Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C4Xjxf1O4inv5TteESN0WyaNTfg.roa
File: C4Xjxf1O4inv5TteESN0WyaNTfg.roa (raw, json)
Hash identifier: Bv4zeQfBVGTKJ/SbbuZYcBBrGSdnTBPDOlX5ZPANStQ=
Subject key identifier: 0B:85:E3:C5:FD:4E:E2:29:EF:E5:3B:5E:11:23:74:5B:26:8D:4D:F8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01915B26500317033AEF4DBF2C72742B924A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C4Xjxf1O4inv5TteESN0WyaNTfg.roa
Signing time: Fri 16 Aug 2024 12:25:23 +0000
ROA not before: Fri 16 Aug 2024 12:25:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 149977
IP address blocks: 85.202.203.0/24 maxlen: 24
2a0e:97c0:aa0::/44 maxlen: 48
2a0f:e404:105::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:5b:26:50:03:17:03:3a:ef:4d:bf:2c:72:74:2b:92:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 16 12:25:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b85e3c5fd4ee229efe53b5e1123745b268d4df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:eb:a8:65:ca:68:2b:47:3b:1b:0c:85:cc:32:
c1:7c:54:8f:72:25:49:a1:e9:db:14:16:8f:a0:d8:
fb:c3:90:66:18:42:6c:0f:40:8e:f2:fa:d3:e3:7b:
0d:06:2c:bf:23:80:75:e5:d7:c6:00:97:c8:b1:a1:
6a:40:cd:92:ef:e3:e9:ca:8a:9f:4e:36:e4:d3:1d:
b2:d1:56:1e:84:91:a9:4c:92:b0:0c:69:9a:ea:51:
98:32:26:a0:8c:ad:d8:30:10:02:d4:ee:60:3e:58:
76:4e:47:90:24:06:3e:b9:48:08:72:86:ed:ed:a4:
59:53:87:89:9e:96:6d:b7:d7:5a:dc:70:da:ed:d8:
1a:22:e6:1a:4a:d8:03:3a:f7:d3:e7:01:0c:62:1b:
09:94:18:fc:28:f5:8d:cc:fb:5c:8e:5d:5e:ae:72:
06:e9:85:0f:d1:7a:af:8c:48:07:b2:73:90:3b:f6:
69:27:bb:fb:5a:04:6c:c8:e8:2e:76:75:a5:f1:a1:
ed:1f:b0:46:0e:dd:5d:78:49:5f:e9:0c:ed:af:0c:
c9:ef:79:8b:a8:f0:68:5a:c6:8f:19:41:7b:c5:bd:
36:96:bd:17:ad:4a:e0:58:b4:e4:d3:6d:6e:26:ed:
35:53:b2:7d:18:2e:2c:11:05:7b:c6:eb:c6:95:ab:
48:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:85:E3:C5:FD:4E:E2:29:EF:E5:3B:5E:11:23:74:5B:26:8D:4D:F8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/C4Xjxf1O4inv5TteESN0WyaNTfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.203.0/24
IPv6:
2a0e:97c0:aa0::/44
2a0f:e404:105::/48
Signature Algorithm: sha256WithRSAEncryption
65:12:ea:30:ac:e9:34:5b:6b:73:18:0f:fa:6e:7a:72:55:78:
80:84:96:76:e3:83:b5:11:14:9c:d2:a8:87:03:21:61:48:5e:
92:22:6d:5c:4f:5f:69:d8:0b:89:30:68:0d:98:30:18:1e:61:
d3:f1:9f:ac:52:9a:06:29:11:34:f1:4e:80:88:f2:a4:4f:68:
ea:2b:df:49:9f:5c:67:77:c2:de:2c:70:cd:5e:2b:6c:d8:d8:
45:11:a2:ee:fe:8a:df:ec:ef:9b:65:ba:a5:c4:03:a1:a1:9c:
f8:ef:40:cc:d3:8a:48:77:4a:9a:c0:8a:aa:04:97:fb:ba:ee:
df:6f:30:3c:b2:49:22:f2:c7:95:eb:3a:0c:9b:8f:41:44:5b:
fa:1b:30:15:37:f1:42:43:f0:9d:29:70:3b:2e:cf:49:ea:4e:
0f:03:13:a4:1a:56:52:11:3d:20:05:a9:74:7c:e9:3e:9c:aa:
17:36:f1:19:d2:92:97:80:19:e9:1b:96:4b:a8:db:e0:dd:22:
1a:ca:41:4c:41:10:39:f6:2a:91:cf:70:10:50:31:6e:7b:6f:
70:9d:c9:8e:6d:9a:3b:e6:61:8f:41:bd:40:f3:98:46:b5:67:
e6:e7:9f:24:e4:29:7c:7b:2d:f9:bf:e5:a2:9d:29:49:c6:cd:
1f:5b:12:c9
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZFbJlADFwM6702/LHJ0K5JKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjQwODE2MTIyNTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjg1ZTNjNWZkNGVlMjI5ZWZlNTNiNWUxMTIzNzQ1YjI2OGQ0ZGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+uoZcpoK0c7GwyFzDLBfFSPciVJ
oenbFBaPoNj7w5BmGEJsD0CO8vrT43sNBiy/I4B15dfGAJfIsaFqQM2S7+Ppyoqf
Tjbk0x2y0VYehJGpTJKwDGma6lGYMiagjK3YMBAC1O5gPlh2TkeQJAY+uUgIcobt
7aRZU4eJnpZtt9da3HDa7dgaIuYaStgDOvfT5wEMYhsJlBj8KPWNzPtcjl1ernIG
6YUP0XqvjEgHsnOQO/ZpJ7v7WgRsyOgudnWl8aHtH7BGDt1deElf6QztrwzJ73mL
qPBoWsaPGUF7xb02lr0XrUrgWLTk021uJu01U7J9GC4sEQV7xuvGlatIDQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFAuF48X9TuIp7+U7XhEjdFsmjU34MB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvQzRYanhmMU80aW52NVR0ZUVTTjBXeWFOVGZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAMBAIAATAGAwQAVcrLMBgE
AgACMBIDBwQqDpfACqADBwAqD+QEAQUwDQYJKoZIhvcNAQELBQADggEBAGUS6jCs
6TRba3MYD/puenJVeICElnbjg7URFJzSqIcDIWFIXpIibVxPX2nYC4kwaA2YMBge
YdPxn6xSmgYpETTxToCI8qRPaOor30mfXGd3wt4scM1eK2zY2EURou7+it/s75tl
uqXEA6GhnPjvQMzTikh3SprAiqoEl/u67t9vMDyySSLyx5XrOgybj0FEW/obMBU3
8UJD8J0pcDsuz0nqTg8DE6QaVlIRPSAFqXR86T6cqhc28RnSkpeAGekblkuo2+Dd
IhrKQUxBEDn2KpHPcBBQMW57b3CdyY5tmjvmYY9BvUDzmEa1Z+bnnyTkKXx7Lfm/
5aKdKUnGzR9bEsk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:29 2024 by rpki-client on console-fra.rpki-client.org