Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/DiLJov9hsWa4TEeobuTglGBfAiM.roa
File: DiLJov9hsWa4TEeobuTglGBfAiM.roa (raw, json)
Hash identifier: ckThlGhxICRp0ht6FI1TQsaq1QLjFuoAZoHr5c55tA0=
Subject key identifier: 0E:22:C9:A2:FF:61:B1:66:B8:4C:47:A8:6E:E4:E0:94:60:5F:02:23
Certificate issuer: /CN=d50628b01ea4477183cbff92db7a0c58145195a4
Certificate serial: 0190115E4BBF5AFEB8A6554B94F626070D77
Authority key identifier: D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/DiLJov9hsWa4TEeobuTglGBfAiM.roa
Signing time: Thu 13 Jun 2024 11:31:50 +0000
ROA not before: Thu 13 Jun 2024 11:31:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202050
IP address blocks: 193.200.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:11:5e:4b:bf:5a:fe:b8:a6:55:4b:94:f6:26:07:0d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d50628b01ea4477183cbff92db7a0c58145195a4
Validity
Not Before: Jun 13 11:31:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e22c9a2ff61b166b84c47a86ee4e094605f0223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:44:1f:43:9e:77:c2:e1:7b:8a:fd:fb:e2:4b:
e5:62:84:31:36:3b:56:4c:cc:74:53:28:65:58:e2:
4b:16:b2:51:3b:4c:05:0c:e0:8f:a8:c4:e4:ad:5e:
2b:fb:65:2d:3d:2a:7a:8a:ba:52:c6:6f:ba:8d:60:
14:33:ff:cc:13:57:3f:b7:84:c9:2c:9b:a2:27:5d:
3d:c6:fb:ef:b8:eb:cc:d6:8c:06:2b:0b:d7:6d:cd:
3c:2a:a3:bc:97:bf:cf:ab:3c:92:78:88:f5:26:72:
9f:5d:0e:8e:91:7e:93:f1:54:40:31:2b:b7:30:87:
87:64:37:6d:25:5f:67:f9:25:8a:7b:59:b3:17:03:
83:be:c4:33:16:38:19:55:80:6a:2b:12:46:94:24:
e6:e0:a4:f8:fc:85:40:8c:be:e3:4d:7b:16:0b:2c:
86:4e:d4:36:22:7a:de:a3:84:55:d5:08:f4:5a:49:
ec:9a:97:42:ea:9c:5e:1e:a8:08:54:60:b0:0c:38:
a4:52:a2:44:cd:42:a6:1a:7d:54:33:6e:43:d9:3e:
a2:1d:98:5c:39:b4:c6:56:03:39:bc:c6:6b:68:b0:
ac:9c:28:81:17:81:58:a4:69:0b:18:93:e6:23:25:
32:a9:0a:05:a4:0b:f9:89:6a:84:b2:91:97:42:91:
53:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:22:C9:A2:FF:61:B1:66:B8:4C:47:A8:6E:E4:E0:94:60:5F:02:23
X509v3 Authority Key Identifier:
keyid:D5:06:28:B0:1E:A4:47:71:83:CB:FF:92:DB:7A:0C:58:14:51:95:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QYosB6kR3GDy_-S23oMWBRRlaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/DiLJov9hsWa4TEeobuTglGBfAiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/a8096c-9527-49cc-94cd-83e4bae3755b/1/1QYosB6kR3GDy_-S23oMWBRRlaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.146.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:a3:20:2a:59:48:35:45:71:1f:1c:d1:b5:4f:48:f9:65:d5:
