Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/43ZgZiYXx0zR1wkgRVeO849JEEo.roa
File: 43ZgZiYXx0zR1wkgRVeO849JEEo.roa (raw, json)
Hash identifier: cDQTL2+xBhMlz76u3BpBMD8cdGVcIer+bJRQoEBzS20=
Subject key identifier: E3:76:60:66:26:17:C7:4C:D1:D7:09:20:45:57:8E:F3:8F:49:10:4A
Certificate issuer: /CN=0f91e5b58da326e654e994fef2195276759579be
Certificate serial: 018CC72734A0E98CF3DE5EC5538C10ED6B5D
Authority key identifier: 0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/43ZgZiYXx0zR1wkgRVeO849JEEo.roa
Signing time: Mon 01 Jan 2024 22:31:24 +0000
ROA not before: Mon 01 Jan 2024 22:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41638
IP address blocks: 195.138.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:34:a0:e9:8c:f3:de:5e:c5:53:8c:10:ed:6b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f91e5b58da326e654e994fef2195276759579be
Validity
Not Before: Jan 1 22:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e37660662617c74cd1d7092045578ef38f49104a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:cb:48:4b:b4:57:50:32:2b:a4:a3:c1:ac:
d9:06:22:b1:0a:cd:46:e9:38:f4:74:55:41:48:a8:
15:97:eb:50:55:6a:f9:06:ac:a4:59:f5:d3:27:65:
b0:12:8c:fc:d3:55:03:aa:de:84:2a:96:12:cc:6b:
54:c5:34:54:a0:39:da:c4:a8:32:a8:d0:fd:89:f6:
56:c8:35:5b:51:2e:d0:3e:36:c1:a5:da:90:df:80:
31:4c:91:c6:b3:82:c8:c1:5a:3c:73:4a:a9:00:84:
e0:83:cb:9a:64:5f:91:e5:56:44:16:76:89:cd:94:
cf:98:c4:9e:2e:4a:c6:54:4d:14:ea:82:03:5a:d4:
65:9e:20:0c:34:b3:59:56:5e:94:33:18:f6:05:23:
85:1d:4b:54:e0:2f:11:54:6e:6a:a1:61:e3:eb:fe:
73:ae:09:e8:ad:1e:c3:c0:5f:8f:50:f5:2c:ea:17:
1b:cb:71:21:e5:ae:8d:8d:3c:c1:7b:52:f9:d8:58:
67:86:2c:73:fe:91:69:ae:08:dc:84:e0:69:c0:93:
40:ed:94:17:79:20:75:f5:5b:3c:25:43:eb:aa:b4:
03:72:75:f7:d6:c3:b4:66:f2:2d:f5:a4:6d:c2:66:
2a:a6:d4:a8:fc:19:ef:8a:65:80:d7:75:40:25:a7:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:76:60:66:26:17:C7:4C:D1:D7:09:20:45:57:8E:F3:8F:49:10:4A
X509v3 Authority Key Identifier:
keyid:0F:91:E5:B5:8D:A3:26:E6:54:E9:94:FE:F2:19:52:76:75:95:79:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5HltY2jJuZU6ZT-8hlSdnWVeb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/43ZgZiYXx0zR1wkgRVeO849JEEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/265efa-f049-4647-8cf1-824ccefd9c81/1/D5HltY2jJuZU6ZT-8hlSdnWVeb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.138.222.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:51:ea:ea:5e:82:e9:1a:9d:47:4c:ca:35:63:45:26:a7:c9:
