Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/s6dHanl8EvCKPbTTAICsR9594j4.roa
File: s6dHanl8EvCKPbTTAICsR9594j4.roa (raw, json)
Hash identifier: 7OYtMWhRS1C0kX7vyZojGykaBd9bKZUuzMs5Iiv8O/8=
Subject key identifier: B3:A7:47:6A:79:7C:12:F0:8A:3D:B4:D3:00:80:AC:47:DE:7D:E2:3E
Certificate issuer: /CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Certificate serial: 018CC425637498D83E20A81ED57C191683FF
Authority key identifier: 74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/s6dHanl8EvCKPbTTAICsR9594j4.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12315
IP address blocks: 193.176.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 04:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:63:74:98:d8:3e:20:a8:1e:d5:7c:19:16:83:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74c7f8e91b81fe6487307c5226eb044f92396cea
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3a7476a797c12f08a3db4d30080ac47de7de23e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:58:e5:fb:2e:36:e2:66:88:69:64:b1:42:37:
0e:4d:92:e9:d7:4d:c0:7d:91:df:63:d7:cb:56:d7:
69:b9:bf:81:b0:e5:df:af:15:ef:71:09:ae:98:cd:
6e:52:f9:13:1c:0d:aa:3a:a4:d7:da:19:68:59:09:
91:0f:b6:26:d5:87:05:82:39:7f:13:e4:8a:73:19:
06:3b:93:ff:d3:60:72:e9:4c:72:39:75:4c:da:9c:
eb:23:55:e3:cf:9e:65:e5:f9:b2:ce:90:82:10:27:
62:3f:ef:0e:dd:50:1e:7b:ae:c5:a4:d9:40:df:ea:
35:81:cc:c3:90:27:6f:18:f8:8c:5c:28:fc:44:f4:
5c:71:e8:6d:bb:a6:29:e0:03:72:08:11:6d:62:97:
2a:92:b4:fc:d5:21:63:8a:50:e4:4f:14:39:23:18:
32:f8:52:20:00:40:61:b3:71:28:24:ad:d5:ee:9b:
57:b3:a1:c9:7f:a9:d2:5f:f9:27:fb:1b:a8:21:76:
36:36:cb:fd:fd:20:36:3e:d2:be:f2:6c:d2:5e:b4:
d7:27:e7:5a:87:7c:3c:15:22:93:a9:c3:2d:4d:e6:
93:85:ec:21:a1:38:ba:69:f8:b7:3c:22:a7:1f:4e:
be:19:10:d0:d2:19:e4:bc:21:b4:e8:ae:a3:c7:ee:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:A7:47:6A:79:7C:12:F0:8A:3D:B4:D3:00:80:AC:47:DE:7D:E2:3E
X509v3 Authority Key Identifier:
keyid:74:C7:F8:E9:1B:81:FE:64:87:30:7C:52:26:EB:04:4F:92:39:6C:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dMf46RuB_mSHMHxSJusET5I5bOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/s6dHanl8EvCKPbTTAICsR9594j4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9c6ac-f9a2-4462-8aaa-8b64f7c3a76e/1/dMf46RuB_mSHMHxSJusET5I5bOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.136.0/21
Signature Algorithm: sha256WithRSAEncryption
ad:c3:0b:ae:aa:ff:1f:03:2c:eb:03:59:20:0b:ab:df:c4:64:
