Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/tk-xDWVwP48OSy2bGRBUFTGFRDU.roa
File: tk-xDWVwP48OSy2bGRBUFTGFRDU.roa (raw, json)
Hash identifier: tcA+GoIWTFyS/zUQCyP/CEepVf6wevf89cmY2JtxDog=
Subject key identifier: B6:4F:B1:0D:65:70:3F:8F:0E:4B:2D:9B:19:10:54:15:31:85:44:35
Certificate issuer: /CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Certificate serial: 018CC86F74ACFAD867D1D0C953478F886D58
Authority key identifier: AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/tk-xDWVwP48OSy2bGRBUFTGFRDU.roa
Signing time: Tue 02 Jan 2024 04:29:56 +0000
ROA not before: Tue 02 Jan 2024 04:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 195.250.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:74:ac:fa:d8:67:d1:d0:c9:53:47:8f:88:6d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebdead4f1d1c8dda96d1cd1789d9dd3e23bf153
Validity
Not Before: Jan 2 04:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b64fb10d65703f8f0e4b2d9b1910541531854435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d5:ea:cb:d7:88:e6:7c:17:31:ef:a1:d2:b2:
8e:99:77:e8:f7:4e:7d:ac:e0:c5:f1:6f:5e:47:90:
a1:9b:3f:0b:da:ca:22:d0:0d:6a:57:96:0e:b4:e0:
3b:47:c3:37:61:37:79:13:01:68:56:89:4b:d3:55:
88:82:e3:e5:11:26:f6:2f:62:d0:d7:7b:70:df:57:
ae:d2:db:da:73:c7:7b:f4:e7:90:df:72:c5:9b:aa:
2a:66:c1:57:65:82:f9:87:01:f9:ba:5b:a5:ca:15:
56:86:61:3b:17:8a:20:f2:37:70:86:d4:0a:87:84:
ef:41:97:6e:8f:7d:8a:05:b6:fd:05:b5:58:d7:92:
97:ba:e7:38:07:86:30:6f:c0:00:9a:65:18:2a:a9:
1c:a2:0c:85:89:9d:57:f8:82:83:85:26:22:e6:da:
4a:f3:14:14:40:1f:e2:67:af:29:88:6d:00:e6:c9:
da:e1:33:a0:a5:c4:89:73:29:2c:a4:c3:a4:bf:49:
2c:c7:fb:84:d5:a1:5e:df:6d:0e:ef:23:f9:06:da:
43:44:a1:08:91:85:66:9c:84:80:a3:fe:6f:fe:0d:
1a:fb:ad:7f:ad:a7:de:51:74:03:fc:54:9a:f8:aa:
9b:07:9e:5c:31:bf:9c:60:72:31:1a:ba:9c:f0:e2:
31:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:4F:B1:0D:65:70:3F:8F:0E:4B:2D:9B:19:10:54:15:31:85:44:35
X509v3 Authority Key Identifier:
keyid:AE:BD:EA:D4:F1:D1:C8:DD:A9:6D:1C:D1:78:9D:9D:D3:E2:3B:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr3q1PHRyN2pbRzReJ2d0-I78VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/tk-xDWVwP48OSy2bGRBUFTGFRDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/2f5fd6-1904-4dca-abb2-8837ca69e396/1/rr3q1PHRyN2pbRzReJ2d0-I78VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.250.46.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:86:91:56:0a:38:1d:21:8b:8c:64:44:1d:50:ba:9c:b4:eb:
e4:ec:e4:a1:cc:66:87:17:b5:04:00:17:e3:bc:64:30:39:e2:
5e:72:76:b6:5b:1e:4a:f0:8d:a8:1a:13:14:1a:8c:76:4f:8a:
03:08:13:49:96:cd:19:ab:2c:16:e4:7a:93:3a:15:b6:4f:59:
08:8b:47:cd:65:44:bc:5f:30:57:d7:1d:74:66:34:23:81:93:
0b:6c:af:68:48:21:42:dc:f5:ae:ab:4d:01:c6:28:b3:dc:ba:
ff:b0:d8:67:a3:89:fc:76:6f:3b:2e:2a:e0:fc:8d:09:f0:5c:
c8:f8:86:e2:70:6b:89:71:70:ef:a6:dd:2f:57:07:b1:85:18:
62:f9:71:1c:8c:a7:93:e9:05:bf:58:b0:26:44:0f:ef:e2:ab:
f8:af:75:b5:23:97:83:51:f6:f3:aa:18:41:5f:a5:e1:ba:83:
80:f7:6d:d3:8e:36:8c:88:f5:39:61:7f:32:63:ef:47:46:d4:
5b:c9:50:59:95:f3:61:b2:f4:18:88:4d:b9:6f:f4:2d:4f:e5:
80:fa:a1:f8:0c:56:12:4d:b8:bc:10:0b:a4:5e:12:b3:ea:e5:
46:57:50:af:dc:58:ce:98:5a:c7:46:0b:01:eb:d5:96:0d:3c:
67:61:2b:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb3Ss+thn0dDJU0ePiG1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYmRlYWQ0ZjFkMWM4ZGRhOTZkMWNkMTc4OWQ5ZGQzZTIz
YmYxNTMwHhcNMjQwMTAyMDQyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNjRmYjEwZDY1NzAzZjhmMGU0YjJkOWIxOTEwNTQxNTMxODU0NDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAidXqy9eI5nwXMe+h0rKOmXfo9059
rODF8W9eR5Chmz8L2soi0A1qV5YOtOA7R8M3YTd5EwFoVolL01WIguPlESb2L2LQ
13tw31eu0tvac8d79OeQ33LFm6oqZsFXZYL5hwH5ululyhVWhmE7F4og8jdwhtQK
h4TvQZduj32KBbb9BbVY15KXuuc4B4Ywb8AAmmUYKqkcogyFiZ1X+IKDhSYi5tpK
8xQUQB/iZ68piG0A5sna4TOgpcSJcykspMOkv0ksx/uE1aFe320O7yP5BtpDRKEI
kYVmnISAo/5v/g0a+61/rafeUXQD/FSa+KqbB55cMb+cYHIxGrqc8OIx7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLZPsQ1lcD+PDkstmxkQVBUxhUQ1MB8GA1UdIwQY
MBaAFK696tTx0cjdqW0c0XidndPiO/FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjIt
ODgzN2NhNjllMzk2LzEvdGsteERXVndQNDhPU3kyYkdSQlVGVEdGUkRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8yZjVmZDYtMTkwNC00ZGNhLWFiYjItODgzN2NhNjllMzk2
LzEvcnIzcTFQSFJ5TjJwYlJ6UmVKMmQwLUk3OFZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw/ouMA0G
CSqGSIb3DQEBCwUAA4IBAQDIhpFWCjgdIYuMZEQdULqctOvk7OShzGaHF7UEABfj
vGQwOeJecna2Wx5K8I2oGhMUGox2T4oDCBNJls0ZqywW5HqTOhW2T1kIi0fNZUS8
XzBX1x10ZjQjgZMLbK9oSCFC3PWuq00Bxiiz3Lr/sNhno4n8dm87Lirg/I0J8FzI
+IbicGuJcXDvpt0vVwexhRhi+XEcjKeT6QW/WLAmRA/v4qv4r3W1I5eDUfbzqhhB
X6XhuoOA923TjjaMiPU5YX8yY+9HRtRbyVBZlfNhsvQYiE25b/QtT+WA+qH4DFYS
Tbi8EAukXhKz6uVGV1Cv3FjOmFrHRgsB69WWDTxnYSts
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:31:19 2024 by rpki-client on console-fra.rpki-client.org