Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/tVwr78ld7SoOygHpc8B-ZuM4_lA.roa
File: tVwr78ld7SoOygHpc8B-ZuM4_lA.roa (raw, json)
Hash identifier: tAxopEi5rL5oNBLP6xDOEAqY52ne/XOEZ+WtwqFcrj8=
Subject key identifier: B5:5C:2B:EF:C9:5D:ED:2A:0E:CA:01:E9:73:C0:7E:66:E3:38:FE:50
Certificate issuer: /CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Certificate serial: 018CC94D37DDBF9BF24E2AB3E0F1F3DE3E52
Authority key identifier: A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/tVwr78ld7SoOygHpc8B-ZuM4_lA.roa
Signing time: Tue 02 Jan 2024 08:32:10 +0000
ROA not before: Tue 02 Jan 2024 08:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198249
IP address blocks: 91.199.98.0/24 maxlen: 24
185.17.68.0/22 maxlen: 24
185.169.84.0/22 maxlen: 24
91.234.160.0/24 maxlen: 24
2a04:500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:37:dd:bf:9b:f2:4e:2a:b3:e0:f1:f3:de:3e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a13042d137fbb03beba6421f33a8525b52a88f7a
Validity
Not Before: Jan 2 08:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b55c2befc95ded2a0eca01e973c07e66e338fe50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:15:11:2d:0e:76:02:6b:7e:97:09:1e:eb:db:
d7:41:3e:29:61:d8:be:f4:3e:23:eb:0c:50:86:96:
d7:62:30:8e:b6:30:08:ac:d8:94:fd:ac:86:a3:50:
e9:4e:74:57:f0:f2:ad:27:31:65:d1:f4:bf:a7:8f:
dc:95:eb:15:99:f1:e5:91:e1:d5:be:b1:c1:45:10:
f9:d7:5e:ad:5f:c0:4d:d5:90:94:51:70:d1:d7:6e:
dc:7d:5a:d2:99:60:91:9a:76:ff:6d:b0:dc:e5:e9:
71:39:ff:7a:53:39:b5:7f:9e:4d:d6:af:94:0f:ba:
c5:ec:be:e3:00:74:98:51:31:b6:1c:cb:0d:91:19:
0e:bc:d3:c5:f4:0a:73:db:24:2f:12:f7:27:32:97:
81:cd:75:5d:ad:18:1f:66:60:2d:1f:d5:f2:7a:39:
2e:79:2f:8f:c5:72:0c:b9:4b:5e:59:e4:cd:72:7f:
8d:bc:c0:94:8c:9b:30:a5:a8:e8:12:b0:08:f1:7a:
27:a6:05:72:61:fb:93:ca:79:78:bd:86:fa:5c:91:
fa:bd:c0:56:81:87:72:b8:45:77:c7:0b:c7:59:f4:
ca:12:d7:3f:30:18:2d:c8:5f:4d:7b:0c:c0:63:53:
aa:cf:80:d3:b4:ba:cc:67:32:fb:88:31:4c:ff:65:
04:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:5C:2B:EF:C9:5D:ED:2A:0E:CA:01:E9:73:C0:7E:66:E3:38:FE:50
X509v3 Authority Key Identifier:
keyid:A1:30:42:D1:37:FB:B0:3B:EB:A6:42:1F:33:A8:52:5B:52:A8:8F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/tVwr78ld7SoOygHpc8B-ZuM4_lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/af4407-f98e-4994-9f9e-f6b6c04916a1/1/oTBC0Tf7sDvrpkIfM6hSW1Koj3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.98.0/24
91.234.160.0/24
185.17.68.0/22
185.169.84.0/22
IPv6:
2a04:500::/29
Signature Algorithm: sha256WithRSAEncryption
