Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/tPUzOQQbr7bcPhleCyjYeYj_hTM.roa
File: tPUzOQQbr7bcPhleCyjYeYj_hTM.roa (raw, json)
Hash identifier: sVgxSb5++S85BQKJd3Zxd0fIcn7nzmsQcy6/q4k04LI=
Subject key identifier: B4:F5:33:39:04:1B:AF:B6:DC:3E:19:5E:0B:28:D8:79:88:FF:85:33
Certificate issuer: /CN=88b2cb04932060569c9720687ded891c34ebb6d5
Certificate serial: 018E4331DD961C10F31C0C3AB18052D2478A
Authority key identifier: 88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/tPUzOQQbr7bcPhleCyjYeYj_hTM.roa
Signing time: Fri 15 Mar 2024 17:38:45 +0000
ROA not before: Fri 15 Mar 2024 17:38:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203415
IP address blocks: 2001:67c:228c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.mft
rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:43:31:dd:96:1c:10:f3:1c:0c:3a:b1:80:52:d2:47:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88b2cb04932060569c9720687ded891c34ebb6d5
Validity
Not Before: Mar 15 17:38:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4f53339041bafb6dc3e195e0b28d87988ff8533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0b:d2:dc:f3:39:5a:b6:1c:76:b5:03:5b:fa:
69:9e:2a:57:e4:a4:e8:55:c4:27:f5:88:a9:c8:cf:
0e:33:ad:9e:b3:26:cc:18:f9:cd:89:fa:e4:b3:fd:
93:8c:f2:09:54:52:0e:af:b0:1b:7a:6e:48:d5:90:
00:80:19:0b:06:45:3e:d6:a6:e1:59:a5:75:c5:ed:
78:c8:b6:95:f1:e4:23:1a:f5:f8:43:84:a6:ee:ef:
96:f6:57:6f:be:67:e0:94:e7:23:0b:af:a3:af:6a:
b6:65:c2:e4:0b:cc:5c:d8:23:f2:6a:86:51:a9:cf:
09:ba:96:d5:18:66:1c:4e:6b:66:42:45:d3:18:d6:
7f:e2:90:ee:70:1e:1e:03:85:b0:fb:05:ff:c6:49:
29:df:dd:c4:83:b1:2e:4e:71:a5:e3:5a:84:b0:13:
28:a4:88:7d:ce:bd:c6:e0:09:68:8f:93:20:ca:86:
67:48:98:56:8c:09:0b:e4:fa:6e:2d:10:5b:95:cc:
a2:62:c1:aa:a1:b4:77:6c:46:c5:d0:47:e8:7f:5e:
85:d6:e5:57:40:90:fe:9d:a7:7b:4c:2b:8d:68:bd:
72:b9:93:75:a7:73:78:f6:83:a6:9e:0c:51:50:d7:
af:36:38:2a:0c:d0:fd:9f:92:a3:ab:d2:61:a0:b3:
0a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F5:33:39:04:1B:AF:B6:DC:3E:19:5E:0B:28:D8:79:88:FF:85:33
X509v3 Authority Key Identifier:
keyid:88:B2:CB:04:93:20:60:56:9C:97:20:68:7D:ED:89:1C:34:EB:B6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iLLLBJMgYFaclyBofe2JHDTrttU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/tPUzOQQbr7bcPhleCyjYeYj_hTM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ba559d-e1bc-4727-82dc-4ad8da47c9a6/1/iLLLBJMgYFaclyBofe2JHDTrttU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:228c::/48
