Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/lrEtdaQrj9RhQ3O4ft3ZBjkkLbM.roa
File: lrEtdaQrj9RhQ3O4ft3ZBjkkLbM.roa (raw, json)
Hash identifier: 3aXF7TBjAG7ertlZ3PZBWbXQLdldhKiut1XKkT3qXiw=
Subject key identifier: 96:B1:2D:75:A4:2B:8F:D4:61:43:73:B8:7E:DD:D9:06:39:24:2D:B3
Certificate issuer: /CN=e801f23ce821c264d67727536ec183537594c5f2
Certificate serial: 018CC493686E0580FD1900DDD0C9C41A15C6
Authority key identifier: E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/lrEtdaQrj9RhQ3O4ft3ZBjkkLbM.roa
Signing time: Mon 01 Jan 2024 10:30:44 +0000
ROA not before: Mon 01 Jan 2024 10:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1880
IP address blocks: 193.10.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 04:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:68:6e:05:80:fd:19:00:dd:d0:c9:c4:1a:15:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e801f23ce821c264d67727536ec183537594c5f2
Validity
Not Before: Jan 1 10:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=96b12d75a42b8fd4614373b87eddd90639242db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:fd:70:cf:49:90:91:2b:97:3d:64:d1:e1:5a:
6a:ba:c2:0e:d3:88:58:77:33:03:08:c5:08:d8:e8:
bb:ec:78:ac:ad:06:d1:03:39:b1:2c:1a:d8:a9:df:
78:3d:93:34:d3:3b:65:a4:a2:05:16:32:b1:c9:da:
95:37:26:2d:70:66:e4:aa:5c:42:dd:98:2c:a8:02:
cb:a9:ea:c8:01:22:82:05:4c:77:0d:42:db:08:1e:
4d:ad:ed:e8:a8:6b:0d:78:cd:08:0d:65:8c:cc:fe:
ab:d9:12:ce:e2:86:58:45:82:6e:ab:ae:7a:3d:d9:
c5:cd:f8:cd:5d:85:bd:ad:96:5e:04:dc:4c:4e:ea:
34:bb:32:b7:e1:58:0b:f3:34:b3:70:b1:9c:ad:05:
85:8d:bc:e7:c1:80:ae:96:44:da:bb:72:e8:77:df:
2b:89:d3:a3:ed:20:55:63:94:6c:af:af:e9:9d:75:
0c:79:ce:89:d5:1b:d6:e3:bc:bf:a0:09:9d:70:b0:
5f:62:fc:8f:2e:65:25:08:7b:8b:73:85:74:3e:4c:
81:9b:12:a7:df:e5:b4:a3:86:fd:73:55:67:5b:86:
19:7c:00:71:76:e8:ee:7d:f7:8c:77:10:7b:3b:c8:
a8:c5:7e:55:2d:ae:35:cf:86:b7:52:8f:fe:07:38:
d9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B1:2D:75:A4:2B:8F:D4:61:43:73:B8:7E:DD:D9:06:39:24:2D:B3
X509v3 Authority Key Identifier:
keyid:E8:01:F2:3C:E8:21:C2:64:D6:77:27:53:6E:C1:83:53:75:94:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6AHyPOghwmTWdydTbsGDU3WUxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/lrEtdaQrj9RhQ3O4ft3ZBjkkLbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/eab4d8-6afd-4f81-ab10-464eb183b568/1/6AHyPOghwmTWdydTbsGDU3WUxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.10.7.0/24
