Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/pd3nfbdTSmfAnefe4VJWM-5Uzl0.roa
File: pd3nfbdTSmfAnefe4VJWM-5Uzl0.roa (raw, json)
Hash identifier: NKfRdSazrcbWSIM6dd1sqF6sLOLPbDJPHzPwAIAeOqE=
Subject key identifier: A5:DD:E7:7D:B7:53:4A:67:C0:9D:E7:DE:E1:52:56:33:EE:54:CE:5D
Certificate issuer: /CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Certificate serial: 018CC4938C76AA411ADC6FEA0EF17DA2D386
Authority key identifier: A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/pd3nfbdTSmfAnefe4VJWM-5Uzl0.roa
Signing time: Mon 01 Jan 2024 10:30:53 +0000
ROA not before: Mon 01 Jan 2024 10:30:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39729
IP address blocks: 81.88.48.0/20 maxlen: 24
2a01:8100::/29 maxlen: 48
2a01:8100:2000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:8c:76:aa:41:1a:dc:6f:ea:0e:f1:7d:a2:d3:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a35c5443ae203f647ee306b9ef72dac50b5df514
Validity
Not Before: Jan 1 10:30:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a5dde77db7534a67c09de7dee1525633ee54ce5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c0:eb:39:26:25:73:f2:29:20:21:44:34:ea:
1c:f5:63:b8:dc:01:b6:c5:ce:9c:c6:9a:bd:88:da:
16:a4:c1:97:ec:1b:8d:2e:50:3a:7d:38:dd:e1:95:
47:db:58:23:44:77:8b:4b:0e:d7:08:6c:5b:d9:4f:
9f:d3:e9:a2:0b:5b:62:e1:21:00:54:94:f9:62:10:
31:a7:02:9d:7f:50:c9:92:94:29:85:32:f4:34:0c:
d0:ce:20:8c:84:d4:aa:48:d5:8a:b3:ff:99:e9:3b:
25:9b:16:f8:f7:a0:93:f1:81:ac:9e:d2:7e:6c:5e:
7c:cf:57:d0:82:83:59:eb:ec:e8:6a:63:b9:6b:83:
a4:b8:44:89:25:cc:5c:c5:99:51:d6:2d:e8:71:f2:
d8:ca:e9:f5:38:ed:7e:8c:4b:7f:90:95:e8:47:ea:
f8:25:02:d4:5b:e4:5d:21:1d:06:c5:a1:55:e9:86:
8b:35:d4:94:a7:54:0b:7a:11:98:f7:42:5c:46:f2:
8b:c6:b0:52:cd:d8:f9:e4:36:1f:81:74:b7:7c:4b:
67:3a:60:94:eb:07:62:ed:8c:18:5c:e0:71:24:56:
fd:cb:4f:61:7f:1c:7f:11:34:df:54:08:13:f0:e4:
b0:a0:1a:29:d9:f5:6d:b1:52:a8:78:0d:9d:b1:e6:
60:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DD:E7:7D:B7:53:4A:67:C0:9D:E7:DE:E1:52:56:33:EE:54:CE:5D
X509v3 Authority Key Identifier:
keyid:A3:5C:54:43:AE:20:3F:64:7E:E3:06:B9:EF:72:DA:C5:0B:5D:F5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1xUQ64gP2R-4wa573LaxQtd9RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/pd3nfbdTSmfAnefe4VJWM-5Uzl0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f651c1-02d6-448a-acad-14c590fec7e3/1/o1xUQ64gP2R-4wa573LaxQtd9RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.88.48.0/20
IPv6:
2a01:8100::/29
