Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/k0ol-pQVLVpuF_mc-kuLNOTPcKU.roa
File: k0ol-pQVLVpuF_mc-kuLNOTPcKU.roa (raw, json)
Hash identifier: jUd/dO5bKqeUBmAtYS8EDPEb1xaFE5dOrMeHgdq+R+k=
Subject key identifier: 93:4A:25:FA:94:15:2D:5A:6E:17:F9:9C:FA:4B:8B:34:E4:CF:70:A5
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 018FB905E6C6849AF7B10C9B14CAC630DEEA
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/k0ol-pQVLVpuF_mc-kuLNOTPcKU.roa
Signing time: Mon 27 May 2024 07:48:42 +0000
ROA not before: Mon 27 May 2024 07:48:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4648
IP address blocks: 195.252.168.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.mft
rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:b9:05:e6:c6:84:9a:f7:b1:0c:9b:14:ca:c6:30:de:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: May 27 07:48:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=934a25fa94152d5a6e17f99cfa4b8b34e4cf70a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3d:04:c9:e0:d3:72:34:10:bf:74:aa:85:68:
25:45:d6:d4:cc:a4:87:1b:e8:9c:73:92:fb:ea:0c:
62:d0:73:8b:52:66:85:4f:f2:0a:94:49:ff:11:4f:
60:88:a8:1c:cf:13:78:d9:7f:74:8e:11:d0:64:81:
60:cb:b8:d5:a5:d1:8b:63:e2:d7:21:25:69:54:fa:
75:ce:b1:e2:20:41:ba:f4:3d:38:6c:2b:ef:63:61:
34:d1:6e:e2:ba:df:8e:03:5c:f0:ad:f7:ba:ab:2d:
81:7e:22:fe:30:da:34:0c:ad:4a:a5:4b:f4:a4:ee:
93:62:bb:4c:70:87:48:50:c8:12:39:f6:09:6e:f0:
8f:ba:f6:27:2d:36:ec:fe:88:68:c8:2d:b1:d3:71:
a3:09:f5:4a:69:0b:0b:82:65:86:af:c2:f9:e5:06:
f5:41:a4:00:7d:d6:75:6c:15:07:94:9c:be:56:a4:
35:87:44:c1:06:c3:87:53:50:f3:f5:fd:ed:46:05:
42:2a:e2:9f:8b:44:81:05:d2:82:24:a8:71:b2:0f:
b6:a5:69:97:1e:93:d7:4e:d6:7b:3a:6c:16:d4:c6:
04:1d:0d:dc:6b:c2:89:5d:58:74:49:26:82:58:58:
eb:5f:f3:42:61:17:44:f7:21:9b:92:4d:d4:13:88:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4A:25:FA:94:15:2D:5A:6E:17:F9:9C:FA:4B:8B:34:E4:CF:70:A5
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/k0ol-pQVLVpuF_mc-kuLNOTPcKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.252.168.0/22
Signature Algorithm: sha256WithRSAEncryption
41:8a:27:b2:a0:0b:21:0e:81:9d:11:f7:53:9e:74:df:86:f7:
69:dd:99:43:4d:10:9e:69:b1:09:85:01:89:ef:7d:ff:4f:a5:
04:01:27:0f:f1:65:a2:7d:82:e7:b4:1d:fd:ef:9c:52:83:f0:
59:96:b0:03:7d:d0:fd:c3:47:6a:bc:61:b6:93:6a:ee:0e:0f:
86:84:84:bd:18:22:ef:cc:86:6f:ec:52:53:1e:82:1d:a0:1b:
af:ac:6b:68:d3:ba:55:45:a3:d8:cc:07:b7:cf:fa:11:ce:95:
58:47:1d:a4:62:69:c0:2e:78:5d:97:02:99:7e:2f:49:d9:07:
67:60:e9:4b:4f:17:94:cc:e9:44:89:a7:63:9e:dc:19:12:c7:
fd:27:63:c4:bd:6d:f4:75:6d:f0:c0:fd:55:82:08:80:2a:26:
19:1d:2d:fb:6a:8b:d6:80:68:68:96:7c:0d:0a:16:18:3b:ad:
e1:a6:62:a7:e3:59:e0:40:d5:65:57:b0:c7:2b:51:df:10:cb:
4a:22:bd:bb:c9:1c:80:ef:2b:db:54:ed:a8:71:12:74:64:12:
2e:b9:3b:f8:f3:55:7f:30:fe:0d:f6:5c:9c:da:48:37:12:23:
79:ba:57:78:d6:0c:09:f7:75:f7:31:eb:e7:08:37:9d:fb:60:
e3:c1:42:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY+5BebGhJr3sQybFMrGMN7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjQwNTI3MDc0ODQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzRhMjVmYTk0MTUyZDVhNmUxN2Y5OWNmYTRiOGIzNGU0Y2Y3MGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsT0EyeDTcjQQv3SqhWglRdbUzKSH
G+icc5L76gxi0HOLUmaFT/IKlEn/EU9giKgczxN42X90jhHQZIFgy7jVpdGLY+LX
ISVpVPp1zrHiIEG69D04bCvvY2E00W7iut+OA1zwrfe6qy2BfiL+MNo0DK1KpUv0
pO6TYrtMcIdIUMgSOfYJbvCPuvYnLTbs/ohoyC2x03GjCfVKaQsLgmWGr8L55Qb1
QaQAfdZ1bBUHlJy+VqQ1h0TBBsOHU1Dz9f3tRgVCKuKfi0SBBdKCJKhxsg+2pWmX
HpPXTtZ7OmwW1MYEHQ3ca8KJXVh0SSaCWFjrX/NCYRdE9yGbkk3UE4h4hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNKJfqUFS1abhf5nPpLizTkz3ClMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvazBvbC1wUVZMVnB1Rl9tYy1rdUxOT1RQY0tVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCw/yoMA0G
CSqGSIb3DQEBCwUAA4IBAQBBiieyoAshDoGdEfdTnnTfhvdp3ZlDTRCeabEJhQGJ
733/T6UEAScP8WWifYLntB3975xSg/BZlrADfdD9w0dqvGG2k2ruDg+GhIS9GCLv
zIZv7FJTHoIdoBuvrGto07pVRaPYzAe3z/oRzpVYRx2kYmnALnhdlwKZfi9J2Qdn
YOlLTxeUzOlEiadjntwZEsf9J2PEvW30dW3wwP1VggiAKiYZHS37aovWgGholnwN
ChYYO63hpmKn41ngQNVlV7DHK1HfEMtKIr27yRyA7yvbVO2ocRJ0ZBIuuTv481V/
MP4N9lyc2kg3EiN5uld41gwJ93X3MevnCDed+2DjwULa
-----END CERTIFICATE-----
Generated at Mon Nov 25 20:24:29 2024 by rpki-client on console-fra.rpki-client.org