Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/c_v__ltq0xFRgvrlwys7R44AQLg.roa
File: c_v__ltq0xFRgvrlwys7R44AQLg.roa (raw, json)
Hash identifier: RattaJiwr0sQtv5ZC0rvTS4y2HiOYHxIDvBWBwAEUqU=
Subject key identifier: 73:FB:FF:FE:5B:6A:D3:11:51:82:FA:E5:C3:2B:3B:47:8E:00:40:B8
Certificate issuer: /CN=764c8eb03ef2326a620df100548d1f06d874551a
Certificate serial: 018CC42453F290A5EEFA06DFF4A154C61810
Authority key identifier: 76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/c_v__ltq0xFRgvrlwys7R44AQLg.roa
Signing time: Mon 01 Jan 2024 08:29:24 +0000
ROA not before: Mon 01 Jan 2024 08:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210432
IP address blocks: 146.19.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:53:f2:90:a5:ee:fa:06:df:f4:a1:54:c6:18:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764c8eb03ef2326a620df100548d1f06d874551a
Validity
Not Before: Jan 1 08:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73fbfffe5b6ad3115182fae5c32b3b478e0040b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:9d:7b:4a:8a:b3:eb:b2:5a:b0:dc:9e:1c:
35:b5:17:3f:24:38:46:e7:35:c0:48:e9:5e:69:ad:
8a:6b:66:6e:0c:19:dc:5b:bd:51:9a:90:1a:59:8c:
33:1b:83:4f:3d:ff:57:b2:ef:49:1b:03:3f:90:37:
e4:d6:39:73:23:89:dd:39:56:38:d7:ba:04:ab:17:
05:3a:0d:ec:81:6d:39:c6:a2:21:57:57:72:48:61:
41:96:77:4a:f1:1b:22:5a:f4:bf:e6:22:50:ed:14:
49:64:84:d5:cb:7c:a9:86:bf:10:1c:5f:f0:90:24:
15:2c:fc:f1:ab:30:41:14:d1:6e:14:25:46:9e:36:
46:84:b7:52:33:eb:dc:ac:25:c9:eb:05:e6:94:f1:
c0:8f:90:4b:8c:de:cb:1e:eb:d1:46:14:8c:b5:12:
d3:c0:f2:ae:05:62:d4:45:0f:bd:5c:6c:9f:3e:40:
4c:51:c4:d6:74:b0:e7:a9:51:eb:bb:cd:f4:5e:4d:
bb:a2:5d:a1:c3:1f:6d:e4:47:4b:3a:37:c1:53:a5:
12:c3:d3:fc:af:d9:69:25:50:f1:60:75:fc:19:a9:
3d:5c:d5:64:2d:f5:74:61:31:4a:56:4e:92:bb:e4:
a2:3e:5a:4c:a6:40:5c:db:f6:1b:c9:92:78:42:40:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FB:FF:FE:5B:6A:D3:11:51:82:FA:E5:C3:2B:3B:47:8E:00:40:B8
X509v3 Authority Key Identifier:
keyid:76:4C:8E:B0:3E:F2:32:6A:62:0D:F1:00:54:8D:1F:06:D8:74:55:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkyOsD7yMmpiDfEAVI0fBth0VRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/c_v__ltq0xFRgvrlwys7R44AQLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/71265f-0a53-4106-b20a-f3b50c65f820/1/dkyOsD7yMmpiDfEAVI0fBth0VRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.239.0/24
Signature Algorithm: sha256WithRSAEncryption
