Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/DZdVRGlbYDd1HBA_tdtGnCht0og.roa
File: DZdVRGlbYDd1HBA_tdtGnCht0og.roa (raw, json)
Hash identifier: GbiIThQtTiKVQpbzl/nAq+cYqucOL7m/oOdFbOzP0FM=
Subject key identifier: 0D:97:55:44:69:5B:60:37:75:1C:10:3F:B5:DB:46:9C:28:6D:D2:88
Certificate issuer: /CN=96d900b0bc1e5f1b78c65cd83e7a20d8634726b6
Certificate serial: 018CC3B731B9C6083B2C8E2D6AF0CD02F28D
Authority key identifier: 96:D9:00:B0:BC:1E:5F:1B:78:C6:5C:D8:3E:7A:20:D8:63:47:26:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/DZdVRGlbYDd1HBA_tdtGnCht0og.roa
Signing time: Mon 01 Jan 2024 06:30:12 +0000
ROA not before: Mon 01 Jan 2024 06:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42365
IP address blocks: 195.22.155.0/24 maxlen: 24
195.22.154.0/23 maxlen: 23
195.22.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 15:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:31:b9:c6:08:3b:2c:8e:2d:6a:f0:cd:02:f2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d900b0bc1e5f1b78c65cd83e7a20d8634726b6
Validity
Not Before: Jan 1 06:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0d975544695b6037751c103fb5db469c286dd288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a8:75:25:d5:70:9a:52:ea:fd:3e:f5:68:5b:
b8:b4:29:07:a9:4e:9e:eb:4d:72:d2:d6:bc:2f:70:
6d:b4:6a:02:f9:0f:5a:eb:85:66:ca:37:e9:0d:bb:
e9:ed:6e:9e:f9:fd:14:02:d8:d8:18:3d:62:b5:00:
d5:6e:f1:f1:e9:8f:38:d5:5a:45:1a:d8:87:e5:2f:
1c:80:24:0e:b3:91:67:55:2f:0e:d2:64:cd:8a:7a:
bb:ea:77:80:5d:49:f3:b0:21:31:53:ef:83:7e:fd:
ce:53:3c:43:5a:e1:42:00:90:7a:8c:06:49:6b:65:
0e:87:7b:73:47:8a:cf:4e:31:96:fd:db:f0:08:96:
d6:d0:cb:5b:96:6e:bd:f2:31:c1:c0:93:12:55:c1:
96:b1:80:7b:ac:cb:1c:01:3f:34:0c:b3:2c:14:c1:
2e:01:bc:17:01:ae:16:89:72:b5:7f:04:d0:23:bb:
d2:75:5f:92:3d:95:6d:5f:e8:cd:a2:6c:3b:f1:29:
a1:47:3a:e4:fd:1f:c1:7b:d8:71:f9:db:7c:f2:19:
d7:1e:0f:4c:8e:03:a7:2e:0c:56:93:de:55:14:13:
86:c4:cd:09:2f:02:bd:1e:7c:63:6f:33:13:1c:f2:
12:e3:c8:c0:ec:cc:a8:8e:b7:41:de:ee:06:ed:4b:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:97:55:44:69:5B:60:37:75:1C:10:3F:B5:DB:46:9C:28:6D:D2:88
X509v3 Authority Key Identifier:
keyid:96:D9:00:B0:BC:1E:5F:1B:78:C6:5C:D8:3E:7A:20:D8:63:47:26:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ltkAsLweXxt4xlzYPnog2GNHJrY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/DZdVRGlbYDd1HBA_tdtGnCht0og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c1afc6-fd95-4555-8625-3fe469db6626/1/ltkAsLweXxt4xlzYPnog2GNHJrY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.154.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:03:b0:2c:6d:e6:69:4c:92:53:2a:a1:8f:68:d8:c2:95:ea:
