Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/0MQ6Dgmui6mT86ALOLk3UvoS6dY.roa
File: 0MQ6Dgmui6mT86ALOLk3UvoS6dY.roa (raw, json)
Hash identifier: SOI5GMds+WR2XZ8eNSNtJy/PdOzozLXluV0xCgae+eI=
Subject key identifier: D0:C4:3A:0E:09:AE:8B:A9:93:F3:A0:0B:38:B9:37:52:FA:12:E9:D6
Certificate issuer: /CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Certificate serial: 018CC94C040E89BD58CDED93A972DDC076C0
Authority key identifier: 15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/0MQ6Dgmui6mT86ALOLk3UvoS6dY.roa
Signing time: Tue 02 Jan 2024 08:30:51 +0000
ROA not before: Tue 02 Jan 2024 08:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21467
IP address blocks: 193.109.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:04:0e:89:bd:58:cd:ed:93:a9:72:dd:c0:76:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ce06b44d8dc43dc742c40de3bda8aa3744e2bd
Validity
Not Before: Jan 2 08:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d0c43a0e09ae8ba993f3a00b38b93752fa12e9d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f0:72:a4:42:01:4d:8a:53:b3:5b:62:f6:d7:
7a:14:c3:01:07:92:80:fe:1a:4c:0f:78:0f:a8:28:
0e:93:10:54:31:a6:7a:91:a6:27:94:70:e3:bc:33:
68:b3:72:45:53:17:db:5e:6d:8d:88:38:aa:8a:a1:
0c:e7:11:13:04:68:83:0f:12:29:aa:5b:53:44:b1:
a8:31:0d:24:49:a7:62:92:d9:9b:e7:b3:c9:9c:f5:
01:08:19:63:8c:c4:da:aa:12:c3:7f:c5:08:c0:34:
ae:54:24:d3:6e:af:29:21:02:ac:44:f2:e5:15:cc:
63:6c:96:3f:cd:5d:94:b5:b9:78:13:87:a2:f9:6d:
ba:cd:56:72:a6:39:73:59:48:09:c4:a8:27:7f:a0:
8e:db:7d:32:f3:c2:15:c5:47:62:80:84:6b:8e:a8:
85:8a:2a:98:9c:09:b7:e3:0a:e7:ef:59:87:fb:97:
f5:97:b2:d7:2f:7c:8c:ec:d1:46:79:b9:b7:a8:13:
88:0c:40:6e:54:e7:61:37:da:e9:93:da:87:9a:18:
66:d8:fb:b7:e0:7b:5f:05:94:ed:f0:b1:3b:ab:29:
b8:61:54:cd:94:a3:31:9d:d7:36:1a:7c:c1:ad:3b:
fd:e8:ad:99:33:94:e1:30:1c:87:0f:c1:25:ba:57:
da:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C4:3A:0E:09:AE:8B:A9:93:F3:A0:0B:38:B9:37:52:FA:12:E9:D6
X509v3 Authority Key Identifier:
keyid:15:CE:06:B4:4D:8D:C4:3D:C7:42:C4:0D:E3:BD:A8:AA:37:44:E2:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc4GtE2NxD3HQsQN472oqjdE4r0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/0MQ6Dgmui6mT86ALOLk3UvoS6dY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7bd927-b507-4363-9ada-dee4317f5b14/1/Fc4GtE2NxD3HQsQN472oqjdE4r0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.231.0/24
Signature Algorithm: sha256WithRSAEncryption
