNDVlZDg0
YTgwN2EwHhcNMjQxMDEwMTM1MzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzQ0ZDY5NjZiNGZhOTM1ZmYzNjU4YWM1YTBmZWQyZjhlZGY2OGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhSsOvZ9fG4i0uvI8nNSau3E/Tucr
J/8KFyQ+FhkQv4M8UVoI/oWremCDMre6X8OcKnp/Po2INeOS8QosAnSYZU0f6dYn
0wV7DMWAOyaZBpD9sXCZuUjozosbRFDXvQZa6IP4KHGBvYq3yqRyoFK7j9R9KBYu
c23y8lGaV+KV9Aa5kHVZ4rDeSSu0YXHrT5bFryujC6C4/O2e3l0KqhKpfX1N4Gt0
lCG/tJP4kwEn2BI4kYAfe5KYa2EVDKODlWsh5nmh4fewuBUOkzi+EltxRtr+0zGm
3CUprSaRVjYmyJIN9gO1s1lPhVqOJN/drIEtjnx1Rci7vrDshYYa1Cxq1wIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFFNE1pZrT6k1/zZYrFoP7S+O32j8MB8GA1UdIwQY
MBaAFL1hHhyr4NtWQ6XSlFFg9F7YSoB6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldFZUhLdmcyMVpEcGRLVVVXRDBYdGhLZ0hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82Y2JmNzAtZmU4Zi00OGM5LTlkZTUt
NTJjZmU2Y2M5MWUzLzEvVTBUV2xtdFBxVFhfTmxpc1dnX3RMNDdmYVB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC82Y2JmNzAtZmU4Zi00OGM5LTlkZTUtNTJjZmU2Y2M5MWUz
LzEvdldFZUhLdmcyMVpEcGRLVVVXRDBYdGhLZ0hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAW+K0AwQA
wjDVMBYEAgACMBADBwAgAQZ8BfQDBQMqCreAMA0GCSqGSIb3DQEBCwUAA4IBAQAe
htd3tHSQ1hOa0G63fzaOqZEydCAT/Y1lqqcnYAa8QqyuPmHvdCy6L8tI4XPbkmu+
V7Dlu8l5xA/oSysosh/dgmJKLzleZ+tliQSChQeVpRqx9pUg/Q/+914ATzrWI8B6
r0n55x4vZmjEal6uDJaphOK4o+5yYO+B9BnEkD81T8QMWGnHPw6PaYyIeTh4254B
4xdi1gfT1QV+gglqZAUKqVXUcgr7cw0Urdxat2K7LlQGNFRPvGQcmtvVFy31dyB5
KV9ILzRKqf4qJVGAsSb0a4BYxL5s3kPrQ25K+AzKpUTtRL742VvZWAtrNMe2IUnM
LOc+BU/qmaZp3GkewFE9
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:15:37 2024 by rpki-client on console-fra.rpki-client.org