7d:e5:85:ce:63:69:a5:78:69:9e:cd:c0:26:d3:a3:a6:6b:50:
1c:e5:9d:68:11:cd:c8:de:f3:2d:5b:8d:b5:b3:24:3a:91:3b:
f5:50:bd:5e:a6:18:be:8d:7b:25:02:50:d6:ee:33:f5:63:7e:
c9:4f:08:ba:1a:4e:85:29:1b:ea:49:6b:fb:92:ab:9c:96:4b:
d5:ac:e3:8f:9c:ce:b1:70:8f:07:d2:2e:2a:58:48:77:62:d8:
ef:b7:01:d7:d2:13:29:dc:51:78:d7:5e:5d:7a:31:1c:c7:cc:
6a:78:46:f5:fe:94:78:ed:66:04:70:18:44:06:a7:6a:86:d6:
0c:e2:5e:27:30:18:47:12:bc:10:b1:f8:58:01:5e:7c:75:81:
20:60:62:f7:e2:d8:df:20:5e:96:7f:20:1c:89:e7:3b:cc:b3:
6d:20:ab:7d:28:82:b4:73:bc:05:23:a6:1e:e1:3e:0c:75:da:
e7:3f:f9:c3:4e:e1:0b:c8:47:e6:d4:0b:94:62:db:5f:0a:4a:
03:c6:fc:02:6d:3b:8b:fb:58:3f:97:38:aa:7f:49:f8:0c:9b:
cd:74:83:3a:68:03:dc:2d:82:7a:60:f5:a4:04:dc:ba:04:09:
15:99:7b:96:12:0d:02:36:25:79:8c:f9:15:26:9d:ac:f9:5d:
41:85:2a:d8
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAYzJTTfdv5vyTiqz4PHz3j5SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzA0MmQxMzdmYmIwM2JlYmE2NDIxZjMzYTg1MjViNTJh
ODhmN2EwHhcNMjQwMTAyMDgzMjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTVjMmJlZmM5NWRlZDJhMGVjYTAxZTk3M2MwN2U2NmUzMzhmZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghURLQ52Amt+lwke69vXQT4pYdi+
9D4j6wxQhpbXYjCOtjAIrNiU/ayGo1DpTnRX8PKtJzFl0fS/p4/clesVmfHlkeHV
vrHBRRD5116tX8BN1ZCUUXDR127cfVrSmWCRmnb/bbDc5elxOf96Uzm1f55N1q+U
D7rF7L7jAHSYUTG2HMsNkRkOvNPF9Apz2yQvEvcnMpeBzXVdrRgfZmAtH9Xyejku
eS+PxXIMuUteWeTNcn+NvMCUjJswpajoErAI8XonpgVyYfuTynl4vYb6XJH6vcBW
gYdyuEV3xwvHWfTKEtc/MBgtyF9NewzAY1Oqz4DTtLrMZzL7iDFM/2UE+QIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFLVcK+/JXe0qDsoB6XPAfmbjOP5QMB8GA1UdIwQY
MBaAFKEwQtE3+7A766ZCHzOoUltSqI96MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUt
ZjZiNmMwNDkxNmExLzEvdFZ3cjc4bGQ3U29PeWdIcGM4Qi1adU00X2xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9hZjQ0MDctZjk4ZS00OTk0LTlmOWUtZjZiNmMwNDkxNmEx
LzEvb1RCQzBUZjdzRHZycGtJZk02aFNXMUtvajNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQAW8diAwQA
W+qgAwQCuRFEAwQCualUMA0EAgACMAcDBQMqBAUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB95YXOY2mleGmezcAm06Oma1Ac5Z1oEc3I3vMtW421syQ6kTv1UL1ephi+jXsl
AlDW7jP1Y37JTwi6Gk6FKRvqSWv7kquclkvVrOOPnM6xcI8H0i4qWEh3YtjvtwHX
0hMp3FF4115dejEcx8xqeEb1/pR47WYEcBhEBqdqhtYM4l4nMBhHErwQsfhYAV58
dYEgYGL34tjfIF6WfyAciec7zLNtIKt9KIK0c7wFI6Ye4T4MddrnP/nDTuELyEfm
1AuUYttfCkoDxvwCbTuL+1g/lziqf0n4DJvNdIM6aAPcLYJ6YPWkBNy6BAkVmXuW
Eg0CNiV5jPkVJp2s+V1BhSrY
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:17:10 2024 by rpki-client on console-fra.rpki-client.org