Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Tx5EaYGHNcQm6NBblrm6jZc7Pb8.roa
File: Tx5EaYGHNcQm6NBblrm6jZc7Pb8.roa (raw, json)
Hash identifier: lmtIYBtCLzRi5M9G2UpIogZ7Hak041/uQ1FWnFqnDu0=
Subject key identifier: 4F:1E:44:69:81:87:35:C4:26:E8:D0:5B:96:B9:BA:8D:97:3B:3D:BF
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0191EAC649AD5E7B2482ECEB95035A898645
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Tx5EaYGHNcQm6NBblrm6jZc7Pb8.roa
Signing time: Fri 13 Sep 2024 09:45:49 +0000
ROA not before: Fri 13 Sep 2024 09:45:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44103
IP address blocks: 188.214.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:c6:49:ad:5e:7b:24:82:ec:eb:95:03:5a:89:86:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 13 09:45:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f1e4469818735c426e8d05b96b9ba8d973b3dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f0:8f:21:f9:55:5d:c9:da:11:88:1d:7b:fa:
26:cc:c5:6b:fb:c5:a7:2e:ef:e7:5a:41:48:79:6f:
41:9f:65:2c:1d:e2:10:ac:62:e9:8d:56:68:ee:36:
31:6c:10:d7:10:b9:e1:30:d3:24:59:5f:94:1b:1d:
e8:0b:bf:c8:69:b6:4d:4b:bb:50:16:91:99:be:da:
0f:a6:4e:5d:3d:d4:f8:85:10:c5:2d:22:73:3a:a0:
ee:3e:51:b7:bb:c1:c9:0e:5d:28:00:b4:cc:9e:97:
d0:d4:58:6e:f7:18:01:da:c7:6d:48:9c:aa:00:00:
dc:2f:ca:15:81:39:7e:4d:ff:06:38:a0:56:ee:c7:
b4:1b:b3:16:36:0d:64:53:33:3a:e5:ef:38:69:04:
e6:d3:9b:47:1c:49:5c:b0:d8:7f:bc:1f:f8:1a:e3:
42:06:f4:bb:75:26:d9:78:09:99:77:23:41:fc:cc:
4a:ec:95:22:c4:47:3b:93:87:a8:91:94:1f:d0:61:
4e:10:dc:41:23:1e:54:c3:95:7c:36:84:6a:2a:d6:
0f:7d:fe:b9:ce:87:44:27:f9:c2:ad:cc:3c:b9:3e:
dd:3b:90:fc:5a:41:c0:54:92:e5:3c:a2:4e:6b:54:
a7:4c:69:a5:29:bb:48:7b:1b:fe:5b:2c:6b:6f:27:
2a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:1E:44:69:81:87:35:C4:26:E8:D0:5B:96:B9:BA:8D:97:3B:3D:BF
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Tx5EaYGHNcQm6NBblrm6jZc7Pb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.214.107.0/24
Signature Algorithm: sha256WithRSAEncryption
21:2e:9e:f1:0f:c8:b5:e9:93:05:d8:e4:f7:39:e1:2f:95:f0:
1d:c5:66:2c:35:fb:c2:3a:be:59:c5:34:79:ce:13:0f:be:de:
56:41:c2:f2:1d:ea:63:f4:4d:d5:c9:8b:02:de:1b:8c:d5:eb:
18:d1:f2:9a:5c:50:ab:99:09:f9:48:fb:13:f6:08:eb:ab:35:
a3:16:f8:e1:18:a0:80:14:5a:e5:83:45:ec:7c:35:ab:f5:ca:
06:4a:0f:07:fc:0b:03:d6:8a:4b:e9:f3:af:eb:74:12:e0:17:
57:1f:16:43:ac:db:af:96:3b:31:b9:83:c0:c0:6f:fa:66:35:
cc:06:c6:d9:d7:f3:e0:a3:17:0f:2a:91:f2:25:9b:0c:2b:4f:
e6:ab:ba:ca:ef:c6:d4:0a:2e:ba:e5:27:60:c9:44:ee:5c:1a:
88:6d:c6:b6:41:bd:a8:e6:d5:a2:0b:5f:8b:c1:9f:dd:4a:ca:
5f:36:c9:b0:4b:7f:a7:3b:b1:37:4d:be:5b:1b:ed:ae:ee:ee:
7a:cb:98:fa:57:90:4a:4a:2c:d2:c2:0c:5a:00:ee:36:a2:0e:
98:29:a6:20:c3:b5:78:c6:bf:bc:93:2e:9e:5c:9a:87:1d:aa:
31:a0:ec:7e:13:6c:cf:55:99:75:75:8b:99:17:c0:30:73:8a:
75:d2:f1:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZHqxkmtXnskguzrlQNaiYZFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYTVkMzJkNWIwOWM5M2MxYjVlM2ZjNWEyYWEyMGQ3NDZm
Y2ZlZDEwHhcNMjQwOTEzMDk0NTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZjFlNDQ2OTgxODczNWM0MjZlOGQwNWI5NmI5YmE4ZDk3M2IzZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyPCPIflVXcnaEYgde/omzMVr+8Wn
Lu/nWkFIeW9Bn2UsHeIQrGLpjVZo7jYxbBDXELnhMNMkWV+UGx3oC7/IabZNS7tQ
FpGZvtoPpk5dPdT4hRDFLSJzOqDuPlG3u8HJDl0oALTMnpfQ1Fhu9xgB2sdtSJyq
AADcL8oVgTl+Tf8GOKBW7se0G7MWNg1kUzM65e84aQTm05tHHElcsNh/vB/4GuNC
BvS7dSbZeAmZdyNB/MxK7JUixEc7k4eokZQf0GFOENxBIx5Uw5V8NoRqKtYPff65
zodEJ/nCrcw8uT7dO5D8WkHAVJLlPKJOa1SnTGmlKbtIexv+WyxrbycqbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE8eRGmBhzXEJujQW5a5uo2XOz2/MB8GA1UdIwQY
MBaAFH2l0y1bCck8G14/xaKqINdG/P7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAt
ZTU4MzlmNDNlNTgzLzEvVHg1RWFZR0hOY1FtNk5CYmxybTZqWmM3UGI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni80YjE4ZmItZDNlZC00YjI3LTliZDAtZTU4MzlmNDNlNTgz
LzEvZmFYVExWc0p5VHdiWGpfRm9xb2cxMGI4X3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNZrMA0G
CSqGSIb3DQEBCwUAA4IBAQAhLp7xD8i16ZMF2OT3OeEvlfAdxWYsNfvCOr5ZxTR5
zhMPvt5WQcLyHepj9E3VyYsC3huM1esY0fKaXFCrmQn5SPsT9gjrqzWjFvjhGKCA
FFrlg0XsfDWr9coGSg8H/AsD1opL6fOv63QS4BdXHxZDrNuvljsxuYPAwG/6ZjXM
BsbZ1/PgoxcPKpHyJZsMK0/mq7rK78bUCi665SdgyUTuXBqIbca2Qb2o5tWiC1+L
wZ/dSspfNsmwS3+nO7E3Tb5bG+2u7u56y5j6V5BKSizSwgxaAO42og6YKaYgw7V4
xr+8ky6eXJqHHaoxoOx+E2zPVZl1dYuZF8Awc4p10vF4
-----END CERTIFICATE-----
Generated at Mon Nov 25 16:46:48 2024 by rpki-client on console-ams.rpki-client.org