Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/ehTXnaAbzYI1ySo05jWWGAjz-KU.roa
File: ehTXnaAbzYI1ySo05jWWGAjz-KU.roa (raw, json)
Hash identifier: /nLs6yf4vLvEaEJWNMXVZzWsCbJrq9HNX9wBJDlq2qE=
Subject key identifier: 7A:14:D7:9D:A0:1B:CD:82:35:C9:2A:34:E6:35:96:18:08:F3:F8:A5
Certificate issuer: /CN=4c6b6371b945a35e9df308ff43803e2617851069
Certificate serial: 0192B386ECE0A9DA43B8A441D768EE919D9F
Authority key identifier: 4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/ehTXnaAbzYI1ySo05jWWGAjz-KU.roa
Signing time: Tue 22 Oct 2024 09:20:16 +0000
ROA not before: Tue 22 Oct 2024 09:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58282
IP address blocks: 195.231.224.0/19 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b3:86:ec:e0:a9:da:43:b8:a4:41:d7:68:ee:91:9d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6b6371b945a35e9df308ff43803e2617851069
Validity
Not Before: Oct 22 09:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7a14d79da01bcd8235c92a34e635961808f3f8a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d9:c7:70:d6:a4:60:c0:e6:c9:ae:da:cc:2b:
3a:bf:bf:de:70:32:00:2e:c6:28:b7:d1:3e:98:a4:
0f:33:a2:14:5e:37:eb:ee:23:97:5d:a3:88:e1:fc:
05:f3:17:c6:e5:dd:2a:1d:8f:cb:04:5f:81:f1:9b:
ce:7f:df:6a:0f:0a:e8:86:a0:cb:31:d8:51:19:d2:
aa:43:fa:eb:a2:ea:64:5c:f0:49:af:49:81:bd:ea:
12:ae:e4:c9:81:d5:80:a5:df:57:e3:db:9f:94:28:
c3:70:9d:56:db:12:7c:df:9c:21:6e:7e:9a:74:f2:
99:07:10:04:91:68:52:a4:a8:c0:86:85:2f:be:01:
0a:3e:88:81:08:7e:f3:bd:25:6b:09:2c:fc:8a:2d:
c3:b4:dc:18:82:43:39:58:1b:06:49:ae:4e:01:10:
be:de:e6:a9:c7:5c:8c:03:b8:57:d5:5b:25:8f:cf:
ed:ad:74:6c:1c:38:e0:6a:2e:86:7e:74:66:d2:18:
75:eb:4e:53:96:23:81:b6:4b:b3:67:44:78:87:ce:
4b:ec:f3:16:f8:c2:2f:47:89:3d:31:af:1c:50:b1:
29:c0:e0:4f:4e:e7:59:7c:b8:e6:47:ff:13:63:ac:
b3:68:f3:de:a6:fa:f9:d5:12:4e:a3:7c:e5:1b:5c:
89:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:14:D7:9D:A0:1B:CD:82:35:C9:2A:34:E6:35:96:18:08:F3:F8:A5
X509v3 Authority Key Identifier:
keyid:4C:6B:63:71:B9:45:A3:5E:9D:F3:08:FF:43:80:3E:26:17:85:10:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGtjcblFo16d8wj_Q4A-JheFEGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/ehTXnaAbzYI1ySo05jWWGAjz-KU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/4448a7-1ac1-46ad-a727-d96393af2f20/1/TGtjcblFo16d8wj_Q4A-JheFEGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.231.224.0/19
Signature Algorithm: sha256WithRSAEncryption
