Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/u3MqeVLP6UfUDB7EejC4gUatdVY.roa
File: u3MqeVLP6UfUDB7EejC4gUatdVY.roa (raw, json)
Hash identifier: b8f3wAHrAO8RX43AUTStHdHZstaDazYZvlbhrnu+as4=
Subject key identifier: BB:73:2A:79:52:CF:E9:47:D4:0C:1E:C4:7A:30:B8:81:46:AD:75:56
Certificate issuer: /CN=24b660a611980c68273139e32affb74b454a9d32
Certificate serial: 018CC3B6C819ED78BB7744DBDDDC27C6B278
Authority key identifier: 24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/u3MqeVLP6UfUDB7EejC4gUatdVY.roa
Signing time: Mon 01 Jan 2024 06:29:45 +0000
ROA not before: Mon 01 Jan 2024 06:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59979
IP address blocks: 195.43.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:c8:19:ed:78:bb:77:44:db:dd:dc:27:c6:b2:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24b660a611980c68273139e32affb74b454a9d32
Validity
Not Before: Jan 1 06:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb732a7952cfe947d40c1ec47a30b88146ad7556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a1:6d:21:15:5d:56:34:d3:51:f7:93:61:9c:
24:55:e6:81:84:ca:be:88:52:47:3a:b0:c0:60:d1:
dd:67:2d:62:5b:52:56:84:b5:06:5d:65:aa:5b:9d:
d7:18:09:03:6e:80:1e:82:40:88:b0:f0:4c:76:6d:
40:7d:ab:c9:ec:df:0b:a8:b7:50:3b:5a:8d:0a:32:
29:32:67:05:ff:bd:08:ed:df:cf:b6:8f:94:ca:c4:
26:84:ba:db:ef:4e:ba:05:a9:e8:6d:34:2e:de:ad:
c7:e9:ff:d4:e1:e0:02:13:81:e7:61:c6:fa:d5:39:
ec:f4:11:29:7d:3b:4b:e3:e8:11:bb:07:cb:a9:af:
f8:88:5b:6b:c8:c5:a7:0c:05:05:dd:1f:0b:32:b5:
0f:9f:a8:84:16:a8:dc:c1:b0:1d:fa:f6:23:2a:36:
5a:d3:6c:7e:c2:ca:9a:25:82:0f:81:f2:30:ee:cc:
0a:ec:ea:56:fe:c8:5c:81:50:04:12:a9:0a:6e:7e:
fe:f7:1b:f1:ed:83:34:61:2c:9f:ad:1f:42:79:28:
e8:84:59:49:13:8c:ab:97:c3:81:45:3f:25:a8:ef:
c4:ef:1f:7f:be:2e:a6:56:0a:61:24:64:72:4a:3c:
fb:3f:d2:d0:3c:de:92:f6:6b:22:df:70:73:32:54:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:73:2A:79:52:CF:E9:47:D4:0C:1E:C4:7A:30:B8:81:46:AD:75:56
X509v3 Authority Key Identifier:
keyid:24:B6:60:A6:11:98:0C:68:27:31:39:E3:2A:FF:B7:4B:45:4A:9D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JLZgphGYDGgnMTnjKv-3S0VKnTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/u3MqeVLP6UfUDB7EejC4gUatdVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/16d4b5-76bb-4324-9a86-705197507a59/1/JLZgphGYDGgnMTnjKv-3S0VKnTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.43.138.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:de:c0:2c:d1:ed:ff:0f:2c:04:2a:0a:1d:3f:7b:78:c5:f4:
