Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/tVmd8MzzCixbL1mQkmt13m__4cU.roa
File: tVmd8MzzCixbL1mQkmt13m__4cU.roa (raw, json)
Hash identifier: rWHCVkqqWdhd9M4THku0WYx60L5xdz1AhDEB94medvU=
Subject key identifier: B5:59:9D:F0:CC:F3:0A:2C:5B:2F:59:90:92:6B:75:DE:6F:FF:E1:C5
Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Certificate serial: 018FB65AEA5F10AA231679CA626CFACEA492
Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/tVmd8MzzCixbL1mQkmt13m__4cU.roa
Signing time: Sun 26 May 2024 19:22:42 +0000
ROA not before: Sun 26 May 2024 19:22:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 195.95.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b6:5a:ea:5f:10:aa:23:16:79:ca:62:6c:fa:ce:a4:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51
Validity
Not Before: May 26 19:22:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5599df0ccf30a2c5b2f5990926b75de6fffe1c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:16:31:61:db:31:1f:6e:ed:9b:db:7f:38:
ee:fd:9d:05:dd:53:cf:f6:3f:93:0e:c0:a2:6b:88:
fc:a8:0f:7c:83:e1:5a:c6:12:e4:13:b2:fc:a2:66:
d2:2e:13:1c:59:d4:3b:0b:d3:6a:32:6d:7a:61:1b:
d4:06:c0:25:47:7c:60:fe:72:7b:2c:ac:10:d1:0a:
fa:92:95:d4:33:74:d6:a9:3d:e2:af:98:b7:3f:96:
20:32:8e:e3:e2:8a:ff:ac:81:51:ce:f0:c3:11:77:
e5:20:11:d7:6e:b4:a8:ac:4a:50:f6:95:34:88:06:
a4:2d:04:fe:92:2c:c5:7b:a6:b8:9f:f3:7b:c8:91:
8c:0d:66:cc:e8:76:f2:5a:1a:9a:9e:1f:35:eb:78:
c3:fe:34:96:ba:0e:d4:1a:ac:e7:78:41:c3:01:ae:
1c:4e:68:43:1f:f5:79:17:ce:0c:5c:0e:6c:b8:5f:
20:1a:00:e8:46:1f:5e:8c:50:4c:52:b4:17:3b:e1:
5a:cf:07:e2:7a:ef:9a:9d:ab:42:1f:44:55:5b:e3:
d8:7f:ab:b7:82:6c:d1:66:41:aa:f2:0f:1b:c0:28:
e7:f5:ea:a6:15:d1:3f:c5:9d:65:a2:9c:fc:5f:5e:
f7:f0:27:73:09:39:a2:67:c0:5b:25:a8:b9:6b:a8:
38:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:59:9D:F0:CC:F3:0A:2C:5B:2F:59:90:92:6B:75:DE:6F:FF:E1:C5
X509v3 Authority Key Identifier:
keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/tVmd8MzzCixbL1mQkmt13m__4cU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.201.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ee:de:1f:aa:9e:3b:21:0d:a0:40:81:9f:74:4b:b3:87:e7:
6c:69:db:52:3c:6b:c3:0d:c1:5f:40:89:7d:95:54:4d:4c:4e:
81:e8:15:db:86:df:fa:29:a4:0f:9f:e0:4c:92:dd:6e:0d:b9:
ee:3d:8f:3d:6a:9b:c2:1e:91:32:d2:27:d7:7e:8a:6b:a7:02:
82:73:35:1e:8c:f4:fb:bd:86:de:48:c0:ad:15:f4:69:af:f1:
60:d4:92:0f:74:b2:00:09:60:68:b5:9c:e5:1a:77:00:92:6d:
26:fe:c3:1e:04:1d:10:f6:a8:2f:bc:04:8f:2f:82:52:16:83:
81:4a:b4:f8:62:42:f1:0d:1f:a2:ff:5b:67:c8:cf:f9:bf:c5:
8a:a6:77:fb:6c:1e:d3:00:93:20:63:c0:88:9b:ea:db:8a:87:
78:cc:8d:f3:24:a2:b6:35:02:94:f6:a9:de:23:b0:55:1a:69:
88:7d:3a:d7:4d:3c:e7:9f:5d:1f:d4:fe:a3:1a:2a:57:89:f8:
15:3e:36:d5:cf:3a:23:b8:43:98:f6:bd:6a:a5:15:d4:ec:7c:
bb:61:0f:09:00:fd:2a:13:2b:1c:54:b2:9d:ef:c8:dd:55:61:
5a:85:d8:f3:60:96:80:eb:76:37:f2:7a:8d:fb:68:92:8a:80:
f7:f8:3a:5f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+2WupfEKojFnnKYmz6zqSSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk
NmNlNTEwHhcNMjQwNTI2MTkyMjQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTU5OWRmMGNjZjMwYTJjNWIyZjU5OTA5MjZiNzVkZTZmZmZlMWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmAWMWHbMR9u7Zvbfzju/Z0F3VPP
9j+TDsCia4j8qA98g+FaxhLkE7L8ombSLhMcWdQ7C9NqMm16YRvUBsAlR3xg/nJ7
LKwQ0Qr6kpXUM3TWqT3ir5i3P5YgMo7j4or/rIFRzvDDEXflIBHXbrSorEpQ9pU0
iAakLQT+kizFe6a4n/N7yJGMDWbM6HbyWhqanh8163jD/jSWug7UGqzneEHDAa4c
TmhDH/V5F84MXA5suF8gGgDoRh9ejFBMUrQXO+Fazwfieu+anatCH0RVW+PYf6u3
gmzRZkGq8g8bwCjn9eqmFdE/xZ1lopz8X1738CdzCTmiZ8BbJai5a6g4CwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLVZnfDM8wosWy9ZkJJrdd5v/+HFMB8GA1UdIwQY
MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt
ZGY2NGYwZTgyMzYwLzEvdFZtZDhNenpDaXhiTDFtUWttdDEzbV9fNGNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw
LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw1/JMA0G
CSqGSIb3DQEBCwUAA4IBAQBT7t4fqp47IQ2gQIGfdEuzh+dsadtSPGvDDcFfQIl9
lVRNTE6B6BXbht/6KaQPn+BMkt1uDbnuPY89apvCHpEy0ifXfoprpwKCczUejPT7
vYbeSMCtFfRpr/Fg1JIPdLIACWBotZzlGncAkm0m/sMeBB0Q9qgvvASPL4JSFoOB
SrT4YkLxDR+i/1tnyM/5v8WKpnf7bB7TAJMgY8CIm+rbiod4zI3zJKK2NQKU9qne
I7BVGmmIfTrXTTznn10f1P6jGipXifgVPjbVzzojuEOY9r1qpRXU7Hy7YQ8JAP0q
EyscVLKd78jdVWFahdjzYJaA63Y38nqN+2iSioD3+Dpf
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:04:55 2024 by rpki-client on console-ams.rpki-client.org