Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/eVr3NOilR7auRnHDlgYpfYu2Tzg.roa
File: eVr3NOilR7auRnHDlgYpfYu2Tzg.roa (raw, json)
Hash identifier: SUJfPI2MkRaUqV4HvcYkTqzWFEIdsN/cO+NZIGU8Fmc=
Subject key identifier: 79:5A:F7:34:E8:A5:47:B6:AE:46:71:C3:96:06:29:7D:8B:B6:4F:38
Certificate issuer: /CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Certificate serial: 018CC424712C30B44153F169BF8DDA151358
Authority key identifier: B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/eVr3NOilR7auRnHDlgYpfYu2Tzg.roa
Signing time: Mon 01 Jan 2024 08:29:31 +0000
ROA not before: Mon 01 Jan 2024 08:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 195.38.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 22:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:71:2c:30:b4:41:53:f1:69:bf:8d:da:15:13:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0701346bad55df7f5dc818bbbbcfbb7db1070ab
Validity
Not Before: Jan 1 08:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=795af734e8a547b6ae4671c39606297d8bb64f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fb:63:7a:7b:6c:84:6a:e4:a6:f6:75:8a:ca:
fd:5d:13:6f:40:d8:46:8a:ea:f4:01:7d:9d:95:ca:
9b:f9:84:f7:b5:9a:89:5f:05:38:c6:35:ca:98:0f:
d2:8c:a3:bc:c8:7d:29:75:a1:5e:62:7e:1b:b6:ee:
71:31:a2:1b:7b:8e:0e:fe:13:b1:94:d6:cb:cb:9d:
46:b4:d0:c1:18:8d:8e:e1:27:a0:44:93:14:3d:9a:
c4:91:f2:6d:da:54:53:b0:01:4c:45:33:d7:44:df:
86:88:7f:b6:3e:d6:fc:a5:38:78:d3:be:51:8d:c5:
85:0b:57:87:ba:e1:71:bb:d1:3c:2d:35:77:fe:c5:
18:3d:e2:ad:22:c8:d8:34:c1:82:e4:10:fb:c2:b7:
fe:7d:c9:c8:ff:9f:fd:bd:85:f6:5c:c0:3e:9e:c1:
39:d8:19:3e:83:77:fb:52:96:83:67:4c:c3:ed:8f:
5a:85:ff:5d:ab:83:e0:e9:6d:b2:4f:c0:27:8b:ae:
b0:ae:1d:bf:25:1e:46:f8:b4:3a:3f:e1:59:b0:e6:
6c:27:3d:01:f6:8d:7f:01:9d:24:70:b9:19:34:18:
5b:67:6a:e7:0f:33:a0:e0:d9:91:b1:a1:07:95:1e:
21:5a:5d:6b:ca:2c:b2:b9:13:6c:87:4d:76:e5:ff:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5A:F7:34:E8:A5:47:B6:AE:46:71:C3:96:06:29:7D:8B:B6:4F:38
X509v3 Authority Key Identifier:
keyid:B0:70:13:46:BA:D5:5D:F7:F5:DC:81:8B:BB:BC:FB:B7:DB:10:70:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHATRrrVXff13IGLu7z7t9sQcKs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/eVr3NOilR7auRnHDlgYpfYu2Tzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/sHATRrrVXff13IGLu7z7t9sQcKs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.38.19.0/24
Signature Algorithm: sha256WithRSAEncryption
80:c3:f9:42:10:4a:e3:80:e1:99:e8:09:f3:28:15:88:37:21:
