Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/SL6QppJLwwXYEqEqusWGtwk2JfA.roa
File: SL6QppJLwwXYEqEqusWGtwk2JfA.roa (raw, json)
Hash identifier: GQ2qhwbMHkYBoXhZOZGjoMzlfhzNyPkZFPq1MTFc3D4=
Subject key identifier: 48:BE:90:A6:92:4B:C3:05:D8:12:A1:2A:BA:C5:86:B7:09:36:25:F0
Certificate issuer: /CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Certificate serial: 018CC94E357341DB1DF14346BE769622B261
Authority key identifier: 50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/SL6QppJLwwXYEqEqusWGtwk2JfA.roa
Signing time: Tue 02 Jan 2024 08:33:15 +0000
ROA not before: Tue 02 Jan 2024 08:33:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22351
IP address blocks: 81.199.218.0/24 maxlen: 24
81.199.171.0/24 maxlen: 24
81.199.170.0/24 maxlen: 24
81.199.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:35:73:41:db:1d:f1:43:46:be:76:96:22:b2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50182bee9aa010c1ffd2d804f6aa7b14bddb91f7
Validity
Not Before: Jan 2 08:33:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=48be90a6924bc305d812a12abac586b7093625f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:49:7e:71:f6:37:ce:4e:ca:bc:9d:5b:5e:ef:
f3:6b:64:bb:21:f1:5c:51:5c:da:b2:f4:63:ea:de:
4c:fa:68:b4:d7:45:fb:34:c5:c3:d9:18:49:a7:58:
61:cb:e1:e6:d1:ab:31:69:14:91:1e:6c:95:c3:fd:
de:a9:6f:0a:b9:21:55:21:90:6c:7a:53:34:ef:92:
1f:1e:8b:2e:24:b5:5e:17:54:81:e4:85:b3:17:c7:
2e:fc:79:a3:22:88:12:0b:44:aa:71:07:e2:e0:66:
18:87:38:d9:3a:fc:fa:76:ed:57:f9:60:6d:5b:c1:
44:f2:e4:de:53:5b:6a:bc:ce:14:4e:91:57:8a:1c:
77:00:7b:6c:84:78:67:8e:8a:eb:58:51:66:98:c9:
37:07:b6:6c:f2:ca:e6:d8:35:80:b3:ac:5d:fd:84:
65:9e:93:3c:c7:36:bd:c3:a1:4e:23:43:65:30:5d:
05:61:5b:c4:ff:3e:00:95:b6:6b:79:09:fa:b3:98:
21:9e:8b:d3:cc:c9:6e:d1:2c:a6:4a:43:03:27:e5:
71:84:f6:26:d4:65:d9:be:1c:2e:d1:05:72:c2:04:
90:6c:21:8e:d0:a9:f8:78:ec:44:72:e0:c2:09:ae:
d8:cc:2b:c7:f9:13:23:29:de:89:89:c2:c4:2d:41:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:BE:90:A6:92:4B:C3:05:D8:12:A1:2A:BA:C5:86:B7:09:36:25:F0
X509v3 Authority Key Identifier:
keyid:50:18:2B:EE:9A:A0:10:C1:FF:D2:D8:04:F6:AA:7B:14:BD:DB:91:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UBgr7pqgEMH_0tgE9qp7FL3bkfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/SL6QppJLwwXYEqEqusWGtwk2JfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd4566-ac27-46f8-94f9-19d1bb61d9a7/1/UBgr7pqgEMH_0tgE9qp7FL3bkfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.199.169.0-81.199.171.255
