Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/TvvxXYs1iLCo0S2nPEz8X1hhjtc.roa
File: TvvxXYs1iLCo0S2nPEz8X1hhjtc.roa (raw, json)
Hash identifier: sBYWauWFHJNJqDddsXXMNATaZ/bU3/UVdKBh3/8uZIA=
Subject key identifier: 4E:FB:F1:5D:8B:35:88:B0:A8:D1:2D:A7:3C:4C:FC:5F:58:61:8E:D7
Certificate issuer: /CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Certificate serial: 018EBE1E2D6AF08241B55A63389DF69D9663
Authority key identifier: 07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/TvvxXYs1iLCo0S2nPEz8X1hhjtc.roa
Signing time: Mon 08 Apr 2024 14:30:32 +0000
ROA not before: Mon 08 Apr 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49418
IP address blocks: 87.251.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:be:1e:2d:6a:f0:82:41:b5:5a:63:38:9d:f6:9d:96:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073b4c1248c4bcf22b0577dfca9b14d9063c28c0
Validity
Not Before: Apr 8 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4efbf15d8b3588b0a8d12da73c4cfc5f58618ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:fb:52:77:22:7f:2e:e0:9d:06:4e:46:1b:
f3:28:ce:e8:1f:22:6e:f4:0c:8b:5e:b7:f2:56:dd:
ab:4b:53:34:43:45:10:02:92:74:b6:64:8f:48:a9:
5c:bd:da:95:02:42:df:ab:34:51:5b:16:3d:56:30:
4a:34:b5:14:c4:d7:1d:5e:89:9a:fa:35:00:dd:4a:
db:62:c1:25:df:e8:0c:29:c9:b2:b0:fd:9f:7d:01:
8a:1b:f3:84:03:4f:b2:2c:0d:0d:85:4f:52:5d:d2:
40:d2:af:9f:a9:e8:4f:b8:4b:7d:2b:61:21:99:4b:
90:ad:fb:84:a6:52:c4:ae:32:97:3c:67:d2:46:6c:
e8:9c:85:d9:56:8e:6d:fd:06:2b:cb:f2:92:7e:7a:
28:5a:70:11:c9:95:57:c3:30:77:45:82:c8:36:fc:
ce:91:16:3b:04:5c:22:25:09:52:36:49:c1:71:8d:
61:3b:d7:20:53:71:08:44:61:d7:0d:af:55:b3:b5:
96:c1:62:81:d4:64:9a:a3:4a:64:b3:4b:fe:55:0e:
df:a5:aa:72:6b:71:a5:4c:a8:e2:02:7c:39:2e:94:
45:c6:8b:e6:86:bb:08:89:30:8d:ae:45:8b:b3:c8:
dd:a0:5f:cb:bc:1d:53:ff:2c:e0:04:6c:f9:f1:59:
96:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FB:F1:5D:8B:35:88:B0:A8:D1:2D:A7:3C:4C:FC:5F:58:61:8E:D7
X509v3 Authority Key Identifier:
keyid:07:3B:4C:12:48:C4:BC:F2:2B:05:77:DF:CA:9B:14:D9:06:3C:28:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BztMEkjEvPIrBXffypsU2QY8KMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/TvvxXYs1iLCo0S2nPEz8X1hhjtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/63dbe5-5aa3-4f19-8da4-a8d361ce64aa/1/BztMEkjEvPIrBXffypsU2QY8KMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.251.89.0/24
Signature Algorithm: sha256WithRSAEncryption
