Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/4pkDyrNCjM9jtSC_WGt4topPOS4.roa
File: 4pkDyrNCjM9jtSC_WGt4topPOS4.roa (raw, json)
Hash identifier: WODqDvRS3/1dgeUfrbqob2sz/mbo8ICB7Bh524iQTvA=
Subject key identifier: E2:99:03:CA:B3:42:8C:CF:63:B5:20:BF:58:6B:78:B6:8A:4F:39:2E
Certificate issuer: /CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Certificate serial: 018D8EAA81B005739B9DEA21B3F62A9ED82A
Authority key identifier: 4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/4pkDyrNCjM9jtSC_WGt4topPOS4.roa
Signing time: Fri 09 Feb 2024 16:19:15 +0000
ROA not before: Fri 09 Feb 2024 16:19:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8866
IP address blocks: 195.182.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:8e:aa:81:b0:05:73:9b:9d:ea:21:b3:f6:2a:9e:d8:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c39f8b8febab6d209a24981e399fd60432e1cc9
Validity
Not Before: Feb 9 16:19:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e29903cab3428ccf63b520bf586b78b68a4f392e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:b2:1d:ac:4a:83:c7:4c:13:55:a3:a7:b0:
1f:dc:06:b4:36:75:1e:32:7f:1d:eb:05:10:1e:12:
01:c8:e1:28:76:6a:6c:91:de:72:82:04:de:cc:1b:
af:87:f4:12:e9:44:71:15:ed:a6:1a:b9:2d:69:56:
69:e7:7c:28:61:26:9a:38:8b:bb:8b:9f:48:6b:23:
51:ec:38:47:09:cf:52:bd:65:68:88:4b:4e:67:17:
aa:82:8a:9a:67:7d:1f:f1:f3:c3:41:cb:56:c6:c4:
22:3c:8e:26:f5:bc:56:b2:e4:db:b3:d8:02:5b:e1:
65:e5:ee:a7:e7:20:3a:39:fa:89:b4:0d:2b:bb:5e:
d1:e3:bf:20:e3:32:04:51:3a:3c:4e:47:ac:a1:e9:
af:a7:dc:97:22:18:e5:f6:34:3b:5b:9e:7e:bd:f2:
c7:60:84:ed:89:6d:03:56:98:10:8f:d5:d0:38:37:
8f:81:7a:50:b0:73:56:39:b4:fd:dd:a1:4f:7e:60:
a8:8d:8e:ca:73:93:b8:53:4d:29:27:f1:76:6f:60:
3c:52:b2:dc:94:8b:9d:1c:3f:f9:95:93:75:fc:92:
09:f8:ea:0e:7d:58:25:02:70:25:49:7c:20:7a:f1:
28:04:2a:f3:45:72:f9:b6:52:b1:66:b3:8d:2b:11:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:99:03:CA:B3:42:8C:CF:63:B5:20:BF:58:6B:78:B6:8A:4F:39:2E
X509v3 Authority Key Identifier:
keyid:4C:39:F8:B8:FE:BA:B6:D2:09:A2:49:81:E3:99:FD:60:43:2E:1C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDn4uP66ttIJokmB45n9YEMuHMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/4pkDyrNCjM9jtSC_WGt4topPOS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/84bbe3-4c61-4033-b9af-9320fe13e5fe/1/TDn4uP66ttIJokmB45n9YEMuHMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.41.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f2:b5:c5:45:21:2f:a7:13:37:d7:d1:5d:25:ac:a7:da:74:
