Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/oQaYVRDOq1N8hIQpRfDvlyhqnkg.roa
File: oQaYVRDOq1N8hIQpRfDvlyhqnkg.roa (raw, json)
Hash identifier: FVWDDf09insCdZQ/CDGyPOkPc/wkhppWOkpIFaWU5IM=
Subject key identifier: A1:06:98:55:10:CE:AB:53:7C:84:84:29:45:F0:EF:97:28:6A:9E:48
Certificate issuer: /CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Certificate serial: 018CC7951EFEC6E2F315B8FD2B17D6C41E71
Authority key identifier: 96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/oQaYVRDOq1N8hIQpRfDvlyhqnkg.roa
Signing time: Tue 02 Jan 2024 00:31:27 +0000
ROA not before: Tue 02 Jan 2024 00:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202498
IP address blocks: 193.143.64.0/24 maxlen: 24
193.143.65.0/24 maxlen: 24
193.143.66.0/24 maxlen: 24
193.143.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:1e:fe:c6:e2:f3:15:b8:fd:2b:17:d6:c4:1e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96ff45e6de48bfc0397dacad83a84831db7952d1
Validity
Not Before: Jan 2 00:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a106985510ceab537c84842945f0ef97286a9e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a4:e5:37:d1:8c:c5:34:17:3a:0b:e0:a1:ef:
bb:22:93:dc:62:4d:9b:29:cc:38:0c:df:48:87:e6:
00:af:08:5d:0c:23:9b:c5:6e:df:04:0a:0a:02:05:
f9:07:b6:87:35:5d:03:f9:c9:ee:d0:d6:1e:cb:7f:
a5:88:6b:3f:3e:83:fb:6e:43:d8:ea:08:28:c5:01:
e4:33:b0:68:b7:0e:c4:14:05:1a:a6:b3:dc:cc:93:
45:72:cd:25:85:0b:c8:74:84:fe:0c:cd:fe:fa:91:
76:e1:c1:d1:79:2f:59:9c:39:c3:24:14:36:b1:5d:
36:56:89:1a:e1:13:f7:90:97:26:71:80:65:77:da:
b0:6c:e0:d8:a3:25:d4:75:c4:61:6b:71:14:9d:fc:
2a:f2:96:53:d9:ec:e6:5c:64:00:8e:58:6c:3e:a8:
0d:f6:45:f5:60:0f:72:70:4f:03:89:1e:4e:a5:ac:
8f:7f:a4:1d:6f:2f:ef:1c:0a:98:0e:2a:c3:9d:78:
4a:35:7c:28:0e:9e:02:1a:26:33:b5:04:cd:8f:d1:
26:be:74:3d:24:b4:83:e6:fd:44:eb:38:69:11:cb:
0f:8f:01:fe:be:2b:71:d5:df:3a:71:ae:f5:1b:31:
61:68:e4:8c:4a:d5:43:f0:03:37:e4:34:81:96:0b:
c5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:06:98:55:10:CE:AB:53:7C:84:84:29:45:F0:EF:97:28:6A:9E:48
X509v3 Authority Key Identifier:
keyid:96:FF:45:E6:DE:48:BF:C0:39:7D:AC:AD:83:A8:48:31:DB:79:52:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lv9F5t5Iv8A5faytg6hIMdt5UtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/oQaYVRDOq1N8hIQpRfDvlyhqnkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6c7b28-f2ce-445f-8f90-0f5d3797a325/1/lv9F5t5Iv8A5faytg6hIMdt5UtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:d3:27:bb:25:ed:f2:75:62:34:2d:3f:95:98:c5:1c:a7:94:
