Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CBRlpVPAHmtieJRNE9og_E73_6w.roa
File: CBRlpVPAHmtieJRNE9og_E73_6w.roa (raw, json)
Hash identifier: 6QnGT2LMSeNF0k8fkuhjLCn6YEi1vrVAd7kXZqy6sYg=
Subject key identifier: 08:14:65:A5:53:C0:1E:6B:62:78:94:4D:13:DA:20:FC:4E:F7:FF:AC
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 018EC46E166C1327A3F395732E109AE89895
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CBRlpVPAHmtieJRNE9og_E73_6w.roa
Signing time: Tue 09 Apr 2024 19:55:32 +0000
ROA not before: Tue 09 Apr 2024 19:55:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49729
IP address blocks: 195.64.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c4:6e:16:6c:13:27:a3:f3:95:73:2e:10:9a:e8:98:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 9 19:55:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=081465a553c01e6b6278944d13da20fc4ef7ffac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:49:4d:ac:a9:c0:46:68:3e:91:f5:de:64:
f9:48:6f:0c:1c:3b:2e:55:b3:6c:e9:3a:7a:81:52:
1c:45:49:d7:43:44:a1:4a:cf:81:84:e3:c5:2d:c7:
8e:36:25:32:b7:6e:00:3b:5e:d2:a5:d8:23:b2:0e:
fb:28:dd:12:00:e5:5c:83:e1:3c:e8:23:d0:51:7a:
dd:32:bc:25:09:36:50:8a:21:c9:2c:dd:00:88:34:
b8:d0:61:85:fd:f3:34:eb:19:df:31:f4:78:2f:8b:
dd:85:9c:47:e6:ec:6d:a1:33:39:0a:03:8d:83:8d:
e5:3d:90:4f:09:f8:b9:9e:a4:25:df:35:cf:0b:3b:
cc:a2:4f:4b:05:0d:ad:42:a8:aa:bc:ae:0f:a7:10:
78:1a:4c:ec:7c:ff:2e:b3:23:3d:c4:ce:27:73:21:
ff:25:ff:e5:3d:37:32:cd:c6:34:45:95:09:b4:cc:
ae:cb:97:99:c8:50:38:6f:29:08:d0:79:56:4b:26:
57:d4:ca:8f:84:67:f9:7a:fb:4d:89:32:cb:cd:11:
5d:32:39:57:d2:b8:6c:e5:d5:70:3a:18:9f:1f:91:
4c:d3:81:37:01:d7:cf:7f:eb:4e:c4:4c:ef:4c:a4:
6e:2e:b9:fc:ca:9e:42:e0:94:bb:ac:2a:b3:4d:48:
01:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:14:65:A5:53:C0:1E:6B:62:78:94:4D:13:DA:20:FC:4E:F7:FF:AC
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CBRlpVPAHmtieJRNE9og_E73_6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.126.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ba:cc:5c:24:b6:86:46:89:f9:23:b9:9e:50:a7:91:c3:73:
59:22:5b:a9:3b:45:19:b3:54:2d:95:41:9a:ae:fc:95:31:ad:
ec:e4:25:3a:91:3e:fd:43:3e:c1:20:f3:03:72:27:46:45:76:
1a:9f:fb:27:78:3b:6f:5a:57:fa:9f:9e:6d:48:3d:35:d4:2e:
20:63:52:13:e6:f6:a1:a1:12:b6:0a:92:38:0a:b5:71:de:85:
a9:69:76:6c:64:d2:7e:f9:96:79:19:ac:07:b7:82:ec:2e:2c:
43:a8:80:fa:26:7d:17:8b:f6:46:d1:82:17:39:be:21:e1:3b:
1b:a8:38:07:2c:dd:b2:5e:a9:56:57:64:7c:48:00:e1:65:35:
3f:99:74:b9:fb:b0:4c:cc:18:24:a9:9f:9d:d4:a7:7b:0e:a1:
2f:56:ab:6b:0b:9a:1a:59:01:46:6c:4d:16:13:8f:fc:8a:e4:
ca:af:67:18:9e:84:d9:2d:2a:5d:75:3f:c0:97:26:eb:19:f0:
45:f4:fe:bb:8a:e3:1a:5e:a5:5a:d2:e1:15:36:c7:26:cd:0d:
9b:fb:f8:d9:b6:32:6a:c6:a2:48:ba:d6:b6:46:ec:72:74:d6:
37:04:34:af:3d:28:56:c2:12:c9:2c:e6:a9:90:cb:3d:d9:bf:
27:6e:ca:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7EbhZsEyej85VzLhCa6JiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjQwNDA5MTk1NTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODE0NjVhNTUzYzAxZTZiNjI3ODk0NGQxM2RhMjBmYzRlZjdmZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaNJTaypwEZoPpH13mT5SG8MHDsu
VbNs6Tp6gVIcRUnXQ0ShSs+BhOPFLceONiUyt24AO17Spdgjsg77KN0SAOVcg+E8
6CPQUXrdMrwlCTZQiiHJLN0AiDS40GGF/fM06xnfMfR4L4vdhZxH5uxtoTM5CgON
g43lPZBPCfi5nqQl3zXPCzvMok9LBQ2tQqiqvK4PpxB4GkzsfP8usyM9xM4ncyH/
Jf/lPTcyzcY0RZUJtMyuy5eZyFA4bykI0HlWSyZX1MqPhGf5evtNiTLLzRFdMjlX
0rhs5dVwOhifH5FM04E3AdfPf+tOxEzvTKRuLrn8yp5C4JS7rCqzTUgBmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAgUZaVTwB5rYniUTRPaIPxO9/+sMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvQ0JSbHBWUEFIbXRpZUpSTkU5b2dfRTczXzZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0B+MA0G
CSqGSIb3DQEBCwUAA4IBAQAWusxcJLaGRon5I7meUKeRw3NZIlupO0UZs1QtlUGa
rvyVMa3s5CU6kT79Qz7BIPMDcidGRXYan/sneDtvWlf6n55tSD011C4gY1IT5vah
oRK2CpI4CrVx3oWpaXZsZNJ++ZZ5GawHt4LsLixDqID6Jn0Xi/ZG0YIXOb4h4Tsb
qDgHLN2yXqlWV2R8SADhZTU/mXS5+7BMzBgkqZ+d1Kd7DqEvVqtrC5oaWQFGbE0W
E4/8iuTKr2cYnoTZLSpddT/AlybrGfBF9P67iuMaXqVa0uEVNscmzQ2b+/jZtjJq
xqJIuta2RuxydNY3BDSvPShWwhLJLOapkMs92b8nbsr0
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:45:56 2024 by rpki-client on console-fra.rpki-client.org