Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/j5pHZJDILAzvxnw217vMUvD8Ubk.roa
File: j5pHZJDILAzvxnw217vMUvD8Ubk.roa (raw, json)
Hash identifier: 17ZHEbzWuKc4HADtRyJNYCwNXyuaaUxAm031hLHyjpU=
Subject key identifier: 8F:9A:47:64:90:C8:2C:0C:EF:C6:7C:36:D7:BB:CC:52:F0:FC:51:B9
Certificate issuer: /CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Certificate serial: 018E7B2D8721F5706C94E2E20F29E2AFD3F9
Authority key identifier: 07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/j5pHZJDILAzvxnw217vMUvD8Ubk.roa
Signing time: Tue 26 Mar 2024 14:32:45 +0000
ROA not before: Tue 26 Mar 2024 14:32:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215229
IP address blocks: 193.192.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7b:2d:87:21:f5:70:6c:94:e2:e2:0f:29:e2:af:d3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0729e0459aa8ea1fdb160e40247fe1d760ae7c0d
Validity
Not Before: Mar 26 14:32:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f9a476490c82c0cefc67c36d7bbcc52f0fc51b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:55:15:58:5e:a6:6f:3b:7f:e4:ae:3f:32:d2:
0a:76:ef:25:21:00:9a:f8:d0:27:e0:30:e6:c2:6d:
4f:c2:3f:17:a7:92:98:16:45:26:73:df:ee:40:cf:
31:5b:78:ed:1d:3b:5e:f4:e3:7b:57:10:bb:34:01:
fc:02:8b:49:7b:70:2c:e9:87:b0:e8:4c:11:f9:48:
7b:38:b4:39:10:59:3a:29:6c:38:6b:8f:f2:9a:87:
58:c4:a9:e4:4b:7d:03:2a:03:2f:2e:93:3d:56:4d:
13:3b:8b:96:34:5f:b8:e6:bb:8d:75:0c:19:2a:05:
98:70:ed:c4:3d:9e:aa:a2:13:20:1f:7a:98:ff:4a:
24:28:06:e2:03:19:31:4d:0e:f7:af:70:bb:27:e4:
f2:d4:ad:33:34:4b:c3:5f:cd:2b:7c:c6:e4:11:7a:
0e:e6:56:c5:94:88:99:13:c1:b7:e0:7b:67:41:53:
61:aa:78:bd:20:9a:5b:1f:ec:98:80:68:26:b3:20:
96:91:20:fb:82:f8:bf:67:c9:ca:1d:5b:da:20:19:
82:a2:d5:75:0c:8a:be:2a:3f:d1:e2:85:8b:99:c7:
da:88:13:83:b4:64:16:66:2d:97:3c:d3:be:da:4d:
41:3d:92:f7:f9:8d:50:27:84:7d:f7:e2:28:c0:e3:
39:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9A:47:64:90:C8:2C:0C:EF:C6:7C:36:D7:BB:CC:52:F0:FC:51:B9
X509v3 Authority Key Identifier:
keyid:07:29:E0:45:9A:A8:EA:1F:DB:16:0E:40:24:7F:E1:D7:60:AE:7C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByngRZqo6h_bFg5AJH_h12CufA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/j5pHZJDILAzvxnw217vMUvD8Ubk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8c5d98-0e3b-4d9b-aaaa-64edd27c5d7a/1/ByngRZqo6h_bFg5AJH_h12CufA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.44.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:c6:00:2e:fc:92:7c:83:3c:93:0a:42:34:44:38:f7:6b:d7:
