Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/Slq-L6wi2S1qs4s8EaXULfAVCIk.roa
File: Slq-L6wi2S1qs4s8EaXULfAVCIk.roa (raw, json)
Hash identifier: n9b0iQPmyKGYYri8CjzcAH0h9c6C0/9Sl8rhtkxgnC8=
Subject key identifier: 4A:5A:BE:2F:AC:22:D9:2D:6A:B3:8B:3C:11:A5:D4:2D:F0:15:08:89
Certificate issuer: /CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Certificate serial: 018CC5DC463A80E667ED36F913F313EC5824
Authority key identifier: D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/Slq-L6wi2S1qs4s8EaXULfAVCIk.roa
Signing time: Mon 01 Jan 2024 16:29:56 +0000
ROA not before: Mon 01 Jan 2024 16:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50494
IP address blocks: 193.105.70.0/24 maxlen: 24
83.150.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:46:3a:80:e6:67:ed:36:f9:13:f3:13:ec:58:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbe0ebb353034cbb6328eb3e8e3fcd360b2fbb
Validity
Not Before: Jan 1 16:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4a5abe2fac22d92d6ab38b3c11a5d42df0150889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:32:54:ef:07:69:89:53:b9:09:ff:70:c0:
a7:43:7d:40:98:df:bb:d8:f0:d7:18:4d:43:b7:e7:
9d:97:8a:c9:5b:a9:f8:2d:eb:5c:75:8d:1f:b1:f5:
6b:ec:57:97:e2:3e:63:72:f8:69:dc:ed:6d:9d:02:
d5:a1:3c:7f:c3:c2:ac:44:3f:f7:43:dc:1d:d5:a4:
ea:45:76:d1:52:14:78:e3:1c:5c:f4:4e:f3:23:c2:
3c:3e:7f:55:9a:fb:d2:5b:bc:d3:db:5b:5a:f2:0c:
d7:ad:c7:29:43:0d:b7:0e:16:7e:12:73:51:98:d4:
1e:18:75:fc:58:26:45:e4:98:52:40:10:60:e1:62:
45:c8:9b:9a:2d:07:3a:ac:d3:28:8f:7e:be:53:8e:
9d:a1:17:7c:f7:65:a1:31:5e:d3:12:be:81:e2:14:
e5:b8:5f:a9:0f:77:df:da:bb:3f:a2:ff:92:29:d1:
cf:77:60:64:a1:64:30:30:9b:01:fc:75:d9:f5:0d:
98:88:06:4b:ab:ae:9b:9e:f4:87:a5:7a:1e:1a:37:
0b:7e:4b:6f:38:d9:6b:e2:a3:ae:7b:2c:11:5e:c9:
4b:bc:26:9c:64:e4:6e:75:f0:3a:46:50:db:71:aa:
39:51:b1:75:17:fe:d9:87:17:f8:15:ae:da:05:83:
d8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:5A:BE:2F:AC:22:D9:2D:6A:B3:8B:3C:11:A5:D4:2D:F0:15:08:89
X509v3 Authority Key Identifier:
keyid:D6:FB:E0:EB:B3:53:03:4C:BB:63:28:EB:3E:8E:3F:CD:36:0B:2F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvg67NTA0y7YyjrPo4_zTYLL7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/Slq-L6wi2S1qs4s8EaXULfAVCIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/335060-1b27-4c11-a2bc-00ebdfcbb86f/1/1vvg67NTA0y7YyjrPo4_zTYLL7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.150.204.0/24
193.105.70.0/24
Signature Algorithm: sha256WithRSAEncryption