b4:48:17:48:d5:00:d0:2b:17:82:6b:26:42:5d:9f:87:97:f4:
a7:38:79:c5:01:1b:42:ca:cb:c8:df:ab:c2:99:17:7f:fd:fe:
04:dd:25:49:46:6f:cd:e4:1b:02:b7:a0:0f:3d:7d:97:f5:54:
e8:4f:bd:e3:bf:fb:fb:1c:a2:f0:58:09:0d:d5:ed:c8:11:c0:
7b:7a:17:ba:82:f4:01:ec:15:a0:b0:79:c9:a0:a1:fc:3d:99:
0c:b9:45:e5:86:65:98:51:7e:2e:1f:9c:5d:e1:6f:ff:1c:d9:
ef:1e:d1:78:c1:52:ec:3a:f0:b0:e0:c7:19:68:d7:8a:68:b8:
e6:db:1d:a8:e7:da:8c:60:0b:48:78:d0:40:f2:a3:9d:3b:a4:
cb:4c:7a:ed:3a:8f:30:16:53:08:9a:1e:99:f8:b8:94:79:6a:
40:c5:10:62:ab:fa:fb:34:51:c0:f5:e3:fc:05:1f:4e:51:db:
2c:cb:15:e4:db:d4:99:c8:c1:cf:b0:4b:7b:e7:c8:38:d3:09:
3a:02:ce:03:e4:22:70:07:03:90:15:c5:d2:e3:13:fb:9c:46:
77:55:2c:df:4e:45:53:17:92:a9:4c:90:86:42:e6:59:2d:37:
61:e1:04:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY2OqoGwBXObneohs/YqntgqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzlmOGI4ZmViYWI2ZDIwOWEyNDk4MWUzOTlmZDYwNDMy
ZTFjYzkwHhcNMjQwMjA5MTYxOTE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMjk5MDNjYWIzNDI4Y2NmNjNiNTIwYmY1ODZiNzhiNjhhNGYzOTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9eyHaxKg8dME1Wjp7Af3Aa0NnUe
Mn8d6wUQHhIByOEodmpskd5yggTezBuvh/QS6URxFe2mGrktaVZp53woYSaaOIu7
i59IayNR7DhHCc9SvWVoiEtOZxeqgoqaZ30f8fPDQctWxsQiPI4m9bxWsuTbs9gC
W+Fl5e6n5yA6OfqJtA0ru17R478g4zIEUTo8Tkesoemvp9yXIhjl9jQ7W55+vfLH
YITtiW0DVpgQj9XQODePgXpQsHNWObT93aFPfmCojY7Kc5O4U00pJ/F2b2A8UrLc
lIudHD/5lZN1/JIJ+OoOfVglAnAlSXwgevEoBCrzRXL5tlKxZrONKxG6EQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOKZA8qzQozPY7Ugv1hreLaKTzkuMB8GA1UdIwQY
MBaAFEw5+Lj+urbSCaJJgeOZ/WBDLhzJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYt
OTMyMGZlMTNlNWZlLzEvNHBrRHlyTkNqTTlqdFNDX1dHdDR0b3BQT1M0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi84NGJiZTMtNGM2MS00MDMzLWI5YWYtOTMyMGZlMTNlNWZl
LzEvVERuNHVQNjZ0dElKb2ttQjQ1bjlZRU11SE1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw7YpMA0G
CSqGSIb3DQEBCwUAA4IBAQCG8rXFRSEvpxM319FdJayn2nS0SBdI1QDQKxeCayZC
XZ+Hl/SnOHnFARtCysvI36vCmRd//f4E3SVJRm/N5BsCt6APPX2X9VToT73jv/v7
HKLwWAkN1e3IEcB7ehe6gvQB7BWgsHnJoKH8PZkMuUXlhmWYUX4uH5xd4W//HNnv
HtF4wVLsOvCw4McZaNeKaLjm2x2o59qMYAtIeNBA8qOdO6TLTHrtOo8wFlMImh6Z
+LiUeWpAxRBiq/r7NFHA9eP8BR9OUdssyxXk29SZyMHPsEt758g40wk6As4D5CJw
BwOQFcXS4xP7nEZ3VSzfTkVTF5KpTJCGQuZZLTdh4QSg
-----END CERTIFICATE-----
Generated at Mon May 20 15:36:58 2024 by rpki-client on console-fra.rpki-client.org