Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/xDpJcfXihuIJEalk-9EAZjfbiZA.roa
File: xDpJcfXihuIJEalk-9EAZjfbiZA.roa (raw, json)
Hash identifier: 06y5f0n5rkJChb6zcCVEwEEblM5Px27G7kdAqFTABIQ=
Subject key identifier: C4:3A:49:71:F5:E2:86:E2:09:11:A9:64:FB:D1:00:66:37:DB:89:90
Certificate issuer: /CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Certificate serial: 018CC8DF36CB1D9A36E7EA190715891FE4C1
Authority key identifier: AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/xDpJcfXihuIJEalk-9EAZjfbiZA.roa
Signing time: Tue 02 Jan 2024 06:32:00 +0000
ROA not before: Tue 02 Jan 2024 06:32:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48387
IP address blocks: 195.88.60.0/23 maxlen: 24
2001:67c:10a8::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:36:cb:1d:9a:36:e7:ea:19:07:15:89:1f:e4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae9488913d73479783da7bf56b164e5c84d4fc6a
Validity
Not Before: Jan 2 06:32:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c43a4971f5e286e20911a964fbd1006637db8990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6f:2b:03:bd:4c:e2:07:2f:14:cf:5a:5d:14:
7e:6f:e6:95:2f:0a:a9:34:f9:1f:58:a3:fe:8a:95:
b4:1e:2b:b2:75:6d:83:81:68:f9:8c:8d:96:09:0d:
c5:ad:bf:b3:cc:c0:d9:a6:62:6f:4a:26:86:8b:1c:
bf:f5:83:ba:ea:ab:a5:6c:d2:00:3d:da:0c:05:d2:
f7:ed:c5:a4:ad:97:8e:e6:7c:2f:5f:d3:cc:3d:7c:
00:38:d9:65:a6:2a:6d:62:ae:da:cd:c8:30:c9:f9:
fb:68:0b:70:3a:1d:d3:68:60:53:fe:a8:fd:36:74:
33:04:79:e6:0c:c2:1b:00:20:6a:fa:90:fb:f7:67:
41:9b:41:56:6e:f9:9a:f8:81:17:c2:b5:2c:bf:65:
25:34:57:73:fd:ab:b1:74:eb:c5:1b:83:95:16:4b:
d9:10:90:1d:9a:cb:7a:8d:4d:44:d9:a8:63:3b:ff:
fb:01:ef:df:51:c4:3a:41:15:2f:6e:81:c4:c0:d3:
2d:d8:ad:fd:cf:ce:fc:5e:22:9d:d4:73:9a:9a:37:
de:79:3d:25:9e:d7:82:79:29:fc:20:1b:73:71:65:
fe:ac:60:b5:a2:63:43:7d:bd:2f:21:79:1b:70:b7:
d4:6c:2a:21:3c:5e:5e:cf:3c:12:81:89:93:d3:c5:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3A:49:71:F5:E2:86:E2:09:11:A9:64:FB:D1:00:66:37:DB:89:90
X509v3 Authority Key Identifier:
keyid:AE:94:88:91:3D:73:47:97:83:DA:7B:F5:6B:16:4E:5C:84:D4:FC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rpSIkT1zR5eD2nv1axZOXITU_Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/xDpJcfXihuIJEalk-9EAZjfbiZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/705d00-25a1-4bab-9ba4-4353cd82d57b/1/rpSIkT1zR5eD2nv1axZOXITU_Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.88.60.0/23
IPv6:
2001:67c:10a8::/47
