Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6NEiasogh8-yl9Rw7a50BjA6w4Q.roa
File: 6NEiasogh8-yl9Rw7a50BjA6w4Q.roa (raw, json)
Hash identifier: bnWxNwuGT599YOp15YAs1vX7z0VzslqQSuD5eE1LAds=
Subject key identifier: E8:D1:22:6A:CA:20:87:CF:B2:97:D4:70:ED:AE:74:06:30:3A:C3:84
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018FA53C4A1763C8A16D35E95A7E0C356AB3
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6NEiasogh8-yl9Rw7a50BjA6w4Q.roa
Signing time: Thu 23 May 2024 11:35:42 +0000
ROA not before: Thu 23 May 2024 11:35:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209759
IP address blocks: 193.233.201.0/24 maxlen: 24
193.233.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a5:3c:4a:17:63:c8:a1:6d:35:e9:5a:7e:0c:35:6a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 23 11:35:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8d1226aca2087cfb297d470edae7406303ac384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:57:f6:a0:de:05:b5:ed:8a:ff:21:16:fd:
a5:aa:0a:43:fb:5f:80:50:c4:af:31:68:3e:78:a9:
5a:fe:fb:b8:25:4d:f1:17:9d:96:5b:53:1d:be:2a:
8f:3c:d6:d4:b2:43:7b:15:6c:67:4f:0d:12:26:eb:
e7:50:a2:05:8e:a6:aa:42:69:d8:81:69:d7:c0:2b:
ec:d0:4e:33:b5:f0:67:2c:a1:5f:32:a1:b8:c5:0b:
fd:e9:9c:19:ba:7c:a7:13:b4:2f:e7:60:23:20:57:
82:ef:42:c3:e2:4e:00:20:bb:84:85:19:f2:ea:db:
92:27:94:19:0a:44:64:37:25:56:87:b1:cc:08:16:
a4:5a:1e:72:e1:c6:ed:f2:2e:6b:8d:22:5f:5e:14:
d6:5d:b5:9c:a6:88:93:7b:ef:fd:01:12:1c:cb:c6:
c4:8b:77:86:f8:2e:21:0b:13:eb:be:3b:92:19:01:
df:82:7d:33:46:2b:8a:66:fc:72:42:4f:3d:b3:38:
1b:d1:03:46:63:8a:91:37:89:b8:1b:76:af:b0:7c:
b3:2d:8d:17:18:78:c8:d0:e5:93:a8:07:0b:89:ac:
20:26:1d:1f:29:a8:71:45:71:d5:35:9f:f6:8f:03:
9d:fa:24:ac:17:3c:06:1d:6a:fe:7d:03:a5:9e:ef:
86:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:22:6A:CA:20:87:CF:B2:97:D4:70:ED:AE:74:06:30:3A:C3:84
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/6NEiasogh8-yl9Rw7a50BjA6w4Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.201.0/24
193.233.244.0/22
Signature Algorithm: sha256WithRSAEncryption
00:91:b7:02:74:9a:0d:ee:f2:05:2e:5c:ee:29:2c:8f:db:dd:
46:f1:e8:10:b2:25:00:a2:b8:23:ef:28:93:bb:1a:93:a3:a6:
a7:12:d1:65:08:f2:bb:84:25:45:f3:b5:fa:3c:6e:e1:4c:c7:
c1:70:97:bc:cc:10:8f:69:cc:40:4c:01:06:45:bd:01:16:9a:
0c:53:a6:2f:91:60:49:28:74:fd:67:cd:9d:3a:a1:34:85:9f:
99:3c:f0:47:b0:34:0d:3c:77:d7:cd:18:91:48:06:98:94:68:
53:17:17:a9:41:85:dd:3e:84:d3:97:39:7a:15:bd:f0:08:67:
66:e1:0d:be:2c:d1:a3:3f:e7:4a:49:9c:30:f2:99:a5:06:6a:
d2:c5:6c:df:f0:15:79:ef:21:53:a0:19:d5:b4:97:c0:50:41:
b7:d2:5c:cf:15:eb:b4:6b:7c:55:98:83:ca:5a:67:bc:75:5f:
0c:88:1f:b4:e6:0c:f0:87:71:cb:64:28:2b:07:33:3d:40:d6:
70:7e:3d:7c:b3:e3:37:98:63:ce:5c:43:9f:7c:60:77:09:13:
6c:e6:02:e7:57:2f:cd:f4:37:ff:50:d7:5a:68:47:c3:c0:4d:
96:f7:2d:3f:dc:b1:24:91:28:94:eb:9b:4b:c7:53:72:00:c7:
f1:76:66:32
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY+lPEoXY8ihbTXpWn4MNWqzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjQwNTIzMTEzNTQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOGQxMjI2YWNhMjA4N2NmYjI5N2Q0NzBlZGFlNzQwNjMwM2FjMzg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2JX9qDeBbXtiv8hFv2lqgpD+1+A
UMSvMWg+eKla/vu4JU3xF52WW1MdviqPPNbUskN7FWxnTw0SJuvnUKIFjqaqQmnY
gWnXwCvs0E4ztfBnLKFfMqG4xQv96ZwZunynE7Qv52AjIFeC70LD4k4AILuEhRny
6tuSJ5QZCkRkNyVWh7HMCBakWh5y4cbt8i5rjSJfXhTWXbWcpoiTe+/9ARIcy8bE
i3eG+C4hCxPrvjuSGQHfgn0zRiuKZvxyQk89szgb0QNGY4qRN4m4G3avsHyzLY0X
GHjI0OWTqAcLiawgJh0fKahxRXHVNZ/2jwOd+iSsFzwGHWr+fQOlnu+G6QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOjRImrKIIfPspfUcO2udAYwOsOEMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvNk5FaWFzb2doOC15bDlSdzdhNTBCakE2dzRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwenJAwQC
wen0MA0GCSqGSIb3DQEBCwUAA4IBAQAAkbcCdJoN7vIFLlzuKSyP291G8egQsiUA
orgj7yiTuxqTo6anEtFlCPK7hCVF87X6PG7hTMfBcJe8zBCPacxATAEGRb0BFpoM
U6YvkWBJKHT9Z82dOqE0hZ+ZPPBHsDQNPHfXzRiRSAaYlGhTFxepQYXdPoTTlzl6
Fb3wCGdm4Q2+LNGjP+dKSZww8pmlBmrSxWzf8BV57yFToBnVtJfAUEG30lzPFeu0
a3xVmIPKWme8dV8MiB+05gzwh3HLZCgrBzM9QNZwfj18s+M3mGPOXEOffGB3CRNs
5gLnVy/N9Df/UNdaaEfDwE2W9y0/3LEkkSiU65tLx1NyAMfxdmYy
-----END CERTIFICATE-----
Generated at Sat Sep 28 12:39:02 2024 by rpki-client on console-ams.rpki-client.org