Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/eMLBWmGWLwj_yuwppF71FNz_L6c.roa
File: eMLBWmGWLwj_yuwppF71FNz_L6c.roa (raw, json)
Hash identifier: ZQH1A3/83rkaX98J2NffhuOKBgR0cbGXSl+h398IIfI=
Subject key identifier: 78:C2:C1:5A:61:96:2F:08:FF:CA:EC:29:A4:5E:F5:14:DC:FF:2F:A7
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BCA453F7AC7FAB7F2287451210AF8E
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/eMLBWmGWLwj_yuwppF71FNz_L6c.roa
Signing time: Tue 02 Jan 2024 10:33:52 +0000
ROA not before: Tue 02 Jan 2024 10:33:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2386
IP address blocks: 145.139.13.0/24 maxlen: 24
145.139.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a4:53:f7:ac:7f:ab:7f:22:87:45:12:10:af:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78c2c15a61962f08ffcaec29a45ef514dcff2fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6e:42:13:1a:de:73:76:48:2b:3b:59:01:af:
67:e5:d1:f3:6c:f3:07:7b:2f:9c:79:ce:f5:90:44:
c3:32:d3:ed:f2:9f:86:d9:53:7c:38:ec:a3:95:6b:
2f:8b:15:db:c7:ca:0d:c4:6c:7f:3f:ba:8f:b2:71:
59:7a:1c:c8:32:c4:26:ff:ef:56:2c:e0:03:e7:46:
1c:34:50:fe:be:63:76:74:3c:19:63:19:6f:6e:ec:
a3:8b:8d:3d:a3:cd:2a:3c:c6:18:7e:a7:df:b3:9b:
c8:88:6e:12:cc:15:22:66:56:a0:1a:2c:6c:11:a2:
f0:4e:e3:51:5e:61:66:af:67:3f:7d:0d:ea:ce:7d:
56:49:cd:00:0f:67:5d:2d:9b:0c:69:a7:82:52:af:
6c:36:bd:15:2c:55:88:a1:b7:ac:d5:5f:07:8d:75:
0d:42:77:96:b6:30:30:88:b6:68:70:97:9d:68:7d:
4b:1e:c3:78:98:28:03:92:0c:16:36:cd:d7:2b:23:
e4:6c:66:a2:ee:92:50:e7:82:42:c4:bd:ec:0c:5b:
96:1f:33:22:d3:f5:00:95:8a:b1:90:fe:97:4f:0f:
2b:ec:30:2c:86:be:60:3b:89:b5:7c:12:90:03:f3:
af:2c:d5:ee:69:f2:ad:50:5a:1a:8a:d7:f3:06:fb:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C2:C1:5A:61:96:2F:08:FF:CA:EC:29:A4:5E:F5:14:DC:FF:2F:A7
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/eMLBWmGWLwj_yuwppF71FNz_L6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.139.13.0-145.139.14.255
Signature Algorithm: sha256WithRSAEncryption
03:2b:2c:8d:91:8b:20:51:7c:91:93:eb:78:9e:34:a8:98:89:
12:8d:07:05:4e:88:02:e3:f5:51:27:08:29:0b:8c:df:7d:8a:
87:9e:f3:07:85:1d:be:56:b0:0e:54:37:3c:08:d1:6c:44:ff:
62:d1:ff:56:63:dc:43:5c:1f:31:0e:78:7f:3f:54:ca:6c:26:
4b:0c:65:cf:62:91:74:0b:11:89:c6:63:03:d7:91:83:3c:6b:
c4:f4:8e:2e:79:0e:bd:49:96:d1:a3:46:cb:d6:22:9f:9d:62:
e0:a2:92:3c:6c:73:57:d7:cb:58:2b:42:ab:9a:73:52:f2:a8:
65:6f:21:62:1c:89:11:c9:2c:f3:ef:43:67:c4:26:79:79:3b:
ce:3c:e3:d8:ee:41:df:8c:6d:c9:ae:8b:db:89:fb:c2:02:e0:
44:d2:2a:8b:20:21:cb:fe:94:a2:1f:c0:3f:72:d5:ac:cb:6f:
91:25:01:26:02:d3:a4:cd:c3:9e:fa:cf:f0:eb:ee:c3:39:20:
dd:8c:37:06:c9:b9:9f:52:01:ff:f1:a6:e6:de:38:d9:28:f0:
10:d1:f3:9f:59:da:c0:69:a6:9a:33:f3:ae:ec:6a:96:20:fb:
12:93:79:72:13:cf:b9:38:ee:60:7c:8d:3c:3c:dc:71:ca:8e:
17:5f:81:6c
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzJvKRT96x/q38ih0USEK+OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjQwMTAyMTAzMzUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OGMyYzE1YTYxOTYyZjA4ZmZjYWVjMjlhNDVlZjUxNGRjZmYyZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG5CExrec3ZIKztZAa9n5dHzbPMH
ey+cec71kETDMtPt8p+G2VN8OOyjlWsvixXbx8oNxGx/P7qPsnFZehzIMsQm/+9W
LOAD50YcNFD+vmN2dDwZYxlvbuyji409o80qPMYYfqffs5vIiG4SzBUiZlagGixs
EaLwTuNRXmFmr2c/fQ3qzn1WSc0AD2ddLZsMaaeCUq9sNr0VLFWIobes1V8HjXUN
QneWtjAwiLZocJedaH1LHsN4mCgDkgwWNs3XKyPkbGai7pJQ54JCxL3sDFuWHzMi
0/UAlYqxkP6XTw8r7DAshr5gO4m1fBKQA/OvLNXuafKtUFoaitfzBvtcUwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFHjCwVphli8I/8rsKaRe9RTc/y+nMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvZU1MQldtR1dMd2pfeXV3cHBGNzFGTnpfTDZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACRiw0D
BACRiw4wDQYJKoZIhvcNAQELBQADggEBAAMrLI2RiyBRfJGT63ieNKiYiRKNBwVO
iALj9VEnCCkLjN99ioee8weFHb5WsA5UNzwI0WxE/2LR/1Zj3ENcHzEOeH8/VMps
JksMZc9ikXQLEYnGYwPXkYM8a8T0ji55Dr1JltGjRsvWIp+dYuCikjxsc1fXy1gr
Qquac1LyqGVvIWIciRHJLPPvQ2fEJnl5O84849juQd+Mbcmui9uJ+8IC4ETSKosg
Icv+lKIfwD9y1azLb5ElASYC06TNw576z/Dr7sM5IN2MNwbJuZ9SAf/xpubeONko
8BDR859Z2sBpppoz867sapYg+xKTeXITz7k47mB8jTw83HHKjhdfgWw=
-----END CERTIFICATE-----
Generated at Sun May 5 19:07:55 2024 by rpki-client on console-fra.rpki-client.org