00:fa:b8:78:21:3a:66:ee:b3:a3:16:a9:79:bd:b5:24:73:39:
8b:90:5b:bf:f8:3d:79:13:f6:18:79:fc:f7:4f:6d:62:a0:5d:
90:98:7e:34:5c:57:cb:4c:e3:7b:88:0b:d2:87:fb:83:00:2e:
01:c6:6a:37:b6:4a:16:6d:a3:ca:e7:ce:9c:2f:56:e4:fe:ad:
87:bc:20:a1:bb:b3:0b:29:df:08:62:2b:38:39:eb:87:75:f7:
be:3a:27:ac:d7:03:29:b2:95:9e:91:37:1e:87:a8:dd:54:79:
c8:2a:18:7c:aa:16:fb:d4:3e:de:5d:f2:72:02:fe:62:ed:79:
2d:01:50:1e:cc:64:3d:2c:9c:99:78:19:61:24:1c:db:11:02:
6f:14:7b:c3:eb:83:24:9c:e9:35:c8:3a:65:a2:0f:7a:ea:df:
51:d3:8f:00:3c:43:54:c5:58:48:c6:7e:f5:ae:49:92:37:8f:
5a:0d:b9:5a:79:1a:ec:ea:20:38:50:c8:73:e6:79:eb:c2:16:
7b:dd:72:0e:88:33:2a:39:e9:16:02:ac:61:c6:33:91:4b:0c:
00:7e:04:47:ab:65:bc:a8:5a:ce:51:2b:04:cd:19:98:67:28:
2f:0f:35:bd:03:f9:75:02:a7:33:64:ac:f3:65:d8:4e:ca:b4:
ec:cb:77:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJFPykKXu+gbf9KFUxhgQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NGM4ZWIwM2VmMjMyNmE2MjBkZjEwMDU0OGQxZjA2ZDg3
NDU1MWEwHhcNMjQwMTAxMDgyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2ZiZmZmZTViNmFkMzExNTE4MmZhZTVjMzJiM2I0NzhlMDA0MGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgide0qKs+uyWrDcnhw1tRc/JDhG
5zXASOleaa2Ka2ZuDBncW71RmpAaWYwzG4NPPf9Xsu9JGwM/kDfk1jlzI4ndOVY4
17oEqxcFOg3sgW05xqIhV1dySGFBlndK8RsiWvS/5iJQ7RRJZITVy3yphr8QHF/w
kCQVLPzxqzBBFNFuFCVGnjZGhLdSM+vcrCXJ6wXmlPHAj5BLjN7LHuvRRhSMtRLT
wPKuBWLURQ+9XGyfPkBMUcTWdLDnqVHru830Xk27ol2hwx9t5EdLOjfBU6USw9P8
r9lpJVDxYHX8Gak9XNVkLfV0YTFKVk6Su+SiPlpMpkBc2/YbyZJ4QkDi/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHP7//5batMRUYL65cMrO0eOAEC4MB8GA1UdIwQY
MBaAFHZMjrA+8jJqYg3xAFSNHwbYdFUaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83MTI2NWYtMGE1My00MTA2LWIyMGEt
ZjNiNTBjNjVmODIwLzEvY192X19sdHEweEZSZ3ZybHd5czdSNDRBUUxnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83MTI2NWYtMGE1My00MTA2LWIyMGEtZjNiNTBjNjVmODIw
LzEvZGt5T3NEN3lNbXBpRGZFQVZJMGZCdGgwVlJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkhPvMA0G
CSqGSIb3DQEBCwUAA4IBAQAA+rh4ITpm7rOjFql5vbUkczmLkFu/+D15E/YYefz3
T21ioF2QmH40XFfLTON7iAvSh/uDAC4Bxmo3tkoWbaPK586cL1bk/q2HvCChu7ML
Kd8IYis4OeuHdfe+Oies1wMpspWekTceh6jdVHnIKhh8qhb71D7eXfJyAv5i7Xkt
AVAezGQ9LJyZeBlhJBzbEQJvFHvD64MknOk1yDplog966t9R048APENUxVhIxn71
rkmSN49aDblaeRrs6iA4UMhz5nnrwhZ73XIOiDMqOekWAqxhxjORSwwAfgRHq2W8
qFrOUSsEzRmYZygvDzW9A/l1AqczZKzzZdhOyrTsy3d+
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:15:58 2024 by rpki-client on console-fra.rpki-client.org