Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/C548_S_7I4jpxfho7r23THTvgcI.roa
File: C548_S_7I4jpxfho7r23THTvgcI.roa (raw, json)
Hash identifier: 3rGlB0UWP1ggHkf8pqqoi0YyViWoVUh0cLxm2W+BPRs=
Subject key identifier: 0B:9E:3C:FD:2F:FB:23:88:E9:C5:F8:68:EE:BD:B7:4C:74:EF:81:C2
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 0188FC713403813449A6867D18E897116187
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/C548_S_7I4jpxfho7r23THTvgcI.roa
Signing time: Tue 27 Jun 2023 10:40:57 +0000
ROA not before: Tue 27 Jun 2023 10:40:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 134176
IP address blocks: 109.121.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.crl
rsync://rpki.ripe.net/repository/aca/Kn3R14fXk-TIr1bhl9Tu2Sr2uhM.mft
rsync://rpki.ripe.net/repository/2a7dd1d787d793e4c8af56e197d4eed92af6ba13.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Jul 2023 14:08:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fc:71:34:03:81:34:49:a6:86:7d:18:e8:97:11:61:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Jun 27 10:40:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b9e3cfd2ffb2388e9c5f868eebdb74c74ef81c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e2:38:97:e6:71:50:8f:fd:8c:27:4f:1b:88:
29:4b:b5:28:cf:17:e1:93:4a:53:ee:13:b1:93:3f:
c1:59:aa:07:51:66:ab:22:20:4f:4a:10:a1:13:1e:
10:bb:56:83:02:56:63:49:92:50:81:0d:91:38:cd:
e4:da:84:6b:cf:5a:eb:6d:fd:51:68:5e:b6:27:5d:
d7:d3:84:1e:33:6a:71:12:75:2a:e1:6a:61:86:b4:
2e:91:38:e5:47:06:de:ca:eb:43:bc:98:06:0f:19:
d7:ec:19:38:5c:b4:33:40:be:b4:73:b9:4c:5b:6e:
2c:c6:06:78:76:ce:cb:df:2f:b6:43:80:ed:f0:44:
a7:66:1e:35:c9:18:b8:a7:34:92:b5:82:d6:9b:15:
a6:f0:b7:ab:36:15:64:a9:9a:bd:bc:04:74:aa:81:
a9:ce:42:0e:37:be:da:1a:e0:b3:56:54:7c:95:2f:
7d:e3:bc:1b:76:5c:a0:d1:17:08:55:bc:af:ea:ea:
73:29:b5:a1:85:3c:18:07:2a:18:5e:46:3e:04:d7:
f1:4e:01:53:b0:aa:ff:03:02:ce:67:67:fb:55:12:
82:d0:81:39:c9:b6:77:34:0a:57:2a:cd:63:3f:8c:
a6:b1:af:17:d3:13:79:75:86:7b:98:01:16:78:f2:
ad:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:9E:3C:FD:2F:FB:23:88:E9:C5:F8:68:EE:BD:B7:4C:74:EF:81:C2
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/C548_S_7I4jpxfho7r23THTvgcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.41.0/24
Signature Algorithm: sha256WithRSAEncryption
34:2b:7c:65:10:72:da:e3:44:53:64:54:f5:c6:1b:07:1e:90:
17:a9:3e:41:7a:27:72:5a:c0:3b:24:7c:8d:22:4a:ad:97:f4:
ad:65:4b:d9:6d:a8:8e:7b:8e:e8:11:7d:4a:76:7f:8a:83:d4:
21:f4:6f:03:a4:2d:a4:96:ca:8b:c1:7a:c8:b1:44:f7:95:3a:
64:e3:64:e7:0b:e9:11:ae:2b:f1:72:c0:2b:5a:15:99:3f:46:
c5:18:63:c3:0e:ac:a3:60:b0:74:34:4e:ed:c2:74:73:81:9b:
2d:f1:fb:46:95:c2:01:55:cd:a5:33:d4:37:6e:26:fc:67:37:
ad:cd:db:96:0f:ab:8c:41:7a:3d:22:87:e9:dd:7b:ea:9e:bb:
c0:04:0a:fa:71:bd:0a:26:86:2f:19:3e:0c:62:72:da:a5:ec:
ca:20:02:61:df:db:11:c0:6f:e5:f5:d5:e7:85:40:40:66:cc:
76:27:0d:f6:ce:e6:c8:4e:be:e2:c7:f3:c5:9d:85:f9:79:61:
bd:62:de:6c:35:de:32:93:da:24:55:6c:2c:ef:e4:9c:9d:f1:
d8:d6:a5:e9:24:42:02:e5:af:6d:4b:e9:a5:e6:a9:16:ba:b1:
59:31:63:01:67:7c:34:7f:5b:01:7f:1c:21:fe:43:1d:0f:4c:
50:4b:5d:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYj8cTQDgTRJpoZ9GOiXEWGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjMwNjI3MTA0MDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjllM2NmZDJmZmIyMzg4ZTljNWY4NjhlZWJkYjc0Yzc0ZWY4MWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOI4l+ZxUI/9jCdPG4gpS7Uozxfh
k0pT7hOxkz/BWaoHUWarIiBPShChEx4Qu1aDAlZjSZJQgQ2ROM3k2oRrz1rrbf1R
aF62J13X04QeM2pxEnUq4WphhrQukTjlRwbeyutDvJgGDxnX7Bk4XLQzQL60c7lM
W24sxgZ4ds7L3y+2Q4Dt8ESnZh41yRi4pzSStYLWmxWm8LerNhVkqZq9vAR0qoGp
zkION77aGuCzVlR8lS9947wbdlyg0RcIVbyv6upzKbWhhTwYByoYXkY+BNfxTgFT
sKr/AwLOZ2f7VRKC0IE5ybZ3NApXKs1jP4ymsa8X0xN5dYZ7mAEWePKtfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAuePP0v+yOI6cX4aO69t0x074HCMB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvQzU0OF9TXzdJNGpweGZobzdyMjNUSFR2Z2NJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbXkpMA0G
CSqGSIb3DQEBCwUAA4IBAQA0K3xlEHLa40RTZFT1xhsHHpAXqT5BeidyWsA7JHyN
Ikqtl/StZUvZbaiOe47oEX1Kdn+Kg9Qh9G8DpC2klsqLwXrIsUT3lTpk42TnC+kR
rivxcsArWhWZP0bFGGPDDqyjYLB0NE7twnRzgZst8ftGlcIBVc2lM9Q3bib8Zzet
zduWD6uMQXo9Iofp3XvqnrvABAr6cb0KJoYvGT4MYnLapezKIAJh39sRwG/l9dXn
hUBAZsx2Jw32zubITr7ix/PFnYX5eWG9Yt5sNd4yk9okVWws7+ScnfHY1qXpJEIC
5a9tS+ml5qkWurFZMWMBZ3w0f1sBfxwh/kMdD0xQS12N
-----END CERTIFICATE-----
Generated at Wed Jul 19 22:47:38 2023 by rpki-client on console-fra.rpki-client.org