86:e9:20:0d:db:a0:7d:8d:3b:6d:ab:d8:a6:53:59:99:5c:27:
fa:20:41:69:c8:b4:9a:0c:62:76:e9:6d:e3:4b:a8:b6:0f:57:
ef:0a:58:33:12:8c:11:dd:76:bd:da:f5:1f:75:4f:6b:de:5b:
2c:1a:76:0f:de:16:1e:65:d0:90:bd:91:94:b7:64:56:b4:a4:
b1:3c:22:c7:5f:90:d5:40:0e:3a:5c:e5:73:e9:bc:87:b4:44:
eb:b9:67:26:cf:89:5f:e9:50:4e:90:63:81:ec:e9:2c:ff:2d:
08:d0:a7:cf:f9:bf:95:5b:77:a4:22:a8:0f:c0:32:c8:03:22:
8f:b0:9c:5f:d6:16:3d:c5:a2:6b:d6:76:10:17:5c:64:ae:5d:
90:2c:f1:04:6d:fd:ca:d5:7c:4b:0a:ed:cf:d8:e1:76:f9:75:
11:db:0b:4a:40:16:a1:f4:fa:64:d1:cc:b4:88:c5:1b:a0:0e:
ec:cc:c9:e4:d7:ee:2d:6f:fd:71:33:78:58:1e:34:eb:03:5a:
45:45:80:56:ab:f6:b8:e3:c1:c0:18:5d:77:88:c1:5c:83:c0:
af:5a:58:1e:bf:8a:b1:59:6c:d5:82:47:a6:b7:29:49:c4:61:
cb:ea:bb:02:92:11:93:92:b1:c3:2e:87:31:3d:37:e4:c4:7f:
0d:26:26:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6+Hi1q8IJBtVpjOJ32nZZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3M2I0YzEyNDhjNGJjZjIyYjA1NzdkZmNhOWIxNGQ5MDYz
YzI4YzAwHhcNMjQwNDA4MTQzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWZiZjE1ZDhiMzU4OGIwYThkMTJkYTczYzRjZmM1ZjU4NjE4ZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfL7Uncify7gnQZORhvzKM7oHyJu
9AyLXrfyVt2rS1M0Q0UQApJ0tmSPSKlcvdqVAkLfqzRRWxY9VjBKNLUUxNcdXoma
+jUA3UrbYsEl3+gMKcmysP2ffQGKG/OEA0+yLA0NhU9SXdJA0q+fqehPuEt9K2Eh
mUuQrfuEplLErjKXPGfSRmzonIXZVo5t/QYry/KSfnooWnARyZVXwzB3RYLINvzO
kRY7BFwiJQlSNknBcY1hO9cgU3EIRGHXDa9Vs7WWwWKB1GSao0pks0v+VQ7fpapy
a3GlTKjiAnw5LpRFxovmhrsIiTCNrkWLs8jdoF/LvB1T/yzgBGz58VmW3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE778V2LNYiwqNEtpzxM/F9YYY7XMB8GA1UdIwQY
MBaAFAc7TBJIxLzyKwV338qbFNkGPCjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQt
YThkMzYxY2U2NGFhLzEvVHZ2eFhZczFpTENvMFMyblBFejhYMWhoanRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy82M2RiZTUtNWFhMy00ZjE5LThkYTQtYThkMzYxY2U2NGFh
LzEvQnp0TUVrakV2UElyQlhmZnlwc1UyUVk4S01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV/tZMA0G
CSqGSIb3DQEBCwUAA4IBAQCG6SAN26B9jTttq9imU1mZXCf6IEFpyLSaDGJ26W3j
S6i2D1fvClgzEowR3Xa92vUfdU9r3lssGnYP3hYeZdCQvZGUt2RWtKSxPCLHX5DV
QA46XOVz6byHtETruWcmz4lf6VBOkGOB7Oks/y0I0KfP+b+VW3ekIqgPwDLIAyKP
sJxf1hY9xaJr1nYQF1xkrl2QLPEEbf3K1XxLCu3P2OF2+XUR2wtKQBah9Ppk0cy0
iMUboA7szMnk1+4tb/1xM3hYHjTrA1pFRYBWq/a448HAGF13iMFcg8CvWlgev4qx
WWzVgkemtylJxGHL6rsCkhGTkrHDLocxPTfkxH8NJibI
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:12:21 2024 by rpki-client on console-fra.rpki-client.org