99:65:c5:db:50:ac:fc:fa:db:bc:c6:36:c4:33:c3:c7:98:0e:
1f:3a:9d:40:a4:76:41:ef:a0:1a:5c:c0:f7:b0:eb:6c:13:c2:
a5:75:89:aa:43:1e:d2:13:46:2c:88:0d:02:b0:4b:eb:1f:d7:
30:dd:b4:31:68:33:ec:23:90:12:87:5d:7f:ed:8f:ef:06:a9:
08:f7:79:db:38:49:f7:c2:a1:ea:a7:b5:a3:ef:4b:01:6a:64:
82:f2:aa:61:22:19:af:0f:d4:48:04:d3:cc:82:3c:37:80:e9:
5d:68:84:5e:76:1b:4e:f1:fd:40:cc:30:3d:c8:e7:3f:fe:d7:
c6:d9:b1:b9:5b:75:32:b5:02:23:f9:a1:79:92:ee:7a:e8:9c:
2b:3a:0d:ce:d9:10:0d:9f:c5:29:ad:70:df:e5:67:53:db:b3:
30:91:a7:fb:a3:0e:08:06:d9:4c:6e:38:13:e2:98:b2:41:f7:
7b:97:15:e5:6f:dd:b6:65:ea:29:da:03:70:a0:19:5e:fb:70:
19:5c:d4:56:e6:b2:3d:1b:3c:bc:f5:95:f2:a3:43:be:93:cc:
2d:c3:de:4f:57:16:7f:1e:2b:ea:a1:cb:3b:98:c5:42:d0:89:
6e:c6:95:c6:b2:fa:65:c3:4d:28:51:82:3c:76:3c:32:b9:3d:
6f:1f:43:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTAQOib1Yze2TqXLdwHbAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1Y2UwNmI0NGQ4ZGM0M2RjNzQyYzQwZGUzYmRhOGFhMzc0
NGUyYmQwHhcNMjQwMTAyMDgzMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMGM0M2EwZTA5YWU4YmE5OTNmM2EwMGIzOGI5Mzc1MmZhMTJlOWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/BypEIBTYpTs1ti9td6FMMBB5KA
/hpMD3gPqCgOkxBUMaZ6kaYnlHDjvDNos3JFUxfbXm2NiDiqiqEM5xETBGiDDxIp
qltTRLGoMQ0kSadiktmb57PJnPUBCBljjMTaqhLDf8UIwDSuVCTTbq8pIQKsRPLl
FcxjbJY/zV2Utbl4E4ei+W26zVZypjlzWUgJxKgnf6CO230y88IVxUdigIRrjqiF
iiqYnAm34wrn71mH+5f1l7LXL3yM7NFGebm3qBOIDEBuVOdhN9rpk9qHmhhm2Pu3
4HtfBZTt8LE7qym4YVTNlKMxndc2GnzBrTv96K2ZM5ThMByHD8ElulfaOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNDEOg4Jroupk/OgCzi5N1L6EunWMB8GA1UdIwQY
MBaAFBXOBrRNjcQ9x0LEDeO9qKo3ROK9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEt
ZGVlNDMxN2Y1YjE0LzEvME1RNkRnbXVpNm1UODZBTE9MazNVdm9TNmRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83YmQ5MjctYjUwNy00MzYzLTlhZGEtZGVlNDMxN2Y1YjE0
LzEvRmM0R3RFMk54RDNIUXNRTjQ3Mm9xamRFNHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW3nMA0G
CSqGSIb3DQEBCwUAA4IBAQCZZcXbUKz8+tu8xjbEM8PHmA4fOp1ApHZB76AaXMD3
sOtsE8KldYmqQx7SE0YsiA0CsEvrH9cw3bQxaDPsI5ASh11/7Y/vBqkI93nbOEn3
wqHqp7Wj70sBamSC8qphIhmvD9RIBNPMgjw3gOldaIRedhtO8f1AzDA9yOc//tfG
2bG5W3UytQIj+aF5ku566JwrOg3O2RANn8UprXDf5WdT27Mwkaf7ow4IBtlMbjgT
4piyQfd7lxXlb922Zeop2gNwoBle+3AZXNRW5rI9Gzy89ZXyo0O+k8wtw95PVxZ/
Hivqocs7mMVC0IluxpXGsvplw00oUYI8djwyuT1vH0Pt
-----END CERTIFICATE-----
Generated at Sat Jun 22 08:36:57 2024 by rpki-client on console-ams.rpki-client.org