73:ff:9e:8b:ce:38:5d:b1:ea:3f:88:fd:27:4d:d9:4e:f9:b5:
77:ae:df:99:68:dc:b9:7d:14:83:58:53:df:7c:a0:e5:3c:f0:
f3:84:65:6e:ae:46:75:7a:ba:0c:e1:da:31:66:9c:0b:69:cf:
82:97:43:a8:22:89:ef:65:78:e6:16:fb:61:e5:87:0a:80:14:
a8:4a:12:96:83:cd:10:26:73:19:a5:e0:36:f7:5b:7c:56:68:
85:8c:12:34:8c:bb:38:dc:c4:2e:04:cc:04:39:c9:8c:04:8f:
f8:21:94:a0:69:cb:0b:7d:30:5c:b6:60:32:24:58:75:67:cb:
57:43:10:f7:d1:f4:e9:f2:80:e0:2f:34:56:be:9a:10:34:33:
73:29:ae:7e:05:fe:2f:84:e1:e4:cf:fb:82:b8:ec:94:a0:68:
b5:f7:55:6b:7b:7f:27:d7:82:0c:47:31:56:5d:4a:49:84:17:
bb:34:5d:4e:d5:fa:ef:04:37:d0:d1:56:7e:32:64:98:6d:4e:
7d:2d:9b:a3:df:2f:53:71:1c:ad:75:2b:1e:31:4f:d6:3e:ca:
54:b9:e9:a0:b8:64:0e:57:ea:d3:4a:d8:84:c7:06:35:c5:72:
11:d7:aa:1b:2b:35:0a:78:5a:0f:c2:7f:fb:65:3b:ac:28:57:
b2:72:23:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKzhuzgqdpDuKRB12jukZ2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNmI2MzcxYjk0NWEzNWU5ZGYzMDhmZjQzODAzZTI2MTc4
NTEwNjkwHhcNMjQxMDIyMDkyMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YTE0ZDc5ZGEwMWJjZDgyMzVjOTJhMzRlNjM1OTYxODA4ZjNmOGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tnHcNakYMDmya7azCs6v7/ecDIA
LsYot9E+mKQPM6IUXjfr7iOXXaOI4fwF8xfG5d0qHY/LBF+B8ZvOf99qDwrohqDL
MdhRGdKqQ/rroupkXPBJr0mBveoSruTJgdWApd9X49uflCjDcJ1W2xJ835whbn6a
dPKZBxAEkWhSpKjAhoUvvgEKPoiBCH7zvSVrCSz8ii3DtNwYgkM5WBsGSa5OARC+
3uapx1yMA7hX1Vslj8/trXRsHDjgai6GfnRm0hh1605TliOBtkuzZ0R4h85L7PMW
+MIvR4k9Ma8cULEpwOBPTudZfLjmR/8TY6yzaPPepvr51RJOo3zlG1yJ5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHoU152gG82CNckqNOY1lhgI8/ilMB8GA1UdIwQY
MBaAFExrY3G5RaNenfMI/0OAPiYXhRBpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3Mjct
ZDk2MzkzYWYyZjIwLzEvZWhUWG5hQWJ6WUkxeVNvMDVqV1dHQWp6LUtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS80NDQ4YTctMWFjMS00NmFkLWE3MjctZDk2MzkzYWYyZjIw
LzEvVEd0amNibEZvMTZkOHdqX1E0QS1KaGVGRUdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFw+fgMA0G
CSqGSIb3DQEBCwUAA4IBAQBz/56Lzjhdseo/iP0nTdlO+bV3rt+ZaNy5fRSDWFPf
fKDlPPDzhGVurkZ1eroM4doxZpwLac+Cl0OoIonvZXjmFvth5YcKgBSoShKWg80Q
JnMZpeA291t8VmiFjBI0jLs43MQuBMwEOcmMBI/4IZSgacsLfTBctmAyJFh1Z8tX
QxD30fTp8oDgLzRWvpoQNDNzKa5+Bf4vhOHkz/uCuOyUoGi191Vre38n14IMRzFW
XUpJhBe7NF1O1frvBDfQ0VZ+MmSYbU59LZuj3y9TcRytdSseMU/WPspUuemguGQO
V+rTStiExwY1xXIR16obKzUKeFoPwn/7ZTusKFeyciPR
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:18:02 2024 by rpki-client on console-fra.rpki-client.org