Signature Algorithm: sha256WithRSAEncryption
32:72:13:ed:15:87:92:88:30:4a:79:b6:5b:2f:2f:5f:d0:9e:
50:c6:29:f0:a4:95:8e:22:17:82:44:0b:d4:d1:93:cf:ce:6f:
ea:6b:ce:71:4c:e8:43:43:38:12:72:64:34:8b:68:27:17:a3:
c3:77:85:66:8e:8a:da:70:aa:76:68:22:14:a5:22:1a:53:06:
94:90:6e:74:2f:81:5f:b5:15:00:2b:5c:30:07:8a:47:fc:99:
d4:64:5a:01:59:e3:78:59:df:d1:fc:69:bf:61:29:06:c4:bb:
76:b9:0d:cf:4b:a8:51:c7:65:c4:71:76:ae:49:ef:da:5f:96:
09:a3:e3:d2:3d:36:d7:95:de:bb:6b:35:c8:3f:b1:3d:15:e0:
86:82:4d:5c:0e:5f:6e:46:ef:f2:f9:7c:b0:f3:b0:70:60:52:
4b:ed:43:d5:ab:49:a2:94:2e:74:f4:81:97:af:72:a6:9d:a8:
7c:08:87:1f:8d:b6:90:22:e8:74:9c:ce:ec:5d:20:ad:6d:4c:
ce:db:80:da:bd:e4:2e:8e:d1:20:ba:3b:b5:2b:6c:4c:d9:88:
a7:c3:1b:7b:77:4a:ec:b8:20:e3:06:b3:3c:0a:fb:13:60:29:
89:bb:da:b7:9e:62:f3:5b:39:d5:89:4a:7a:d3:9a:8a:be:77:
d0:b8:ab:07
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzEk4x2qkEa3G/qDvF9otOGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNWM1NDQzYWUyMDNmNjQ3ZWUzMDZiOWVmNzJkYWM1MGI1
ZGY1MTQwHhcNMjQwMTAxMTAzMDUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWRkZTc3ZGI3NTM0YTY3YzA5ZGU3ZGVlMTUyNTYzM2VlNTRjZTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsDrOSYlc/IpICFENOoc9WO43AG2
xc6cxpq9iNoWpMGX7BuNLlA6fTjd4ZVH21gjRHeLSw7XCGxb2U+f0+miC1ti4SEA
VJT5YhAxpwKdf1DJkpQphTL0NAzQziCMhNSqSNWKs/+Z6Tslmxb496CT8YGsntJ+
bF58z1fQgoNZ6+zoamO5a4OkuESJJcxcxZlR1i3ocfLYyun1OO1+jEt/kJXoR+r4
JQLUW+RdIR0GxaFV6YaLNdSUp1QLehGY90JcRvKLxrBSzdj55DYfgXS3fEtnOmCU
6wdi7YwYXOBxJFb9y09hfxx/ETTfVAgT8OSwoBop2fVtsVKoeA2dseZgowIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKXd5323U0pnwJ3n3uFSVjPuVM5dMB8GA1UdIwQY
MBaAFKNcVEOuID9kfuMGue9y2sULXfUUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQt
MTRjNTkwZmVjN2UzLzEvcGQzbmZiZFRTbWZBbmVmZTRWSldNLTVVemwwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9mNjUxYzEtMDJkNi00NDhhLWFjYWQtMTRjNTkwZmVjN2Uz
LzEvbzF4VVE2NGdQMlItNHdhNTczTGF4UXRkOVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQEUVgwMA0E
AgACMAcDBQMqAYEAMA0GCSqGSIb3DQEBCwUAA4IBAQAychPtFYeSiDBKebZbLy9f
0J5QxinwpJWOIheCRAvU0ZPPzm/qa85xTOhDQzgScmQ0i2gnF6PDd4VmjoracKp2
aCIUpSIaUwaUkG50L4FftRUAK1wwB4pH/JnUZFoBWeN4Wd/R/Gm/YSkGxLt2uQ3P
S6hRx2XEcXauSe/aX5YJo+PSPTbXld67azXIP7E9FeCGgk1cDl9uRu/y+Xyw87Bw
YFJL7UPVq0milC509IGXr3Kmnah8CIcfjbaQIuh0nM7sXSCtbUzO24DaveQujtEg
uju1K2xM2Yinwxt7d0rsuCDjBrM8CvsTYCmJu9q3nmLzWznViUp605qKvnfQuKsH
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:32:10 2024 by rpki-client on console-ams.rpki-client.org