Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Tc54MdL7YciXUgNVOh5dUddff_g.roa
File: Tc54MdL7YciXUgNVOh5dUddff_g.roa (raw, json)
Hash identifier: 6h/OVzYm4MuTk5Z7XddrP7O9m25uTb5x9HNh4pZhAJw=
Subject key identifier: 4D:CE:78:31:D2:FB:61:C8:97:52:03:55:3A:1E:5D:51:D7:5F:7F:F8
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B944D785D87C28E35F27FA5ED42519
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Tc54MdL7YciXUgNVOh5dUddff_g.roa
Signing time: Mon 01 Jan 2024 20:31:19 +0000
ROA not before: Mon 01 Jan 2024 20:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206004
IP address blocks: 151.237.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:44:d7:85:d8:7c:28:e3:5f:27:fa:5e:d4:25:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4dce7831d2fb61c8975203553a1e5d51d75f7ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:13:05:db:10:a3:a2:56:1c:27:13:2d:ce:3a:
f8:bc:3f:31:01:44:3e:0e:46:29:90:0a:70:c6:5f:
f2:78:27:37:08:0d:30:3e:b4:74:3d:43:ff:c5:cf:
7f:62:46:bd:49:1d:97:e3:88:db:31:b7:59:03:87:
eb:43:ae:9c:db:82:e6:a1:51:8a:ed:61:24:1c:43:
8b:de:4b:fd:a6:6e:82:bf:e9:9a:84:bd:39:f4:e5:
1c:45:ea:89:05:42:be:fa:f4:49:8a:83:48:88:18:
84:b6:0c:5f:1d:f3:19:ee:0b:c9:21:18:25:66:04:
d8:34:11:7d:43:67:ad:62:89:a3:ef:c1:63:12:6c:
ac:66:56:c8:86:d0:72:c9:d2:4f:a5:b9:78:01:8e:
e1:34:e0:2e:0d:84:a4:8b:cb:b8:0b:1f:7e:73:9f:
58:71:5f:97:b3:5f:14:29:55:44:53:c4:56:84:a6:
38:1a:00:87:c8:3e:e2:bb:44:79:37:ba:bd:21:33:
1b:30:91:9b:b7:de:a0:4b:0e:6f:b4:72:b3:3a:d0:
36:ae:4d:ab:26:3e:a5:cc:1c:f6:60:2c:30:a9:e7:
5f:06:11:90:98:3a:8c:a6:40:89:9c:d5:af:10:72:
4b:87:f4:2a:ed:e6:3b:3d:46:a3:d6:8f:0d:16:c2:
5b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CE:78:31:D2:FB:61:C8:97:52:03:55:3A:1E:5D:51:D7:5F:7F:F8
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Tc54MdL7YciXUgNVOh5dUddff_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.30.0/24
Signature Algorithm: sha256WithRSAEncryption
23:0c:34:32:f2:63:bd:89:30:6d:60:da:bb:b8:f2:83:ef:ba:
c8:2c:71:06:7f:98:87:0c:90:e8:23:94:44:5c:2a:7c:2d:c2:
70:53:13:99:55:04:b5:50:4d:13:e6:00:d5:55:27:50:3b:36:
65:14:c8:c9:50:bb:60:a2:23:2c:0a:30:56:6d:79:32:eb:be:
1b:65:49:e1:fd:1a:c7:eb:c8:66:00:d9:0c:9f:b7:b1:d6:e4:
18:bb:a9:c6:52:e1:94:3d:c4:40:5b:d3:4f:2b:fa:23:13:3a:
ff:6e:a3:28:2d:dd:ed:bb:f2:f0:b9:4d:3a:ca:c5:37:5e:02:
35:9f:47:4f:e4:d7:a2:b2:b7:29:1a:08:37:d9:75:5c:c4:21:
45:74:47:65:af:3f:3b:f2:b2:b8:5c:cf:78:71:e6:84:67:b7:
3f:0a:f5:a2:f5:1f:1d:9a:1e:d4:34:6a:0a:a1:29:10:2d:77:
f2:f1:8d:85:b9:71:f9:8f:77:ca:78:99:ac:9f:26:d5:84:b4:
52:e6:f0:6a:e3:77:ae:8b:5e:a3:6c:6b:b4:77:82:de:83:fe:
c9:4d:3a:a0:3a:4d:e3:e7:cd:cd:f5:22:1b:8e:b4:48:b5:44:
22:f7:cb:02:ac:7a:71:64:9e:00:ec:54:6f:5a:73:5b:d8:87:
f7:84:38:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuUTXhdh8KONfJ/pe1CUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjQwMTAxMjAzMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGNlNzgzMWQyZmI2MWM4OTc1MjAzNTUzYTFlNWQ1MWQ3NWY3ZmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBMF2xCjolYcJxMtzjr4vD8xAUQ+
DkYpkApwxl/yeCc3CA0wPrR0PUP/xc9/Yka9SR2X44jbMbdZA4frQ66c24LmoVGK
7WEkHEOL3kv9pm6Cv+mahL059OUcReqJBUK++vRJioNIiBiEtgxfHfMZ7gvJIRgl
ZgTYNBF9Q2etYomj78FjEmysZlbIhtByydJPpbl4AY7hNOAuDYSki8u4Cx9+c59Y
cV+Xs18UKVVEU8RWhKY4GgCHyD7iu0R5N7q9ITMbMJGbt96gSw5vtHKzOtA2rk2r
Jj6lzBz2YCwwqedfBhGQmDqMpkCJnNWvEHJLh/Qq7eY7PUaj1o8NFsJbqwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE3OeDHS+2HIl1IDVToeXVHXX3/4MB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvVGM1NE1kTDdZY2lYVWdOVk9oNWRVZGRmZl9nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAl+0eMA0G
CSqGSIb3DQEBCwUAA4IBAQAjDDQy8mO9iTBtYNq7uPKD77rILHEGf5iHDJDoI5RE
XCp8LcJwUxOZVQS1UE0T5gDVVSdQOzZlFMjJULtgoiMsCjBWbXky674bZUnh/RrH
68hmANkMn7ex1uQYu6nGUuGUPcRAW9NPK/ojEzr/bqMoLd3tu/LwuU06ysU3XgI1
n0dP5NeisrcpGgg32XVcxCFFdEdlrz878rK4XM94ceaEZ7c/CvWi9R8dmh7UNGoK
oSkQLXfy8Y2FuXH5j3fKeJmsnybVhLRS5vBq43eui16jbGu0d4Leg/7JTTqgOk3j
583N9SIbjrRItUQi98sCrHpxZJ4A7FRvWnNb2If3hDhr
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:22:05 2024 by rpki-client on console-fra.rpki-client.org