Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/tAjb-3-tber-s7itP04i4bDSFic.roa
File: tAjb-3-tber-s7itP04i4bDSFic.roa (raw, json)
Hash identifier: 3MNpQbhT+cqYED0aqzlpEJsPnXyZ9LjwuS1FOR2Zdrw=
Subject key identifier: B4:08:DB:FB:7F:AD:6D:EA:FE:B3:B8:AD:3F:4E:22:E1:B0:D2:16:27
Certificate issuer: /CN=87943cb86e3a703813778fab790d65f0da21615a
Certificate serial: 018CC72739365566BE2810A9CB367543EB6A
Authority key identifier: 87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/tAjb-3-tber-s7itP04i4bDSFic.roa
Signing time: Mon 01 Jan 2024 22:31:25 +0000
ROA not before: Mon 01 Jan 2024 22:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43882
IP address blocks: 79.133.160.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:39:36:55:66:be:28:10:a9:cb:36:75:43:eb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87943cb86e3a703813778fab790d65f0da21615a
Validity
Not Before: Jan 1 22:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b408dbfb7fad6deafeb3b8ad3f4e22e1b0d21627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9b:f2:c8:69:bb:69:e9:de:5d:23:ff:49:87:
6f:d5:25:2d:ea:d4:b9:01:34:11:7a:0a:ff:86:44:
75:90:af:ce:5e:77:1c:10:ff:49:29:d2:37:ed:12:
16:7d:1c:52:6d:ee:2b:62:7f:21:56:1b:b5:b7:66:
5f:c9:85:64:92:29:20:8f:c8:ad:92:94:e0:28:cd:
08:1e:47:2d:08:11:ff:ee:4c:a2:99:9d:38:73:f8:
e3:a5:ac:89:a1:ee:48:80:0d:99:0b:0c:e4:f0:51:
34:d1:ee:e9:bd:b4:21:1b:b0:d3:f5:28:f3:60:9e:
62:ef:33:0c:d0:4a:1d:09:eb:8c:ab:49:cb:ec:dc:
5b:ff:ee:89:fc:24:95:f2:e6:67:57:77:06:bb:72:
76:1e:0b:e7:2f:59:05:e3:b9:d6:cd:7a:6e:6a:dd:
5e:2d:91:dc:1b:98:9d:b8:14:ae:16:79:b8:dd:82:
d6:9f:4d:74:ac:14:82:a8:6d:87:55:bb:1c:2d:d0:
01:a5:d1:57:a2:af:65:e9:60:c2:4b:78:a4:fe:ce:
18:ac:47:98:7a:e3:d2:9e:d8:5c:32:f6:80:5a:be:
d2:0f:60:96:2e:16:78:33:81:3e:c0:35:cc:1d:bf:
dd:61:5a:63:f5:16:5c:5b:98:84:d9:b8:69:30:ac:
a7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:08:DB:FB:7F:AD:6D:EA:FE:B3:B8:AD:3F:4E:22:E1:B0:D2:16:27
X509v3 Authority Key Identifier:
keyid:87:94:3C:B8:6E:3A:70:38:13:77:8F:AB:79:0D:65:F0:DA:21:61:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h5Q8uG46cDgTd4-reQ1l8NohYVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/tAjb-3-tber-s7itP04i4bDSFic.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/958fef-0d55-4c00-be8a-cc580521d00f/1/h5Q8uG46cDgTd4-reQ1l8NohYVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.133.160.0/20
Signature Algorithm: sha256WithRSAEncryption
