Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/tOM3m7MZ399MBtggiULiJM5Fx-k.roa
File: tOM3m7MZ399MBtggiULiJM5Fx-k.roa (raw, json)
Hash identifier: LZN2pKiXrsj4bvT93WPlqvC/3bxEYMubvyQ2jU9CnOM=
Subject key identifier: B4:E3:37:9B:B3:19:DF:DF:4C:06:D8:20:89:42:E2:24:CE:45:C7:E9
Certificate issuer: /CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Certificate serial: 018CCA2BE39293EEB3FDB3D8BF584CB5EA26
Authority key identifier: 4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/tOM3m7MZ399MBtggiULiJM5Fx-k.roa
Signing time: Tue 02 Jan 2024 12:35:23 +0000
ROA not before: Tue 02 Jan 2024 12:35:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202401
IP address blocks: 194.39.204.0/22 maxlen: 24
2a0c:8fc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e3:92:93:ee:b3:fd:b3:d8:bf:58:4c:b5:ea:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3bd56e8b54e6da27bbe6622dac67cbf02a81ea
Validity
Not Before: Jan 2 12:35:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4e3379bb319dfdf4c06d8208942e224ce45c7e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:46:27:f2:4b:bc:57:b4:e3:48:46:81:40:50:
68:78:25:de:e9:1a:50:96:49:d8:65:c5:7c:ab:17:
0d:4a:bd:79:8c:01:cf:9b:f5:91:a9:57:da:6d:e9:
d8:50:88:e9:05:c8:83:64:f8:ff:85:2e:f3:19:75:
c8:07:ef:73:60:2a:b0:bf:57:d5:e0:8c:7a:2c:fb:
06:b2:cc:d9:4d:02:a0:28:68:b2:13:2c:3f:31:9e:
ad:2d:d6:8a:24:38:e2:9b:0f:f1:86:b6:fb:4d:06:
83:7e:00:8e:a9:57:76:1a:30:e3:b9:7a:d8:96:32:
e7:7c:0a:1c:47:5d:d3:6f:47:6d:d0:e5:57:14:69:
25:12:07:83:08:ce:a4:ff:75:62:08:93:58:a1:42:
4f:9b:e8:60:56:35:23:52:5e:56:3d:88:14:e8:7b:
f6:3b:6d:62:ca:17:73:1e:1a:a2:68:c3:fd:2b:23:
16:94:a6:2a:47:cc:e6:ae:2e:8f:23:f3:87:bb:30:
11:b1:a2:f1:16:b5:e2:51:2a:d8:f5:25:75:6a:49:
9e:53:4c:69:b4:fc:90:20:02:08:c1:29:90:33:fd:
6a:be:cf:10:f6:c8:33:f7:a6:d5:12:07:4d:57:90:
39:1f:13:e7:a3:2f:84:fb:4f:e7:1f:c6:7b:c5:ce:
d1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E3:37:9B:B3:19:DF:DF:4C:06:D8:20:89:42:E2:24:CE:45:C7:E9
X509v3 Authority Key Identifier:
keyid:4F:3B:D5:6E:8B:54:E6:DA:27:BB:E6:62:2D:AC:67:CB:F0:2A:81:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzvVbotU5tonu-ZiLaxny_Aqgeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/tOM3m7MZ399MBtggiULiJM5Fx-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/6fe149-8a72-47fd-8735-7dc5bddf91b5/1/TzvVbotU5tonu-ZiLaxny_Aqgeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.39.204.0/22
IPv6:
2a0c:8fc0::/29
