Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/55YqJdEH3QVPxK9bYrGQ5skH8Kg.roa
File: 55YqJdEH3QVPxK9bYrGQ5skH8Kg.roa (raw, json)
Hash identifier: P3kuRF8UayII+vyTHSjNlupyeE+TaiWdQRlHlETA+xQ=
Subject key identifier: E7:96:2A:25:D1:07:DD:05:4F:C4:AF:5B:62:B1:90:E6:C9:07:F0:A8
Certificate issuer: /CN=2389341e10e6b021fa847f555e5603def85d2c2b
Certificate serial: 01905565E1FAD713F2D5892DC2E878CC5839
Authority key identifier: 23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/55YqJdEH3QVPxK9bYrGQ5skH8Kg.roa
Signing time: Wed 26 Jun 2024 16:34:18 +0000
ROA not before: Wed 26 Jun 2024 16:34:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9121
IP address blocks: 81.30.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.mft
rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:55:65:e1:fa:d7:13:f2:d5:89:2d:c2:e8:78:cc:58:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2389341e10e6b021fa847f555e5603def85d2c2b
Validity
Not Before: Jun 26 16:34:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e7962a25d107dd054fc4af5b62b190e6c907f0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e2:b5:a3:fa:11:3c:85:c6:ee:68:5e:1e:a4:
ed:1b:8f:f6:5a:5e:83:bf:83:2e:69:27:e8:55:09:
c9:bc:ce:7f:32:7f:7d:81:81:7b:8d:75:0c:04:d9:
d5:76:28:00:d9:c4:9a:9f:a2:e4:26:29:ce:31:97:
9c:cb:3b:17:db:9a:4c:31:83:19:e2:f7:4f:14:a5:
95:9e:9c:e1:53:b7:81:27:11:92:d6:6c:fa:b1:4e:
57:d4:06:4b:9f:66:4b:a3:80:8f:9f:2c:c4:72:22:
e2:4c:b0:8c:37:c0:cb:cb:95:e4:e8:9a:83:5e:51:
1d:24:b7:06:2e:c2:c6:cf:df:30:b5:bf:20:aa:24:
48:3b:5e:b6:c5:c8:b6:48:01:a2:1c:02:6a:c8:86:
03:95:e0:2d:8d:18:b9:34:b5:03:49:45:93:59:ad:
d2:ea:1e:0f:80:32:11:32:24:f3:2c:75:98:db:52:
80:d6:f2:7c:47:9d:4e:04:e9:46:07:35:1a:b4:69:
98:4b:ab:2c:2a:d6:d1:e4:81:f7:37:40:bf:fc:e2:
fe:5c:6b:3b:7d:4b:b4:5d:8b:55:e3:c7:1a:20:89:
43:39:27:08:7e:2c:bd:a8:8e:7d:ea:e6:f1:fb:f0:
b2:f4:16:d1:07:f1:50:d0:07:0b:44:c7:f2:08:89:
a3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:96:2A:25:D1:07:DD:05:4F:C4:AF:5B:62:B1:90:E6:C9:07:F0:A8
X509v3 Authority Key Identifier:
keyid:23:89:34:1E:10:E6:B0:21:FA:84:7F:55:5E:56:03:DE:F8:5D:2C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I4k0HhDmsCH6hH9VXlYD3vhdLCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/55YqJdEH3QVPxK9bYrGQ5skH8Kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/6ab93e-8563-4606-b19e-8c003c4a5456/1/I4k0HhDmsCH6hH9VXlYD3vhdLCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.103.0/24
