Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/JqUvnnU3TpYyUfQEHRTisdZHeWI.roa
File: JqUvnnU3TpYyUfQEHRTisdZHeWI.roa (raw, json)
Hash identifier: HN9uaTlA68ZIgfvLwAImSNNcIWZJa1I1StDnOQ+p894=
Subject key identifier: 26:A5:2F:9E:75:37:4E:96:32:51:F4:04:1D:14:E2:B1:D6:47:79:62
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 018CCA2B77AF38BE7F94C17187DB924FB76D
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/JqUvnnU3TpYyUfQEHRTisdZHeWI.roa
Signing time: Tue 02 Jan 2024 12:34:55 +0000
ROA not before: Tue 02 Jan 2024 12:34:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212506
IP address blocks: 195.16.72.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:77:af:38:be:7f:94:c1:71:87:db:92:4f:b7:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Jan 2 12:34:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=26a52f9e75374e963251f4041d14e2b1d6477962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:35:0a:ed:bb:38:5a:a3:2b:69:a6:08:9a:62:
b0:f0:7a:37:b7:c7:ce:81:db:7b:4c:53:7e:8e:48:
71:11:d5:db:22:17:2b:47:ca:c5:72:f3:6a:38:80:
74:0f:24:e2:1a:38:cd:e0:ad:c5:58:ea:0c:75:cf:
ce:d0:73:f6:d7:bb:be:8f:58:42:09:7a:81:00:71:
d0:df:b6:f9:0f:f2:14:7e:e5:e7:a8:91:71:84:e2:
2f:6b:59:ac:fd:5a:89:78:0f:84:ce:05:90:3e:8d:
ed:3e:29:ff:24:18:99:6e:d5:3b:35:09:61:e0:05:
ac:59:8d:1f:ba:f6:f2:59:f3:52:c2:3f:0c:75:35:
5d:35:87:05:52:d9:7e:c7:20:74:0a:47:20:de:87:
3f:54:25:f1:be:d0:e1:ca:1d:42:68:54:b8:46:f8:
8d:ec:05:e3:6e:29:a7:3d:4d:09:a4:53:2a:d2:fd:
b7:dc:14:fc:b0:47:83:fd:8a:de:05:75:92:0b:bb:
2d:b2:8c:d1:02:c9:05:22:2b:58:61:7b:11:fc:5d:
a7:e7:76:e0:e2:7a:f0:3e:a6:2b:52:73:70:ab:82:
3d:a4:f6:50:f3:ce:76:fb:8b:51:3e:f3:38:4e:88:
bc:5a:38:f6:47:05:28:eb:a3:be:0b:89:11:c6:43:
3a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A5:2F:9E:75:37:4E:96:32:51:F4:04:1D:14:E2:B1:D6:47:79:62
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/JqUvnnU3TpYyUfQEHRTisdZHeWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.16.72.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:bc:7b:ed:1b:6f:ec:6e:d4:67:ea:6a:63:95:b4:dc:a2:6e:
ac:36:cc:e8:23:78:75:24:49:73:ba:23:ba:8c:0b:bf:10:ab:
28:5f:13:52:34:ac:ec:4e:44:ed:e5:d0:3b:09:3f:40:c4:8b:
bd:a0:3d:8a:be:57:f6:17:cf:0e:f6:b2:95:4f:00:7b:bf:2d:
de:3a:d4:59:3a:87:e9:e4:e6:29:e3:00:de:6b:bc:cd:62:f2:
06:09:f6:b0:cf:30:c1:a3:77:5d:63:0e:5a:fb:3e:eb:97:63:
78:5c:76:2c:21:3c:ef:92:52:d7:1c:bb:41:b9:3d:2f:8b:78:
c3:db:b5:b5:d4:56:bb:49:4d:0c:15:b5:84:f5:87:a8:8c:ff:
31:d0:15:46:09:cc:ec:6e:cd:34:a7:20:74:ee:1e:47:46:e8:
7b:ca:b8:7b:ae:ed:99:b0:4e:8a:4f:fb:2e:f9:c5:d5:c7:c4:
3d:d8:7a:79:ea:37:e5:27:46:d5:15:42:0e:a5:33:5c:56:7b:
6e:cc:e8:11:15:65:9a:66:a3:68:40:78:81:25:46:82:5b:00:
17:7e:96:68:9e:84:c1:aa:04:97:70:50:86:03:3f:5b:69:ef:
fb:e8:48:b2:3e:50:95:b5:c1:9a:7b:0a:9b:f6:c6:f3:73:45:
bb:c6:fe:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKK3evOL5/lMFxh9uST7dtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTJiZTAyNTA5NjQzYmM3YTJmODYyODcxNjM5ZDA4ZTI3
NmM2MzYwHhcNMjQwMTAyMTIzNDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmE1MmY5ZTc1Mzc0ZTk2MzI1MWY0MDQxZDE0ZTJiMWQ2NDc3OTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTUK7bs4WqMraaYImmKw8Ho3t8fO
gdt7TFN+jkhxEdXbIhcrR8rFcvNqOIB0DyTiGjjN4K3FWOoMdc/O0HP217u+j1hC
CXqBAHHQ37b5D/IUfuXnqJFxhOIva1ms/VqJeA+EzgWQPo3tPin/JBiZbtU7NQlh
4AWsWY0fuvbyWfNSwj8MdTVdNYcFUtl+xyB0Ckcg3oc/VCXxvtDhyh1CaFS4RviN
7AXjbimnPU0JpFMq0v233BT8sEeD/YreBXWSC7stsozRAskFIitYYXsR/F2n53bg
4nrwPqYrUnNwq4I9pPZQ8852+4tRPvM4Toi8Wjj2RwUo66O+C4kRxkM65wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCalL551N06WMlH0BB0U4rHWR3liMB8GA1UdIwQY
MBaAFE2SvgJQlkO8ei+GKHFjnQjidsY2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8yNDY0MGUtZjI1Yy00MmU3LWIzN2Mt
YjczMTJhYjIwMjczLzEvSnFVdm5uVTNUcFl5VWZRRUhSVGlzZFpIZVdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC8yNDY0MGUtZjI1Yy00MmU3LWIzN2MtYjczMTJhYjIwMjcz
LzEvVFpLLUFsQ1dRN3g2TDRZb2NXT2RDT0oyeGpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxBIMA0G
CSqGSIb3DQEBCwUAA4IBAQDNvHvtG2/sbtRn6mpjlbTcom6sNszoI3h1JElzuiO6
jAu/EKsoXxNSNKzsTkTt5dA7CT9AxIu9oD2Kvlf2F88O9rKVTwB7vy3eOtRZOofp
5OYp4wDea7zNYvIGCfawzzDBo3ddYw5a+z7rl2N4XHYsITzvklLXHLtBuT0vi3jD
27W11Fa7SU0MFbWE9YeojP8x0BVGCczsbs00pyB07h5HRuh7yrh7ru2ZsE6KT/su
+cXVx8Q92Hp56jflJ0bVFUIOpTNcVntuzOgRFWWaZqNoQHiBJUaCWwAXfpZonoTB
qgSXcFCGAz9bae/76EiyPlCVtcGaewqb9sbzc0W7xv5C
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:58:12 2024 by rpki-client on console-fra.rpki-client.org