Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fq5TMNJ4zaTsnXU1rrF2zvynm3k.roa
File: fq5TMNJ4zaTsnXU1rrF2zvynm3k.roa (raw, json)
Hash identifier: 5QnxA08qPlQVYxcHOcpd4WT1sJGJQgH+2YNe30+1KM4=
Subject key identifier: 7E:AE:53:30:D2:78:CD:A4:EC:9D:75:35:AE:B1:76:CE:FC:A7:9B:79
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 018CCA2A422214EAF06C90EA953D656A8749
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fq5TMNJ4zaTsnXU1rrF2zvynm3k.roa
Signing time: Tue 02 Jan 2024 12:33:36 +0000
ROA not before: Tue 02 Jan 2024 12:33:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204674
IP address blocks: 95.47.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:42:22:14:ea:f0:6c:90:ea:95:3d:65:6a:87:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 12:33:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eae5330d278cda4ec9d7535aeb176cefca79b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:f8:f1:0a:24:89:87:6b:cc:eb:83:55:00:
a6:06:5a:9e:40:d8:fd:f3:04:82:04:b1:64:ac:88:
ba:5b:ad:64:e0:76:c0:27:fb:af:d1:c6:b9:f5:0f:
d2:83:4f:4c:59:8d:c7:a3:b9:25:d6:34:e6:a6:6c:
eb:ed:e8:af:c7:6c:4d:e5:da:61:05:87:48:ec:f2:
72:86:41:4e:30:ab:89:67:dc:52:21:d4:9a:ab:ec:
b6:59:67:21:cb:1f:e7:d5:73:e3:be:e6:99:7e:81:
bc:f8:be:f5:c8:5e:f3:5d:57:28:19:fd:4b:fd:06:
99:47:cd:7e:67:03:e3:2c:93:86:27:54:9f:a1:34:
ee:4c:ba:48:e3:5f:84:ed:5c:9e:9f:4f:00:2b:c3:
d4:2c:42:a7:5f:82:68:5e:7a:98:c0:8a:d3:89:8b:
07:df:ac:0d:08:21:58:b3:fe:91:74:a8:9d:2b:0e:
c6:b1:6b:05:48:c1:75:36:91:b3:db:84:70:02:2a:
d2:98:68:3c:b6:19:5a:42:88:f3:90:d8:80:73:40:
f3:0d:b5:79:83:2e:dc:48:90:23:e3:8d:5c:54:4f:
8c:27:dd:28:61:82:8f:99:2a:36:3c:41:da:c7:14:
bc:c6:37:0a:42:73:0e:c1:37:a8:de:7a:52:a5:45:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:AE:53:30:D2:78:CD:A4:EC:9D:75:35:AE:B1:76:CE:FC:A7:9B:79
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/fq5TMNJ4zaTsnXU1rrF2zvynm3k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.154.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:41:2a:83:34:f2:dd:9b:90:6c:fe:50:af:60:ad:e6:18:10:
c1:bf:ad:6d:ee:fa:2c:50:96:f1:51:43:3e:c2:f8:c5:dd:e6:
f4:d9:62:d5:83:aa:cd:20:a4:0d:64:62:43:b2:2c:17:1b:10:
3f:49:63:16:cb:7c:21:bc:e0:f9:b1:37:1c:3a:49:f0:b4:df:
69:bf:07:45:6f:d2:9a:ce:d5:19:e5:9d:a9:7d:6e:88:35:8c:
b5:6e:90:e3:b6:d9:7e:24:34:78:37:60:4c:7b:5c:e0:5b:d2:
5e:fb:3d:7c:b8:e1:ce:93:10:5a:0f:af:93:66:92:1a:15:a0:
4f:26:25:f2:59:77:e0:8e:d2:f8:08:06:a1:82:c5:0f:fc:6f:
03:13:1d:f5:95:eb:16:50:50:0c:52:03:e8:36:a5:59:a9:2c:
0d:e3:90:38:d4:26:95:0d:55:da:a9:7d:29:46:da:7e:44:38:
a7:52:87:6a:17:73:2f:0a:91:63:ae:7e:cc:09:2f:5f:24:91:
9b:8f:96:88:3d:97:7c:25:49:17:d7:31:5a:f5:56:61:43:27:
9a:6c:31:b5:31:11:96:b1:2b:1f:31:62:f7:a8:2b:0e:75:02:
0c:a5:44:47:51:2c:90:2c:5c:12:bf:8c:d6:6d:92:d8:24:2c:
4b:f1:52:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKkIiFOrwbJDqlT1laodJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjQwMTAyMTIzMzM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWFlNTMzMGQyNzhjZGE0ZWM5ZDc1MzVhZWIxNzZjZWZjYTc5Yjc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmz48QokiYdrzOuDVQCmBlqeQNj9
8wSCBLFkrIi6W61k4HbAJ/uv0ca59Q/Sg09MWY3Ho7kl1jTmpmzr7eivx2xN5dph
BYdI7PJyhkFOMKuJZ9xSIdSaq+y2WWchyx/n1XPjvuaZfoG8+L71yF7zXVcoGf1L
/QaZR81+ZwPjLJOGJ1SfoTTuTLpI41+E7Vyen08AK8PULEKnX4JoXnqYwIrTiYsH
36wNCCFYs/6RdKidKw7GsWsFSMF1NpGz24RwAirSmGg8thlaQojzkNiAc0DzDbV5
gy7cSJAj441cVE+MJ90oYYKPmSo2PEHaxxS8xjcKQnMOwTeo3npSpUXKhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH6uUzDSeM2k7J11Na6xds78p5t5MB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvZnE1VE1OSjR6YVRzblhVMXJyRjJ6dnlubTNrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy+aMA0G
CSqGSIb3DQEBCwUAA4IBAQALQSqDNPLdm5Bs/lCvYK3mGBDBv61t7vosUJbxUUM+
wvjF3eb02WLVg6rNIKQNZGJDsiwXGxA/SWMWy3whvOD5sTccOknwtN9pvwdFb9Ka
ztUZ5Z2pfW6INYy1bpDjttl+JDR4N2BMe1zgW9Je+z18uOHOkxBaD6+TZpIaFaBP
JiXyWXfgjtL4CAahgsUP/G8DEx31lesWUFAMUgPoNqVZqSwN45A41CaVDVXaqX0p
Rtp+RDinUodqF3MvCpFjrn7MCS9fJJGbj5aIPZd8JUkX1zFa9VZhQyeabDG1MRGW
sSsfMWL3qCsOdQIMpURHUSyQLFwSv4zWbZLYJCxL8VLy
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:30:08 2024 by rpki-client on console-fra.rpki-client.org