Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/tr0el6x80qTUSo2RaUODNlA3jTg.roa
File: tr0el6x80qTUSo2RaUODNlA3jTg.roa (raw, json)
Hash identifier: pKruG3ZJNxAo8hbtszU5NYCzTFdSaoce6f6E9yjTMJI=
Subject key identifier: B6:BD:1E:97:AC:7C:D2:A4:D4:4A:8D:91:69:43:83:36:50:37:8D:38
Certificate issuer: /CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Certificate serial: 018E893A566B3974A11748AFC771B6218C63
Authority key identifier: E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/tr0el6x80qTUSo2RaUODNlA3jTg.roa
Signing time: Fri 29 Mar 2024 08:01:25 +0000
ROA not before: Fri 29 Mar 2024 08:01:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 146.70.181.0/24 maxlen: 24
146.70.182.0/24 maxlen: 24
185.45.15.0/24 maxlen: 24
2a0d:5600:75::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:89:3a:56:6b:39:74:a1:17:48:af:c7:71:b6:21:8c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e208ecb9f34c1fbc3f3589710ab3e349fc6295cc
Validity
Not Before: Mar 29 08:01:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6bd1e97ac7cd2a4d44a8d916943833650378d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:5f:9e:d9:10:6c:3f:db:ef:9a:47:4a:58:a1:
3c:3a:35:05:10:fe:a6:49:fc:06:82:2a:34:34:44:
78:b5:33:10:d4:f0:2e:54:46:66:94:9e:7d:7b:03:
22:18:d7:6a:a0:2e:0e:b4:f9:e2:7d:01:11:eb:79:
6e:6f:e3:25:66:c8:70:b3:1d:73:20:ef:a7:dc:37:
37:2f:24:51:16:c2:f8:76:bf:5a:87:9c:39:f2:28:
ae:33:fe:95:8d:fe:b4:93:6a:f4:68:e6:6a:da:53:
a2:d6:8b:ce:36:53:fa:7f:e4:33:7a:9c:31:cd:a6:
4d:3c:f9:0c:3a:10:36:8b:ff:2e:cc:6a:3f:ef:f7:
72:c1:97:2e:07:27:b4:ed:f9:e3:43:65:6d:76:04:
36:c5:53:e8:8a:47:4a:15:59:67:05:49:7b:c6:42:
f8:9c:e3:d1:2f:08:6c:67:6b:43:2c:2e:fd:4a:34:
43:49:17:9e:5d:d7:c8:3b:ab:57:d8:c3:f0:18:36:
11:5f:90:aa:76:49:f8:7b:99:d7:e2:8d:65:2e:f8:
be:82:8a:d0:2a:fb:f3:7d:94:ee:a5:f3:83:9d:bd:
d8:f8:0d:d0:0d:45:61:c1:f1:e4:97:24:08:40:40:
bd:71:b1:63:90:98:ce:1a:e7:3f:e2:f6:da:7e:57:
4a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:BD:1E:97:AC:7C:D2:A4:D4:4A:8D:91:69:43:83:36:50:37:8D:38
X509v3 Authority Key Identifier:
keyid:E2:08:EC:B9:F3:4C:1F:BC:3F:35:89:71:0A:B3:E3:49:FC:62:95:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gjsufNMH7w_NYlxCrPjSfxilcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/tr0el6x80qTUSo2RaUODNlA3jTg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/9d960f-a59a-435c-ae92-1ca739bb00cc/1/4gjsufNMH7w_NYlxCrPjSfxilcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.70.181.0-146.70.182.255
185.45.15.0/24
IPv6:
2a0d:5600:75::/48
Signature Algorithm: sha256WithRSAEncryption