Signature Algorithm: sha256WithRSAEncryption
57:85:6f:31:a3:c3:34:bc:24:84:46:68:d6:d1:89:9d:89:ab:
60:ef:09:a5:2b:a4:10:f4:01:8e:44:ac:b5:7a:3b:bf:c4:09:
38:7b:61:1c:a9:66:0d:70:cc:ce:39:ae:f2:2f:ce:23:5d:55:
20:54:7c:30:ce:21:f8:09:22:3e:e2:51:d6:62:d6:1e:e5:e9:
37:0e:18:4a:a2:38:10:56:2e:4b:10:9d:b1:68:ec:a9:a9:20:
f6:0e:2e:7c:37:81:4c:a3:0e:48:fa:5e:d1:2a:02:66:1a:55:
5e:8b:36:d0:63:31:5f:13:09:6c:b2:b5:d4:d8:ef:52:d9:e9:
1d:9e:c2:5d:8a:35:46:9e:f6:0d:5d:2e:90:2f:29:a1:2a:d0:
8c:73:10:b0:3d:8c:5f:6a:14:ec:b2:7b:2a:f9:dc:01:a3:57:
06:8a:30:cd:6d:32:62:97:fb:56:3e:2e:5e:c3:02:f6:48:d5:
81:6c:02:9c:27:8a:04:37:49:8c:1d:2f:41:5d:89:94:77:60:
5d:e7:0f:6c:d0:ab:21:68:a9:a0:56:4f:0b:82:c3:89:73:02:
0f:58:fc:bb:87:53:2d:10:17:d3:64:ab:9d:d6:49:6d:f7:ab:
6d:1f:5b:51:2e:53:33:2b:f5:56:fa:8d:20:8e:60:bb:1b:b7:
12:85:57:50
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBVZeH61xPy1Yktwuh4zFg5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzODkzNDFlMTBlNmIwMjFmYTg0N2Y1NTVlNTYwM2RlZjg1
ZDJjMmIwHhcNMjQwNjI2MTYzNDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNzk2MmEyNWQxMDdkZDA1NGZjNGFmNWI2MmIxOTBlNmM5MDdmMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OK1o/oRPIXG7mheHqTtG4/2Wl6D
v4MuaSfoVQnJvM5/Mn99gYF7jXUMBNnVdigA2cSan6LkJinOMZecyzsX25pMMYMZ
4vdPFKWVnpzhU7eBJxGS1mz6sU5X1AZLn2ZLo4CPnyzEciLiTLCMN8DLy5Xk6JqD
XlEdJLcGLsLGz98wtb8gqiRIO162xci2SAGiHAJqyIYDleAtjRi5NLUDSUWTWa3S
6h4PgDIRMiTzLHWY21KA1vJ8R51OBOlGBzUatGmYS6ssKtbR5IH3N0C//OL+XGs7
fUu0XYtV48caIIlDOScIfiy9qI596ubx+/Cy9BbRB/FQ0AcLRMfyCImjfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOeWKiXRB90FT8SvW2KxkObJB/CoMB8GA1UdIwQY
MBaAFCOJNB4Q5rAh+oR/VV5WA974XSwrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUt
OGMwMDNjNGE1NDU2LzEvNTVZcUpkRUgzUVZQeEs5YllyR1E1c2tIOEtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC82YWI5M2UtODU2My00NjA2LWIxOWUtOGMwMDNjNGE1NDU2
LzEvSTRrMEhoRG1zQ0g2aEg5VlhsWUQzdmhkTENzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUR5nMA0G
CSqGSIb3DQEBCwUAA4IBAQBXhW8xo8M0vCSERmjW0Ymdiatg7wmlK6QQ9AGORKy1
eju/xAk4e2EcqWYNcMzOOa7yL84jXVUgVHwwziH4CSI+4lHWYtYe5ek3DhhKojgQ
Vi5LEJ2xaOypqSD2Di58N4FMow5I+l7RKgJmGlVeizbQYzFfEwlssrXU2O9S2ekd
nsJdijVGnvYNXS6QLymhKtCMcxCwPYxfahTssnsq+dwBo1cGijDNbTJil/tWPi5e
wwL2SNWBbAKcJ4oEN0mMHS9BXYmUd2Bd5w9s0KshaKmgVk8LgsOJcwIPWPy7h1Mt
EBfTZKud1klt96ttH1tRLlMzK/VW+o0gjmC7G7cShVdQ
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:42:31 2024 by rpki-client on console-fra.rpki-client.org