Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aC6yvn7uRKsY0xZNCgkhiw4t8-8.roa
File: aC6yvn7uRKsY0xZNCgkhiw4t8-8.roa (raw, json)
Hash identifier: nEKIDBFGc3uB7c7iqzLejF5iRaLNYnVi7wfT0AZzmT0=
Subject key identifier: 68:2E:B2:BE:7E:EE:44:AB:18:D3:16:4D:0A:09:21:8B:0E:2D:F3:EF
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A8E5A5DE543AF7C6D0BEB6132F3D0
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aC6yvn7uRKsY0xZNCgkhiw4t8-8.roa
Signing time: Tue 02 Jan 2024 12:33:55 +0000
ROA not before: Tue 02 Jan 2024 12:33:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211138
IP address blocks: 195.58.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:8e:5a:5d:e5:43:af:7c:6d:0b:eb:61:32:f3:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=682eb2be7eee44ab18d3164d0a09218b0e2df3ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:61:af:d5:25:ee:c1:25:ed:b4:e8:ce:7d:
04:1c:9f:86:ca:b3:27:1e:0b:a9:f1:0b:0c:1d:18:
39:90:4b:b4:0b:2e:15:ae:d5:f2:26:f7:55:2c:84:
60:4a:3e:db:cb:d3:90:65:aa:bc:2f:54:57:f5:52:
67:54:56:76:62:b1:ce:4a:80:52:00:cc:43:e8:80:
27:26:1c:39:26:55:92:8d:87:d6:36:eb:29:b1:1e:
6e:49:66:f5:74:2a:11:40:3c:2e:79:46:5d:08:d6:
75:fd:3c:d9:cb:0d:af:68:2b:01:43:ff:e3:d3:eb:
d1:a8:c0:1f:1c:d1:a5:d2:fb:66:87:b1:17:0f:0d:
dd:51:81:20:a4:f5:c3:70:8d:ff:b4:19:d0:4a:b0:
9b:92:73:47:b9:ff:95:d8:79:31:e5:c3:69:e5:09:
41:df:48:e8:5a:29:6f:4b:a2:26:b7:5a:1f:33:dc:
2c:73:72:81:b1:47:07:18:b8:5f:25:05:26:36:1e:
f9:d3:d8:8b:1f:17:44:bd:22:ba:26:5c:60:33:04:
b2:5f:18:9a:7e:dd:58:bb:4c:f8:89:e4:8b:d8:eb:
d1:a8:3c:8f:e7:4a:f5:ec:76:39:01:87:ec:1f:a6:
b7:bf:33:23:f6:c8:b7:12:ae:d2:36:8d:66:2a:1b:
b7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:2E:B2:BE:7E:EE:44:AB:18:D3:16:4D:0A:09:21:8B:0E:2D:F3:EF
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/aC6yvn7uRKsY0xZNCgkhiw4t8-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.39.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e1:20:43:04:5d:23:fb:2d:23:93:15:25:0f:3d:9e:98:33:
94:54:27:dd:e8:cb:23:87:01:34:7f:c5:06:7b:3b:41:30:1b:
f8:ee:6e:af:4c:6d:72:12:b6:66:0c:f2:03:75:9d:11:25:20:
9b:94:3e:ef:fb:e9:9c:78:13:97:64:2c:9e:50:f1:94:ea:dc:
1b:e9:af:07:39:72:ce:37:8e:56:33:40:fc:ba:a7:d8:79:b0:
aa:21:a5:be:d3:b9:29:40:b7:fa:7c:e8:2d:b2:be:cd:1b:04:
00:a6:90:7d:6b:f2:d4:5e:bc:bf:4f:b7:c0:da:df:12:45:93:
9a:6a:e7:f3:84:d3:9a:c0:81:48:ac:87:7e:e0:bb:5b:ac:35:
4f:b5:9e:ae:12:dc:57:d9:44:70:dc:76:de:de:af:7f:a1:f5:
3a:cf:68:8e:41:f2:27:eb:ba:0a:7a:38:7a:6c:2b:1d:95:20:
ba:e5:0f:a3:4f:c2:ac:f6:ad:a0:51:1d:80:fd:4f:a7:5b:4a:
a6:d6:4d:c4:b7:83:bb:fe:65:0b:1e:3e:be:3e:9b:14:b4:cf:
0c:c9:71:af:1a:84:f8:9b:77:94:ac:68:4e:ca:78:e5:8f:b8:
43:8f:f4:19:3b:f6:87:32:70:57:c0:8c:e9:db:6a:c2:f3:99:
93:b4:11:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKo5aXeVDr3xtC+thMvPQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTIzMzU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ODJlYjJiZTdlZWU0NGFiMThkMzE2NGQwYTA5MjE4YjBlMmRmM2VmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI9hr9Ul7sEl7bTozn0EHJ+GyrMn
Hgup8QsMHRg5kEu0Cy4VrtXyJvdVLIRgSj7by9OQZaq8L1RX9VJnVFZ2YrHOSoBS
AMxD6IAnJhw5JlWSjYfWNuspsR5uSWb1dCoRQDwueUZdCNZ1/TzZyw2vaCsBQ//j
0+vRqMAfHNGl0vtmh7EXDw3dUYEgpPXDcI3/tBnQSrCbknNHuf+V2Hkx5cNp5QlB
30joWilvS6Imt1ofM9wsc3KBsUcHGLhfJQUmNh7509iLHxdEvSK6JlxgMwSyXxia
ft1Yu0z4ieSL2OvRqDyP50r17HY5AYfsH6a3vzMj9si3Eq7SNo1mKhu3NQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGgusr5+7kSrGNMWTQoJIYsOLfPvMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvYUM2eXZuN3VSS3NZMHhaTkNna2hpdzR0OC04LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwzonMA0G
CSqGSIb3DQEBCwUAA4IBAQBd4SBDBF0j+y0jkxUlDz2emDOUVCfd6MsjhwE0f8UG
eztBMBv47m6vTG1yErZmDPIDdZ0RJSCblD7v++mceBOXZCyeUPGU6twb6a8HOXLO
N45WM0D8uqfYebCqIaW+07kpQLf6fOgtsr7NGwQAppB9a/LUXry/T7fA2t8SRZOa
aufzhNOawIFIrId+4LtbrDVPtZ6uEtxX2URw3Hbe3q9/ofU6z2iOQfIn67oKejh6
bCsdlSC65Q+jT8Ks9q2gUR2A/U+nW0qm1k3Et4O7/mULHj6+PpsUtM8MyXGvGoT4
m3eUrGhOynjlj7hDj/QZO/aHMnBXwIzp22rC85mTtBGI
-----END CERTIFICATE-----
Generated at Fri May 17 23:39:05 2024 by rpki-client on console-ams.rpki-client.org