57:36:1f:cf:04:80:32:2e:85:1b:93:ea:cb:77:62:06:cc:6f:
ca:7b:f0:49:73:35:1f:67:e4:f7:42:90:6c:3c:0d:c8:e5:c3:
b6:d3:92:41:c2:40:cf:b0:ec:5c:b5:17:6a:6d:95:36:2e:7f:
81:e7:fe:d4:1a:80:10:db:09:03:96:da:8f:c1:48:f8:85:56:
02:f4:1c:75:4a:38:7f:d7:1a:d0:e1:85:57:9b:99:07:1e:d9:
94:d3:6b:2a:7d:1a:13:42:93:4f:6e:08:b4:27:2c:2b:8f:cd:
06:ef:67:3d:75:25:6e:66:0f:ba:8f:af:a6:d0:11:7b:e5:e7:
fd:0d:51:30:1c:84:69:0e:bf:7e:7b:21:90:b5:fa:3b:18:ce:
a3:93:40:ee:94:8e:67:2d:be:b0:ba:7f:f4:ce:c3:ea:0c:6a:
56:e7:bb:1c:ac:10:1f:7b:1f:31:16:26:90:47:89:31:e1:6c:
71:e9:42:31:a5:8a:80:46:ce:5a:11:40:7f:3e:2d:15:a4:3c:
3d:c0:05:8c:71:67:33:aa:aa:08:7f:9e:d1:77:76:e6:72:19:
18:76:8f:95:c4:03:7d:3e:fb:34:af:e8:62:80:92:c3:0b:70:
82:52:24:ff:de:b0:70:30:f9:df:6d:b2:91:3a:27:36:1c:18:
80:76:b2:88
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzF3EY6gOZn7Tb5E/MT7FgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmJlMGViYjM1MzAzNGNiYjYzMjhlYjNlOGUzZmNkMzYw
YjJmYmIwHhcNMjQwMTAxMTYyOTU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YTVhYmUyZmFjMjJkOTJkNmFiMzhiM2MxMWE1ZDQyZGYwMTUwODg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZMyVO8HaYlTuQn/cMCnQ31AmN+7
2PDXGE1Dt+edl4rJW6n4LetcdY0fsfVr7FeX4j5jcvhp3O1tnQLVoTx/w8KsRD/3
Q9wd1aTqRXbRUhR44xxc9E7zI8I8Pn9VmvvSW7zT21ta8gzXrccpQw23DhZ+EnNR
mNQeGHX8WCZF5JhSQBBg4WJFyJuaLQc6rNMoj36+U46doRd892WhMV7TEr6B4hTl
uF+pD3ff2rs/ov+SKdHPd2BkoWQwMJsB/HXZ9Q2YiAZLq66bnvSHpXoeGjcLfktv
ONlr4qOueywRXslLvCacZORudfA6RlDbcao5UbF1F/7Zhxf4Fa7aBYPYjQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEpavi+sItktarOLPBGl1C3wFQiJMB8GA1UdIwQY
MBaAFNb74OuzUwNMu2Mo6z6OP802Cy+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zMzUwNjAtMWIyNy00YzExLWEyYmMt
MDBlYmRmY2JiODZmLzEvU2xxLUw2d2kyUzFxczRzOEVhWFVMZkFWQ0lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS8zMzUwNjAtMWIyNy00YzExLWEyYmMtMDBlYmRmY2JiODZm
LzEvMXZ2ZzY3TlRBMHk3WXlqclBvNF96VFlMTDdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAU5bMAwQA
wWlGMA0GCSqGSIb3DQEBCwUAA4IBAQBXNh/PBIAyLoUbk+rLd2IGzG/Ke/BJczUf
Z+T3QpBsPA3I5cO205JBwkDPsOxctRdqbZU2Ln+B5/7UGoAQ2wkDltqPwUj4hVYC
9Bx1Sjh/1xrQ4YVXm5kHHtmU02sqfRoTQpNPbgi0Jywrj80G72c9dSVuZg+6j6+m
0BF75ef9DVEwHIRpDr9+eyGQtfo7GM6jk0DulI5nLb6wun/0zsPqDGpW57scrBAf
ex8xFiaQR4kx4Wxx6UIxpYqARs5aEUB/Pi0VpDw9wAWMcWczqqoIf57Rd3bmchkY
do+VxAN9Pvs0r+higJLDC3CCUiT/3rBwMPnfbbKROic2HBiAdrKI
-----END CERTIFICATE-----
Generated at Sun May 19 06:03:07 2024 by rpki-client on console-fra.rpki-client.org