Signature Algorithm: sha256WithRSAEncryption
09:82:1d:64:94:55:60:3c:43:1d:fa:26:c9:5b:e1:d1:5c:24:
6c:6e:2b:33:48:90:52:bb:ae:9a:07:9e:9b:a1:29:40:98:45:
bf:4f:af:df:9d:c4:2b:f7:a3:e3:74:54:9c:4d:a3:b7:cb:b2:
37:01:a1:a5:d8:dc:b4:c6:b3:71:a2:70:db:a1:28:79:67:16:
fb:0f:85:81:0b:94:a6:9f:1f:25:ed:c1:0a:f7:b4:40:df:68:
f1:60:71:d4:0f:f1:09:e7:08:6a:72:cd:ea:91:e0:28:0e:24:
9b:5d:7e:e7:63:00:1d:55:00:e8:e9:a7:ef:1a:68:c2:8f:70:
94:40:80:e5:ea:81:17:55:e7:f7:80:e1:19:fb:e8:dd:a5:04:
2b:9e:79:6c:b0:fb:00:e8:8d:83:7b:9e:82:11:f5:75:0e:c4:
22:2c:ce:4d:f8:52:c5:02:dd:9a:c0:16:b7:d9:1e:b6:58:68:
df:7c:28:21:df:f3:12:bc:02:3f:24:c2:a9:d3:06:05:af:4c:
78:af:2d:4d:f9:7e:c6:f6:41:30:04:13:7b:44:85:6e:40:c0:
82:c2:2b:9a:e7:d8:08:cf:50:05:e7:04:11:68:eb:d4:5f:ab:
d8:56:25:46:95:8d:3a:bf:7d:ca:71:ea:3a:3b:ec:67:5c:e1:
0e:66:e7:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk2huBYD9GQDd0MnEGhXGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4MDFmMjNjZTgyMWMyNjRkNjc3Mjc1MzZlYzE4MzUzNzU5
NGM1ZjIwHhcNMjQwMTAxMTAzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NmIxMmQ3NWE0MmI4ZmQ0NjE0MzczYjg3ZWRkZDkwNjM5MjQyZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/1wz0mQkSuXPWTR4VpqusIO04hY
dzMDCMUI2Oi77HisrQbRAzmxLBrYqd94PZM00ztlpKIFFjKxydqVNyYtcGbkqlxC
3ZgsqALLqerIASKCBUx3DULbCB5Nre3oqGsNeM0IDWWMzP6r2RLO4oZYRYJuq656
PdnFzfjNXYW9rZZeBNxMTuo0uzK34VgL8zSzcLGcrQWFjbznwYCulkTau3Lod98r
idOj7SBVY5Rsr6/pnXUMec6J1RvW47y/oAmdcLBfYvyPLmUlCHuLc4V0PkyBmxKn
3+W0o4b9c1VnW4YZfABxdujuffeMdxB7O8ioxX5VLa41z4a3Uo/+BzjZWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJaxLXWkK4/UYUNzuH7d2QY5JC2zMB8GA1UdIwQY
MBaAFOgB8jzoIcJk1ncnU27Bg1N1lMXyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAt
NDY0ZWIxODNiNTY4LzEvbHJFdGRhUXJqOVJoUTNPNGZ0M1pCamtrTGJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9lYWI0ZDgtNmFmZC00ZjgxLWFiMTAtNDY0ZWIxODNiNTY4
LzEvNkFIeVBPZ2h3bVRXZHlkVGJzR0RVM1dVeGZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQoHMA0G
CSqGSIb3DQEBCwUAA4IBAQAJgh1klFVgPEMd+ibJW+HRXCRsbiszSJBSu66aB56b
oSlAmEW/T6/fncQr96PjdFScTaO3y7I3AaGl2Ny0xrNxonDboSh5Zxb7D4WBC5Sm
nx8l7cEK97RA32jxYHHUD/EJ5whqcs3qkeAoDiSbXX7nYwAdVQDo6afvGmjCj3CU
QIDl6oEXVef3gOEZ++jdpQQrnnlssPsA6I2De56CEfV1DsQiLM5N+FLFAt2awBa3
2R62WGjffCgh3/MSvAI/JMKp0wYFr0x4ry1N+X7G9kEwBBN7RIVuQMCCwiua59gI
z1AF5wQRaOvUX6vYViVGlY06v33Kceo6O+xnXOEOZudr
-----END CERTIFICATE-----
Generated at Sat May 4 09:01:52 2024 by rpki-client on console-fra.rpki-client.org