ca:fe:f8:bb:56:17:c1:4d:2a:bb:6a:bb:fa:ff:e1:cd:f3:80:
84:61:2b:a6:75:fd:29:a2:9a:8f:ae:51:9c:65:cf:f9:b5:e4:
ab:71:c1:35:8f:c7:50:64:ab:12:20:c5:6e:f5:49:3f:ad:46:
46:c3:2c:bb:8e:60:e9:58:dd:3a:88:60:51:b6:83:4a:03:b8:
9b:bb:15:aa:04:50:65:c3:72:a2:13:e4:94:ae:86:5c:55:fe:
dc:f1:47:77:b8:89:f5:84:68:59:9f:11:2b:63:62:86:b1:87:
0f:a9:f4:c3:25:e3:fc:d7:7c:a4:df:de:2e:d6:81:3a:89:4b:
76:a9:c3:f0:d7:ff:03:9a:e3:dd:d1:56:5d:89:19:8a:0d:7a:
26:fc:b6:35:cd:61:04:73:c2:ab:34:8a:3a:b0:a2:08:b6:24:
ba:cc:ce:fd:aa:70:4f:88:e5:df:26:f8:8f:55:38:bd:ea:4b:
c5:60:d4:0c:13:de:55:39:f7:3a:05:8f:f5:cf:46:3f:53:0d:
6d:49:16:c2:7c:bc:b1:2b:b6:8d:64:db:30:b5:40:b7:90:e9:
48:a8:02:e5:18:fd:01:32:eb:83:bd:e9:e8:45:ed:2c:a6:80:
32:2b:68:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJzSg6Yzz3l7FU4wQ7WtdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTFlNWI1OGRhMzI2ZTY1NGU5OTRmZWYyMTk1Mjc2NzU5
NTc5YmUwHhcNMjQwMTAxMjIzMTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMzc2NjA2NjI2MTdjNzRjZDFkNzA5MjA0NTU3OGVmMzhmNDkxMDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW7LSEu0V1AyK6SjwazZBiKxCs1G
6Tj0dFVBSKgVl+tQVWr5BqykWfXTJ2WwEoz801UDqt6EKpYSzGtUxTRUoDnaxKgy
qND9ifZWyDVbUS7QPjbBpdqQ34AxTJHGs4LIwVo8c0qpAITgg8uaZF+R5VZEFnaJ
zZTPmMSeLkrGVE0U6oIDWtRlniAMNLNZVl6UMxj2BSOFHUtU4C8RVG5qoWHj6/5z
rgnorR7DwF+PUPUs6hcby3Eh5a6NjTzBe1L52Fhnhixz/pFprgjchOBpwJNA7ZQX
eSB19Vs8JUPrqrQDcnX31sO0ZvIt9aRtwmYqptSo/BnvimWA13VAJacxlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFON2YGYmF8dM0dcJIEVXjvOPSRBKMB8GA1UdIwQY
MBaAFA+R5bWNoybmVOmU/vIZUnZ1lXm+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEt
ODI0Y2NlZmQ5YzgxLzEvNDNaZ1ppWVh4MHpSMXdrZ1JWZU84NDlKRUVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yNjVlZmEtZjA0OS00NjQ3LThjZjEtODI0Y2NlZmQ5Yzgx
LzEvRDVIbHRZMmpKdVpVNlpULThobFNkbldWZWI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw4reMA0G
CSqGSIb3DQEBCwUAA4IBAQAtUerqXoLpGp1HTMo1Y0Ump8nK/vi7VhfBTSq7arv6
/+HN84CEYSumdf0popqPrlGcZc/5teSrccE1j8dQZKsSIMVu9Uk/rUZGwyy7jmDp
WN06iGBRtoNKA7ibuxWqBFBlw3KiE+SUroZcVf7c8Ud3uIn1hGhZnxErY2KGsYcP
qfTDJeP813yk394u1oE6iUt2qcPw1/8DmuPd0VZdiRmKDXom/LY1zWEEc8KrNIo6
sKIItiS6zM79qnBPiOXfJviPVTi96kvFYNQME95VOfc6BY/1z0Y/Uw1tSRbCfLyx
K7aNZNswtUC3kOlIqALlGP0BMuuDvenoRe0spoAyK2jk
-----END CERTIFICATE-----
Generated at Sun May 19 15:42:23 2024 by rpki-client on console-ams.rpki-client.org