Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/i105MaFe2cBwmm1c6uzctfNLUIM.roa
File: i105MaFe2cBwmm1c6uzctfNLUIM.roa (raw, json)
Hash identifier: EkMeJOIKk+JgwVc4LtdTu0F81IJdjUddm8jC4ArRfTk=
Subject key identifier: 8B:5D:39:31:A1:5E:D9:C0:70:9A:6D:5C:EA:EC:DC:B5:F3:4B:50:83
Certificate issuer: /CN=778d759248bd945c6ce3842e8d642dcd2731334d
Certificate serial: 018CC64B6D4CA3433A896019441CA10E44DC
Authority key identifier: 77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/i105MaFe2cBwmm1c6uzctfNLUIM.roa
Signing time: Mon 01 Jan 2024 18:31:21 +0000
ROA not before: Mon 01 Jan 2024 18:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29203
IP address blocks: 192.162.76.0/22 maxlen: 22
2001:67c:1370::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.mft
rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:6d:4c:a3:43:3a:89:60:19:44:1c:a1:0e:44:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=778d759248bd945c6ce3842e8d642dcd2731334d
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b5d3931a15ed9c0709a6d5ceaecdcb5f34b5083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:54:72:a9:a7:4f:b9:ef:63:67:d9:ac:94:3f:
22:34:ed:b9:72:de:8a:57:29:eb:11:d6:fe:5b:f2:
f6:10:b4:e5:8d:c7:2a:65:f7:41:86:62:24:8c:14:
58:d7:b9:21:4c:f1:8a:86:99:d0:06:13:32:30:7f:
36:38:3c:01:04:99:90:30:24:f2:62:01:ca:70:de:
d9:e1:1a:56:b0:ec:24:49:b6:82:13:0a:b3:08:5e:
c9:68:99:ef:e1:18:53:e9:b5:40:ea:39:98:f1:b1:
54:b3:05:69:24:ff:4e:22:85:d4:fb:35:da:28:20:
53:c3:df:76:d7:98:e4:e8:7e:7f:1d:ee:f5:51:b1:
c5:98:59:84:9b:1f:70:69:e4:98:59:96:71:d3:43:
25:4f:5b:12:89:83:2f:06:c3:fb:ab:8f:e6:0e:56:
10:98:95:33:ad:bc:91:17:ef:c5:a6:b9:05:62:47:
10:9a:ce:c1:3b:6b:ae:de:98:cb:31:d3:2e:cb:9d:
c8:5a:47:62:b4:7d:f8:f9:e2:0f:c7:b3:25:67:67:
b9:ba:4e:8a:f0:24:6b:6c:52:37:78:4d:b7:2c:bf:
99:c6:5b:50:80:c9:24:65:cc:a6:54:ee:88:ba:fe:
93:fa:0d:44:87:a9:aa:76:3d:2b:51:8e:83:25:ce:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:39:31:A1:5E:D9:C0:70:9A:6D:5C:EA:EC:DC:B5:F3:4B:50:83
X509v3 Authority Key Identifier:
keyid:77:8D:75:92:48:BD:94:5C:6C:E3:84:2E:8D:64:2D:CD:27:31:33:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d411kki9lFxs44QujWQtzScxM00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/i105MaFe2cBwmm1c6uzctfNLUIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/582242-0098-4b3f-80b0-dfa1c9b3fd1f/1/d411kki9lFxs44QujWQtzScxM00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.162.76.0/22
IPv6:
2001:67c:1370::/48