Signature Algorithm: sha256WithRSAEncryption
36:74:59:b4:94:55:94:3a:a1:a7:03:5b:48:e7:23:08:87:1c:
19:04:50:11:66:91:86:40:b4:fc:b4:a3:59:23:05:11:e5:3c:
10:6d:5a:ff:a9:f5:82:b4:05:66:fd:3c:42:c1:3f:f4:84:28:
ad:a9:5b:06:ac:7d:01:87:40:d9:58:6d:d5:6d:fd:d7:a2:72:
ff:30:7c:e8:37:a9:d9:7c:43:27:2c:ec:42:58:3b:7d:fd:e2:
aa:34:49:ad:e7:48:4b:9d:51:d5:8e:b8:cb:1c:33:72:4d:5b:
ba:c8:a8:a7:d6:98:60:20:97:6d:f4:08:9c:83:44:bd:b0:89:
87:9c:18:3c:37:ab:69:ec:d9:26:53:7b:97:59:ea:90:47:67:
01:c6:7b:8a:df:4a:9a:cf:2c:60:74:da:78:7b:20:67:e8:7d:
a2:fe:8a:b6:fa:9f:b7:ca:b6:10:54:df:bf:29:b0:63:49:52:
24:f4:44:26:17:6d:c4:ba:09:35:56:64:1e:ef:a1:31:85:f3:
89:6b:f9:36:6e:d8:90:13:26:8d:d5:1c:3e:7f:30:ac:49:db:
df:84:04:62:f0:87:fb:47:3c:de:4f:cd:3c:62:72:b1:41:12:
81:f4:e4:01:21:34:f3:f5:34:6c:fc:01:f2:37:e2:65:6d:17:
ce:67:4f:e9
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzI3zbLHZo25+oZBxWJH+TBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlOTQ4ODkxM2Q3MzQ3OTc4M2RhN2JmNTZiMTY0ZTVjODRk
NGZjNmEwHhcNMjQwMTAyMDYzMjAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDNhNDk3MWY1ZTI4NmUyMDkxMWE5NjRmYmQxMDA2NjM3ZGI4OTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqW8rA71M4gcvFM9aXRR+b+aVLwqp
NPkfWKP+ipW0HiuydW2DgWj5jI2WCQ3Frb+zzMDZpmJvSiaGixy/9YO66qulbNIA
PdoMBdL37cWkrZeO5nwvX9PMPXwAONllpiptYq7azcgwyfn7aAtwOh3TaGBT/qj9
NnQzBHnmDMIbACBq+pD792dBm0FWbvma+IEXwrUsv2UlNFdz/auxdOvFG4OVFkvZ
EJAdmst6jU1E2ahjO//7Ae/fUcQ6QRUvboHEwNMt2K39z878XiKd1HOamjfeeT0l
nteCeSn8IBtzcWX+rGC1omNDfb0vIXkbcLfUbCohPF5ezzwSgYmT08W8AQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFMQ6SXH14obiCRGpZPvRAGY324mQMB8GA1UdIwQY
MBaAFK6UiJE9c0eXg9p79WsWTlyE1PxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQt
NDM1M2NkODJkNTdiLzEveERwSmNmWGlodUlKRWFsay05RUFaamZiaVpBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC83MDVkMDAtMjVhMS00YmFiLTliYTQtNDM1M2NkODJkNTdi
LzEvcnBTSWtUMXpSNWVEMm52MWF4Wk9YSVRVX0dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBw1g8MA8E
AgACMAkDBwEgAQZ8EKgwDQYJKoZIhvcNAQELBQADggEBADZ0WbSUVZQ6oacDW0jn
IwiHHBkEUBFmkYZAtPy0o1kjBRHlPBBtWv+p9YK0BWb9PELBP/SEKK2pWwasfQGH
QNlYbdVt/deicv8wfOg3qdl8Qycs7EJYO3394qo0Sa3nSEudUdWOuMscM3JNW7rI
qKfWmGAgl230CJyDRL2wiYecGDw3q2ns2SZTe5dZ6pBHZwHGe4rfSprPLGB02nh7
IGfofaL+irb6n7fKthBU378psGNJUiT0RCYXbcS6CTVWZB7voTGF84lr+TZu2JAT
Jo3VHD5/MKxJ29+EBGLwh/tHPN5PzTxicrFBEoH05AEhNPP1NGz8AfI34mVtF85n
T+k=
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:05:39 2024 by rpki-client on console-fra.rpki-client.org