71:b0:f6:1b:c1:60:ad:ac:59:3d:79:0a:3e:ec:e0:a0:bc:71:
97:a3:4e:b8:1d:ef:c3:47:36:80:e6:07:21:c3:b1:48:f0:c8:
0e:89:78:9b:50:6e:6e:1b:8d:9b:32:a3:5c:6f:17:44:d8:a1:
73:16:b9:76:cb:9c:b8:87:e6:91:c9:54:fe:83:5b:ec:d2:c0:
72:9b:19:31:ce:2f:0a:10:72:e1:be:8c:2c:6c:ce:30:dd:74:
b9:6b:aa:ad:df:01:04:2b:6d:67:1a:d0:b2:09:5b:d3:3f:c2:
96:fe:69:4e:85:37:0f:46:12:e3:3b:cd:fa:10:a9:aa:7e:b2:
44:0d:ad:f5:4f:0e:a5:e6:cf:fc:12:2e:db:40:2a:65:2d:3d:
37:03:c5:dd:f1:bf:23:e2:46:34:e7:92:10:4b:b8:d9:b7:36:
3c:41:0f:95:34:98:13:00:13:a9:54:d8:06:58:ab:a8:8e:15:
4c:31:f6:1c:36:cf:4e:76:19:46:89:6d:2e:fc:0b:e5:77:ce:
1b:1e:78:2b:a5:05:61:f3:8a:55:95:eb:ed:b2:22:3f:f0:ca:
c7:52:15:fc:66:e8:07:c3:6e:f6:f5:d1:cb:cb:29:72:bb:0b:
fc:60:4c:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY57LYch9XBslOLiDynir9P5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjllMDQ1OWFhOGVhMWZkYjE2MGU0MDI0N2ZlMWQ3NjBh
ZTdjMGQwHhcNMjQwMzI2MTQzMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjlhNDc2NDkwYzgyYzBjZWZjNjdjMzZkN2JiY2M1MmYwZmM1MWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVUVWF6mbzt/5K4/MtIKdu8lIQCa
+NAn4DDmwm1Pwj8Xp5KYFkUmc9/uQM8xW3jtHTte9ON7VxC7NAH8AotJe3As6Yew
6EwR+Uh7OLQ5EFk6KWw4a4/ymodYxKnkS30DKgMvLpM9Vk0TO4uWNF+45ruNdQwZ
KgWYcO3EPZ6qohMgH3qY/0okKAbiAxkxTQ73r3C7J+Ty1K0zNEvDX80rfMbkEXoO
5lbFlIiZE8G34HtnQVNhqni9IJpbH+yYgGgmsyCWkSD7gvi/Z8nKHVvaIBmCotV1
DIq+Kj/R4oWLmcfaiBODtGQWZi2XPNO+2k1BPZL3+Y1QJ4R99+IowOM5jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+aR2SQyCwM78Z8Nte7zFLw/FG5MB8GA1UdIwQY
MBaAFAcp4EWaqOof2xYOQCR/4ddgrnwNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC84YzVkOTgtMGUzYi00ZDliLWFhYWEt
NjRlZGQyN2M1ZDdhLzEvajVwSFpKRElMQXp2eG53MjE3dk1VdkQ4VWJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC84YzVkOTgtMGUzYi00ZDliLWFhYWEtNjRlZGQyN2M1ZDdh
LzEvQnluZ1JacW82aF9iRmc1QUpIX2gxMkN1ZkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcAsMA0G
CSqGSIb3DQEBCwUAA4IBAQB+xgAu/JJ8gzyTCkI0RDj3a9dxsPYbwWCtrFk9eQo+
7OCgvHGXo064He/DRzaA5gchw7FI8MgOiXibUG5uG42bMqNcbxdE2KFzFrl2y5y4
h+aRyVT+g1vs0sBymxkxzi8KEHLhvowsbM4w3XS5a6qt3wEEK21nGtCyCVvTP8KW
/mlOhTcPRhLjO836EKmqfrJEDa31Tw6l5s/8Ei7bQCplLT03A8Xd8b8j4kY055IQ
S7jZtzY8QQ+VNJgTABOpVNgGWKuojhVMMfYcNs9OdhlGiW0u/Avld84bHngrpQVh
84pVlevtsiI/8MrHUhX8ZugHw2729dHLyylyuwv8YEwn
-----END CERTIFICATE-----
Generated at Mon Jun 24 09:15:38 2024 by rpki-client on console-ams.rpki-client.org