Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/tHUEVdkHUOll8fSXIOO53WJ-TwM.roa
File: tHUEVdkHUOll8fSXIOO53WJ-TwM.roa (raw, json)
Hash identifier: 43pAsIwbpPw5m3mpO3cde4f9sRxLzUw8+yLiz+ZpbiA=
Subject key identifier: B4:75:04:55:D9:07:50:E9:65:F1:F4:97:20:E3:B9:DD:62:7E:4F:03
Certificate issuer: /CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Certificate serial: 01934EEE24A05E3CEA66F07E4C00B9FF34AF
Authority key identifier: 46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/tHUEVdkHUOll8fSXIOO53WJ-TwM.roa
Signing time: Thu 21 Nov 2024 13:34:09 +0000
ROA not before: Thu 21 Nov 2024 13:34:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 912
IP address blocks: 185.156.184.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:ee:24:a0:5e:3c:ea:66:f0:7e:4c:00:b9:ff:34:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46efb53f266e11e6ed5a13eb3e97f4b9601dd6e0
Validity
Not Before: Nov 21 13:34:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4750455d90750e965f1f49720e3b9dd627e4f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:de:96:89:b2:d1:25:57:95:5e:23:18:11:49:
f0:bb:b8:84:fc:2f:10:5e:82:3f:ac:3f:9a:09:96:
31:93:72:80:64:9d:90:1c:8c:00:a6:e9:ae:d6:63:
05:01:09:7f:67:5e:9c:d5:5b:4c:41:6a:c1:ff:55:
68:37:46:33:c0:4b:1c:2a:62:d4:8f:25:b8:2a:50:
72:22:76:92:dc:aa:9c:fc:da:76:24:bd:a4:4b:93:
27:8f:e0:11:16:ee:3c:b8:94:6f:c1:4e:d1:90:69:
d2:e9:5a:fa:a3:c4:6c:3d:7b:a4:70:14:c4:39:a4:
5c:4c:e1:94:03:5f:03:8f:57:ae:45:d6:fd:5d:71:
5e:93:d4:a1:d0:f8:4e:aa:49:36:84:7f:15:9d:2f:
79:7d:5d:c0:65:9b:2a:99:cd:9c:f4:4c:61:ec:96:
d4:2d:f6:2f:26:02:fb:48:27:01:15:87:74:ce:fc:
39:10:97:d4:56:96:b0:0b:c9:65:a5:d7:29:c3:7b:
d6:f6:40:48:83:84:f3:90:b6:28:d6:03:8f:f0:4e:
b0:ae:25:fe:33:2d:7c:49:66:8e:96:2c:a4:6c:06:
43:1e:32:59:d4:61:43:9a:e8:9b:e0:d4:f8:22:bc:
e1:47:41:73:50:b1:74:ad:a1:c8:23:39:8b:d6:dd:
9e:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:04:55:D9:07:50:E9:65:F1:F4:97:20:E3:B9:DD:62:7E:4F:03
X509v3 Authority Key Identifier:
keyid:46:EF:B5:3F:26:6E:11:E6:ED:5A:13:EB:3E:97:F4:B9:60:1D:D6:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ru-1PyZuEebtWhPrPpf0uWAd1uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/tHUEVdkHUOll8fSXIOO53WJ-TwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/7bfb11-be26-4c4e-9c35-d7c6708414fa/1/Ru-1PyZuEebtWhPrPpf0uWAd1uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.184.0/22
Signature Algorithm: sha256WithRSAEncryption
