Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SW5TQeRkbLdLv5HHtritgxFHxEQ.roa
File: SW5TQeRkbLdLv5HHtritgxFHxEQ.roa (raw, json)
Hash identifier: bdnHdJTtOoYTNsvYaXF5lM05aFa6O/edyNuYk4RdAEI=
Subject key identifier: 49:6E:53:41:E4:64:6C:B7:4B:BF:91:C7:B6:B8:AD:83:11:47:C4:44
Certificate issuer: /CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Certificate serial: 018DF583BFD63441CC55BA688F456C0ADA83
Authority key identifier: 7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SW5TQeRkbLdLv5HHtritgxFHxEQ.roa
Signing time: Thu 29 Feb 2024 15:37:48 +0000
ROA not before: Thu 29 Feb 2024 15:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47325
IP address blocks: 87.229.6.0/24 maxlen: 24
87.229.115.0/24 maxlen: 24
87.229.127.0/24 maxlen: 24
95.138.193.0/24 maxlen: 24
217.113.49.0/24 maxlen: 24
2a02:730:7000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.mft
rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:f5:83:bf:d6:34:41:cc:55:ba:68:8f:45:6c:0a:da:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b5e37f6e3b9bd1cf3684b9c03c03ad1ca642497
Validity
Not Before: Feb 29 15:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=496e5341e4646cb74bbf91c7b6b8ad831147c444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:64:93:a4:11:bc:d5:03:d6:52:ab:16:35:d5:
c6:77:e5:60:4e:a7:d5:39:14:39:cb:74:ff:80:b7:
7a:f4:39:f0:2a:f3:11:45:d2:58:88:7e:2b:43:a7:
04:74:aa:4a:43:cd:54:c7:83:2e:69:76:83:dd:59:
98:73:0c:91:51:82:57:4b:50:63:96:f6:ec:96:fa:
c9:bb:1d:19:f7:84:5b:78:15:38:3b:ce:c6:47:f0:
59:18:53:87:e6:3f:a0:e9:ed:0f:f4:a7:1f:4d:0c:
76:fe:02:33:ec:e5:8b:ab:44:cc:2d:77:e7:69:94:
c5:d4:35:6c:ea:9e:b4:f0:93:72:7e:8a:69:2a:3a:
f1:71:9a:a0:b6:98:23:ab:79:91:d9:ee:3b:d0:2c:
05:32:82:3b:40:23:d5:69:5f:98:d4:39:d7:56:7d:
67:d5:24:e3:8f:e9:72:8f:59:8f:56:e0:d9:2b:74:
cd:7a:87:75:04:9f:3f:ed:c4:42:73:84:bb:33:0d:
79:aa:d1:7b:61:34:b5:1c:61:31:d0:b2:76:52:b5:
13:16:d7:57:6d:41:57:0f:fa:c2:b6:59:50:cd:36:
9f:5c:e5:e4:17:69:c3:73:16:a6:c6:9c:e0:32:d1:
a8:63:05:3b:85:9b:4d:d6:a0:e0:53:39:b7:f2:89:
c2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6E:53:41:E4:64:6C:B7:4B:BF:91:C7:B6:B8:AD:83:11:47:C4:44
X509v3 Authority Key Identifier:
keyid:7B:5E:37:F6:E3:B9:BD:1C:F3:68:4B:9C:03:C0:3A:D1:CA:64:24:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1439uO5vRzzaEucA8A60cpkJJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/SW5TQeRkbLdLv5HHtritgxFHxEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/26728e-ddc7-4b0f-9d1e-9593a488afcc/1/e1439uO5vRzzaEucA8A60cpkJJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.229.6.0/24
87.229.115.0/24
