Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/8SsOIqwlehNpGW4ljKfj-4yIfyQ.roa
File: 8SsOIqwlehNpGW4ljKfj-4yIfyQ.roa (raw, json)
Hash identifier: 8Lg64ZYR3ZIc5jafrayrCol/mFEuXk2tU/2rTw+5E7s=
Subject key identifier: F1:2B:0E:22:AC:25:7A:13:69:19:6E:25:8C:A7:E3:FB:8C:88:7F:24
Certificate issuer: /CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Certificate serial: 018CC2DAE7F4C33753A57E21B69B34483134
Authority key identifier: 54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/8SsOIqwlehNpGW4ljKfj-4yIfyQ.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209200
IP address blocks: 81.15.203.0/24 maxlen: 24
81.15.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e7:f4:c3:37:53:a5:7e:21:b6:9b:34:48:31:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=546834e68890f3986a1b0457ce0f54ae03c2d76b
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f12b0e22ac257a1369196e258ca7e3fb8c887f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ba:78:c0:4d:38:2f:fb:e6:fc:85:84:15:b4:
c5:23:74:70:bd:07:4f:b2:0c:86:f6:a8:82:2f:0b:
e9:b6:c2:48:14:78:36:a7:82:b4:96:60:c7:3a:e1:
26:3a:0f:b1:1e:31:bb:89:ef:eb:c8:72:04:f8:14:
e2:cc:60:e9:cf:89:a6:7a:ab:cf:86:fb:39:85:1b:
7e:b7:38:9d:91:9d:23:94:d8:e1:38:79:3e:8f:a2:
fb:8d:51:6a:04:01:ed:fb:84:f5:f2:14:6b:22:eb:
b5:58:95:21:ce:b2:fd:62:71:32:30:43:3e:25:70:
17:80:9c:13:bd:2d:44:0b:42:83:8e:bd:14:34:e9:
42:64:9a:20:45:8e:52:11:ac:c2:cf:77:27:e3:27:
36:fd:f2:e2:73:30:37:0f:a4:82:1b:c8:bb:3e:07:
33:71:5f:87:49:44:87:43:ad:e6:76:e4:a6:fd:15:
32:2a:d2:c9:83:5e:68:32:3e:06:3e:01:44:57:80:
67:19:13:6f:ac:7f:1c:39:fc:08:38:54:bb:d5:a6:
88:3a:97:ea:bb:61:dd:fe:47:ee:9b:ab:dc:90:cf:
b5:eb:c5:31:bf:c3:fd:74:96:fa:32:27:bb:ea:09:
8e:09:97:e2:36:25:43:92:b7:03:65:a2:19:15:bd:
45:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:2B:0E:22:AC:25:7A:13:69:19:6E:25:8C:A7:E3:FB:8C:88:7F:24
X509v3 Authority Key Identifier:
keyid:54:68:34:E6:88:90:F3:98:6A:1B:04:57:CE:0F:54:AE:03:C2:D7:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGg05oiQ85hqGwRXzg9UrgPC12s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/8SsOIqwlehNpGW4ljKfj-4yIfyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f2f0b-fd82-44fa-b634-52766b24baa4/1/VGg05oiQ85hqGwRXzg9UrgPC12s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.15.203.0/24
81.15.237.0/24
Signature Algorithm: sha256WithRSAEncryption
