Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/twFxRewjmaMMpt8wijqa-uvnWR0.roa
File: twFxRewjmaMMpt8wijqa-uvnWR0.roa (raw, json)
Hash identifier: 4xBs+wBFzeV+0YtYi133dQ1sp7P78AVyYu7AlZLj8Gw=
Subject key identifier: B7:01:71:45:EC:23:99:A3:0C:A6:DF:30:8A:3A:9A:FA:EB:E7:59:1D
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018CCA2A6EA79DFD971AB97D37620E729EAB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/twFxRewjmaMMpt8wijqa-uvnWR0.roa
Signing time: Tue 02 Jan 2024 12:33:47 +0000
ROA not before: Tue 02 Jan 2024 12:33:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 10010
IP address blocks: 194.87.225.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:6e:a7:9d:fd:97:1a:b9:7d:37:62:0e:72:9e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jan 2 12:33:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7017145ec2399a30ca6df308a3a9afaebe7591d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:93:a9:62:c9:cc:9a:ca:f3:ca:9e:e2:a3:91:
bc:aa:9a:38:ec:0e:9f:fe:34:08:22:18:17:6c:30:
4b:cc:61:29:24:71:59:fb:c2:0d:82:7a:06:47:bd:
6f:fa:45:31:29:89:71:78:90:b6:55:8c:ba:d5:1d:
ca:9a:af:0e:0f:a2:62:87:f8:fc:a7:d0:9c:f1:42:
ca:b8:53:6a:f5:43:8c:b9:3f:17:88:22:5b:9f:fb:
80:92:1c:64:17:71:f3:98:92:64:6a:f4:8d:14:ce:
a2:bb:a7:95:26:6a:2c:e5:bd:89:d4:c2:99:e3:1e:
39:d6:40:a1:ee:25:ed:c0:95:ff:b6:02:19:91:09:
70:70:b2:4f:37:a9:3d:71:58:7b:92:56:7e:42:be:
49:86:dc:d7:15:42:c0:f6:d9:08:9a:e3:08:a8:87:
cb:84:02:76:a5:70:91:d7:dd:98:37:60:ee:2d:16:
a4:af:94:99:29:e5:36:b8:29:57:9e:3d:b7:67:92:
c2:2e:f4:d6:d3:b4:86:4b:06:75:83:9a:39:17:c5:
88:6f:4e:a4:94:3e:14:61:b4:bf:de:b7:27:58:45:
2c:59:63:41:74:51:6b:8e:af:98:2f:d5:17:eb:64:
2c:b1:1e:e5:26:2a:61:0b:64:26:6e:9e:43:ea:a7:
ed:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:01:71:45:EC:23:99:A3:0C:A6:DF:30:8A:3A:9A:FA:EB:E7:59:1D
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/twFxRewjmaMMpt8wijqa-uvnWR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.225.0/24
Signature Algorithm: sha256WithRSAEncryption
51:d9:63:4c:f7:23:8f:97:ee:16:90:37:4f:85:11:0e:91:08:
9b:19:54:a7:2a:eb:3c:b3:d7:d2:fa:ee:3b:98:90:16:2b:4f:
e4:93:30:9f:4c:d9:10:cc:e7:fa:e6:2b:e5:e6:df:b3:e0:c9:
f8:14:19:9f:4c:df:1e:24:6d:ac:3d:6c:f4:b3:22:30:13:34:
04:09:b9:d5:48:cd:4c:a1:cc:5c:18:af:4f:01:ac:a2:89:9b:
4e:13:29:9c:05:c0:f8:99:9b:ae:90:2e:d9:2b:27:02:02:25:
4c:c6:f6:e8:c7:62:b1:aa:1b:81:7c:b8:a7:88:69:35:99:85:
ce:99:37:a2:1d:2e:50:62:f9:96:3b:ab:37:0f:59:d9:e8:31:
9a:57:a9:6d:6c:e8:d7:f2:39:af:30:b1:1c:fc:ad:d2:8f:04:
5a:03:69:fc:66:ce:da:57:44:20:6c:98:b3:ad:46:df:21:57:
2d:b7:87:78:16:23:11:1e:56:0e:15:e3:86:57:85:31:9b:28:
a4:02:12:b6:c5:73:96:b4:4c:cf:3f:f2:62:0d:bb:af:9b:be:
e2:88:2d:1b:8b:02:2c:f2:32:b4:50:51:a1:6a:22:61:2e:a9:
b6:0a:69:54:ad:cb:5d:38:5e:35:34:ee:33:dd:68:61:66:60:
a3:c8:4d:b6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKm6nnf2XGrl9N2IOcp6rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjQwMTAyMTIzMzQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNzAxNzE0NWVjMjM5OWEzMGNhNmRmMzA4YTNhOWFmYWViZTc1OTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5OpYsnMmsrzyp7io5G8qpo47A6f
/jQIIhgXbDBLzGEpJHFZ+8INgnoGR71v+kUxKYlxeJC2VYy61R3Kmq8OD6Jih/j8
p9Cc8ULKuFNq9UOMuT8XiCJbn/uAkhxkF3HzmJJkavSNFM6iu6eVJmos5b2J1MKZ
4x451kCh7iXtwJX/tgIZkQlwcLJPN6k9cVh7klZ+Qr5JhtzXFULA9tkImuMIqIfL
hAJ2pXCR192YN2DuLRakr5SZKeU2uClXnj23Z5LCLvTW07SGSwZ1g5o5F8WIb06k
lD4UYbS/3rcnWEUsWWNBdFFrjq+YL9UX62QssR7lJiphC2Qmbp5D6qft4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLcBcUXsI5mjDKbfMIo6mvrr51kdMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvdHdGeFJld2ptYU1NcHQ4d2lqcWEtdXZuV1IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwlfhMA0G
CSqGSIb3DQEBCwUAA4IBAQBR2WNM9yOPl+4WkDdPhREOkQibGVSnKus8s9fS+u47
mJAWK0/kkzCfTNkQzOf65ivl5t+z4Mn4FBmfTN8eJG2sPWz0syIwEzQECbnVSM1M
ocxcGK9PAayiiZtOEymcBcD4mZuukC7ZKycCAiVMxvbox2KxqhuBfLiniGk1mYXO
mTeiHS5QYvmWO6s3D1nZ6DGaV6ltbOjX8jmvMLEc/K3SjwRaA2n8Zs7aV0QgbJiz
rUbfIVctt4d4FiMRHlYOFeOGV4UxmyikAhK2xXOWtEzPP/JiDbuvm77iiC0biwIs
8jK0UFGhaiJhLqm2CmlUrctdOF41NO4z3WhhZmCjyE22
-----END CERTIFICATE-----
Generated at Fri May 17 23:39:05 2024 by rpki-client on console-ams.rpki-client.org