73:c4:29:d7:3e:cb:cb:18:f8:4d:3c:b8:c0:d2:bc:fe:bc:0d:
70:67:9e:26:b1:81:a0:06:d9:11:35:38:75:fc:52:fa:60:e6:
99:dc:63:fd:58:a8:44:40:8b:40:e1:8d:49:7f:ce:52:6e:2a:
dd:a3:c3:7f:de:9e:f1:c8:d2:6d:9f:ae:5f:e7:c9:8c:c9:33:
42:18:58:08:e9:94:96:37:01:e5:81:58:8c:ff:1a:77:57:ec:
31:12:10:a2:65:f1:a5:27:87:89:e9:b8:db:bf:f0:13:2c:c3:
ed:8d:a5:cf:1a:dd:47:6d:f9:b3:df:f9:87:2b:83:9d:41:af:
c4:4b:6e:d9:fb:cb:0d:3c:84:72:54:dd:36:13:ce:c6:91:03:
45:ad:68:37:41:8f:1f:51:6c:1a:ba:ce:10:66:94:e5:47:e3:
80:5b:be:d4:6c:9b:30:3f:99:ef:e8:47:17:eb:89:fe:c9:07:
26:1f:0e:a8:c6:6e:e4:62:14:27:dc:b7:b7:b4:d1:15:4e:d4:
65:20:4e:c2:64:ea:a6:67:f7:4a:cb:dc:33:82:34:15:58:d8:
41:5c:cb:a1:e0:89:8e:53:b0:01:f4:e1:7c:f4:23:56:c7:a7:
a7:74:33:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlR7+xuLzFbj9KxfWxB5xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZmY0NWU2ZGU0OGJmYzAzOTdkYWNhZDgzYTg0ODMxZGI3
OTUyZDEwHhcNMjQwMTAyMDAzMTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTA2OTg1NTEwY2VhYjUzN2M4NDg0Mjk0NWYwZWY5NzI4NmE5ZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqTlN9GMxTQXOgvgoe+7IpPcYk2b
Kcw4DN9Ih+YArwhdDCObxW7fBAoKAgX5B7aHNV0D+cnu0NYey3+liGs/PoP7bkPY
6ggoxQHkM7Botw7EFAUaprPczJNFcs0lhQvIdIT+DM3++pF24cHReS9ZnDnDJBQ2
sV02Voka4RP3kJcmcYBld9qwbODYoyXUdcRha3EUnfwq8pZT2ezmXGQAjlhsPqgN
9kX1YA9ycE8DiR5OpayPf6Qdby/vHAqYDirDnXhKNXwoDp4CGiYztQTNj9EmvnQ9
JLSD5v1E6zhpEcsPjwH+vitx1d86ca71GzFhaOSMStVD8AM35DSBlgvF8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKEGmFUQzqtTfISEKUXw75coap5IMB8GA1UdIwQY
MBaAFJb/RebeSL/AOX2srYOoSDHbeVLRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAt
MGY1ZDM3OTdhMzI1LzEvb1FhWVZSRE9xMU44aElRcFJmRHZseWhxbmtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82YzdiMjgtZjJjZS00NDVmLThmOTAtMGY1ZDM3OTdhMzI1
LzEvbHY5RjV0NUl2OEE1ZmF5dGc2aElNZHQ1VXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwY9AMA0G
CSqGSIb3DQEBCwUAA4IBAQCw0ye7Je3ydWI0LT+VmMUcp5RzxCnXPsvLGPhNPLjA
0rz+vA1wZ54msYGgBtkRNTh1/FL6YOaZ3GP9WKhEQItA4Y1Jf85Sbirdo8N/3p7x
yNJtn65f58mMyTNCGFgI6ZSWNwHlgViM/xp3V+wxEhCiZfGlJ4eJ6bjbv/ATLMPt
jaXPGt1Hbfmz3/mHK4OdQa/ES27Z+8sNPIRyVN02E87GkQNFrWg3QY8fUWwaus4Q
ZpTlR+OAW77UbJswP5nv6EcX64n+yQcmHw6oxm7kYhQn3Le3tNEVTtRlIE7CZOqm
Z/dKy9wzgjQVWNhBXMuh4ImOU7AB9OF89CNWx6endDMv
-----END CERTIFICATE-----
Generated at Fri Jun 21 04:27:40 2024 by rpki-client on console-ams.rpki-client.org