Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8TKufIcZi8VsvTLYUkp6vPaPz3Q.roa
File: 8TKufIcZi8VsvTLYUkp6vPaPz3Q.roa (raw, json)
Hash identifier: roAKTvruxH0X20iFRaJyv++ZRwkQ9Vy8pporf0kr7HY=
Subject key identifier: F1:32:AE:7C:87:19:8B:C5:6C:BD:32:D8:52:4A:7A:BC:F6:8F:CF:74
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A3AFE881E079D2F51C21A17E560B8
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8TKufIcZi8VsvTLYUkp6vPaPz3Q.roa
Signing time: Tue 02 Jan 2024 12:33:34 +0000
ROA not before: Tue 02 Jan 2024 12:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201593
IP address blocks: 95.46.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:3a:fe:88:1e:07:9d:2f:51:c2:1a:17:e5:60:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f132ae7c87198bc56cbd32d8524a7abcf68fcf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:7a:ac:5e:22:45:26:7d:5a:8c:25:9c:72:
a5:83:7e:3d:bf:bb:99:29:73:02:4c:cf:0e:bd:13:
ed:90:12:66:dd:15:1c:12:eb:4a:a2:4c:3e:83:c5:
83:42:8b:7a:66:b7:a9:f5:cd:b8:b1:f1:6e:32:f7:
2a:62:3a:60:77:18:29:82:6e:80:fc:5a:50:0d:74:
f0:99:37:96:57:fb:b7:a9:71:37:c8:ca:c0:73:4f:
e0:5f:66:d3:c2:e5:02:6d:00:70:f8:18:53:08:b8:
f9:9e:57:4c:5f:db:c4:8c:21:aa:0e:69:10:b9:3f:
71:aa:b3:b9:33:53:e5:a1:4c:07:ee:c0:49:48:4c:
70:fc:48:55:75:26:75:46:65:90:56:a4:d0:68:40:
42:96:b6:46:76:dd:48:fd:ac:7e:60:32:ea:87:54:
b5:d4:83:a0:d3:d5:9c:9e:fc:f3:9c:ca:9b:2a:59:
83:a0:88:32:4a:dd:92:90:d3:0f:5c:d2:bb:25:10:
4e:5c:0f:fd:1b:ff:6e:21:d9:c7:1d:61:8c:66:fc:
74:a0:6e:42:87:54:dc:24:bb:2b:fa:c8:d8:7d:5a:
51:e0:93:53:78:bd:3e:c4:9a:e4:47:4c:1e:cd:57:
37:d7:72:76:32:10:c6:14:6c:ec:f2:da:9d:fa:16:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:32:AE:7C:87:19:8B:C5:6C:BD:32:D8:52:4A:7A:BC:F6:8F:CF:74
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/8TKufIcZi8VsvTLYUkp6vPaPz3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.197.0/24
Signature Algorithm: sha256WithRSAEncryption
90:37:6e:fc:f1:58:4f:aa:69:0a:2b:33:c8:fa:b2:57:78:a2:
45:ab:46:6d:82:61:ef:9c:12:94:21:78:f4:15:96:6d:be:f4:
fb:ec:38:1d:2a:f7:99:94:68:ba:16:61:eb:25:bd:ae:7e:b6:
ea:09:08:ef:36:70:ff:43:f8:cb:76:23:c4:54:8b:d6:f6:e5:
c6:19:46:0e:42:a4:58:e5:ad:77:27:8f:89:79:a9:9a:e8:16:
bf:d5:a5:5e:32:85:e3:31:d2:d7:f2:1f:33:e4:c1:7c:2c:48:
b2:14:11:0c:d9:92:29:89:50:2b:69:8a:3c:93:36:1e:98:2a:
ba:2c:9f:15:3f:62:ac:6c:b6:a5:02:81:9b:77:78:f6:f3:65:
14:c0:31:40:e4:34:65:ab:27:55:a0:b4:8d:56:ab:6e:76:99:
5b:a8:f5:d0:34:cf:da:cf:ae:a5:23:73:60:1c:85:33:03:a5:
d2:34:c8:50:2f:08:d7:48:00:87:23:73:ad:d9:cf:95:0a:bb:
95:c1:68:30:fc:5c:26:cf:b1:c2:b5:a1:8d:3c:d3:a2:79:9a:
73:b6:4e:5b:19:72:c9:0e:a0:8d:d2:31:0e:52:19:cd:89:d4:
eb:16:01:50:8f:49:2f:28:5c:9b:8d:98:38:4f:3f:4b:7c:e7:
5c:47:9b:7d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKjr+iB4HnS9RwhoX5WC4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTMyYWU3Yzg3MTk4YmM1NmNiZDMyZDg1MjRhN2FiY2Y2OGZjZjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtB6rF4iRSZ9WowlnHKlg349v7uZ
KXMCTM8OvRPtkBJm3RUcEutKokw+g8WDQot6Zrep9c24sfFuMvcqYjpgdxgpgm6A
/FpQDXTwmTeWV/u3qXE3yMrAc0/gX2bTwuUCbQBw+BhTCLj5nldMX9vEjCGqDmkQ
uT9xqrO5M1PloUwH7sBJSExw/EhVdSZ1RmWQVqTQaEBClrZGdt1I/ax+YDLqh1S1
1IOg09WcnvzznMqbKlmDoIgySt2SkNMPXNK7JRBOXA/9G/9uIdnHHWGMZvx0oG5C
h1TcJLsr+sjYfVpR4JNTeL0+xJrkR0wezVc313J2MhDGFGzs8tqd+hapAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPEyrnyHGYvFbL0y2FJKerz2j890MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvOFRLdWZJY1ppOFZzdlRMWVVrcDZ2UGFQejNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy7FMA0G
CSqGSIb3DQEBCwUAA4IBAQCQN2788VhPqmkKKzPI+rJXeKJFq0ZtgmHvnBKUIXj0
FZZtvvT77DgdKveZlGi6FmHrJb2ufrbqCQjvNnD/Q/jLdiPEVIvW9uXGGUYOQqRY
5a13J4+Jeama6Ba/1aVeMoXjMdLX8h8z5MF8LEiyFBEM2ZIpiVAraYo8kzYemCq6
LJ8VP2KsbLalAoGbd3j282UUwDFA5DRlqydVoLSNVqtudplbqPXQNM/az66lI3Ng
HIUzA6XSNMhQLwjXSACHI3Ot2c+VCruVwWgw/Fwmz7HCtaGNPNOieZpztk5bGXLJ
DqCN0jEOUhnNidTrFgFQj0kvKFybjZg4Tz9LfOdcR5t9
-----END CERTIFICATE-----
Generated at Wed May 29 09:37:02 2024 by rpki-client on console-fra.rpki-client.org