Signature Algorithm: sha256WithRSAEncryption
a8:34:16:12:ab:b1:49:20:fa:ea:19:fd:fd:6d:19:74:70:0c:
ac:bb:4e:b2:ad:05:55:00:d3:2c:29:34:cf:f5:a5:40:cb:be:
95:fb:e1:73:57:e6:e0:6a:22:5c:6d:91:df:3a:90:33:6c:7d:
37:7d:21:21:66:9f:99:b9:a8:d6:93:d5:95:f9:f9:2d:53:30:
14:a5:bf:7b:00:ad:31:8d:df:27:c7:69:7c:b4:07:05:c2:93:
fe:02:3f:6f:6a:db:3d:a1:45:2d:02:2b:b4:1d:32:e6:06:de:
82:c1:58:60:8c:af:7f:10:dc:35:ac:e5:27:56:a2:f0:83:7c:
d8:91:de:c4:96:23:96:16:6e:bb:f2:65:42:7b:6d:12:e2:50:
81:60:37:2e:e7:ed:8f:b6:4a:f6:74:17:44:5f:df:00:08:11:
e8:65:ec:2c:a1:f2:3b:1c:21:55:e6:4e:84:7d:79:14:0b:75:
02:69:9e:ea:b0:1a:22:55:28:73:7e:a7:4e:8a:d6:81:c4:3f:
62:2f:d6:53:86:fe:69:f5:45:c5:d4:6a:04:25:7d:ce:2d:0e:
32:c2:9b:00:9a:0d:91:8b:47:5f:9e:a4:13:10:af:50:51:5c:
38:36:42:6c:61:83:e7:7b:4c:66:a8:8d:da:c7:3c:51:b6:25:
8b:fa:f2:58
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzGS21Mo0M6iWAZRByhDkTcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3OGQ3NTkyNDhiZDk0NWM2Y2UzODQyZThkNjQyZGNkMjcz
MTMzNGQwHhcNMjQwMTAxMTgzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjVkMzkzMWExNWVkOWMwNzA5YTZkNWNlYWVjZGNiNWYzNGI1MDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1RyqadPue9jZ9mslD8iNO25ct6K
VynrEdb+W/L2ELTljccqZfdBhmIkjBRY17khTPGKhpnQBhMyMH82ODwBBJmQMCTy
YgHKcN7Z4RpWsOwkSbaCEwqzCF7JaJnv4RhT6bVA6jmY8bFUswVpJP9OIoXU+zXa
KCBTw99215jk6H5/He71UbHFmFmEmx9waeSYWZZx00MlT1sSiYMvBsP7q4/mDlYQ
mJUzrbyRF+/FprkFYkcQms7BO2uu3pjLMdMuy53IWkditH34+eIPx7MlZ2e5uk6K
8CRrbFI3eE23LL+ZxltQgMkkZcymVO6Iuv6T+g1Eh6mqdj0rUY6DJc4+yQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFItdOTGhXtnAcJptXOrs3LXzS1CDMB8GA1UdIwQY
MBaAFHeNdZJIvZRcbOOELo1kLc0nMTNNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAt
ZGZhMWM5YjNmZDFmLzEvaTEwNU1hRmUyY0J3bW0xYzZ1emN0Zk5MVUlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81ODIyNDItMDA5OC00YjNmLTgwYjAtZGZhMWM5YjNmZDFm
LzEvZDQxMWtraTlsRnhzNDRRdWpXUXR6U2N4TTAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCwKJMMA8E
AgACMAkDBwAgAQZ8E3AwDQYJKoZIhvcNAQELBQADggEBAKg0FhKrsUkg+uoZ/f1t
GXRwDKy7TrKtBVUA0ywpNM/1pUDLvpX74XNX5uBqIlxtkd86kDNsfTd9ISFmn5m5
qNaT1ZX5+S1TMBSlv3sArTGN3yfHaXy0BwXCk/4CP29q2z2hRS0CK7QdMuYG3oLB
WGCMr38Q3DWs5SdWovCDfNiR3sSWI5YWbrvyZUJ7bRLiUIFgNy7n7Y+2SvZ0F0Rf
3wAIEehl7Cyh8jscIVXmToR9eRQLdQJpnuqwGiJVKHN+p06K1oHEP2Iv1lOG/mn1
RcXUagQlfc4tDjLCmwCaDZGLR1+epBMQr1BRXDg2Qmxhg+d7TGaojdrHPFG2JYv6
8lg=
-----END CERTIFICATE-----
Generated at Sun Jun 23 00:55:55 2024 by rpki-client on console-fra.rpki-client.org