27:1e:63:85:41:5a:3f:7a:fe:07:ca:1f:5e:da:4f:65:08:78:
78:76:0c:f6:b8:51:42:14:1f:9e:89:14:e7:0b:98:4d:11:56:
74:7a:e6:08:68:d7:f4:7d:f1:00:ca:ac:c0:a6:b8:51:ab:d9:
a0:b9:50:af:43:d7:7d:02:41:71:5b:e2:13:e3:8d:28:90:0d:
31:c4:ca:27:00:b6:e2:a0:8a:8b:8a:57:59:04:27:f8:18:1c:
c6:e8:0b:d5:c5:4b:af:6f:c0:9c:85:3b:1b:fb:35:4a:7c:de:
2b:83:d1:7c:3f:dc:e1:2f:58:0d:62:71:b5:f1:9e:10:b8:5a:
14:28:9c:12:51:10:75:42:20:42:79:e8:ba:39:d4:cf:8c:51:
d8:c6:e3:40:83:11:a3:bd:75:b1:67:bc:dd:29:6d:a7:ed:30:
4c:71:38:b2:d8:46:f9:04:a8:c4:7d:a8:d7:84:3f:17:db:2f:
bf:75:2d:0c:fc:7f:0f:83:da:25:a1:ae:69:89:45:f7:c0:b2:
52:34:24:92:de:ea:8a:e2:6c:72:7d:eb:28:56:9c:8c:8d:67:
d3:0c:a3:6e:8d:b6:85:1c:a0:ab:3b:b9:d1:c3:2c:de:71:4d:
56:34:69:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtsgZ7Xi7d0Tb3dwnxrJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0YjY2MGE2MTE5ODBjNjgyNzMxMzllMzJhZmZiNzRiNDU0
YTlkMzIwHhcNMjQwMTAxMDYyOTQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjczMmE3OTUyY2ZlOTQ3ZDQwYzFlYzQ3YTMwYjg4MTQ2YWQ3NTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKFtIRVdVjTTUfeTYZwkVeaBhMq+
iFJHOrDAYNHdZy1iW1JWhLUGXWWqW53XGAkDboAegkCIsPBMdm1AfavJ7N8LqLdQ
O1qNCjIpMmcF/70I7d/Pto+UysQmhLrb7066BanobTQu3q3H6f/U4eACE4HnYcb6
1Tns9BEpfTtL4+gRuwfLqa/4iFtryMWnDAUF3R8LMrUPn6iEFqjcwbAd+vYjKjZa
02x+wsqaJYIPgfIw7swK7OpW/shcgVAEEqkKbn7+9xvx7YM0YSyfrR9CeSjohFlJ
E4yrl8OBRT8lqO/E7x9/vi6mVgphJGRySjz7P9LQPN6S9msi33BzMlSSJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLtzKnlSz+lH1AwexHowuIFGrXVWMB8GA1UdIwQY
MBaAFCS2YKYRmAxoJzE54yr/t0tFSp0yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYt
NzA1MTk3NTA3YTU5LzEvdTNNcWVWTFA2VWZVREI3RWVqQzRnVWF0ZFZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8xNmQ0YjUtNzZiYi00MzI0LTlhODYtNzA1MTk3NTA3YTU5
LzEvSkxaZ3BoR1lER2duTVRuakt2LTNTMFZLblRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwyuKMA0G
CSqGSIb3DQEBCwUAA4IBAQC43sAs0e3/DywEKgodP3t4xfQnHmOFQVo/ev4Hyh9e
2k9lCHh4dgz2uFFCFB+eiRTnC5hNEVZ0euYIaNf0ffEAyqzAprhRq9mguVCvQ9d9
AkFxW+IT440okA0xxMonALbioIqLildZBCf4GBzG6AvVxUuvb8CchTsb+zVKfN4r
g9F8P9zhL1gNYnG18Z4QuFoUKJwSURB1QiBCeei6OdTPjFHYxuNAgxGjvXWxZ7zd
KW2n7TBMcTiy2Eb5BKjEfajXhD8X2y+/dS0M/H8Pg9oloa5piUX3wLJSNCSS3uqK
4mxyfesoVpyMjWfTDKNujbaFHKCrO7nRwyzecU1WNGlt
-----END CERTIFICATE-----
Generated at Sat Jun 1 16:58:08 2024 by rpki-client on console-ams.rpki-client.org