Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TfnnvuwNf2kmtFJT4CzAtNg5RhQ.roa
File: TfnnvuwNf2kmtFJT4CzAtNg5RhQ.roa (raw, json)
Hash identifier: P4PCm9eEDLhUVu+OzCx2dKVMGqwZNhszBm4WMJaTPkc=
Subject key identifier: 4D:F9:E7:BE:EC:0D:7F:69:26:B4:52:53:E0:2C:C0:B4:D8:39:46:14
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A31E56EC188DBD10A62998A0C5197
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TfnnvuwNf2kmtFJT4CzAtNg5RhQ.roa
Signing time: Tue 02 Jan 2024 12:33:32 +0000
ROA not before: Tue 02 Jan 2024 12:33:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62331
IP address blocks: 95.47.244.0/24 maxlen: 24
95.47.189.0/24 maxlen: 24
95.47.191.0/24 maxlen: 24
31.148.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:12:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:31:e5:6e:c1:88:db:d1:0a:62:99:8a:0c:51:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4df9e7beec0d7f6926b45253e02cc0b4d8394614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:33:a6:8a:d1:95:f1:95:a5:c1:a2:f8:85:4b:
8d:92:3a:66:de:6c:93:3e:a2:4a:f3:c6:07:ee:a5:
fa:4c:37:92:84:98:90:2c:99:20:01:24:14:cf:53:
38:34:0f:45:38:2b:2b:dd:2b:ac:bb:42:c4:e8:74:
4f:94:87:c2:ec:22:73:7f:d4:a3:fa:01:11:b3:db:
ae:20:9e:6b:f1:16:a4:5b:ce:88:20:ad:ad:11:5d:
60:60:12:26:d2:90:51:e3:29:e1:02:86:9c:4f:2a:
45:17:f0:6d:df:95:c7:18:d6:61:56:29:b4:f8:77:
a0:5c:59:c6:42:e1:82:09:3c:14:a2:09:ea:31:47:
9d:55:98:1c:0f:9b:bf:5d:d8:04:1a:3f:68:84:72:
00:dc:6c:18:87:b6:f8:e7:bc:33:f7:f1:c6:74:c4:
e2:af:99:ff:c2:eb:a3:af:e0:6a:1c:d3:54:06:fe:
bf:81:30:b0:31:b3:65:ba:14:55:09:24:ef:ca:32:
87:7e:0d:ba:eb:f9:b7:8e:88:16:e7:05:a8:6b:af:
94:ea:78:f3:10:b1:91:7e:15:2e:9d:c7:9b:5d:b2:
29:1b:6b:51:cc:c8:1a:09:ea:4f:c2:10:eb:b7:a6:
d2:0e:4c:cc:43:8e:1f:f5:55:81:65:11:25:e0:7a:
ea:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:F9:E7:BE:EC:0D:7F:69:26:B4:52:53:E0:2C:C0:B4:D8:39:46:14
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/TfnnvuwNf2kmtFJT4CzAtNg5RhQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.205.0/24
95.47.189.0/24
95.47.191.0/24
95.47.244.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:e0:4c:df:c1:70:b5:42:1d:5e:0a:a6:df:55:99:ce:31:f5:
87:39:e7:c7:ec:5f:95:50:16:8e:70:6e:0b:9d:81:83:53:fc:
3f:13:1a:57:31:77:d6:65:5b:7f:19:f9:52:60:00:cc:b1:31:
03:c0:97:ec:aa:4f:48:86:d6:5b:a4:ef:0e:ab:00:19:80:3d:
dc:80:f7:c5:35:ae:81:c2:00:e4:c1:b6:2d:7f:30:d2:63:a7:
2b:7c:c9:4d:df:53:e3:10:9a:4d:55:bb:e1:98:13:88:c3:f7:
f3:da:98:c9:e6:1e:36:f2:17:08:30:1e:19:13:53:c5:a5:67:
5b:07:17:03:0f:d7:3b:4b:54:cb:c8:c4:ca:a5:bf:2c:9a:e3:
aa:6c:d3:54:93:c1:a4:c6:c8:87:2c:77:47:17:d9:58:b2:76:
44:d6:1b:29:5e:15:0d:2c:54:24:77:23:e4:a3:97:16:f2:85:
68:b9:ac:7a:f0:ae:dd:43:b4:b2:0d:14:21:91:da:58:de:21:
42:2c:55:5d:c1:4d:99:7b:22:9e:26:9e:b3:6d:4c:dc:18:aa:
e6:e9:91:4e:dd:ff:f9:07:73:80:3f:e1:8a:29:6a:db:0a:d0:
a7:e1:fd:92:29:50:89:65:1c:39:2c:9a:e9:1b:97:bb:8a:1f:
f5:da:1a:4d
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzKKjHlbsGI29EKYpmKDFGXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGY5ZTdiZWVjMGQ3ZjY5MjZiNDUyNTNlMDJjYzBiNGQ4Mzk0NjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTOmitGV8ZWlwaL4hUuNkjpm3myT
PqJK88YH7qX6TDeShJiQLJkgASQUz1M4NA9FOCsr3Susu0LE6HRPlIfC7CJzf9Sj
+gERs9uuIJ5r8RakW86IIK2tEV1gYBIm0pBR4ynhAoacTypFF/Bt35XHGNZhVim0
+HegXFnGQuGCCTwUognqMUedVZgcD5u/XdgEGj9ohHIA3GwYh7b457wz9/HGdMTi
r5n/wuujr+BqHNNUBv6/gTCwMbNluhRVCSTvyjKHfg266/m3jogW5wWoa6+U6njz
ELGRfhUuncebXbIpG2tRzMgaCepPwhDrt6bSDkzMQ44f9VWBZREl4HrqywIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFE35577sDX9pJrRSU+AswLTYOUYUMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvVGZubnZ1d05mMmttdEZKVDRDekF0Tmc1UmhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAH5TNAwQA
Xy+9AwQAXy+/AwQAXy/0MA0GCSqGSIb3DQEBCwUAA4IBAQAc4EzfwXC1Qh1eCqbf
VZnOMfWHOefH7F+VUBaOcG4LnYGDU/w/ExpXMXfWZVt/GflSYADMsTEDwJfsqk9I
htZbpO8OqwAZgD3cgPfFNa6BwgDkwbYtfzDSY6crfMlN31PjEJpNVbvhmBOIw/fz
2pjJ5h428hcIMB4ZE1PFpWdbBxcDD9c7S1TLyMTKpb8smuOqbNNUk8GkxsiHLHdH
F9lYsnZE1hspXhUNLFQkdyPko5cW8oVouax68K7dQ7SyDRQhkdpY3iFCLFVdwU2Z
eyKeJp6zbUzcGKrm6ZFO3f/5B3OAP+GKKWrbCtCn4f2SKVCJZRw5LJrpG5e7ih/1
2hpN
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:46:12 2024 by rpki-client on console-fra.rpki-client.org