45:e9:2a:29:f0:44:73:80:94:2b:d5:2c:86:09:eb:20:2f:61:
d3:6e:dc:57:d4:03:97:a8:51:5f:b4:25:c6:e9:14:75:0b:28:
0d:0b:3d:6e:69:6e:75:5d:c7:0a:a3:93:15:82:9e:63:0c:48:
bf:76:fc:11:36:be:32:ad:95:b3:e2:aa:b2:dc:dc:05:f9:38:
8a:c6:13:21:59:ff:9e:89:67:b2:e0:91:bb:03:a2:d3:c9:ec:
8d:5e:ad:f5:12:7b:43:15:1d:29:ce:98:25:52:4a:31:3d:a6:
65:69:6f:50:f6:79:30:11:8d:14:ac:7f:57:eb:69:de:bc:33:
f7:00:1c:30:ef:6c:cc:df:4b:8a:d8:4c:3f:a8:f3:3d:c8:a5:
15:16:3e:1e:95:58:e8:bb:2a:ee:32:96:73:ab:be:fe:9a:12:
63:29:bc:01:0c:94:af:80:df:86:dd:91:2c:63:d7:7b:49:b2:
11:c0:13:f2:36:b9:97:73:ca:aa:d6:9a:03:7f:38:d8:7b:eb:
bd:7d:8d:11:cc:5b:81:88:86:95:7c:2c:dc:90:ef:b2:f8:2a:
13:6e:fb:b5:20:22:7d:ae:8e:c5:5f:e4:6d:5c:09:94:9d:42:
c1:f4:aa:d9:1b:4f:69:c7:7f:04:69:78:50:d1:69:94:79:a3:
c0:6f:63:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNO7iSgXjzqZvB+TAC5/zSvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZWZiNTNmMjY2ZTExZTZlZDVhMTNlYjNlOTdmNGI5NjAx
ZGQ2ZTAwHhcNMjQxMTIxMTMzNDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDc1MDQ1NWQ5MDc1MGU5NjVmMWY0OTcyMGUzYjlkZDYyN2U0ZjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkt6WibLRJVeVXiMYEUnwu7iE/C8Q
XoI/rD+aCZYxk3KAZJ2QHIwApumu1mMFAQl/Z16c1VtMQWrB/1VoN0YzwEscKmLU
jyW4KlByInaS3Kqc/Np2JL2kS5Mnj+ARFu48uJRvwU7RkGnS6Vr6o8RsPXukcBTE
OaRcTOGUA18Dj1euRdb9XXFek9Sh0PhOqkk2hH8VnS95fV3AZZsqmc2c9Exh7JbU
LfYvJgL7SCcBFYd0zvw5EJfUVpawC8llpdcpw3vW9kBIg4TzkLYo1gOP8E6wriX+
My18SWaOliykbAZDHjJZ1GFDmuib4NT4IrzhR0FzULF0raHIIzmL1t2eDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLR1BFXZB1DpZfH0lyDjud1ifk8DMB8GA1UdIwQY
MBaAFEbvtT8mbhHm7VoT6z6X9LlgHdbgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUt
ZDdjNjcwODQxNGZhLzEvdEhVRVZka0hVT2xsOGZTWElPTzUzV0otVHdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny83YmZiMTEtYmUyNi00YzRlLTljMzUtZDdjNjcwODQxNGZh
LzEvUnUtMVB5WnVFZWJ0V2hQclBwZjB1V0FkMXVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZy4MA0G
CSqGSIb3DQEBCwUAA4IBAQBF6Sop8ERzgJQr1SyGCesgL2HTbtxX1AOXqFFftCXG
6RR1CygNCz1uaW51XccKo5MVgp5jDEi/dvwRNr4yrZWz4qqy3NwF+TiKxhMhWf+e
iWey4JG7A6LTyeyNXq31EntDFR0pzpglUkoxPaZlaW9Q9nkwEY0UrH9X62nevDP3
ABww72zM30uK2Ew/qPM9yKUVFj4elVjouyruMpZzq77+mhJjKbwBDJSvgN+G3ZEs
Y9d7SbIRwBPyNrmXc8qq1poDfzjYe+u9fY0RzFuBiIaVfCzckO+y+CoTbvu1ICJ9
ro7FX+RtXAmUnULB9KrZG09px38EaXhQ0WmUeaPAb2Mz
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:50:22 2024 by rpki-client on console-fra.rpki-client.org