Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/3tWZcNkNq4wkFo2vBRpo10_RTro.roa
File: 3tWZcNkNq4wkFo2vBRpo10_RTro.roa (raw, json)
Hash identifier: bJXVtwndEwRE1mYkFChll6ZpXtG0omWPWe9cEkU8s3w=
Subject key identifier: DE:D5:99:70:D9:0D:AB:8C:24:16:8D:AF:05:1A:68:D7:4F:D1:4E:BA
Certificate issuer: /CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Certificate serial: 018CC5DBFCC93373BEBC46CCA09DBB6D0017
Authority key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/3tWZcNkNq4wkFo2vBRpo10_RTro.roa
Signing time: Mon 01 Jan 2024 16:29:37 +0000
ROA not before: Mon 01 Jan 2024 16:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39528
IP address blocks: 195.60.225.0/24 maxlen: 24
195.60.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:fc:c9:33:73:be:bc:46:cc:a0:9d:bb:6d:00:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Validity
Not Before: Jan 1 16:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ded59970d90dab8c24168daf051a68d74fd14eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:06:2d:06:b2:6e:ba:c2:86:62:69:a0:86:17:
32:a1:ff:2d:52:f9:c1:be:ce:34:90:23:92:30:7e:
d4:40:df:17:ee:89:1f:59:b1:e9:b5:4c:05:4b:30:
bd:59:b6:62:91:cf:20:cb:d2:87:8d:7f:6c:79:3e:
58:02:44:f6:a9:a7:cd:96:08:95:7c:d1:6d:46:91:
05:36:fc:63:53:cb:6b:fd:4c:f1:20:b8:74:83:9b:
62:0b:f7:e7:be:a1:b4:91:0a:af:24:08:53:af:e5:
97:a9:ea:b3:d1:19:7d:68:38:0e:5f:b6:44:76:f7:
bd:7c:31:0e:d9:ee:7d:20:85:2c:d9:3c:ba:b5:99:
5a:d5:72:cf:4b:eb:4e:bc:3a:dd:35:75:36:9b:4a:
d4:1a:68:ed:34:cd:0f:2f:6e:1c:2a:38:f2:f1:4f:
19:b2:d5:33:58:06:9c:42:05:a1:f1:3b:e0:0d:f6:
6d:ca:c0:2b:f5:8d:6a:f4:b4:1a:c3:a1:ce:e4:b2:
56:f6:a3:4c:cb:77:bb:f0:63:a9:8b:ca:b1:1a:49:
4c:ed:29:a1:ec:5a:ca:e2:f8:95:a6:ff:90:c7:b4:
51:7b:6b:bf:fb:2a:09:a9:2f:d3:c7:11:25:68:c5:
27:df:19:0a:3d:64:b1:f5:2f:a4:00:0c:6e:b2:6f:
4c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D5:99:70:D9:0D:AB:8C:24:16:8D:AF:05:1A:68:D7:4F:D1:4E:BA
X509v3 Authority Key Identifier:
keyid:AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/3tWZcNkNq4wkFo2vBRpo10_RTro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.224.0/23
Signature Algorithm: sha256WithRSAEncryption
39:53:47:5f:da:e0:08:4d:66:f9:70:d6:6b:76:6a:6d:12:c8:
2a:93:f0:3a:f2:60:6a:3e:53:90:ae:f0:9a:86:19:2a:e0:e3:
ac:4d:a8:49:93:64:04:ce:60:77:fc:7e:be:da:ea:53:73:86:
f3:24:67:29:b7:28:d6:2e:07:e8:cd:7c:64:ca:c0:fe:81:aa:
ae:fe:7b:14:2b:eb:32:b5:f7:69:ae:ad:9d:ab:4d:22:ce:99:
d6:06:67:17:c3:b1:20:dd:d3:a7:a7:1f:b4:55:d2:1f:4a:d5:
b8:68:a1:a1:aa:fe:03:74:91:de:cd:13:2b:33:33:cf:de:9c:
fd:8f:f4:22:49:d0:3c:da:b4:98:52:43:ba:6a:04:51:6a:3c:
7c:f8:b5:92:81:66:61:61:02:22:3f:71:a4:f2:bc:8c:38:31:
74:2b:71:85:59:b3:d7:67:1e:8a:b3:6e:62:46:e0:ce:e2:e8:
5b:34:29:36:b3:e0:aa:5a:17:08:ce:ac:42:38:a6:69:30:35:
82:40:77:85:b6:a8:9b:c7:82:4f:02:80:a4:ed:d5:10:28:4a:
8b:a7:02:77:fd:34:9d:87:10:aa:e8:46:be:59:e3:53:7d:13:
71:c1:88:c4:9e:b3:82:c7:d1:bf:16:01:25:e9:e3:2e:1d:97:
2c:0d:fa:28
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF2/zJM3O+vEbMoJ27bQAXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMGY1YTliZDJhZDFlOTY4NjVmMDBkMDg1MjJiOWFhZDNl
OTFhNGQwHhcNMjQwMTAxMTYyOTM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWQ1OTk3MGQ5MGRhYjhjMjQxNjhkYWYwNTFhNjhkNzRmZDE0ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgYtBrJuusKGYmmghhcyof8tUvnB
vs40kCOSMH7UQN8X7okfWbHptUwFSzC9WbZikc8gy9KHjX9seT5YAkT2qafNlgiV
fNFtRpEFNvxjU8tr/UzxILh0g5tiC/fnvqG0kQqvJAhTr+WXqeqz0Rl9aDgOX7ZE
dve9fDEO2e59IIUs2Ty6tZla1XLPS+tOvDrdNXU2m0rUGmjtNM0PL24cKjjy8U8Z
stUzWAacQgWh8TvgDfZtysAr9Y1q9LQaw6HO5LJW9qNMy3e78GOpi8qxGklM7Smh
7FrK4viVpv+Qx7RRe2u/+yoJqS/TxxElaMUn3xkKPWSx9S+kAAxusm9M3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN7VmXDZDauMJBaNrwUaaNdP0U66MB8GA1UdIwQY
MBaAFK8PWpvSrR6Whl8A0IUiuarT6RpNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAt
M2FjM2I2NzM3MDQyLzEvM3RXWmNOa05xNHdrRm8ydkJScG8xMF9SVHJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82YWQ5YjgtOWYwZS00YWQwLWEyMjAtM2FjM2I2NzM3MDQy
LzEvcnc5YW05S3RIcGFHWHdEUWhTSzVxdFBwR2swLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwzzgMA0G
CSqGSIb3DQEBCwUAA4IBAQA5U0df2uAITWb5cNZrdmptEsgqk/A68mBqPlOQrvCa
hhkq4OOsTahJk2QEzmB3/H6+2upTc4bzJGcptyjWLgfozXxkysD+gaqu/nsUK+sy
tfdprq2dq00izpnWBmcXw7Eg3dOnpx+0VdIfStW4aKGhqv4DdJHezRMrMzPP3pz9
j/QiSdA82rSYUkO6agRRajx8+LWSgWZhYQIiP3Gk8ryMODF0K3GFWbPXZx6Ks25i
RuDO4uhbNCk2s+CqWhcIzqxCOKZpMDWCQHeFtqibx4JPAoCk7dUQKEqLpwJ3/TSd
hxCq6Ea+WeNTfRNxwYjEnrOCx9G/FgEl6eMuHZcsDfoo
-----END CERTIFICATE-----
Generated at Fri Jun 7 14:31:55 2024 by rpki-client on console-fra.rpki-client.org