b2:19:cf:04:f9:14:42:0a:a6:53:ae:9c:44:42:35:cc:c1:79:
14:de:d6:fc:f2:da:22:b4:db:31:47:05:7d:ed:2c:00:45:0e:
4b:3c:ae:e9:80:97:5a:0e:05:49:da:6d:82:c1:a3:58:bc:c5:
39:7e:2e:26:7e:45:6e:56:75:48:bc:64:58:cb:d3:eb:19:13:
63:fc:3b:91:fb:e3:54:c4:94:84:77:89:de:13:6f:df:66:3b:
77:75:7a:3c:d0:45:74:85:20:15:b2:7f:68:f8:5a:dc:73:8e:
0a:d8:39:03:93:11:d0:30:27:40:58:fc:50:f6:e0:29:17:ff:
22:d6:ae:77:bf:e9:d9:1a:58:85:49:f8:e4:ae:83:f2:39:3d:
e1:ba:03:01:57:1c:1b:c3:5d:ab:24:da:b2:f5:b8:6e:0d:b7:
4f:25:5c:15:4d:87:b5:71:db:11:c3:7a:fa:88:a0:1c:11:ec:
25:54:77:dc:66:ae:e8:1d:b5:8c:5c:35:d9:63:c8:98:1a:77:
38:ce:f3:cb:1d:39:2e:eb:10:f2:c2:db:28:7e:e2:34:f7:f4:
d2:3e:09:38:02:b7:ac:b4:68:c7:a5:c3:10:ac:3d:ca:a7:83:
41:19:0e:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJHEsMLRBU/Fpv43aFRNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNzAxMzQ2YmFkNTVkZjdmNWRjODE4YmJiYmNmYmI3ZGIx
MDcwYWIwHhcNMjQwMTAxMDgyOTMxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3OTVhZjczNGU4YTU0N2I2YWU0NjcxYzM5NjA2Mjk3ZDhiYjY0ZjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPtjentshGrkpvZ1isr9XRNvQNhG
iur0AX2dlcqb+YT3tZqJXwU4xjXKmA/SjKO8yH0pdaFeYn4btu5xMaIbe44O/hOx
lNbLy51GtNDBGI2O4SegRJMUPZrEkfJt2lRTsAFMRTPXRN+GiH+2Ptb8pTh4075R
jcWFC1eHuuFxu9E8LTV3/sUYPeKtIsjYNMGC5BD7wrf+fcnI/5/9vYX2XMA+nsE5
2Bk+g3f7UpaDZ0zD7Y9ahf9dq4Pg6W2yT8Ani66wrh2/JR5G+LQ6P+FZsOZsJz0B
9o1/AZ0kcLkZNBhbZ2rnDzOg4NmRsaEHlR4hWl1ryiyyuRNsh0125f9/DwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHla9zTopUe2rkZxw5YGKX2Ltk84MB8GA1UdIwQY
MBaAFLBwE0a61V339dyBi7u8+7fbEHCrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0hBVFJyclZYZmYxM0lHTHU3ejd0OXNRY0tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yZjVmMjItNzQzOS00MjA4LThiMzkt
N2QxMWZjZjE3MTIzLzEvZVZyM05PaWxSN2F1Um5IRGxnWXBmWXUyVHpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yZjVmMjItNzQzOS00MjA4LThiMzktN2QxMWZjZjE3MTIz
LzEvc0hBVFJyclZYZmYxM0lHTHU3ejd0OXNRY0tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyYTMA0G
CSqGSIb3DQEBCwUAA4IBAQCAw/lCEErjgOGZ6AnzKBWINyGyGc8E+RRCCqZTrpxE
QjXMwXkU3tb88toitNsxRwV97SwARQ5LPK7pgJdaDgVJ2m2CwaNYvMU5fi4mfkVu
VnVIvGRYy9PrGRNj/DuR++NUxJSEd4neE2/fZjt3dXo80EV0hSAVsn9o+Frcc44K
2DkDkxHQMCdAWPxQ9uApF/8i1q53v+nZGliFSfjkroPyOT3hugMBVxwbw12rJNqy
9bhuDbdPJVwVTYe1cdsRw3r6iKAcEewlVHfcZq7oHbWMXDXZY8iYGnc4zvPLHTku
6xDywtsofuI09/TSPgk4ArestGjHpcMQrD3Kp4NBGQ6i
-----END CERTIFICATE-----
Generated at Sat Jun 1 04:48:33 2024 by rpki-client on console-ams.rpki-client.org