Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/xuR60dqE-AjDyDJGA6cYxLV8nIA.roa
File: xuR60dqE-AjDyDJGA6cYxLV8nIA.roa (raw, json)
Hash identifier: c0Y90cotue+feh/L294AUG6m5GUx5VcjdUFh/A9csuY=
Subject key identifier: C6:E4:7A:D1:DA:84:F8:08:C3:C8:32:46:03:A7:18:C4:B5:7C:9C:80
Certificate issuer: /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial: 018F38E758ECF555CDED8BB8C6EC10C33840
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/xuR60dqE-AjDyDJGA6cYxLV8nIA.roa
Signing time: Thu 02 May 2024 10:43:56 +0000
ROA not before: Thu 02 May 2024 10:43:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202108
IP address blocks: 212.227.117.50/32 maxlen: 32
212.227.117.51/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:38:e7:58:ec:f5:55:cd:ed:8b:b8:c6:ec:10:c3:38:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Validity
Not Before: May 2 10:43:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c6e47ad1da84f808c3c8324603a718c4b57c9c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:82:d5:3e:4a:95:66:92:ff:5b:32:12:77:
9f:d1:60:d2:81:9e:78:d0:df:58:1c:6f:89:1c:d6:
67:77:9c:e2:06:f3:b6:78:71:82:1e:2e:d6:9a:c6:
e3:3e:fe:c8:9a:b8:8f:ed:15:d6:17:d1:03:74:c4:
ba:f6:c0:de:95:b8:cf:75:aa:c4:1a:de:2e:e7:dd:
10:72:38:fe:52:6a:f3:08:5a:6e:b1:17:a9:39:07:
c9:46:a5:6d:0b:51:9e:4d:4c:ab:68:97:bd:e1:d0:
a7:a0:b3:aa:a7:ef:20:f1:e3:21:6f:56:ab:92:e5:
be:9b:08:2a:9f:08:6e:ff:09:52:2e:56:5d:75:04:
dc:46:ce:e8:77:0d:96:ee:84:f6:f4:a4:e4:05:c2:
ac:09:f8:3c:32:01:d8:5c:95:9d:09:f9:a6:8c:9f:
3f:b6:76:63:ab:ef:73:c2:c6:96:12:72:db:08:bd:
c1:fc:3b:98:e5:7d:d8:78:d0:29:12:53:e8:59:fd:
4d:84:c8:32:52:45:3b:a6:15:7a:97:f3:f2:ce:27:
5f:37:ec:b8:1a:39:4d:46:e8:83:83:eb:0b:8f:5f:
f4:4d:4e:08:ed:27:18:52:c4:ad:24:54:25:a9:3e:
f7:d3:53:6a:bd:e1:1a:20:56:f7:b6:a1:07:9b:35:
02:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E4:7A:D1:DA:84:F8:08:C3:C8:32:46:03:A7:18:C4:B5:7C:9C:80
X509v3 Authority Key Identifier:
keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/xuR60dqE-AjDyDJGA6cYxLV8nIA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.227.117.50/31
Signature Algorithm: sha256WithRSAEncryption
64:6a:32:96:c4:10:f1:71:ba:65:60:2f:1e:62:cb:ac:32:09:
e7:35:ca:51:3c:83:2e:94:8c:1d:c4:46:61:8f:12:26:a3:1d:
6a:ad:60:2c:a1:f4:ef:94:f0:82:de:ef:07:14:27:3b:7f:9d:
0b:56:67:4a:fc:a2:1a:d1:f1:e4:60:25:1e:0a:67:3f:c7:ff:
b1:7a:a3:dc:99:f8:1f:68:66:b7:fd:27:8f:0e:df:50:1c:37:
dc:31:4e:24:19:1f:0f:05:ae:16:00:e8:48:38:12:74:df:0d:
6d:e2:0b:25:59:c2:36:a2:23:6f:2e:54:ff:b4:dc:e8:09:04:
a2:e2:08:e5:6a:44:6f:44:7f:33:e8:bc:e7:05:5b:a2:4b:0b:
34:95:5e:de:87:d2:b0:a5:94:d4:22:9e:25:15:18:e2:b6:b2:
e7:0a:ee:9f:74:4c:15:c8:72:5b:e2:7f:49:c7:e9:e2:b8:9e:
b0:a1:bb:fc:59:69:a6:d4:c2:a1:f8:f2:83:f1:46:70:1b:f9:
7f:ef:fa:4a:07:04:29:8b:1a:9e:cd:48:57:18:04:ae:96:4f:
0d:d3:ea:4b:8a:71:e8:cf:72:18:6f:43:2d:44:dd:27:3a:2c:
0f:a9:9b:67:5b:00:5d:79:17:39:98:6f:cb:7c:80:81:a9:ae:
af:a9:a5:ea
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY8451js9VXN7Yu4xuwQwzhAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyOTViMWYxZGNkOGZhNmFjMWVmNzg4Mjc4YzQ4OWUxNWVh
Y2FlNzAwHhcNMjQwNTAyMTA0MzU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNmU0N2FkMWRhODRmODA4YzNjODMyNDYwM2E3MThjNGI1N2M5YzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApf6C1T5KlWaS/1syEnef0WDSgZ54
0N9YHG+JHNZnd5ziBvO2eHGCHi7WmsbjPv7ImriP7RXWF9EDdMS69sDelbjPdarE
Gt4u590Qcjj+UmrzCFpusRepOQfJRqVtC1GeTUyraJe94dCnoLOqp+8g8eMhb1ar
kuW+mwgqnwhu/wlSLlZddQTcRs7odw2W7oT29KTkBcKsCfg8MgHYXJWdCfmmjJ8/
tnZjq+9zwsaWEnLbCL3B/DuY5X3YeNApElPoWf1NhMgyUkU7phV6l/PyzidfN+y4
GjlNRuiDg+sLj1/0TU4I7ScYUsStJFQlqT7301NqveEaIFb3tqEHmzUCQwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFMbketHahPgIw8gyRgOnGMS1fJyAMB8GA1UdIwQY
MBaAFJKVsfHc2Ppqwe94gnjEieFerK5wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMt
OWViNDBjYzVmNjhiLzEveHVSNjBkcUUtQWpEeURKR0E2Y1l4TFY4bklBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wZmJjMmUtZmQ4OC00ZGYyLWFhZTMtOWViNDBjYzVmNjhi
LzEva3BXeDhkelktbXJCNzNpQ2VNU0o0VjZzcm5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUB1ON1MjAN
BgkqhkiG9w0BAQsFAAOCAQEAZGoylsQQ8XG6ZWAvHmLLrDIJ5zXKUTyDLpSMHcRG
YY8SJqMdaq1gLKH075Twgt7vBxQnO3+dC1ZnSvyiGtHx5GAlHgpnP8f/sXqj3Jn4
H2hmt/0njw7fUBw33DFOJBkfDwWuFgDoSDgSdN8NbeILJVnCNqIjby5U/7Tc6AkE
ouII5WpEb0R/M+i85wVboksLNJVe3ofSsKWU1CKeJRUY4ray5wrun3RMFchyW+J/
Scfp4riesKG7/FlpptTCofjyg/FGcBv5f+/6SgcEKYsans1IVxgErpZPDdPqS4px
6M9yGG9DLUTdJzosD6mbZ1sAXXkXOZhvy3yAgamur6ml6g==
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:29:33 2024 by rpki-client on console-fra.rpki-client.org