91:8e:21:cd:86:3a:7a:ac:2d:bf:b8:5e:47:5a:46:b8:79:e6:
f1:8b:c3:27:bd:70:44:16:ee:9b:00:c9:9d:5b:f1:10:19:09:
64:2f:06:5a:15:37:39:88:58:0b:de:dc:82:45:a6:6d:39:24:
09:43:cf:13:04:08:eb:82:6d:86:fd:3c:0b:74:2c:44:c8:a5:
08:3b:ab:55:21:62:5e:8b:c3:86:85:e9:2d:3c:96:be:f5:db:
5b:e2:69:f1:91:75:c1:6b:ac:d6:1d:11:c0:ca:60:81:45:d1:
bb:ea:94:71:54:c6:ae:1d:6b:93:32:67:8f:51:eb:b2:75:1b:
78:a2:72:ce:ea:fd:07:2a:c3:41:ec:93:3f:1e:69:77:cc:f5:
8a:7e:fd:19:56:e7:b7:d5:66:fa:d0:5f:a6:cc:51:1a:83:ac:
b8:13:32:c3:a6:de:af:92:50:cd:ce:5a:bc:b7:9e:4c:69:67:
23:3c:ca:27:5e:87:85:68:00:43:ab:a0:f2:70:d8:a9:4a:c2:
23:f9:be:a2:e2:aa:1d:a9:2f:29:3e:ac:dc:c5:89:f6:69:f9:
06:4a:22:5d:61:88:ca:21:04:74:5b:1f:f3:a8:47:48:a3:f0:
f8:b8:d9:38:d7:3b:39:7f:17:ee:13:aa:3c:67:2f:e7:21:5f:
6b:ff:1b:f6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzC2uf0wzdTpX4htps0SDE0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NjgzNGU2ODg5MGYzOTg2YTFiMDQ1N2NlMGY1NGFlMDNj
MmQ3NmIwHhcNMjQwMTAxMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTJiMGUyMmFjMjU3YTEzNjkxOTZlMjU4Y2E3ZTNmYjhjODg3ZjI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7p4wE04L/vm/IWEFbTFI3RwvQdP
sgyG9qiCLwvptsJIFHg2p4K0lmDHOuEmOg+xHjG7ie/ryHIE+BTizGDpz4mmeqvP
hvs5hRt+tzidkZ0jlNjhOHk+j6L7jVFqBAHt+4T18hRrIuu1WJUhzrL9YnEyMEM+
JXAXgJwTvS1EC0KDjr0UNOlCZJogRY5SEazCz3cn4yc2/fLiczA3D6SCG8i7Pgcz
cV+HSUSHQ63mduSm/RUyKtLJg15oMj4GPgFEV4BnGRNvrH8cOfwIOFS71aaIOpfq
u2Hd/kfum6vckM+168Uxv8P9dJb6Mie76gmOCZfiNiVDkrcDZaIZFb1FgQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPErDiKsJXoTaRluJYyn4/uMiH8kMB8GA1UdIwQY
MBaAFFRoNOaIkPOYahsEV84PVK4DwtdrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQt
NTI3NjZiMjRiYWE0LzEvOFNzT0lxd2xlaE5wR1c0bGpLZmotNHlJZnlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjJmMGItZmQ4Mi00NGZhLWI2MzQtNTI3NjZiMjRiYWE0
LzEvVkdnMDVvaVE4NWhxR3dSWHpnOVVyZ1BDMTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUQ/LAwQA
UQ/tMA0GCSqGSIb3DQEBCwUAA4IBAQCRjiHNhjp6rC2/uF5HWka4eebxi8MnvXBE
Fu6bAMmdW/EQGQlkLwZaFTc5iFgL3tyCRaZtOSQJQ88TBAjrgm2G/TwLdCxEyKUI
O6tVIWJei8OGhektPJa+9dtb4mnxkXXBa6zWHRHAymCBRdG76pRxVMauHWuTMmeP
UeuydRt4onLO6v0HKsNB7JM/Hml3zPWKfv0ZVue31Wb60F+mzFEag6y4EzLDpt6v
klDNzlq8t55MaWcjPMonXoeFaABDq6DycNipSsIj+b6i4qodqS8pPqzcxYn2afkG
SiJdYYjKIQR0Wx/zqEdIo/D4uNk41zs5fxfuE6o8Zy/nIV9r/xv2
-----END CERTIFICATE-----
Generated at Sat Jun 1 08:51:58 2024 by rpki-client on console-ams.rpki-client.org