87.229.127.0/24
95.138.193.0/24
217.113.49.0/24
IPv6:
2a02:730:7000::/48
Signature Algorithm: sha256WithRSAEncryption
2d:78:62:1e:c1:d9:54:66:59:51:ad:f7:71:46:e2:cf:c0:64:
59:45:e9:6a:33:1f:ae:0a:90:7e:df:06:1e:52:9d:8e:e1:9a:
31:01:5a:0e:ee:a5:25:a5:a0:a9:24:3e:75:f9:ac:0b:fb:05:
38:03:82:13:4e:1e:73:28:0b:c9:18:dc:15:0d:67:93:00:85:
43:3e:66:c4:d7:85:ac:a2:34:16:66:69:21:a6:86:94:91:87:
89:e9:70:3e:cf:db:17:97:86:c3:ee:b4:c1:d2:dd:f1:e3:e0:
58:4c:35:19:80:3b:62:eb:f2:7e:84:0b:71:b2:5f:61:d6:3b:
6b:a1:42:48:a5:89:e7:f0:65:26:e5:dc:78:c5:37:5a:ad:f4:
aa:99:2d:cc:7e:19:2e:fe:bc:a3:ab:97:05:a3:a9:29:9b:67:
f8:6a:8a:f4:ee:e0:97:12:f2:d8:39:90:36:09:fd:4f:13:43:
fd:59:2f:ae:d3:9a:e3:96:ad:fc:37:c7:f7:32:b0:53:b8:49:
a5:08:ea:c6:11:1e:dd:d9:be:23:7c:4e:b5:2a:83:b9:1a:34:
70:11:ca:42:76:d0:b8:85:5a:65:a3:95:43:40:31:13:06:a2:
ba:25:81:c1:81:f7:04:82:5b:b7:29:95:35:45:df:01:bb:8c:
17:a4:b2:ba
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAY31g7/WNEHMVbpoj0VsCtqDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNWUzN2Y2ZTNiOWJkMWNmMzY4NGI5YzAzYzAzYWQxY2E2
NDI0OTcwHhcNMjQwMjI5MTUzNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTZlNTM0MWU0NjQ2Y2I3NGJiZjkxYzdiNmI4YWQ4MzExNDdjNDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmSTpBG81QPWUqsWNdXGd+VgTqfV
ORQ5y3T/gLd69DnwKvMRRdJYiH4rQ6cEdKpKQ81Ux4MuaXaD3VmYcwyRUYJXS1Bj
lvbslvrJux0Z94RbeBU4O87GR/BZGFOH5j+g6e0P9KcfTQx2/gIz7OWLq0TMLXfn
aZTF1DVs6p608JNyfoppKjrxcZqgtpgjq3mR2e470CwFMoI7QCPVaV+Y1DnXVn1n
1STjj+lyj1mPVuDZK3TNeod1BJ8/7cRCc4S7Mw15qtF7YTS1HGEx0LJ2UrUTFtdX
bUFXD/rCtllQzTafXOXkF2nDcxamxpzgMtGoYwU7hZtN1qDgUzm38onCvQIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFEluU0HkZGy3S7+Rx7a4rYMRR8REMB8GA1UdIwQY
MBaAFHteN/bjub0c82hLnAPAOtHKZCSXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUt
OTU5M2E0ODhhZmNjLzEvU1c1VFFlUmtiTGRMdjVISHRyaXRneEZIeEVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny8yNjcyOGUtZGRjNy00YjBmLTlkMWUtOTU5M2E0ODhhZmNj
LzEvZTE0Mzl1TzV2Unp6YUV1Y0E4QTYwY3BrSkpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAkBAIAATAeAwQAV+UGAwQA
V+VzAwQAV+V/AwQAX4rBAwQA2XExMA8EAgACMAkDBwAqAgcwcAAwDQYJKoZIhvcN
AQELBQADggEBAC14Yh7B2VRmWVGt93FG4s/AZFlF6WozH64KkH7fBh5SnY7hmjEB
Wg7upSWloKkkPnX5rAv7BTgDghNOHnMoC8kY3BUNZ5MAhUM+ZsTXhayiNBZmaSGm
hpSRh4npcD7P2xeXhsPutMHS3fHj4FhMNRmAO2Lr8n6EC3GyX2HWO2uhQkiliefw
ZSbl3HjFN1qt9KqZLcx+GS7+vKOrlwWjqSmbZ/hqivTu4JcS8tg5kDYJ/U8TQ/1Z
L67TmuOWrfw3x/cysFO4SaUI6sYRHt3ZviN8TrUqg7kaNHARykJ20LiFWmWjlUNA
MRMGorolgcGB9wSCW7cplTVF3wG7jBeksro=
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:30:03 2024 by rpki-client on console-fra.rpki-client.org