Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/u1NGt6sEwqdesG8h2WC0rlJVR84.roa
File: u1NGt6sEwqdesG8h2WC0rlJVR84.roa (raw, json)
Hash identifier: 2OY6VKD9kIm4pMR6mLyb52XcU3v3X6yJ87BSStHWHTo=
Subject key identifier: BB:53:46:B7:AB:04:C2:A7:5E:B0:6F:21:D9:60:B4:AE:52:55:47:CE
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 018CC80112B4B0FBE54020016B5C5C130192
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/u1NGt6sEwqdesG8h2WC0rlJVR84.roa
Signing time: Tue 02 Jan 2024 02:29:22 +0000
ROA not before: Tue 02 Jan 2024 02:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 327712
IP address blocks: 213.140.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:12:b4:b0:fb:e5:40:20:01:6b:5c:5c:13:01:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Jan 2 02:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bb5346b7ab04c2a75eb06f21d960b4ae525547ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:3c:11:71:bc:3f:a2:5c:ad:05:9a:7f:5e:79:
7f:c1:10:be:03:52:89:0c:c3:ca:2a:51:9c:2e:89:
a8:79:5a:d6:3f:ac:ce:6f:88:d0:19:cb:6c:7a:fd:
0a:11:77:2e:34:48:48:58:43:6d:2d:10:f7:1b:7b:
13:e7:69:6e:d3:99:4b:94:20:d3:7d:9e:69:b3:0f:
0a:4a:21:ac:4c:cb:f6:60:bf:cc:d0:b5:98:ef:89:
70:99:db:30:87:d4:42:4d:88:31:e7:a6:b6:8c:b8:
be:e8:cd:89:3b:fd:7a:86:83:eb:e2:18:4c:e9:4e:
3b:dd:2c:6b:71:d7:2c:51:de:9f:1f:e2:41:6b:96:
dd:18:7a:9b:20:5c:64:99:d4:a2:f9:54:d7:7f:86:
ca:c5:5c:10:9c:47:1c:9e:25:66:86:33:45:c7:4e:
ce:8f:e9:64:84:86:eb:f3:c3:91:43:13:2e:50:3b:
c4:78:5a:1a:6d:e3:d7:b7:63:01:39:fa:31:a6:6a:
a7:c6:d7:27:0f:92:06:f1:a9:ea:bb:d3:3a:a7:5c:
18:af:89:a1:b3:0e:bc:c6:5e:46:7b:41:cd:d5:67:
c6:2b:c0:8b:9d:0f:02:b4:01:62:00:d5:49:92:ce:
19:78:b3:c2:36:72:ab:c2:ce:72:e3:f2:3c:65:17:
d9:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:46:B7:AB:04:C2:A7:5E:B0:6F:21:D9:60:B4:AE:52:55:47:CE
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/u1NGt6sEwqdesG8h2WC0rlJVR84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.140.59.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:d0:74:e1:fb:de:4e:d5:20:a2:ca:1e:b6:5a:ba:7c:4b:45:
13:57:f8:c3:ec:1b:34:3c:ae:71:9a:f9:10:94:65:b9:14:06:
e3:b4:3c:97:2e:14:f0:ff:80:2b:88:f8:29:e1:c1:c8:f4:fd:
95:d1:55:b0:64:4a:5e:7c:6e:72:25:75:0f:05:3e:1e:ff:6f:
96:35:d2:31:de:35:ab:8d:eb:ee:88:74:17:d3:95:28:0a:3f:
d6:cf:5c:60:91:25:a5:cf:65:66:0d:ba:66:62:32:bb:01:76:
37:56:c1:1a:e8:7a:51:0c:a0:a2:a5:c6:08:e9:7c:fe:fd:4b:
4c:e9:a0:97:f5:25:db:11:7e:3a:38:ac:6f:81:b0:1e:da:ab:
0c:c6:89:fb:80:74:17:26:d4:ed:73:6e:33:78:b3:2d:b8:00:
6c:49:7e:94:c6:9e:36:fd:6b:11:c7:c4:36:b0:ce:aa:50:28:
92:79:d8:58:68:3b:aa:fa:24:3e:e2:e4:10:ac:47:fe:b4:90:
1c:3d:ab:f7:7a:56:16:96:de:c4:51:42:57:ca:97:64:1b:ad:
19:34:4e:52:88:b7:e3:d4:10:d2:8d:d8:99:04:ef:b3:62:dc:
bf:9f:14:d1:93:93:83:46:7b:14:6e:b7:56:a2:4a:64:74:27:
54:8f:df:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIARK0sPvlQCABa1xcEwGSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj
ZTVhNGEwHhcNMjQwMTAyMDIyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYjUzNDZiN2FiMDRjMmE3NWViMDZmMjFkOTYwYjRhZTUyNTU0N2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDwRcbw/olytBZp/Xnl/wRC+A1KJ
DMPKKlGcLomoeVrWP6zOb4jQGctsev0KEXcuNEhIWENtLRD3G3sT52lu05lLlCDT
fZ5psw8KSiGsTMv2YL/M0LWY74lwmdswh9RCTYgx56a2jLi+6M2JO/16hoPr4hhM
6U473SxrcdcsUd6fH+JBa5bdGHqbIFxkmdSi+VTXf4bKxVwQnEccniVmhjNFx07O
j+lkhIbr88ORQxMuUDvEeFoabePXt2MBOfoxpmqnxtcnD5IG8anqu9M6p1wYr4mh
sw68xl5Ge0HN1WfGK8CLnQ8CtAFiANVJks4ZeLPCNnKrws5y4/I8ZRfZJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLtTRrerBMKnXrBvIdlgtK5SVUfOMB8GA1UdIwQY
MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct
ZDQ1YWI3ZGYyZGUxLzEvdTFOR3Q2c0V3cWRlc0c4aDJXQzBybEpWUjg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx
LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1Yw7MA0G
CSqGSIb3DQEBCwUAA4IBAQC/0HTh+95O1SCiyh62Wrp8S0UTV/jD7Bs0PK5xmvkQ
lGW5FAbjtDyXLhTw/4AriPgp4cHI9P2V0VWwZEpefG5yJXUPBT4e/2+WNdIx3jWr
jevuiHQX05UoCj/Wz1xgkSWlz2VmDbpmYjK7AXY3VsEa6HpRDKCipcYI6Xz+/UtM
6aCX9SXbEX46OKxvgbAe2qsMxon7gHQXJtTtc24zeLMtuABsSX6Uxp42/WsRx8Q2
sM6qUCiSedhYaDuq+iQ+4uQQrEf+tJAcPav3elYWlt7EUUJXypdkG60ZNE5SiLfj
1BDSjdiZBO+zYty/nxTRk5ODRnsUbrdWokpkdCdUj9/k
-----END CERTIFICATE-----
Generated at Mon Jun 3 12:24:58 2024 by rpki-client on console-fra.rpki-client.org