4c:d8:ab:80:d9:19:f1:94:06:c7:40:a2:e1:7d:44:4b:b7:07:
22:57:db:80:78:a3:56:4a:dc:f0:7c:9d:09:73:32:bf:ea:e9:
47:04:84:87:2d:d6:6c:ce:47:cd:a6:6a:87:9a:95:62:b0:22:
85:d0:8a:50:9a:0b:19:e7:e2:75:6a:a0:14:bb:4a:94:a0:b5:
dd:33:f7:9c:3c:07:16:ab:d9:11:82:37:57:94:1f:71:a7:cb:
a4:51:75:fe:a5:47:ba:24:94:d8:93:43:e9:14:b1:1b:4e:39:
95:3d:4e:bf:5a:1a:89:28:0c:54:34:a2:c2:39:2c:14:c4:4f:
5b:15:6b:de:6d:82:70:e4:01:7a:b5:c3:f4:b1:de:71:2a:1e:
6b:e7:9b:f1:88:a9:4c:17:1c:10:48:17:e0:1b:36:5a:63:2f:
6e:16:32:6b:d5:e7:3a:d3:4e:f2:56:32:51:60:09:5e:af:74:
18:ae:21:30:d9:c4:fe:84:c1:c4:fc:4a:5a:53:c7:e1:55:dd:
4e:a1:84:b4:6e:f1:04:c9:32:27:d7:9a:44:47:00:31:2b:0c:
b5:d4:e4:a1:e6:c4:80:6e:a0:2c:8e:3c:00:2e:40:84:a5:a4:
11:62:f2:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJWN0mNg+IKge1XwZFoP/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YzdmOGU5MWI4MWZlNjQ4NzMwN2M1MjI2ZWIwNDRmOTIz
OTZjZWEwHhcNMjQwMTAxMDgzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiM2E3NDc2YTc5N2MxMmYwOGEzZGI0ZDMwMDgwYWM0N2RlN2RlMjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1jl+y424maIaWSxQjcOTZLp103A
fZHfY9fLVtdpub+BsOXfrxXvcQmumM1uUvkTHA2qOqTX2hloWQmRD7Ym1YcFgjl/
E+SKcxkGO5P/02By6UxyOXVM2pzrI1Xjz55l5fmyzpCCECdiP+8O3VAee67FpNlA
3+o1gczDkCdvGPiMXCj8RPRccehtu6Yp4ANyCBFtYpcqkrT81SFjilDkTxQ5Ixgy
+FIgAEBhs3EoJK3V7ptXs6HJf6nSX/kn+xuoIXY2Nsv9/SA2PtK+8mzSXrTXJ+da
h3w8FSKTqcMtTeaThewhoTi6afi3PCKnH06+GRDQ0hnkvCG06K6jx+6XQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLOnR2p5fBLwij200wCArEfefeI+MB8GA1UdIwQY
MBaAFHTH+Okbgf5khzB8UibrBE+SOWzqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9hOWM2YWMtZjlhMi00NDYyLThhYWEt
OGI2NGY3YzNhNzZlLzEvczZkSGFubDhFdkNLUGJUVEFJQ3NSOTU5NGo0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9hOWM2YWMtZjlhMi00NDYyLThhYWEtOGI2NGY3YzNhNzZl
LzEvZE1mNDZSdUJfbVNITUh4U0p1c0VUNUk1Yk9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwbCIMA0G
CSqGSIb3DQEBCwUAA4IBAQCtwwuuqv8fAyzrA1kgC6vfxGRM2KuA2RnxlAbHQKLh
fURLtwciV9uAeKNWStzwfJ0JczK/6ulHBISHLdZszkfNpmqHmpVisCKF0IpQmgsZ
5+J1aqAUu0qUoLXdM/ecPAcWq9kRgjdXlB9xp8ukUXX+pUe6JJTYk0PpFLEbTjmV
PU6/WhqJKAxUNKLCOSwUxE9bFWvebYJw5AF6tcP0sd5xKh5r55vxiKlMFxwQSBfg
GzZaYy9uFjJr1ec6007yVjJRYAler3QYriEw2cT+hMHE/EpaU8fhVd1OoYS0bvEE
yTIn15pERwAxKwy11OSh5sSAbqAsjjwALkCEpaQRYvLx
-----END CERTIFICATE-----
Generated at Sat Sep 28 08:54:55 2024 by rpki-client on console-ams.rpki-client.org