Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/4vUctb9TthM4ku4oDn2qMOZpsDU.roa
File: 4vUctb9TthM4ku4oDn2qMOZpsDU.roa (raw, json)
Hash identifier: 17TjWnAh1ssWGHiw0f3PCXOFG4NciFGsFRHeBobUwAU=
Subject key identifier: E2:F5:1C:B5:BF:53:B6:13:38:92:EE:28:0E:7D:AA:30:E6:69:B0:35
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018CC56E14CBA725F9FB20D6AA033FA2028C
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/4vUctb9TthM4ku4oDn2qMOZpsDU.roa
Signing time: Mon 01 Jan 2024 14:29:35 +0000
ROA not before: Mon 01 Jan 2024 14:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209043
IP address blocks: 79.175.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:14:cb:a7:25:f9:fb:20:d6:aa:03:3f:a2:02:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jan 1 14:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2f51cb5bf53b6133892ee280e7daa30e669b035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:df:38:25:5f:12:39:80:37:89:26:b5:e4:ab:
ad:db:0c:82:70:99:fb:33:41:a5:e2:7c:dc:30:d8:
da:3f:b0:ba:11:28:f6:e5:25:5a:a7:d8:9d:d2:1b:
92:d2:4b:c2:66:20:e4:cc:8d:37:29:81:f6:80:10:
44:9e:86:27:6a:2e:cd:2c:f9:03:97:83:94:d3:c4:
dc:c8:d8:25:c3:0f:8d:61:94:c2:e8:49:63:55:a5:
44:f8:2b:27:9a:d8:62:1b:94:c4:1f:be:3d:70:5c:
05:15:60:76:3a:4c:f2:90:1a:50:ef:7c:9f:b5:c1:
76:b5:d4:1c:d6:95:8e:bc:03:d7:77:86:d3:f7:6f:
1d:b7:d5:6d:97:86:36:6d:57:2d:1a:2a:4c:6b:9b:
b0:6b:b6:dd:bf:e2:2d:5b:d1:cc:5a:d2:69:44:c6:
9a:35:25:42:cd:9b:3c:fb:38:8d:67:50:64:6b:ea:
62:ac:ca:0d:e4:6a:af:43:d5:d2:a1:ac:f2:2b:22:
21:89:8f:28:78:8e:3f:33:77:9c:c5:96:4c:d1:39:
e3:0d:6b:a5:b7:12:4a:a4:d8:a9:da:35:e6:28:6f:
06:e6:fd:2a:c9:c7:ec:b2:e6:b3:c5:26:0a:ee:fd:
3f:ac:b5:cc:f2:f3:1d:b2:97:ee:b0:3a:c5:46:1a:
0a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:F5:1C:B5:BF:53:B6:13:38:92:EE:28:0E:7D:AA:30:E6:69:B0:35
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/4vUctb9TthM4ku4oDn2qMOZpsDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.175.117.0/24
Signature Algorithm: sha256WithRSAEncryption
63:55:d7:4c:73:99:21:af:95:a3:96:ba:09:69:09:25:4c:92:
a5:2b:2e:71:f1:60:14:3c:ae:9c:a2:dd:25:7a:f9:09:f7:d4:
c7:02:38:8b:4b:02:2a:88:4b:51:b9:fc:17:bf:ab:52:5c:9c:
57:c2:46:36:78:93:42:17:7b:20:a2:42:a8:75:1c:d9:4d:4e:
ca:00:2e:aa:86:f8:e7:51:4c:1a:7c:22:c6:66:a0:03:f3:68:
71:96:64:3a:c9:cc:72:70:60:a7:de:a2:8d:cf:d5:84:14:28:
4f:9a:fb:a1:3f:01:34:ab:32:dd:62:a2:65:cf:7f:55:d4:6e:
51:1c:f8:e1:48:f0:b8:db:bc:69:6d:68:58:10:6c:3d:4c:fb:
bf:b3:b2:3d:22:c3:d8:ee:08:d0:74:a0:52:3b:c6:da:12:bd:
1e:b2:5d:67:04:df:59:20:50:7d:63:8e:65:ee:f6:15:db:f4:
77:13:8a:00:c9:83:42:0d:0a:84:e1:52:40:e8:3c:50:e7:5d:
46:ba:cf:e7:21:57:c3:75:51:65:6d:57:a5:88:23:cf:93:15:
39:e7:f2:bd:21:a8:27:5b:72:b8:0a:53:47:1a:95:da:a0:db:
de:a3:4c:84:1b:c8:ef:82:10:ef:4a:50:27:4f:4b:7a:78:56:
58:c4:17:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbhTLpyX5+yDWqgM/ogKMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjQwMTAxMTQyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmY1MWNiNWJmNTNiNjEzMzg5MmVlMjgwZTdkYWEzMGU2NjliMDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8t84JV8SOYA3iSa15Kut2wyCcJn7
M0Gl4nzcMNjaP7C6ESj25SVap9id0huS0kvCZiDkzI03KYH2gBBEnoYnai7NLPkD
l4OU08TcyNglww+NYZTC6EljVaVE+CsnmthiG5TEH749cFwFFWB2OkzykBpQ73yf
tcF2tdQc1pWOvAPXd4bT928dt9Vtl4Y2bVctGipMa5uwa7bdv+ItW9HMWtJpRMaa
NSVCzZs8+ziNZ1Bka+pirMoN5GqvQ9XSoazyKyIhiY8oeI4/M3ecxZZM0TnjDWul
txJKpNip2jXmKG8G5v0qycfssuazxSYK7v0/rLXM8vMdspfusDrFRhoKoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOL1HLW/U7YTOJLuKA59qjDmabA1MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvNHZVY3RiOVR0aE00a3U0b0RuMnFNT1pwc0RVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT691MA0G
CSqGSIb3DQEBCwUAA4IBAQBjVddMc5khr5WjlroJaQklTJKlKy5x8WAUPK6cot0l
evkJ99THAjiLSwIqiEtRufwXv6tSXJxXwkY2eJNCF3sgokKodRzZTU7KAC6qhvjn
UUwafCLGZqAD82hxlmQ6ycxycGCn3qKNz9WEFChPmvuhPwE0qzLdYqJlz39V1G5R
HPjhSPC427xpbWhYEGw9TPu/s7I9IsPY7gjQdKBSO8baEr0esl1nBN9ZIFB9Y45l
7vYV2/R3E4oAyYNCDQqE4VJA6DxQ511Gus/nIVfDdVFlbVeliCPPkxU55/K9Iagn
W3K4ClNHGpXaoNveo0yEG8jvghDvSlAnT0t6eFZYxBeC
-----END CERTIFICATE-----
Generated at Sat May 25 12:33:44 2024 by rpki-client on console-fra.rpki-client.org