Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/me2En5-8C7KWyDCVl8AB2vggAjM.roa
File: me2En5-8C7KWyDCVl8AB2vggAjM.roa (raw, json)
Hash identifier: W6EjpuSkjrJt8R9jfd5SBFLvjk8NvFubGdjunsY29fo=
Subject key identifier: 99:ED:84:9F:9F:BC:0B:B2:96:C8:30:95:97:C0:01:DA:F8:20:02:33
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 018CC8DF88687B0C96652109B38E1704E39D
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/me2En5-8C7KWyDCVl8AB2vggAjM.roa
Signing time: Tue 02 Jan 2024 06:32:21 +0000
ROA not before: Tue 02 Jan 2024 06:32:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206119
IP address blocks: 78.135.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 16:11:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:88:68:7b:0c:96:65:21:09:b3:8e:17:04:e3:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Jan 2 06:32:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=99ed849f9fbc0bb296c8309597c001daf8200233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1c:69:1e:d9:a8:56:26:5a:91:e7:c5:fb:6b:
05:0b:1b:ee:9b:a3:97:f0:b6:a9:a1:94:ef:17:30:
cd:a7:f0:b0:19:34:a2:16:74:80:c0:a1:cc:fd:ee:
5e:74:6c:95:fb:d3:55:f0:fa:9e:e2:a3:33:fd:42:
20:c6:2f:9b:1d:40:3a:09:92:d1:6c:9e:fd:1e:b1:
38:66:75:df:5b:32:19:23:48:c2:ab:9d:a3:af:63:
78:fc:0b:f1:0e:54:f0:2f:c6:f3:47:66:34:7c:ec:
45:21:79:ae:84:70:7d:a0:60:03:6d:43:b7:3b:53:
ae:24:5e:03:ae:ba:97:0b:aa:93:e4:24:3c:15:44:
34:ee:55:f8:e2:3d:5b:54:74:7f:bc:93:54:f2:72:
33:17:1d:83:5a:1b:cd:a8:66:3a:a5:13:37:00:6f:
e8:84:8a:27:f9:0d:7a:2b:cf:73:37:01:06:39:24:
bd:4b:97:b4:31:1c:bc:17:b4:00:6c:29:4d:77:0a:
b5:ca:08:a1:36:fb:73:d5:99:19:0a:a9:cd:9a:e3:
b5:06:2e:f0:64:b3:d3:b4:51:3a:85:0f:72:24:c8:
7a:62:ca:82:a0:be:71:85:03:4b:c3:d9:10:10:d3:
a2:47:5a:97:53:1e:a8:07:6e:52:94:b3:d7:31:c9:
df:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:ED:84:9F:9F:BC:0B:B2:96:C8:30:95:97:C0:01:DA:F8:20:02:33
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/me2En5-8C7KWyDCVl8AB2vggAjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.72.0/24
Signature Algorithm: sha256WithRSAEncryption
55:8b:0d:ce:3d:87:05:cc:04:9e:76:69:cb:68:6b:3e:b5:1f:
7f:e0:40:91:e5:e0:3a:2a:5c:f9:5e:f3:ff:81:99:75:e2:25:
cb:89:e2:95:35:c6:ee:b4:37:7c:9c:6c:37:f6:ab:f1:52:c5:
d7:d9:6a:74:eb:ea:68:87:0a:67:e2:84:56:7e:ec:21:26:8e:
a8:05:22:c9:49:33:ea:a5:fa:56:57:8a:81:ac:ab:30:b1:da:
3e:61:0e:61:fb:e7:e2:7c:41:29:1b:83:52:8b:aa:c4:a3:c9:
59:30:e6:b6:a1:86:4e:fb:d2:e8:43:d1:ab:95:02:04:17:5b:
9d:ee:f6:42:70:1a:94:47:47:ef:e3:b3:55:ff:76:0e:00:a7:
9c:17:c7:3b:6c:81:e8:55:23:2c:48:f3:f6:37:5a:95:35:7f:
11:3b:c4:0b:a1:03:91:d3:7e:45:cb:41:df:8a:29:bf:9c:d0:
60:4b:59:cc:35:11:27:3e:d3:fb:8a:40:91:b6:df:1d:83:e5:
cc:56:9a:5a:22:cd:6f:fa:f9:8a:87:dd:c5:66:73:be:78:e9:
2e:d4:a6:fa:b2:1c:fa:3b:d4:61:1a:9a:8e:25:7e:3d:e1:aa:
83:e7:97:c9:f6:56:e3:92:6b:74:c1:5c:36:5f:95:6c:e5:a9:
a4:7e:25:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI34hoewyWZSEJs44XBOOdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjQwMTAyMDYzMjIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OWVkODQ5ZjlmYmMwYmIyOTZjODMwOTU5N2MwMDFkYWY4MjAwMjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxxpHtmoViZakefF+2sFCxvum6OX
8LapoZTvFzDNp/CwGTSiFnSAwKHM/e5edGyV+9NV8Pqe4qMz/UIgxi+bHUA6CZLR
bJ79HrE4ZnXfWzIZI0jCq52jr2N4/AvxDlTwL8bzR2Y0fOxFIXmuhHB9oGADbUO3
O1OuJF4DrrqXC6qT5CQ8FUQ07lX44j1bVHR/vJNU8nIzFx2DWhvNqGY6pRM3AG/o
hIon+Q16K89zNwEGOSS9S5e0MRy8F7QAbClNdwq1ygihNvtz1ZkZCqnNmuO1Bi7w
ZLPTtFE6hQ9yJMh6YsqCoL5xhQNLw9kQENOiR1qXUx6oB25SlLPXMcnfDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJnthJ+fvAuylsgwlZfAAdr4IAIzMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvbWUyRW41LThDN0tXeURDVmw4QUIydmdnQWpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQATodIMA0G
CSqGSIb3DQEBCwUAA4IBAQBViw3OPYcFzASedmnLaGs+tR9/4ECR5eA6Klz5XvP/
gZl14iXLieKVNcbutDd8nGw39qvxUsXX2Wp06+pohwpn4oRWfuwhJo6oBSLJSTPq
pfpWV4qBrKswsdo+YQ5h++fifEEpG4NSi6rEo8lZMOa2oYZO+9LoQ9GrlQIEF1ud
7vZCcBqUR0fv47NV/3YOAKecF8c7bIHoVSMsSPP2N1qVNX8RO8QLoQOR035Fy0Hf
iim/nNBgS1nMNREnPtP7ikCRtt8dg+XMVppaIs1v+vmKh93FZnO+eOku1Kb6shz6
O9RhGpqOJX494aqD55fJ9lbjkmt0wVw2X5Vs5amkfiWb
-----END CERTIFICATE-----
Generated at Mon May 20 20:06:45 2024 by rpki-client on console-fra.rpki-client.org