Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/RPg_qZB7ZA1XMG0YWrnCW7u6UdM.roa
File: RPg_qZB7ZA1XMG0YWrnCW7u6UdM.roa (raw, json)
Hash identifier: TiSDRVgDJDvuiJTGD8gAXVO7nJ9FMtkyKZ8H6QM3Lj4=
Subject key identifier: 44:F8:3F:A9:90:7B:64:0D:57:30:6D:18:5A:B9:C2:5B:BB:BA:51:D3
Certificate issuer: /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial: 018CC8715BA33AFF121643A25605D272FAA8
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/RPg_qZB7ZA1XMG0YWrnCW7u6UdM.roa
Signing time: Tue 02 Jan 2024 04:32:01 +0000
ROA not before: Tue 02 Jan 2024 04:32:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32322
IP address blocks: 193.239.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 03:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:5b:a3:3a:ff:12:16:43:a2:56:05:d2:72:fa:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Validity
Not Before: Jan 2 04:32:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44f83fa9907b640d57306d185ab9c25bbbba51d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7a:5b:77:99:74:69:da:23:11:e1:6a:fd:72:
dc:2f:6e:48:2b:df:51:77:b2:bd:2b:d7:6e:bc:75:
ee:1a:c1:41:17:71:d6:d6:f8:ec:a3:63:2a:43:87:
56:ec:32:23:0f:31:22:43:8e:b4:7e:03:d7:f2:ce:
0f:dc:d4:23:fe:6b:fe:6d:56:10:55:6c:4e:4d:5d:
2d:b5:3d:8f:00:96:c7:67:08:47:6d:de:fc:a0:d9:
09:c9:2f:5a:97:5f:72:67:da:3c:0f:24:cf:be:47:
3d:50:28:73:db:f6:53:c4:f6:ca:23:06:72:c7:ea:
66:82:43:5d:03:15:b3:d8:82:9c:bc:53:98:f6:ec:
45:0e:f2:9b:5b:96:cb:44:7a:97:24:0a:35:82:cf:
19:48:90:ac:b6:c7:ce:27:b9:4a:a3:40:d3:69:90:
65:f2:d6:2b:aa:42:fa:1f:a3:c5:48:c1:11:de:69:
5c:1b:23:66:df:84:ac:23:4e:39:18:01:31:9c:52:
9e:8c:bc:88:51:47:16:bb:ca:29:db:b6:21:0e:b9:
bb:e4:a8:1e:ff:dc:52:b1:28:83:81:01:96:8e:e9:
c0:07:d3:ec:f6:a0:e4:c2:9d:04:ce:11:6b:4d:38:
00:07:d7:d7:44:f7:67:3b:b0:43:3e:c7:08:28:e2:
0b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F8:3F:A9:90:7B:64:0D:57:30:6D:18:5A:B9:C2:5B:BB:BA:51:D3
X509v3 Authority Key Identifier:
keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/RPg_qZB7ZA1XMG0YWrnCW7u6UdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.231.0/24
Signature Algorithm: sha256WithRSAEncryption
22:99:2a:12:01:36:8a:99:2b:f7:e8:ad:17:81:92:a4:dc:f6:
c3:d2:0e:6b:d9:33:2f:89:56:de:3d:9d:6b:88:43:6a:dc:63:
eb:b1:11:df:56:9e:5d:ca:61:24:30:68:a3:f1:57:62:db:b0:
74:5d:1a:45:7a:ea:c7:d7:6c:22:6d:d2:eb:28:47:50:26:49:
2c:ff:d5:e2:c8:df:05:62:b5:a9:30:a4:5e:22:b8:aa:62:e4:
34:01:fe:6a:1d:d9:84:04:8a:b3:15:d2:56:73:fa:78:81:48:
42:50:69:4e:07:0b:d2:2b:c0:28:26:39:24:b1:5e:59:5f:ec:
3d:ae:97:33:5f:34:f6:cc:20:d9:58:9f:73:62:f6:41:8e:03:
ed:3a:98:50:79:6a:75:32:04:17:08:94:1a:d4:0a:34:c9:54:
48:50:57:64:ec:5c:29:69:a3:d0:7b:03:97:79:61:df:8b:94:
b8:90:13:a5:6c:0d:56:3e:5a:ff:ae:cc:4c:8f:d2:b7:a8:e9:
2e:14:ea:33:c0:44:ad:a2:0b:c8:99:42:19:0f:fa:67:1e:8d:
6a:32:36:b7:36:53:cf:29:4c:75:ef:c2:01:90:d3:21:f6:73:
98:51:36:28:15:92:06:c9:f8:1d:4c:28:3c:72:ae:d6:be:82:
fe:78:5a:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcVujOv8SFkOiVgXScvqoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYmFiNmQzNjBlOTNkOThmY2U5ZTc4ODhlNTY0YmQ0NjRl
ODllOGEwHhcNMjQwMTAyMDQzMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGY4M2ZhOTkwN2I2NDBkNTczMDZkMTg1YWI5YzI1YmJiYmE1MWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03pbd5l0adojEeFq/XLcL25IK99R
d7K9K9duvHXuGsFBF3HW1vjso2MqQ4dW7DIjDzEiQ460fgPX8s4P3NQj/mv+bVYQ
VWxOTV0ttT2PAJbHZwhHbd78oNkJyS9al19yZ9o8DyTPvkc9UChz2/ZTxPbKIwZy
x+pmgkNdAxWz2IKcvFOY9uxFDvKbW5bLRHqXJAo1gs8ZSJCstsfOJ7lKo0DTaZBl
8tYrqkL6H6PFSMER3mlcGyNm34SsI045GAExnFKejLyIUUcWu8op27YhDrm75Kge
/9xSsSiDgQGWjunAB9Ps9qDkwp0EzhFrTTgAB9fXRPdnO7BDPscIKOILJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFET4P6mQe2QNVzBtGFq5wlu7ulHTMB8GA1UdIwQY
MBaAFFK6ttNg6T2Y/OnniI5WS9Rk6J6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJxMjAyRHBQWmo4NmVlSWpsWkwxR1Rvbm9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zZDNiNTYtZTRlMS00YzA3LTk5ZTYt
MmZkZmUzNTA3YTJmLzEvUlBnX3FaQjdaQTFYTUcwWVdybkNXN3U2VWRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zZDNiNTYtZTRlMS00YzA3LTk5ZTYtMmZkZmUzNTA3YTJm
LzEvVXJxMjAyRHBQWmo4NmVlSWpsWkwxR1Rvbm9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwe/nMA0G
CSqGSIb3DQEBCwUAA4IBAQAimSoSATaKmSv36K0XgZKk3PbD0g5r2TMviVbePZ1r
iENq3GPrsRHfVp5dymEkMGij8Vdi27B0XRpFeurH12wibdLrKEdQJkks/9XiyN8F
YrWpMKReIriqYuQ0Af5qHdmEBIqzFdJWc/p4gUhCUGlOBwvSK8AoJjkksV5ZX+w9
rpczXzT2zCDZWJ9zYvZBjgPtOphQeWp1MgQXCJQa1Ao0yVRIUFdk7FwpaaPQewOX
eWHfi5S4kBOlbA1WPlr/rsxMj9K3qOkuFOozwEStogvImUIZD/pnHo1qMja3NlPP
KUx178IBkNMh9nOYUTYoFZIGyfgdTCg8cq7WvoL+eFoF
-----END CERTIFICATE-----
Generated at Sat Jun 22 08:29:10 2024 by rpki-client on console-fra.rpki-client.org