Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RPVtdMAfGggOjXk98epJ88EJ7S8.roa
File: RPVtdMAfGggOjXk98epJ88EJ7S8.roa (raw, json)
Hash identifier: dqG99wZ+TTU7uWQr9TRWhJzKYnShz2FPSAhfmJ+NpfE=
Subject key identifier: 44:F5:6D:74:C0:1F:1A:08:0E:8D:79:3D:F1:EA:49:F3:C1:09:ED:2F
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 01902C970AD5B61F5C484DFF7ACFE85F3F8A
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RPVtdMAfGggOjXk98epJ88EJ7S8.roa
Signing time: Tue 18 Jun 2024 18:23:34 +0000
ROA not before: Tue 18 Jun 2024 18:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214678
IP address blocks: 193.160.208.0/24 maxlen: 24
193.160.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2c:97:0a:d5:b6:1f:5c:48:4d:ff:7a:cf:e8:5f:3f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jun 18 18:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=44f56d74c01f1a080e8d793df1ea49f3c109ed2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7e:de:dd:aa:a0:a0:46:8b:8d:fc:f5:61:ae:
b0:2a:58:38:c5:62:d5:43:4b:b1:78:e7:5b:6c:71:
2d:80:c1:8f:51:d3:ea:71:14:2e:43:df:2e:67:8e:
3b:e8:66:6c:21:5d:8b:01:b1:11:45:78:20:2e:d1:
27:b2:2b:19:77:56:9b:d1:b0:01:3b:22:7a:a9:f8:
2c:f8:31:68:c3:d9:6b:ed:b5:8e:a0:1c:d1:b1:09:
68:43:dc:af:4e:79:97:12:88:f9:1e:8b:5f:26:86:
1b:24:e9:ff:ad:3a:72:77:fe:2d:7b:cb:07:12:ab:
d0:23:35:01:5f:49:48:44:43:53:f1:c8:d8:a5:f2:
ff:71:57:20:fb:13:96:b2:1d:14:0a:a0:6e:bc:91:
be:fe:f5:cb:f9:36:38:2b:d9:85:01:9b:cb:15:87:
d8:9d:c6:7b:20:41:8c:35:72:e1:3a:6d:9f:14:32:
b5:33:ad:aa:83:3d:cf:d5:39:6d:c0:0a:7a:b7:ae:
8f:01:94:48:ad:0b:a6:1e:83:4e:64:d4:51:c2:85:
7c:66:7e:8a:e2:24:e0:5e:f9:6f:3d:27:d0:a0:72:
60:33:e7:36:85:3a:4b:a8:d8:31:0d:04:69:2b:5f:
f5:bf:e3:aa:eb:64:ac:ac:e3:e4:4f:55:ae:1a:1a:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F5:6D:74:C0:1F:1A:08:0E:8D:79:3D:F1:EA:49:F3:C1:09:ED:2F
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/RPVtdMAfGggOjXk98epJ88EJ7S8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.208.0/23
Signature Algorithm: sha256WithRSAEncryption
81:24:8d:91:6e:04:37:bd:25:ad:71:72:85:b8:6e:69:12:ba:
ba:bb:5a:ab:ee:ed:c3:d5:c1:71:c0:fd:f8:e9:eb:6f:a1:df:
1c:22:5e:98:84:ce:66:ed:cb:71:cc:de:e5:1e:6e:b9:66:e3:
c9:55:72:c2:9a:30:20:fc:7c:2b:a6:7f:3c:76:6d:ab:ea:81:
94:3f:ac:2c:f8:ea:12:19:52:9b:65:6b:bc:84:36:b7:5d:b9:
f0:cf:84:06:70:d8:8e:fa:5c:c5:81:79:3b:d7:53:7f:18:f9:
1a:2c:7a:67:03:0a:c0:8f:e1:42:4c:38:cb:5f:5e:62:92:f3:
d1:41:3f:5c:b2:0b:73:45:83:3a:79:e5:43:89:65:8b:e0:7f:
2d:d0:02:1a:7c:64:af:71:bd:61:34:05:16:78:44:03:88:75:
ad:b2:63:98:a6:6d:82:5d:4b:50:65:f5:ef:7d:72:ef:4d:87:
3d:e6:a5:c9:25:02:2a:9a:26:4b:28:a9:33:fc:c2:7d:b0:50:
9a:99:20:f5:bc:de:4f:b1:ad:da:7c:15:22:a6:74:e9:ee:a6:
02:93:39:e5:24:ff:7b:d0:b5:a2:79:59:a1:2b:a5:1b:c0:5f:
c9:f1:5a:d3:fa:e6:ae:bf:7c:32:7b:f5:1e:1f:ce:39:85:26:
54:48:2f:1c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZAslwrVth9cSE3/es/oXz+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlYmJmMzE3ZTVmYWY1ZWYwMmM5Y2NlNzk1MjdkNWU3NGI4
YWJjYzUwHhcNMjQwNjE4MTgyMzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGY1NmQ3NGMwMWYxYTA4MGU4ZDc5M2RmMWVhNDlmM2MxMDllZDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk37e3aqgoEaLjfz1Ya6wKlg4xWLV
Q0uxeOdbbHEtgMGPUdPqcRQuQ98uZ4476GZsIV2LAbERRXggLtEnsisZd1ab0bAB
OyJ6qfgs+DFow9lr7bWOoBzRsQloQ9yvTnmXEoj5HotfJoYbJOn/rTpyd/4te8sH
EqvQIzUBX0lIRENT8cjYpfL/cVcg+xOWsh0UCqBuvJG+/vXL+TY4K9mFAZvLFYfY
ncZ7IEGMNXLhOm2fFDK1M62qgz3P1TltwAp6t66PAZRIrQumHoNOZNRRwoV8Zn6K
4iTgXvlvPSfQoHJgM+c2hTpLqNgxDQRpK1/1v+Oq62SsrOPkT1WuGhpLOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFET1bXTAHxoIDo15PfHqSfPBCe0vMB8GA1UdIwQY
MBaAFO678xfl+vXvAsnM55Un1edLirzFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMt
NmZlOWJmNjA1NjFjLzEvUlBWdGRNQWZHZ2dPalhrOThlcEo4OEVKN1M4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi82ZGVjNjMtYjlkOS00ODBiLWFlYjMtNmZlOWJmNjA1NjFj
LzEvN3J2ekYtWDY5ZThDeWN6bmxTZlY1MHVLdk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwaDQMA0G
CSqGSIb3DQEBCwUAA4IBAQCBJI2RbgQ3vSWtcXKFuG5pErq6u1qr7u3D1cFxwP34
6etvod8cIl6YhM5m7ctxzN7lHm65ZuPJVXLCmjAg/Hwrpn88dm2r6oGUP6ws+OoS
GVKbZWu8hDa3Xbnwz4QGcNiO+lzFgXk711N/GPkaLHpnAwrAj+FCTDjLX15ikvPR
QT9csgtzRYM6eeVDiWWL4H8t0AIafGSvcb1hNAUWeEQDiHWtsmOYpm2CXUtQZfXv
fXLvTYc95qXJJQIqmiZLKKkz/MJ9sFCamSD1vN5Psa3afBUipnTp7qYCkznlJP97
0LWieVmhK6UbwF/J8VrT+uauv3wye/UeH845hSZUSC8c
-----END CERTIFICATE-----
Generated at Tue Jul 2 12:48:09 2024 by rpki-client on console-ams.rpki-client.org