Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/6E39cCrSgvy_LbjvTRWK2nfYSx0.roa
File: 6E39cCrSgvy_LbjvTRWK2nfYSx0.roa (raw, json)
Hash identifier: NatURe2gPMAzIoNOxh4gJVEXewic65AjKHtHM5G9/YM=
Subject key identifier: E8:4D:FD:70:2A:D2:82:FC:BF:2D:B8:EF:4D:15:8A:DA:77:D8:4B:1D
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 018CCA2A45A1FC8EDE5D9D5617053F9BECBE
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/6E39cCrSgvy_LbjvTRWK2nfYSx0.roa
Signing time: Tue 02 Jan 2024 12:33:37 +0000
ROA not before: Tue 02 Jan 2024 12:33:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49981
IP address blocks: 81.29.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 11:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:45:a1:fc:8e:de:5d:9d:56:17:05:3f:9b:ec:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Jan 2 12:33:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e84dfd702ad282fcbf2db8ef4d158ada77d84b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f7:85:b5:2f:95:f0:02:e7:fd:0b:be:3b:c5:
fb:cd:01:9e:9e:3a:51:01:a5:97:f9:3e:3b:13:45:
58:98:ac:d0:d4:82:c7:da:34:3b:d4:34:2d:13:da:
57:72:96:13:b5:a2:67:60:ba:45:1e:9b:2c:d1:3a:
de:b4:6c:de:44:a0:76:dd:e4:e6:a5:bc:e5:92:97:
be:45:19:f4:3e:58:c6:3d:45:9a:18:ae:5c:ac:43:
11:51:8c:31:78:0d:09:19:56:2b:c6:af:66:a6:4d:
81:f2:73:ab:5b:66:a1:fd:f2:a2:2a:7b:45:54:11:
f2:a5:0c:1f:f4:09:e8:df:ad:bc:9a:f3:ee:82:0d:
49:1a:e8:7a:b4:08:c4:61:28:0a:e4:b7:fb:48:a6:
7d:91:26:f6:4f:3d:70:92:53:0f:84:1e:84:14:65:
6d:e7:ce:9c:f7:f9:c6:97:64:54:a1:92:93:ee:74:
d0:7f:7a:4d:48:35:8d:db:46:45:30:bf:33:a4:19:
ad:39:57:69:e5:86:fd:41:f1:13:c1:94:52:fd:60:
0c:a9:db:1a:31:7c:7d:5d:c6:3f:7c:3d:17:3a:56:
aa:fd:a4:09:9f:9e:32:e5:b2:33:7e:12:14:a4:c0:
33:28:bf:f7:44:49:70:a9:99:2e:b1:d4:a2:bd:96:
8d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4D:FD:70:2A:D2:82:FC:BF:2D:B8:EF:4D:15:8A:DA:77:D8:4B:1D
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/6E39cCrSgvy_LbjvTRWK2nfYSx0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.29.150.0/24
Signature Algorithm: sha256WithRSAEncryption
41:27:0c:20:5a:e9:46:be:10:57:d1:fb:69:2f:f4:3c:fa:3b:
64:d0:37:a1:93:ea:3e:4a:7c:26:c2:65:d8:32:f2:77:b5:8b:
a9:c2:f6:df:7b:14:92:5b:c9:4d:fa:a1:3d:82:44:65:be:68:
c2:7d:f1:60:be:98:fb:7a:7e:fd:a3:80:f7:31:e0:74:70:e4:
bf:0d:50:68:a5:76:0f:8f:21:4b:a5:0d:27:a9:bc:05:90:7e:
36:3d:eb:b5:dc:00:ef:8a:3c:05:b6:19:dd:e1:46:2c:18:b0:
6a:a5:ad:4c:0c:fc:46:b4:56:57:d4:1a:de:39:1e:12:44:45:
37:04:b1:86:2f:26:1e:30:96:1c:26:91:b0:6c:5d:df:63:f0:
cb:71:ba:07:d4:d0:70:28:3b:5a:8e:d8:b5:c4:17:49:9b:fe:
d7:30:22:84:0e:b1:82:b2:61:84:38:49:77:34:ca:d4:ef:2e:
d0:f4:f3:6e:d1:46:65:fd:b2:fb:9d:2d:f7:06:3f:62:ba:7b:
4d:9b:fa:14:99:17:fa:73:a2:6d:e3:f8:8c:b0:47:11:75:3c:
86:71:84:9f:26:7d:9d:13:76:0b:6e:59:26:1b:d2:e0:d2:06:
49:b5:75:cb:32:38:fa:62:c4:36:a5:34:36:fe:bc:55:89:84:
5b:06:bd:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKkWh/I7eXZ1WFwU/m+y+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjQwMTAyMTIzMzM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODRkZmQ3MDJhZDI4MmZjYmYyZGI4ZWY0ZDE1OGFkYTc3ZDg0YjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifeFtS+V8ALn/Qu+O8X7zQGenjpR
AaWX+T47E0VYmKzQ1ILH2jQ71DQtE9pXcpYTtaJnYLpFHpss0TretGzeRKB23eTm
pbzlkpe+RRn0PljGPUWaGK5crEMRUYwxeA0JGVYrxq9mpk2B8nOrW2ah/fKiKntF
VBHypQwf9Ano3628mvPugg1JGuh6tAjEYSgK5Lf7SKZ9kSb2Tz1wklMPhB6EFGVt
586c9/nGl2RUoZKT7nTQf3pNSDWN20ZFML8zpBmtOVdp5Yb9QfETwZRS/WAMqdsa
MXx9XcY/fD0XOlaq/aQJn54y5bIzfhIUpMAzKL/3RElwqZkusdSivZaNLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOhN/XAq0oL8vy24700Vitp32EsdMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvNkUzOWNDclNndnlfTGJqdlRSV0sybmZZU3gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR2WMA0G
CSqGSIb3DQEBCwUAA4IBAQBBJwwgWulGvhBX0ftpL/Q8+jtk0Dehk+o+SnwmwmXY
MvJ3tYupwvbfexSSW8lN+qE9gkRlvmjCffFgvpj7en79o4D3MeB0cOS/DVBopXYP
jyFLpQ0nqbwFkH42Peu13ADvijwFthnd4UYsGLBqpa1MDPxGtFZX1BreOR4SREU3
BLGGLyYeMJYcJpGwbF3fY/DLcboH1NBwKDtajti1xBdJm/7XMCKEDrGCsmGEOEl3
NMrU7y7Q9PNu0UZl/bL7nS33Bj9iuntNm/oUmRf6c6Jt4/iMsEcRdTyGcYSfJn2d
E3YLblkmG9Lg0gZJtXXLMjj6YsQ2pTQ2/rxViYRbBr2L
-----END CERTIFICATE-----
Generated at Tue May 7 16:09:27 2024 by rpki-client on console-fra.rpki-client.org