Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/tcttpY6GEyQfNjf80Js2svKOx-4.roa
File: tcttpY6GEyQfNjf80Js2svKOx-4.roa (raw, json)
Hash identifier: C0hOHmf3E4D8brtMeRf2tpTgu1SNEK65QQr+Igbeglw=
Subject key identifier: B5:CB:6D:A5:8E:86:13:24:1F:36:37:FC:D0:9B:36:B2:F2:8E:C7:EE
Certificate issuer: /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial: 018CC49390CBDD67996A607FE48A0C6EBD41
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/tcttpY6GEyQfNjf80Js2svKOx-4.roa
Signing time: Mon 01 Jan 2024 10:30:54 +0000
ROA not before: Mon 01 Jan 2024 10:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198692
IP address blocks: 82.150.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:90:cb:dd:67:99:6a:60:7f:e4:8a:0c:6e:bd:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Validity
Not Before: Jan 1 10:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5cb6da58e8613241f3637fcd09b36b2f28ec7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:06:0f:c2:01:a1:9d:28:8f:08:48:0e:b8:
d2:95:a5:98:66:04:e9:21:63:9d:ca:ae:44:bb:3d:
07:75:18:cf:0e:a7:f2:d0:a9:28:f9:91:48:cb:de:
98:cb:82:70:6e:90:6c:7c:29:82:06:34:44:60:bc:
04:b8:b3:2b:2e:c9:c3:3e:43:9b:c5:ba:ca:90:95:
38:7f:39:ed:3a:cd:92:8e:bc:c7:43:fd:8e:6b:86:
96:66:77:0a:1f:72:d8:a4:63:2a:60:8c:e2:0c:97:
be:a6:80:dc:8a:cf:1a:a5:ff:f7:c0:7a:4e:53:37:
c5:69:ba:ac:6a:80:7f:da:a4:37:59:a3:94:46:25:
e7:d4:d9:43:4c:d4:49:ed:b5:51:4d:61:06:7d:50:
39:8b:07:e3:a1:d0:88:d3:61:fa:fa:be:d0:5e:87:
ac:4c:89:83:f7:ac:71:c9:f7:4e:7a:9c:72:dc:b9:
ac:8d:19:93:3a:df:a8:ee:e6:62:29:ae:67:07:75:
8c:9e:da:c3:db:dc:c9:33:ba:86:7a:b0:fc:23:3c:
28:9d:80:28:77:de:07:f1:cc:07:26:db:54:43:42:
d8:2b:96:e9:7b:70:d4:80:df:e2:27:c2:5b:88:d5:
b6:b5:1c:9c:82:2f:ce:c5:d7:be:aa:6d:3f:15:3f:
ec:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CB:6D:A5:8E:86:13:24:1F:36:37:FC:D0:9B:36:B2:F2:8E:C7:EE
X509v3 Authority Key Identifier:
keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/tcttpY6GEyQfNjf80Js2svKOx-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.138.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:0f:98:af:61:37:a7:44:30:a5:68:88:0a:71:3a:10:8b:99:
11:df:5c:0a:c6:d6:4c:79:94:3b:9c:de:97:d7:4c:81:bc:d6:
36:34:7d:b9:2f:08:22:90:60:86:a5:43:48:08:25:ae:74:01:
c7:fb:6e:c6:4a:e4:8e:de:08:a8:99:08:d7:4a:cf:75:be:d5:
b2:3e:db:2b:7c:1b:19:1a:50:49:9a:02:fd:56:b4:0a:bf:09:
09:1a:53:28:e5:78:81:fe:6f:e5:01:e3:07:05:a0:54:02:a3:
a6:cd:8e:1d:ed:0d:20:e9:e2:37:63:88:42:f4:a4:2f:1d:64:
a4:d9:ba:6a:89:e2:f7:0d:8e:b5:93:80:ee:27:e7:3c:b8:c5:
6f:69:26:43:0a:a2:3b:92:5f:a1:5a:77:05:4f:f6:80:0e:70:
26:8b:ec:6e:1f:29:3b:61:50:65:78:ae:6d:3e:a4:62:b3:8d:
62:3d:df:56:81:bc:dc:7e:57:4c:fc:50:98:21:53:29:33:fd:
ae:c1:84:57:79:94:fd:b9:f3:f0:44:b3:e7:7a:57:cb:5e:4f:
dc:2e:d9:bd:ad:44:9f:15:d0:6e:6c:6c:3d:a6:a4:f1:02:49:
a3:5f:23:41:a5:ba:90:b4:ac:7b:dd:84:b0:11:2c:83:22:93:
75:f6:b9:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk5DL3WeZamB/5IoMbr1BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwMWZlMzBmYzZiNGIwZDBmNmRiNGUxYmZiYmQ1MDE5NWRj
YTU3NWMwHhcNMjQwMTAxMTAzMDU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWNiNmRhNThlODYxMzI0MWYzNjM3ZmNkMDliMzZiMmYyOGVjN2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAposGD8IBoZ0ojwhIDrjSlaWYZgTp
IWOdyq5Euz0HdRjPDqfy0Kko+ZFIy96Yy4JwbpBsfCmCBjREYLwEuLMrLsnDPkOb
xbrKkJU4fzntOs2SjrzHQ/2Oa4aWZncKH3LYpGMqYIziDJe+poDcis8apf/3wHpO
UzfFabqsaoB/2qQ3WaOURiXn1NlDTNRJ7bVRTWEGfVA5iwfjodCI02H6+r7QXoes
TImD96xxyfdOepxy3LmsjRmTOt+o7uZiKa5nB3WMntrD29zJM7qGerD8IzwonYAo
d94H8cwHJttUQ0LYK5bpe3DUgN/iJ8JbiNW2tRycgi/Oxde+qm0/FT/sLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLXLbaWOhhMkHzY3/NCbNrLyjsfuMB8GA1UdIwQY
MBaAFCAf4w/GtLDQ9ttOG/u9UBldyldcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYt
ZmMxMjFjODAwYjMwLzEvdGN0dHBZNkdFeVFmTmpmODBKczJzdktPeC00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My84ZDgwZjktNDk0ZS00YWJiLTk5NTYtZmMxMjFjODAwYjMw
LzEvSUJfakQ4YTBzTkQyMjA0Yi03MVFHVjNLVjF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUpaKMA0G
CSqGSIb3DQEBCwUAA4IBAQCLD5ivYTenRDClaIgKcToQi5kR31wKxtZMeZQ7nN6X
10yBvNY2NH25LwgikGCGpUNICCWudAHH+27GSuSO3giomQjXSs91vtWyPtsrfBsZ
GlBJmgL9VrQKvwkJGlMo5XiB/m/lAeMHBaBUAqOmzY4d7Q0g6eI3Y4hC9KQvHWSk
2bpqieL3DY61k4DuJ+c8uMVvaSZDCqI7kl+hWncFT/aADnAmi+xuHyk7YVBleK5t
PqRis41iPd9WgbzcfldM/FCYIVMpM/2uwYRXeZT9ufPwRLPnelfLXk/cLtm9rUSf
FdBubGw9pqTxAkmjXyNBpbqQtKx73YSwESyDIpN19rnV
-----END CERTIFICATE-----
Generated at Sun May 19 07:45:17 2024 by rpki-client on console-fra.rpki-client.org