b0:24:da:2b:d3:23:21:77:73:91:f2:77:27:f6:8b:42:21:26:
3a:ea:ff:be:7d:54:1b:9b:e6:b7:93:ac:32:45:3c:fb:97:a0:
bc:e6:59:6c:e4:3d:4e:df:2b:28:6e:13:1d:ab:8d:af:ed:b0:
3b:61:21:c6:08:a1:9a:45:01:15:3e:8f:15:27:d3:5c:8a:b5:
aa:e5:de:85:6a:80:38:7b:26:22:2c:5b:ea:78:43:9a:aa:11:
71:23:0b:b3:af:d5:5f:3d:a7:05:c5:b8:16:25:2f:f5:ab:82:
ad:4f:85:66:dd:f3:33:7b:05:08:2a:75:c0:63:0b:64:d2:16:
e2:d2:46:94:b3:f1:b2:f7:47:17:da:dc:fc:8d:c2:f9:18:23:
4f:21:8f:cf:87:58:b5:f9:f3:bb:28:ff:97:19:fb:43:ea:5e:
02:78:e0:cc:b7:d6:85:8a:de:8f:f1:93:e6:c2:d6:c1:8b:88:
91:56:86:22:26:54:f4:eb:5f:88:41:a3:7b:af:4e:82:43:cf:
b6:65:03:9c:03:ce:a9:e5:b4:64:2c:59:61:8b:17:7e:37:9f:
0f:43:4e:60:c4:61:53:53:95:f1:ef:be:01:2a:94:07:c8:7d:
21:61:ab:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZARXku/Wv64plVLlPYmBw13MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MDYyOGIwMWVhNDQ3NzE4M2NiZmY5MmRiN2EwYzU4MTQ1
MTk1YTQwHhcNMjQwNjEzMTEzMTUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTIyYzlhMmZmNjFiMTY2Yjg0YzQ3YTg2ZWU0ZTA5NDYwNWYwMjIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0QfQ553wuF7iv374kvlYoQxNjtW
TMx0UyhlWOJLFrJRO0wFDOCPqMTkrV4r+2UtPSp6irpSxm+6jWAUM//ME1c/t4TJ
LJuiJ109xvvvuOvM1owGKwvXbc08KqO8l7/PqzySeIj1JnKfXQ6OkX6T8VRAMSu3
MIeHZDdtJV9n+SWKe1mzFwODvsQzFjgZVYBqKxJGlCTm4KT4/IVAjL7jTXsWCyyG
TtQ2Inreo4RV1Qj0WknsmpdC6pxeHqgIVGCwDDikUqJEzUKmGn1UM25D2T6iHZhc
ObTGVgM5vMZraLCsnCiBF4FYpGkLGJPmIyUyqQoFpAv5iWqEspGXQpFThwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA4iyaL/YbFmuExHqG7k4JRgXwIjMB8GA1UdIwQY
MBaAFNUGKLAepEdxg8v/ktt6DFgUUZWkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2Qt
ODNlNGJhZTM3NTViLzEvRGlMSm92OWhzV2E0VEVlb2J1VGdsR0JmQWlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9hODA5NmMtOTUyNy00OWNjLTk0Y2QtODNlNGJhZTM3NTVi
LzEvMVFZb3NCNmtSM0dEeV8tUzIzb01XQlJSbGFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwciSMA0G
CSqGSIb3DQEBCwUAA4IBAQCloyAqWUg1RXEfHNG1T0j5ZdWwJNor0yMhd3OR8ncn
9otCISY66v++fVQbm+a3k6wyRTz7l6C85lls5D1O3ysobhMdq42v7bA7YSHGCKGa
RQEVPo8VJ9NcirWq5d6FaoA4eyYiLFvqeEOaqhFxIwuzr9VfPacFxbgWJS/1q4Kt
T4Vm3fMzewUIKnXAYwtk0hbi0kaUs/Gy90cX2tz8jcL5GCNPIY/Ph1i1+fO7KP+X
GftD6l4CeODMt9aFit6P8ZPmwtbBi4iRVoYiJlT061+IQaN7r06CQ8+2ZQOcA86p
5bRkLFlhixd+N58PQ05gxGFTU5Xx774BKpQHyH0hYava
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:54:18 2024 by rpki-client on console-ams.rpki-client.org