Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/TV3O3dls5f5iPyU8D71GjDaxxsU.roa
File: TV3O3dls5f5iPyU8D71GjDaxxsU.roa (raw, json)
Hash identifier: Fr8jaHi7kGjWhrDHyTY1ilkOU4SURPbfiywJuIlBtns=
Subject key identifier: 4D:5D:CE:DD:D9:6C:E5:FE:62:3F:25:3C:0F:BD:46:8C:36:B1:C6:C5
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 018E7F46B9603F7FB321CF9E0A7CA41A5CE2
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/TV3O3dls5f5iPyU8D71GjDaxxsU.roa
Signing time: Wed 27 Mar 2024 09:38:45 +0000
ROA not before: Wed 27 Mar 2024 09:38:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 64289
IP address blocks: 5.1.65.0/24 maxlen: 24
94.247.44.0/24 maxlen: 24
178.251.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7f:46:b9:60:3f:7f:b3:21:cf:9e:0a:7c:a4:1a:5c:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Mar 27 09:38:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4d5dceddd96ce5fe623f253c0fbd468c36b1c6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bf:8f:87:fb:68:a5:7b:82:8d:b8:a3:02:8c:
88:fa:31:95:80:51:3a:21:ad:96:3a:c4:fb:96:28:
bd:b2:4f:cb:c2:9f:01:cd:de:84:ba:73:2b:dc:0d:
b3:f3:f3:de:08:e9:80:17:ca:b3:06:65:75:8a:a8:
71:3f:68:96:25:28:bc:ca:eb:62:b0:cd:b3:c3:c0:
0a:62:30:22:4b:9a:87:35:e8:59:14:ff:6d:33:7d:
d6:14:92:9c:c8:8c:7e:a6:3e:31:27:78:b1:20:50:
2d:43:89:e2:d0:52:6b:1b:fe:ef:77:30:c2:4a:05:
32:64:58:31:ed:58:7a:19:55:c4:cc:d3:44:83:dc:
54:f5:85:9e:e9:79:a0:04:f8:61:00:e0:a3:de:1e:
69:73:c9:16:fc:f5:b7:86:91:75:1c:43:fc:bf:8b:
c7:3f:eb:28:1e:38:14:5c:20:f5:50:31:d1:a2:2c:
2e:78:2b:f5:63:96:c3:c0:36:c7:e4:5d:81:e2:d9:
f1:b8:af:9c:b1:33:b8:29:83:ae:90:12:73:02:3c:
9d:22:2e:e4:b1:23:19:bb:95:0d:b2:de:88:32:fe:
f6:93:cf:49:54:ff:f9:7d:b3:74:34:c9:c3:dd:5d:
88:d4:ea:ac:7a:9c:00:26:d0:44:c1:4b:e3:03:71:
6e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5D:CE:DD:D9:6C:E5:FE:62:3F:25:3C:0F:BD:46:8C:36:B1:C6:C5
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/TV3O3dls5f5iPyU8D71GjDaxxsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.65.0/24
94.247.44.0/24
178.251.231.0/24
Signature Algorithm: sha256WithRSAEncryption
96:aa:2d:36:08:05:49:ed:f0:c8:2d:f5:23:14:8c:c7:bb:f9:
e7:25:c7:0a:e5:23:bc:ce:15:c9:c0:ce:f9:bd:1e:1b:b9:78:
bc:3b:66:e0:4a:9d:04:a0:4a:78:78:e4:e6:61:04:2d:e4:79:
67:d1:3e:88:68:1c:a2:86:80:48:f2:47:0e:f2:ae:9d:b8:50:
72:9d:39:65:d9:ad:f9:7d:15:b6:e0:ba:74:3a:a4:62:8e:5a:
09:b2:95:97:67:01:1a:10:23:8e:2f:17:75:20:ef:9c:fd:2a:
0e:16:da:2e:5b:ad:3d:be:25:38:f3:c5:01:91:41:67:34:a4:
77:4f:f8:43:71:ab:52:59:5e:eb:f0:a1:35:cf:8e:c4:41:83:
68:85:99:6d:87:97:fc:13:01:c0:5b:53:dc:a9:31:5c:4c:28:
c7:01:76:75:c4:c1:bd:e7:42:c5:63:98:df:9f:37:40:5f:eb:
14:14:6d:92:0a:ca:20:6b:5f:fb:8f:dc:7a:79:08:83:c2:08:
fb:32:f0:2c:89:b3:a1:cb:a0:ba:1c:26:08:3d:69:9d:08:54:
0b:61:bf:6e:af:32:25:5d:a0:7f:94:3f:b5:4b:62:75:c0:cf:
7b:2a:f0:1e:b2:3c:da:f6:4a:20:85:13:8b:e6:c1:3b:e5:ee:
3f:f6:32:0b
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY5/RrlgP3+zIc+eCnykGlziMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MjUzYzRmMjMzY2U5ODQ3Njk5YWU2OGVjYmY1ZDc1MTRi
MGZhZGIwHhcNMjQwMzI3MDkzODQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZDVkY2VkZGQ5NmNlNWZlNjIzZjI1M2MwZmJkNDY4YzM2YjFjNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjL+Ph/topXuCjbijAoyI+jGVgFE6
Ia2WOsT7lii9sk/Lwp8Bzd6EunMr3A2z8/PeCOmAF8qzBmV1iqhxP2iWJSi8yuti
sM2zw8AKYjAiS5qHNehZFP9tM33WFJKcyIx+pj4xJ3ixIFAtQ4ni0FJrG/7vdzDC
SgUyZFgx7Vh6GVXEzNNEg9xU9YWe6XmgBPhhAOCj3h5pc8kW/PW3hpF1HEP8v4vH
P+soHjgUXCD1UDHRoiwueCv1Y5bDwDbH5F2B4tnxuK+csTO4KYOukBJzAjydIi7k
sSMZu5UNst6IMv72k89JVP/5fbN0NMnD3V2I1OqsepwAJtBEwUvjA3FuRwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFE1dzt3ZbOX+Yj8lPA+9Row2scbFMB8GA1UdIwQY
MBaAFLQlPE8jPOmEdpmuaOy/XXUUsPrbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMt
NThiMzhmNWFjODBiLzEvVFYzTzNkbHM1ZjVpUHlVOEQ3MUdqRGF4eHNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80MWQ2ZTEtNWNhZC00MGRiLTk3NzMtNThiMzhmNWFjODBi
LzEvdENVOFR5TTg2WVIybWE1bzdMOWRkUlN3LXRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQABQFBAwQA
XvcsAwQAsvvnMA0GCSqGSIb3DQEBCwUAA4IBAQCWqi02CAVJ7fDILfUjFIzHu/nn
JccK5SO8zhXJwM75vR4buXi8O2bgSp0EoEp4eOTmYQQt5Hln0T6IaByihoBI8kcO
8q6duFBynTll2a35fRW24Lp0OqRijloJspWXZwEaECOOLxd1IO+c/SoOFtouW609
viU488UBkUFnNKR3T/hDcatSWV7r8KE1z47EQYNohZlth5f8EwHAW1PcqTFcTCjH
AXZ1xMG950LFY5jfnzdAX+sUFG2SCsoga1/7j9x6eQiDwgj7MvAsibOhy6C6HCYI
PWmdCFQLYb9urzIlXaB/lD+1S2J1wM97KvAesjza9koghROL5sE75e4/9jIL
-----END CERTIFICATE-----
Generated at Tue May 7 02:28:48 2024 by rpki-client on console-fra.rpki-client.org