93:6f:6d:27:90:f9:eb:95:55:ed:47:10:15:6c:14:8a:1c:a8:
83:84:46:36:13:14:67:96:80:86:3b:5c:35:16:76:3f:07:ca:
c8:de:e6:e6:58:52:7a:3e:c7:f6:76:60:69:57:43:00:35:30:
10:bf:79:70:f4:74:05:0e:6f:28:1d:59:a1:a8:d5:42:77:3e:
51:a4:cb:be:e8:7a:6a:89:e4:7a:69:d2:77:67:38:c9:a3:57:
09:b9:13:97:14:dd:aa:0b:3d:90:b1:5f:dc:83:cb:1a:b8:eb:
72:1b:78:ab:51:41:0b:b5:be:3a:31:f1:47:01:d6:f7:e4:39:
24:39:02:01:5d:43:9d:c2:80:de:23:98:c0:9a:46:8e:36:00:
5e:b2:4f:35:77:8d:c8:0a:01:4f:bb:16:b4:d1:f0:d6:2a:0b:
a6:67:f1:a8:b4:ea:eb:b2:a2:14:9e:28:c8:1c:14:6c:97:80:
5c:1a:73:79:a2:97:b6:05:a6:05:45:37:1f:7f:84:ea:dd:e9:
ca:02:cb:90:5f:83:a3:d3:1c:bc:a6:16:d1:23:df:3d:4e:7b:
c6:9b:7e:08:e7:b2:16:ac:d4:af:d7:3e:e5:64:d5:52:1a:bc:
86:33:32:a9:eb:70:7e:5d:7c:6a:2c:47:35:d8:35:55:a6:2a:
6f:db:93:af
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgISAY6JOlZrOXShF0ivx3G2IYxjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyMDhlY2I5ZjM0YzFmYmMzZjM1ODk3MTBhYjNlMzQ5ZmM2
Mjk1Y2MwHhcNMjQwMzI5MDgwMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmJkMWU5N2FjN2NkMmE0ZDQ0YThkOTE2OTQzODMzNjUwMzc4ZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgF+e2RBsP9vvmkdKWKE8OjUFEP6m
SfwGgio0NER4tTMQ1PAuVEZmlJ59ewMiGNdqoC4OtPnifQER63lub+MlZshwsx1z
IO+n3Dc3LyRRFsL4dr9ah5w58iiuM/6Vjf60k2r0aOZq2lOi1ovONlP6f+Qzepwx
zaZNPPkMOhA2i/8uzGo/7/dywZcuBye07fnjQ2VtdgQ2xVPoikdKFVlnBUl7xkL4
nOPRLwhsZ2tDLC79SjRDSReeXdfIO6tX2MPwGDYRX5Cqdkn4e5nX4o1lLvi+gorQ
KvvzfZTupfODnb3Y+A3QDUVhwfHklyQIQEC9cbFjkJjOGuc/4vbafldK0QIDAQAB
o4ICKDCCAiQwHQYDVR0OBBYEFLa9HpesfNKk1EqNkWlDgzZQN404MB8GA1UdIwQY
MBaAFOII7LnzTB+8PzWJcQqz40n8YpXMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGdqc3VmTk1IN3dfTllseENyUGpTZnhpbGN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC85ZDk2MGYtYTU5YS00MzVjLWFlOTIt
MWNhNzM5YmIwMGNjLzEvdHIwZWw2eDgwcVRVU28yUmFVT0RObEEzalRnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC85ZDk2MGYtYTU5YS00MzVjLWFlOTItMWNhNzM5YmIwMGNj
LzEvNGdqc3VmTk1IN3dfTllseENyUGpTZnhpbGN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD4GCCsGAQUFBwEHAQH/BC8wLTAaBAIAATAUMAwDBACSRrUD
BACSRrYDBAC5LQ8wDwQCAAIwCQMHACoNVgAAdTANBgkqhkiG9w0BAQsFAAOCAQEA
k29tJ5D565VV7UcQFWwUihyog4RGNhMUZ5aAhjtcNRZ2PwfKyN7m5lhSej7H9nZg
aVdDADUwEL95cPR0BQ5vKB1ZoajVQnc+UaTLvuh6aonkemnSd2c4yaNXCbkTlxTd
qgs9kLFf3IPLGrjrcht4q1FBC7W+OjHxRwHW9+Q5JDkCAV1DncKA3iOYwJpGjjYA
XrJPNXeNyAoBT7sWtNHw1ioLpmfxqLTq67KiFJ4oyBwUbJeAXBpzeaKXtgWmBUU3
H3+E6t3pygLLkF+Do9McvKYW0SPfPU57xpt+COeyFqzUr9c+5WTVUhq8hjMyqetw
fl18aixHNdg1VaYqb9uTrw==
-----END CERTIFICATE-----
Generated at Mon May 6 15:34:11 2024 by rpki-client on console-fra.rpki-client.org