81.199.218.0/24
Signature Algorithm: sha256WithRSAEncryption
34:c4:d3:d4:31:d6:a5:50:16:4c:03:b9:3a:c4:69:45:98:7e:
5a:24:bb:f8:56:6f:e5:4e:ae:4f:b6:f4:77:12:5c:1c:f8:db:
1d:c3:61:71:0b:54:d5:5e:8a:32:2a:93:14:b7:e1:a3:13:3c:
fa:d4:db:1e:e2:d9:09:c4:93:20:9f:01:e0:08:07:bd:86:d8:
38:97:00:d2:08:ba:dd:3d:8d:e2:aa:98:8d:22:7e:6a:a7:67:
de:9d:72:3f:2b:c9:53:dd:30:56:f5:70:99:1c:9a:7c:13:f2:
0f:4e:18:b3:4c:5d:0d:9f:f9:48:55:5f:e2:45:dd:3f:bb:48:
b2:24:52:e2:af:56:3b:88:5b:f6:7b:87:5a:bf:f3:c6:e7:f7:
2a:1d:fc:89:6f:56:20:3a:c1:78:9d:f1:9a:ef:4c:d6:f0:c7:
e9:01:14:bc:1b:ec:ba:5d:dd:99:07:9f:d3:18:e5:f0:02:64:
4c:b4:f1:59:0d:3c:e0:57:4c:5a:31:80:78:96:af:8d:5a:c8:
71:a3:04:35:66:95:1c:d2:b4:e0:73:22:38:34:ce:04:3c:4c:
56:9e:5e:bf:c2:61:af:6c:35:b2:cd:93:26:0d:b9:fb:5e:5b:
b4:dc:af:58:a6:3e:2c:aa:42:e8:ed:cc:e1:86:7f:ed:ea:87:
a3:1f:25:ec
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzJTjVzQdsd8UNGvnaWIrJhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMTgyYmVlOWFhMDEwYzFmZmQyZDgwNGY2YWE3YjE0YmRk
YjkxZjcwHhcNMjQwMTAyMDgzMzE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OGJlOTBhNjkyNGJjMzA1ZDgxMmExMmFiYWM1ODZiNzA5MzYyNWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0l+cfY3zk7KvJ1bXu/za2S7IfFc
UVzasvRj6t5M+mi010X7NMXD2RhJp1hhy+Hm0asxaRSRHmyVw/3eqW8KuSFVIZBs
elM075IfHosuJLVeF1SB5IWzF8cu/HmjIogSC0SqcQfi4GYYhzjZOvz6du1X+WBt
W8FE8uTeU1tqvM4UTpFXihx3AHtshHhnjorrWFFmmMk3B7Zs8srm2DWAs6xd/YRl
npM8xza9w6FOI0NlMF0FYVvE/z4AlbZreQn6s5ghnovTzMlu0SymSkMDJ+VxhPYm
1GXZvhwu0QVywgSQbCGO0Kn4eOxEcuDCCa7YzCvH+RMjKd6JicLELUEoWQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFEi+kKaSS8MF2BKhKrrFhrcJNiXwMB8GA1UdIwQY
MBaAFFAYK+6aoBDB/9LYBPaqexS925H3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0Zjkt
MTlkMWJiNjFkOWE3LzEvU0w2UXBwSkx3d1hZRXFFcXVzV0d0d2sySmZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iZDQ1NjYtYWMyNy00NmY4LTk0ZjktMTlkMWJiNjFkOWE3
LzEvVUJncjdwcWdFTUhfMHRnRTlxcDdGTDNia2ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBABRx6kD
BAJRx6gDBABRx9owDQYJKoZIhvcNAQELBQADggEBADTE09Qx1qVQFkwDuTrEaUWY
floku/hWb+VOrk+29HcSXBz42x3DYXELVNVeijIqkxS34aMTPPrU2x7i2QnEkyCf
AeAIB72G2DiXANIIut09jeKqmI0ifmqnZ96dcj8ryVPdMFb1cJkcmnwT8g9OGLNM
XQ2f+UhVX+JF3T+7SLIkUuKvVjuIW/Z7h1q/88bn9yod/IlvViA6wXid8ZrvTNbw
x+kBFLwb7Lpd3ZkHn9MY5fACZEy08VkNPOBXTFoxgHiWr41ayHGjBDVmlRzStOBz
Ijg0zgQ8TFaeXr/CYa9sNbLNkyYNufteW7Tcr1imPiyqQujtzOGGf+3qh6MfJew=
-----END CERTIFICATE-----
Generated at Sun Jun 2 11:05:52 2024 by rpki-client on console-fra.rpki-client.org