b6:9f:6f:48:4b:f8:5c:43:71:01:b5:98:e6:58:64:68:6b:1b:
ce:9b:2e:72:0e:9c:d9:cb:bc:a1:08:36:2d:35:c9:ee:d0:fa:
01:7b:49:55:f1:5e:95:e8:83:22:35:f4:6d:22:30:84:dc:fd:
51:62:88:bc:12:6c:b7:1f:63:74:61:54:86:d1:b3:2f:46:55:
45:44:29:d1:d3:ae:4f:87:83:15:75:69:74:c3:82:d2:3c:27:
17:61:77:59:d5:e9:8b:60:c0:59:1e:f3:c4:a9:22:90:92:58:
5c:e4:3c:cb:37:5c:e8:09:6f:be:dc:af:43:ce:a6:4d:80:6f:
48:cc:6d:9f:ee:df:23:1f:93:5c:3e:1e:3c:df:a0:ec:80:bf:
07:35:28:37:b7:1f:ea:90:4c:33:73:75:c4:33:97:5a:a6:84:
be:ef:74:ac:33:1e:26:6f:f0:ef:93:a4:f6:98:21:30:26:a1:
fa:49:d0:8c:25:f3:82:3b:9d:a2:6e:73:88:a0:08:45:1a:c8:
d8:12:e0:94:4b:50:f6:7a:ce:d3:a5:42:cf:4e:97:72:a6:bb:
8e:6b:39:07:55:ac:e5:c9:87:f9:5e:fd:5e:c1:b7:9b:eb:cc:
59:27:96:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtzG5xgg7LI4tavDNAvKNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZDkwMGIwYmMxZTVmMWI3OGM2NWNkODNlN2EyMGQ4NjM0
NzI2YjYwHhcNMjQwMTAxMDYzMDEyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDk3NTU0NDY5NWI2MDM3NzUxYzEwM2ZiNWRiNDY5YzI4NmRkMjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKh1JdVwmlLq/T71aFu4tCkHqU6e
601y0ta8L3BttGoC+Q9a64VmyjfpDbvp7W6e+f0UAtjYGD1itQDVbvHx6Y841VpF
GtiH5S8cgCQOs5FnVS8O0mTNinq76neAXUnzsCExU++Dfv3OUzxDWuFCAJB6jAZJ
a2UOh3tzR4rPTjGW/dvwCJbW0Mtblm698jHBwJMSVcGWsYB7rMscAT80DLMsFMEu
AbwXAa4WiXK1fwTQI7vSdV+SPZVtX+jNomw78SmhRzrk/R/Be9hx+dt88hnXHg9M
jgOnLgxWk95VFBOGxM0JLwK9HnxjbzMTHPIS48jA7MyojrdB3u4G7UuNKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA2XVURpW2A3dRwQP7XbRpwobdKIMB8GA1UdIwQY
MBaAFJbZALC8Hl8beMZc2D56INhjRya2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHRrQXNMd2VYeHQ0eGx6WVBub2cyR05ISnJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jMWFmYzYtZmQ5NS00NTU1LTg2MjUt
M2ZlNDY5ZGI2NjI2LzEvRFpkVlJHbGJZRGQxSEJBX3RkdEduQ2h0MG9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9jMWFmYzYtZmQ5NS00NTU1LTg2MjUtM2ZlNDY5ZGI2NjI2
LzEvbHRrQXNMd2VYeHQ0eGx6WVBub2cyR05ISnJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwxaaMA0G
CSqGSIb3DQEBCwUAA4IBAQAeA7AsbeZpTJJTKqGPaNjCleq2n29IS/hcQ3EBtZjm
WGRoaxvOmy5yDpzZy7yhCDYtNcnu0PoBe0lV8V6V6IMiNfRtIjCE3P1RYoi8Emy3
H2N0YVSG0bMvRlVFRCnR065Ph4MVdWl0w4LSPCcXYXdZ1emLYMBZHvPEqSKQklhc
5DzLN1zoCW++3K9DzqZNgG9IzG2f7t8jH5NcPh4836DsgL8HNSg3tx/qkEwzc3XE
M5dapoS+73SsMx4mb/Dvk6T2mCEwJqH6SdCMJfOCO52ibnOIoAhFGsjYEuCUS1D2
es7TpULPTpdypruOazkHVazlyYf5Xv1ewbeb68xZJ5b5
-----END CERTIFICATE-----
Generated at Tue Nov 26 21:15:50 2024 by rpki-client on console-fra.rpki-client.org