Signature Algorithm: sha256WithRSAEncryption
a7:1a:68:86:16:e0:49:94:a8:52:f2:2d:70:4c:c9:0f:bd:d2:
aa:f6:0a:b3:ca:6c:2c:d1:4f:6c:79:67:e2:7b:3a:3e:6c:b5:
36:fc:0a:f7:d4:34:f5:bb:1b:00:cb:5a:7a:95:fa:cc:15:6f:
12:33:a5:71:0a:8e:79:99:73:c0:48:a3:61:42:94:35:0a:20:
40:b2:68:01:c8:d6:03:ab:0f:a9:c8:10:5f:cf:c5:3b:81:1c:
7d:d9:5d:2a:41:8e:cc:59:30:74:7e:50:1e:cf:e0:e5:9c:d6:
73:d5:c0:c7:ab:22:3e:60:63:25:a6:85:13:47:91:15:6b:bd:
d3:f1:b6:51:be:3a:c1:a3:9c:ef:40:84:1d:31:48:7a:a4:81:
50:af:8a:18:6c:41:12:dc:2c:bc:3c:9e:f0:ef:5b:41:c6:61:
f8:ee:34:77:cc:98:21:5f:4e:34:b8:11:ae:5c:5f:5a:49:f1:
ca:5c:7b:75:c7:b7:91:98:bf:b5:28:a8:72:49:59:5d:03:7e:
06:a4:cd:38:b7:d6:de:55:bc:87:cb:89:18:23:98:de:1c:70:
42:73:86:74:5b:f6:f6:17:b7:61:9b:52:76:80:c4:e1:1e:b0:
b1:e0:20:a0:70:92:9c:bc:35:d6:1c:65:02:3c:34:53:10:f5:
36:81:d0:4f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzKK+OSk+6z/bPYv1hMteomMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JkNTZlOGI1NGU2ZGEyN2JiZTY2MjJkYWM2N2NiZjAy
YTgxZWEwHhcNMjQwMTAyMTIzNTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGUzMzc5YmIzMTlkZmRmNGMwNmQ4MjA4OTQyZTIyNGNlNDVjN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUYn8ku8V7TjSEaBQFBoeCXe6RpQ
lknYZcV8qxcNSr15jAHPm/WRqVfabenYUIjpBciDZPj/hS7zGXXIB+9zYCqwv1fV
4Ix6LPsGsszZTQKgKGiyEyw/MZ6tLdaKJDjimw/xhrb7TQaDfgCOqVd2GjDjuXrY
ljLnfAocR13Tb0dt0OVXFGklEgeDCM6k/3ViCJNYoUJPm+hgVjUjUl5WPYgU6Hv2
O21iyhdzHhqiaMP9KyMWlKYqR8zmri6PI/OHuzARsaLxFrXiUSrY9SV1akmeU0xp
tPyQIAIIwSmQM/1qvs8Q9sgz96bVEgdNV5A5HxPnoy+E+0/nH8Z7xc7RNQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLTjN5uzGd/fTAbYIIlC4iTORcfpMB8GA1UdIwQY
MBaAFE871W6LVObaJ7vmYi2sZ8vwKoHqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUt
N2RjNWJkZGY5MWI1LzEvdE9NM203TVozOTlNQnRnZ2lVTGlKTTVGeC1rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS82ZmUxNDktOGE3Mi00N2ZkLTg3MzUtN2RjNWJkZGY5MWI1
LzEvVHp2VmJvdFU1dG9udS1aaUxheG55X0FxZ2VvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCwifMMA0E
AgACMAcDBQMqDI/AMA0GCSqGSIb3DQEBCwUAA4IBAQCnGmiGFuBJlKhS8i1wTMkP
vdKq9gqzymws0U9seWfiezo+bLU2/Ar31DT1uxsAy1p6lfrMFW8SM6VxCo55mXPA
SKNhQpQ1CiBAsmgByNYDqw+pyBBfz8U7gRx92V0qQY7MWTB0flAez+DlnNZz1cDH
qyI+YGMlpoUTR5EVa73T8bZRvjrBo5zvQIQdMUh6pIFQr4oYbEES3Cy8PJ7w71tB
xmH47jR3zJghX040uBGuXF9aSfHKXHt1x7eRmL+1KKhySVldA34GpM04t9beVbyH
y4kYI5jeHHBCc4Z0W/b2F7dhm1J2gMThHrCx4CCgcJKcvDXWHGUCPDRTEPU2gdBP
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:57:13 2024 by rpki-client on console-ams.rpki-client.org