Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DRpKFJxG0CqWFrVn4YFjc86cujk.roa
File: DRpKFJxG0CqWFrVn4YFjc86cujk.roa (raw, json)
Hash identifier: 0vLMbuu3MQ9xO3hSaDX0n78GC+wpAo6gO0IAlIufqao=
Subject key identifier: 0D:1A:4A:14:9C:46:D0:2A:96:16:B5:67:E1:81:63:73:CE:9C:BA:39
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A4ED6F4EAE0D4CB02F20D7677071F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DRpKFJxG0CqWFrVn4YFjc86cujk.roa
Signing time: Tue 02 Jan 2024 12:33:39 +0000
ROA not before: Tue 02 Jan 2024 12:33:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209398
IP address blocks: 95.46.145.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:4e:d6:f4:ea:e0:d4:cb:02:f2:0d:76:77:07:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d1a4a149c46d02a9616b567e1816373ce9cba39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:53:34:95:10:2e:58:04:50:54:e1:71:2d:ed:
c3:02:5e:9b:a5:1f:db:90:45:7f:98:6d:a0:8b:61:
5a:c6:ae:c1:c1:b9:1a:1a:00:79:43:c9:3b:1b:c1:
67:50:99:bc:8c:d1:7f:ff:60:3b:bc:8b:02:2b:90:
f4:4b:97:56:e3:99:6c:21:e7:09:d1:f3:1a:a7:da:
fe:d4:b5:8e:3c:ab:39:8b:3c:0d:a4:d0:6c:eb:36:
b9:07:58:fa:6c:18:5a:d6:57:f1:20:37:a8:f5:20:
21:65:33:e1:93:1b:51:cf:f2:6a:ad:6d:ef:93:65:
bb:ab:fc:9c:80:49:5c:9a:0e:14:b5:07:b3:25:2d:
53:5d:d2:f9:1e:12:b4:9d:ab:bc:8e:de:66:0c:36:
0b:08:1d:97:7f:44:4a:94:53:21:d6:11:15:bf:c9:
db:b6:66:6f:57:aa:ac:e8:59:44:fa:35:95:84:4d:
5a:c8:1b:08:13:d3:c2:81:57:62:ae:ed:00:eb:4f:
d7:31:b9:be:c8:9e:dd:f5:99:6c:8f:76:fb:8b:2e:
18:1c:4b:35:f1:d6:93:78:86:87:90:d4:99:72:59:
44:8d:1d:25:7e:5b:2f:64:27:ef:6d:c8:bd:04:5e:
06:72:7d:18:b2:c1:e3:13:9b:b6:ff:b2:d0:0e:6a:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:1A:4A:14:9C:46:D0:2A:96:16:B5:67:E1:81:63:73:CE:9C:BA:39
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DRpKFJxG0CqWFrVn4YFjc86cujk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.46.145.0/24
Signature Algorithm: sha256WithRSAEncryption
91:6f:5b:29:d0:dd:06:04:75:ce:60:5d:6f:b7:87:22:4d:72:
06:64:36:67:be:9a:58:db:e1:11:92:3d:9f:7d:a7:64:d3:0b:
da:da:95:4e:51:cd:3e:9f:01:4c:99:34:eb:b5:51:c2:4f:83:
43:f9:9b:43:99:7a:08:d0:62:ad:d6:b4:f6:b2:1c:cc:f6:17:
3a:9d:df:dc:e8:03:4c:6d:4e:3c:63:1c:ca:c3:bc:fa:f7:b3:
10:10:6f:0e:66:25:01:02:4f:df:4b:46:e8:7b:5a:36:e0:d2:
c6:ca:7b:09:ad:02:14:b7:e6:80:d5:85:27:42:c1:13:f4:e2:
93:9a:4c:59:5c:5e:f3:f2:8d:f7:91:ef:c7:83:9d:7f:aa:d5:
14:85:54:59:92:c1:b2:e4:17:c7:35:08:be:55:74:13:9d:6e:
cd:07:19:c1:76:ba:68:8d:ae:eb:7c:6b:f8:d3:8b:d4:8f:18:
99:bf:bd:3f:01:1c:6b:29:f9:be:7f:cc:d6:c5:c7:50:c4:0f:
75:b3:e0:87:e1:ce:a9:31:59:af:be:97:1e:dd:3d:e2:88:2a:
04:e3:90:96:63:48:0f:6f:98:a9:d1:02:9e:63:dc:08:f0:72:
67:53:06:97:cb:b1:58:59:44:0d:2e:a1:4a:7a:29:a8:5c:45:
af:b7:9c:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKk7W9Org1MsC8g12dwcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDFhNGExNDljNDZkMDJhOTYxNmI1NjdlMTgxNjM3M2NlOWNiYTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFM0lRAuWARQVOFxLe3DAl6bpR/b
kEV/mG2gi2Faxq7BwbkaGgB5Q8k7G8FnUJm8jNF//2A7vIsCK5D0S5dW45lsIecJ
0fMap9r+1LWOPKs5izwNpNBs6za5B1j6bBha1lfxIDeo9SAhZTPhkxtRz/JqrW3v
k2W7q/ycgElcmg4UtQezJS1TXdL5HhK0nau8jt5mDDYLCB2Xf0RKlFMh1hEVv8nb
tmZvV6qs6FlE+jWVhE1ayBsIE9PCgVdiru0A60/XMbm+yJ7d9Zlsj3b7iy4YHEs1
8daTeIaHkNSZcllEjR0lflsvZCfvbci9BF4Gcn0YssHjE5u2/7LQDmrH7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA0aShScRtAqlha1Z+GBY3POnLo5MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvRFJwS0ZKeEcwQ3FXRnJWbjRZRmpjODZjdWprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy6RMA0G
CSqGSIb3DQEBCwUAA4IBAQCRb1sp0N0GBHXOYF1vt4ciTXIGZDZnvppY2+ERkj2f
fadk0wva2pVOUc0+nwFMmTTrtVHCT4ND+ZtDmXoI0GKt1rT2shzM9hc6nd/c6ANM
bU48YxzKw7z697MQEG8OZiUBAk/fS0boe1o24NLGynsJrQIUt+aA1YUnQsET9OKT
mkxZXF7z8o33ke/Hg51/qtUUhVRZksGy5BfHNQi+VXQTnW7NBxnBdrpoja7rfGv4
04vUjxiZv70/ARxrKfm+f8zWxcdQxA91s+CH4c6pMVmvvpce3T3iiCoE45CWY0gP
b5ip0QKeY9wI8HJnUwaXy7FYWUQNLqFKeimoXEWvt5zL
-----END CERTIFICATE-----
Generated at Wed May 29 11:16:03 2024 by rpki-client on console-ams.rpki-client.org