77:2a:32:d4:a4:1c:20:63:70:e7:20:b3:54:c4:a1:fb:ab:56:
3b:72:c2:b8:3d:34:78:ea:1e:d2:6c:60:28:7b:ad:75:e3:82:
2b:9e:53:19:be:80:c8:24:e5:c8:50:a6:10:b1:e4:b2:18:31:
16:63:c3:f9:15:00:8a:02:b9:ec:13:84:3e:7c:85:d0:a0:76:
2c:d3:50:14:f6:7b:a3:a2:77:e3:4e:6a:80:88:be:8c:54:b8:
21:bf:c5:99:9e:26:05:7f:24:31:cd:71:99:fa:39:6a:88:62:
0d:e6:dd:52:05:bf:83:12:8a:c4:9b:2e:57:c2:ee:15:f2:18:
58:91:12:e2:9a:cf:48:5b:e1:aa:f5:7e:69:0b:ba:a3:83:8f:
5c:c3:5e:64:08:e0:08:8d:9e:dc:ac:d7:fa:7a:77:d8:a0:d4:
f4:92:c9:0d:58:b2:01:63:d5:03:6e:da:9c:e5:89:13:7a:bd:
ef:0b:80:cf:25:b4:2b:44:71:7b:46:d8:11:c0:16:58:19:f3:
8f:69:c4:47:7b:74:3b:8a:a8:5c:38:76:8e:00:84:27:97:cf:
65:32:23:11:82:9f:88:63:a9:31:8d:b2:17:94:30:fe:25:d5:
92:42:95:99:dc:8a:1a:d1:9f:bc:a8:43:e6:65:98:e2:8c:08:
b4:f3:3c:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJzk2VWa+KBCpyzZ1Q+tqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OTQzY2I4NmUzYTcwMzgxMzc3OGZhYjc5MGQ2NWYwZGEy
MTYxNWEwHhcNMjQwMTAxMjIzMTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDA4ZGJmYjdmYWQ2ZGVhZmViM2I4YWQzZjRlMjJlMWIwZDIxNjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5vyyGm7aeneXSP/SYdv1SUt6tS5
ATQRegr/hkR1kK/OXnccEP9JKdI37RIWfRxSbe4rYn8hVhu1t2ZfyYVkkikgj8it
kpTgKM0IHkctCBH/7kyimZ04c/jjpayJoe5IgA2ZCwzk8FE00e7pvbQhG7DT9Sjz
YJ5i7zMM0EodCeuMq0nL7Nxb/+6J/CSV8uZnV3cGu3J2HgvnL1kF47nWzXpuat1e
LZHcG5iduBSuFnm43YLWn010rBSCqG2HVbscLdABpdFXoq9l6WDCS3ik/s4YrEeY
euPSnthcMvaAWr7SD2CWLhZ4M4E+wDXMHb/dYVpj9RZcW5iE2bhpMKynnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLQI2/t/rW3q/rO4rT9OIuGw0hYnMB8GA1UdIwQY
MBaAFIeUPLhuOnA4E3ePq3kNZfDaIWFaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEt
Y2M1ODA1MjFkMDBmLzEvdEFqYi0zLXRiZXItczdpdFAwNGk0YkRTRmljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi85NThmZWYtMGQ1NS00YzAwLWJlOGEtY2M1ODA1MjFkMDBm
LzEvaDVROHVHNDZjRGdUZDQtcmVRMWw4Tm9oWVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQET4WgMA0G
CSqGSIb3DQEBCwUAA4IBAQB3KjLUpBwgY3DnILNUxKH7q1Y7csK4PTR46h7SbGAo
e61144IrnlMZvoDIJOXIUKYQseSyGDEWY8P5FQCKArnsE4Q+fIXQoHYs01AU9nuj
onfjTmqAiL6MVLghv8WZniYFfyQxzXGZ+jlqiGIN5t1SBb+DEorEmy5Xwu4V8hhY
kRLims9IW+Gq9X5pC7qjg49cw15kCOAIjZ7crNf6enfYoNT0kskNWLIBY9UDbtqc
5YkTer3vC4DPJbQrRHF7RtgRwBZYGfOPacRHe3Q7iqhcOHaOAIQnl89lMiMRgp+I
Y6kxjbIXlDD+JdWSQpWZ3Ioa0Z+8qEPmZZjijAi08zw+
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:38:52 2024 by rpki-client on console-ams.rpki-client.org