Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/a0xFAGVUICbO7Bu6bpYCzUHOrIU.roa
File: a0xFAGVUICbO7Bu6bpYCzUHOrIU.roa (raw, json)
Hash identifier: NRSHZ0Vvo+f5QmLMqJXnY1r0RADdAeKEIDNvb/lIfB4=
Subject key identifier: 6B:4C:45:00:65:54:20:26:CE:EC:1B:BA:6E:96:02:CD:41:CE:AC:85
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018CC7275C4134534B46212567139B29EE42
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/a0xFAGVUICbO7Bu6bpYCzUHOrIU.roa
Signing time: Mon 01 Jan 2024 22:31:34 +0000
ROA not before: Mon 01 Jan 2024 22:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9009
IP address blocks: 193.106.96.0/23 maxlen: 23
194.242.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5c:41:34:53:4b:46:21:25:67:13:9b:29:ee:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b4c450065542026ceec1bba6e9602cd41ceac85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:5c:a9:9a:cc:ee:87:94:ee:ab:7a:32:15:
32:9a:39:ec:00:54:a3:56:eb:b1:34:14:50:fb:a2:
f0:6f:3b:c1:0c:da:73:0b:41:26:34:04:8e:33:9c:
0d:24:fc:09:48:9c:5c:15:dc:1b:95:11:fd:97:e6:
fd:9d:03:33:7d:88:36:98:ad:ae:f1:18:6c:0b:8b:
ea:2f:ed:1b:b0:f3:f8:56:7c:e3:87:c6:87:8e:54:
9a:22:2c:af:b5:23:3d:a6:7e:c2:07:5e:25:ed:b3:
2d:42:bd:07:4c:86:6f:64:5c:82:fa:77:57:21:c4:
f9:72:62:4a:ec:0b:c3:53:db:50:30:af:b0:a9:f3:
87:d3:8c:41:1c:76:7e:c0:29:83:b9:11:bf:32:95:
b3:ca:f9:4d:39:a9:18:cc:9d:73:44:74:6d:59:5f:
97:b3:ba:9c:6f:00:01:56:d0:35:fb:3b:52:63:d0:
9d:e7:b3:d0:a3:85:09:3d:34:07:7c:0e:6c:43:1d:
5b:b0:e0:4c:5f:39:07:29:1e:6a:bf:c5:c1:68:c5:
56:83:42:51:62:fa:c3:b7:16:21:30:53:1f:14:4a:
e0:94:e4:77:ce:13:0d:bd:c3:fc:92:d2:4a:65:e7:
d6:a6:30:27:72:01:5c:76:a6:e0:8b:90:ac:9d:a1:
36:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4C:45:00:65:54:20:26:CE:EC:1B:BA:6E:96:02:CD:41:CE:AC:85
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/a0xFAGVUICbO7Bu6bpYCzUHOrIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.96.0/23
194.242.26.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:2f:fc:15:66:1e:36:b7:62:f0:78:33:80:0e:d8:4a:5b:a4:
7c:77:0c:54:8f:08:ca:fc:b9:0b:c1:69:1a:f0:93:ea:2d:64:
eb:d6:9c:6a:27:f3:e1:eb:9f:bc:73:be:32:26:c1:e3:07:5c:
e5:cf:59:f0:f7:e8:52:9f:6d:b5:3b:b2:e9:05:e4:38:6b:37:
8c:a4:10:2f:01:12:3d:3a:28:42:e8:f8:c4:24:04:95:36:ef:
2d:b2:98:c7:43:cb:0e:db:c7:7e:5b:03:83:7c:c6:12:cb:47:
90:1b:1c:66:63:22:62:7c:69:ef:c4:57:65:b6:3e:25:46:73:
8c:67:4c:2f:9b:b6:43:42:4f:96:07:e4:8c:9c:9b:a6:55:c0:
76:9e:d0:a0:19:36:4c:59:58:22:f4:ec:07:ae:16:c9:e3:65:
a7:5c:f4:9a:0f:f3:78:7e:05:b9:da:e3:42:c7:16:da:df:1f:
bc:ab:9f:f3:ab:fd:24:2e:55:b7:28:04:e2:fa:21:d3:50:63:
cc:1a:09:5d:aa:74:37:27:5a:e1:aa:2c:c2:75:6b:00:0a:f3:
71:d7:69:a4:be:f5:11:92:d1:90:f3:03:81:a8:78:4f:ed:8d:
09:62:1e:cc:0f:19:6e:01:8e:4c:2f:55:7b:45:38:49:66:c2:
7a:6d:43:23
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHJ1xBNFNLRiElZxObKe5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjQwMTAxMjIzMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YjRjNDUwMDY1NTQyMDI2Y2VlYzFiYmE2ZTk2MDJjZDQxY2VhYzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow9cqZrM7oeU7qt6MhUymjnsAFSj
VuuxNBRQ+6LwbzvBDNpzC0EmNASOM5wNJPwJSJxcFdwblRH9l+b9nQMzfYg2mK2u
8RhsC4vqL+0bsPP4Vnzjh8aHjlSaIiyvtSM9pn7CB14l7bMtQr0HTIZvZFyC+ndX
IcT5cmJK7AvDU9tQMK+wqfOH04xBHHZ+wCmDuRG/MpWzyvlNOakYzJ1zRHRtWV+X
s7qcbwABVtA1+ztSY9Cd57PQo4UJPTQHfA5sQx1bsOBMXzkHKR5qv8XBaMVWg0JR
YvrDtxYhMFMfFErglOR3zhMNvcP8ktJKZefWpjAncgFcdqbgi5CsnaE2cwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGtMRQBlVCAmzuwbum6WAs1BzqyFMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvYTB4RkFHVlVJQ2JPN0J1NmJwWUN6VUhPcklVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwWpgAwQB
wvIaMA0GCSqGSIb3DQEBCwUAA4IBAQA7L/wVZh42t2LweDOADthKW6R8dwxUjwjK
/LkLwWka8JPqLWTr1pxqJ/Ph65+8c74yJsHjB1zlz1nw9+hSn221O7LpBeQ4azeM
pBAvARI9OihC6PjEJASVNu8tspjHQ8sO28d+WwODfMYSy0eQGxxmYyJifGnvxFdl
tj4lRnOMZ0wvm7ZDQk+WB+SMnJumVcB2ntCgGTZMWVgi9OwHrhbJ42WnXPSaD/N4
fgW52uNCxxba3x+8q5/zq/0kLlW3KATi+iHTUGPMGgldqnQ3J1rhqizCdWsACvNx
12mkvvURktGQ8wOBqHhP7Y0JYh7MDxluAY5ML1V7RThJZsJ6bUMj
-----END CERTIFICATE-----
Generated at Sat Apr 27 16:41:18 2024 by rpki-client on console-ams.rpki-client.org