Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iIDTNTDnhGWGHkGCf5WJLnZXtYo.roa
File: iIDTNTDnhGWGHkGCf5WJLnZXtYo.roa (raw, json)
Hash identifier: 1uNiy2Vx12JbXDHF/sVNfgmcosZgckuFMu9LMS07cKE=
Subject key identifier: 88:80:D3:35:30:E7:84:65:86:1E:41:82:7F:95:89:2E:76:57:B5:8A
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01917AB4EB311034C5CFCBE250D1E8CFB70F
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iIDTNTDnhGWGHkGCf5WJLnZXtYo.roa
Signing time: Thu 22 Aug 2024 15:29:22 +0000
ROA not before: Thu 22 Aug 2024 15:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48207
IP address blocks: 193.124.45.0/24 maxlen: 24
194.135.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 02:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:b4:eb:31:10:34:c5:cf:cb:e2:50:d1:e8:cf:b7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 22 15:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8880d33530e78465861e41827f95892e7657b58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:00:03:a3:22:b8:cb:41:bc:cb:d9:11:c0:
37:b8:67:94:38:ea:07:d2:45:06:6b:d0:93:b5:e2:
ff:e7:32:a1:fb:5d:98:01:7f:41:86:dc:b1:86:d7:
98:ed:1a:1d:a4:b7:cd:c5:c0:ec:54:5c:9a:23:13:
e2:fc:17:b4:24:fb:d2:3b:82:ad:d2:67:9f:ba:07:
2f:05:a9:a6:94:83:a9:93:b9:e1:a3:ce:84:85:ce:
5e:e6:7b:90:92:1c:86:d2:17:7e:56:99:0b:28:60:
b2:ab:6a:5d:a5:f9:70:05:43:14:71:64:fb:07:43:
a1:74:4c:7b:29:fb:38:49:49:48:fa:f8:19:13:1f:
c3:11:b6:b3:4e:c5:5d:98:9b:7f:4e:39:9f:9f:dd:
df:8f:5e:b5:09:04:2d:45:f1:f9:fe:0f:56:16:97:
f3:7e:0e:78:34:a5:4c:a2:91:40:95:7a:40:6d:d8:
5a:6c:ff:19:aa:0b:a2:96:f7:a4:e5:6e:44:58:55:
0b:71:83:60:56:6f:c6:65:75:35:c2:ec:13:a1:d5:
24:1b:e0:de:76:38:11:fc:1d:69:64:3b:ef:90:a6:
08:53:9a:a6:98:cb:74:a1:93:0f:cc:b4:69:62:24:
db:ca:14:73:9e:f9:d9:d1:3b:fc:75:68:fe:e9:54:
cd:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:80:D3:35:30:E7:84:65:86:1E:41:82:7F:95:89:2E:76:57:B5:8A
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/iIDTNTDnhGWGHkGCf5WJLnZXtYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.45.0/24
194.135.34.0/24
Signature Algorithm: sha256WithRSAEncryption
82:ca:c7:9f:30:b9:80:0f:bd:05:ca:9b:01:b0:82:44:f1:6e:
60:5a:f5:fb:a4:7b:4c:c7:58:ca:4a:a2:49:11:bf:30:3b:4f:
1b:aa:09:94:c8:6b:01:bd:07:37:a6:ed:0d:46:5e:b4:d2:a5:
56:ea:4f:88:ad:f6:5c:bc:fe:4c:dc:04:ca:0d:46:24:2d:6e:
ef:52:28:a2:ad:97:5a:50:ae:86:60:5b:b3:30:de:d2:92:70:
29:ee:c5:c1:f8:2e:87:72:05:40:7a:4e:f1:43:9a:e8:83:f0:
14:b7:dd:74:73:11:42:fa:c1:62:78:c8:86:5b:16:1d:db:67:
bd:ea:97:62:71:f2:9a:48:fa:1f:04:34:9d:2e:11:97:63:51:
11:4a:d7:a7:fe:be:95:8d:ff:2c:90:f2:f4:1f:a7:a3:ef:dd:
27:3a:0e:55:70:9a:d0:9b:77:49:7d:ee:ff:69:b2:42:34:d1:
74:fd:81:0b:65:38:8b:62:a5:74:2f:0f:d7:65:dd:3a:d9:00:
bf:75:79:65:03:f4:2d:9e:a6:a9:1c:ac:52:4e:f4:4a:53:3e:
a1:eb:33:a8:8c:0a:0f:87:e1:9e:d1:35:6b:1b:01:7b:23:a7:
e5:9b:b2:6a:33:ac:1e:16:99:d0:de:0e:35:71:e7:65:ae:49:
0a:74:3f:a6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZF6tOsxEDTFz8viUNHoz7cPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwODIyMTUyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODgwZDMzNTMwZTc4NDY1ODYxZTQxODI3Zjk1ODkyZTc2NTdiNThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg4AA6MiuMtBvMvZEcA3uGeUOOoH
0kUGa9CTteL/5zKh+12YAX9BhtyxhteY7RodpLfNxcDsVFyaIxPi/Be0JPvSO4Kt
0mefugcvBammlIOpk7nho86Ehc5e5nuQkhyG0hd+VpkLKGCyq2pdpflwBUMUcWT7
B0OhdEx7Kfs4SUlI+vgZEx/DEbazTsVdmJt/Tjmfn93fj161CQQtRfH5/g9WFpfz
fg54NKVMopFAlXpAbdhabP8Zqguilvek5W5EWFULcYNgVm/GZXU1wuwTodUkG+De
djgR/B1pZDvvkKYIU5qmmMt0oZMPzLRpYiTbyhRznvnZ0Tv8dWj+6VTNIwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIiA0zUw54Rlhh5Bgn+ViS52V7WKMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvaUlEVE5URG5oR1dHSGtHQ2Y1V0pMblpYdFlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwXwtAwQA
wociMA0GCSqGSIb3DQEBCwUAA4IBAQCCysefMLmAD70FypsBsIJE8W5gWvX7pHtM
x1jKSqJJEb8wO08bqgmUyGsBvQc3pu0NRl600qVW6k+IrfZcvP5M3ATKDUYkLW7v
UiiirZdaUK6GYFuzMN7SknAp7sXB+C6HcgVAek7xQ5rog/AUt910cxFC+sFieMiG
WxYd22e96pdicfKaSPofBDSdLhGXY1ERSten/r6Vjf8skPL0H6ej790nOg5VcJrQ
m3dJfe7/abJCNNF0/YELZTiLYqV0Lw/XZd062QC/dXllA/QtnqapHKxSTvRKUz6h
6zOojAoPh+Ge0TVrGwF7I6flm7JqM6weFpnQ3g41cedlrkkKdD+m
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-fra.rpki-client.org