Signature Algorithm: sha256WithRSAEncryption
7a:13:5c:8f:dd:ec:0b:bc:0d:a6:9f:c0:97:82:c8:50:d4:ce:
11:2d:e3:f5:80:c0:96:eb:8f:c0:cd:55:b3:ec:94:1d:60:ac:
06:a9:67:c9:6d:1e:3d:ef:64:4f:38:a5:83:9c:03:ee:6b:10:
0c:5e:53:5c:46:4f:64:34:d5:32:22:be:b6:46:c9:2e:88:eb:
9c:3b:2c:bd:e1:c1:47:ef:34:8a:9e:7a:78:a6:53:e8:5b:84:
49:c5:34:b9:3a:04:40:16:98:91:a7:a5:fb:f4:33:e4:c6:75:
b6:15:d3:d1:c0:c2:ee:52:a7:0b:e4:2b:c4:ff:f1:6f:e1:68:
f9:8e:9d:8a:a8:f7:68:a6:fa:41:48:3a:11:4b:67:87:28:64:
c1:9c:67:4b:9a:ce:ef:2e:ce:7b:a7:eb:ff:8b:40:2c:54:bb:
57:58:c5:41:80:8f:eb:7b:f6:16:0a:cf:51:e8:7c:b8:15:8a:
7a:a4:6f:8a:00:b7:cf:f6:e5:57:b6:94:cf:79:bd:f4:72:53:
6d:a7:0d:2f:20:32:fd:97:2d:45:58:bc:b0:89:d6:26:73:50:
2a:07:92:c5:81:99:c1:71:23:23:2f:89:af:69:9b:d7:b3:10:
e2:c9:41:3e:a3:04:b8:cd:f5:05:e2:b0:a8:01:3d:cb:88:d2:
4e:36:4c:07
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY5DMd2WHBDzHAw6sYBS0keKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YjJjYjA0OTMyMDYwNTY5Yzk3MjA2ODdkZWQ4OTFjMzRl
YmI2ZDUwHhcNMjQwMzE1MTczODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGY1MzMzOTA0MWJhZmI2ZGMzZTE5NWUwYjI4ZDg3OTg4ZmY4NTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwvS3PM5WrYcdrUDW/ppnipX5KTo
VcQn9YipyM8OM62esybMGPnNifrks/2TjPIJVFIOr7Abem5I1ZAAgBkLBkU+1qbh
WaV1xe14yLaV8eQjGvX4Q4Sm7u+W9ldvvmfglOcjC6+jr2q2ZcLkC8xc2CPyaoZR
qc8JupbVGGYcTmtmQkXTGNZ/4pDucB4eA4Ww+wX/xkkp393Eg7EuTnGl41qEsBMo
pIh9zr3G4Aloj5MgyoZnSJhWjAkL5PpuLRBblcyiYsGqobR3bEbF0Efof16F1uVX
QJD+nad7TCuNaL1yuZN1p3N49oOmngxRUNevNjgqDND9n5Kjq9JhoLMK6QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFLT1MzkEG6+23D4ZXgso2HmI/4UzMB8GA1UdIwQY
MBaAFIiyywSTIGBWnJcgaH3tiRw067bVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMt
NGFkOGRhNDdjOWE2LzEvdFBVek9RUWJyN2JjUGhsZUN5alllWWpfaFRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9iYTU1OWQtZTFiYy00NzI3LTgyZGMtNGFkOGRhNDdjOWE2
LzEvaUxMTEJKTWdZRmFjbHlCb2ZlMkpIRFRydHRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfCKM
MA0GCSqGSIb3DQEBCwUAA4IBAQB6E1yP3ewLvA2mn8CXgshQ1M4RLeP1gMCW64/A
zVWz7JQdYKwGqWfJbR4972RPOKWDnAPuaxAMXlNcRk9kNNUyIr62RskuiOucOyy9
4cFH7zSKnnp4plPoW4RJxTS5OgRAFpiRp6X79DPkxnW2FdPRwMLuUqcL5CvE//Fv
4Wj5jp2KqPdopvpBSDoRS2eHKGTBnGdLms7vLs57p+v/i0AsVLtXWMVBgI/re/YW
Cs9R6Hy4FYp6pG+KALfP9uVXtpTPeb30clNtpw0vIDL9ly1FWLywidYmc1AqB5LF
gZnBcSMjL4mvaZvXsxDiyUE+owS4zfUF4rCoAT3LiNJONkwH
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:47:27 2024 by rpki-client on console-fra.rpki-client.org