Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/77SIMHB99qKAs8LEMUZ5ELxcko4.roa
File: 77SIMHB99qKAs8LEMUZ5ELxcko4.roa (raw, json)
Hash identifier: h6Q8W6M92wbTbBJDevLkocEUhHI3J3hfA+u5MGIv0Ok=
Subject key identifier: EF:B4:88:30:70:7D:F6:A2:80:B3:C2:C4:31:46:79:10:BC:5C:92:8E
Certificate issuer: /CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Certificate serial: 018CCA99767F5F3D42D5CBD6094010E07191
Authority key identifier: 57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/77SIMHB99qKAs8LEMUZ5ELxcko4.roa
Signing time: Tue 02 Jan 2024 14:35:04 +0000
ROA not before: Tue 02 Jan 2024 14:35:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49821
IP address blocks: 194.1.232.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 23:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:76:7f:5f:3d:42:d5:cb:d6:09:40:10:e0:71:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c7be29ec13b0ab01897411e86ecf8b0f3b344a
Validity
Not Before: Jan 2 14:35:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=efb48830707df6a280b3c2c431467910bc5c928e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c9:40:8e:5b:1e:2a:ed:a3:8f:83:e4:aa:10:
a7:cb:1c:81:ee:bf:26:a8:5d:a6:49:38:04:83:eb:
5d:2b:e2:2e:6e:05:7a:8b:72:c2:d6:31:49:f1:64:
dd:6a:d3:11:f8:1a:88:04:08:8b:bc:de:aa:1b:35:
68:96:21:1d:60:23:da:f2:a6:e5:89:ba:ac:c1:24:
8a:93:3c:a6:1d:a0:29:dd:35:b0:18:4a:67:f1:a6:
b7:86:ee:82:1f:37:39:28:7f:16:3f:a3:d0:5a:72:
18:03:9e:d2:d5:14:31:f2:0b:91:80:bd:b5:bc:05:
5f:65:68:b7:be:87:b6:15:5b:e6:a3:88:06:65:1a:
47:60:c6:00:6c:6d:25:43:6d:f0:71:8d:1e:ea:36:
cf:0c:36:43:c8:fe:22:98:58:e9:68:30:66:22:7d:
6d:df:97:1e:06:48:23:0f:07:0a:3c:2f:23:1d:bc:
15:d5:f9:b8:b9:b8:75:ed:6c:2a:a1:c3:df:77:2c:
07:26:5f:a9:ee:78:b3:17:87:36:24:41:ce:2f:c2:
6e:3f:ff:77:7c:37:0c:6a:6e:a0:9a:2b:09:1b:ac:
75:d1:f3:38:23:b1:56:99:cc:5a:aa:36:9a:92:33:
c6:d2:7d:3b:2d:96:50:80:29:2f:fb:2a:01:bd:f8:
aa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:B4:88:30:70:7D:F6:A2:80:B3:C2:C4:31:46:79:10:BC:5C:92:8E
X509v3 Authority Key Identifier:
keyid:57:C7:BE:29:EC:13:B0:AB:01:89:74:11:E8:6E:CF:8B:0F:3B:34:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8e-KewTsKsBiXQR6G7Piw87NEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/77SIMHB99qKAs8LEMUZ5ELxcko4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/f0d853-42cc-4a17-81a1-bae1d9eec41a/1/V8e-KewTsKsBiXQR6G7Piw87NEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.232.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:df:5a:78:6a:bd:be:e1:6d:9d:8b:79:25:58:6e:2e:cf:4c:
6a:27:30:ac:de:fa:36:8f:36:36:54:43:c5:51:87:1b:e0:c3:
2c:32:8d:a5:d6:f0:dc:52:61:97:4b:0c:38:33:1e:ca:aa:80:
d8:2d:dd:5f:3d:52:e5:83:78:cf:eb:25:a3:b8:e2:7d:52:02:
22:c3:45:7f:e4:ed:a4:7f:f2:f3:85:44:13:05:a9:bd:a2:93:
15:12:41:d3:07:f8:e7:64:64:26:6f:a9:37:2b:50:5f:4e:6c:
b9:80:f6:98:ad:17:1e:b3:ed:9f:16:01:78:e9:70:cb:f0:f4:
94:c5:cf:dc:57:2d:9b:d9:57:4a:b5:55:6e:4d:1d:ab:48:c7:
74:b2:0e:ed:9c:b1:4c:0e:f3:66:ce:b2:b8:2e:2a:23:a1:0f:
3a:2d:7b:be:e8:ab:ff:88:4d:c9:96:34:97:b6:73:f1:bb:5e:
9d:75:cb:ef:b1:52:05:3c:f1:dc:e5:79:c6:66:38:25:ad:ad:
6a:a1:cf:79:e7:35:0a:b2:e7:13:b3:35:4a:d2:07:26:df:49:
fb:95:36:98:6c:50:84:aa:d5:ad:46:cd:99:15:78:ec:e9:fa:
94:13:f1:1a:9f:c4:ea:2e:2d:26:5f:c9:38:e5:03:6e:de:4b:
d1:f5:4a:2b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKmXZ/Xz1C1cvWCUAQ4HGRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzdiZTI5ZWMxM2IwYWIwMTg5NzQxMWU4NmVjZjhiMGYz
YjM0NGEwHhcNMjQwMTAyMTQzNTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmI0ODgzMDcwN2RmNmEyODBiM2MyYzQzMTQ2NzkxMGJjNWM5MjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApslAjlseKu2jj4PkqhCnyxyB7r8m
qF2mSTgEg+tdK+IubgV6i3LC1jFJ8WTdatMR+BqIBAiLvN6qGzVoliEdYCPa8qbl
ibqswSSKkzymHaAp3TWwGEpn8aa3hu6CHzc5KH8WP6PQWnIYA57S1RQx8guRgL21
vAVfZWi3voe2FVvmo4gGZRpHYMYAbG0lQ23wcY0e6jbPDDZDyP4imFjpaDBmIn1t
35ceBkgjDwcKPC8jHbwV1fm4ubh17WwqocPfdywHJl+p7nizF4c2JEHOL8JuP/93
fDcMam6gmisJG6x10fM4I7FWmcxaqjaakjPG0n07LZZQgCkv+yoBvfiqqQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+0iDBwffaigLPCxDFGeRC8XJKOMB8GA1UdIwQY
MBaAFFfHvinsE7CrAYl0Eehuz4sPOzRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9mMGQ4NTMtNDJjYy00YTE3LTgxYTEt
YmFlMWQ5ZWVjNDFhLzEvNzdTSU1IQjk5cUtBczhMRU1VWjVFTHhja280LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9mMGQ4NTMtNDJjYy00YTE3LTgxYTEtYmFlMWQ5ZWVjNDFh
LzEvVjhlLUtld1RzS3NCaVhRUjZHN1Bpdzg3TkVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwgHoMA0G
CSqGSIb3DQEBCwUAA4IBAQAt31p4ar2+4W2di3klWG4uz0xqJzCs3vo2jzY2VEPF
UYcb4MMsMo2l1vDcUmGXSww4Mx7KqoDYLd1fPVLlg3jP6yWjuOJ9UgIiw0V/5O2k
f/LzhUQTBam9opMVEkHTB/jnZGQmb6k3K1BfTmy5gPaYrRces+2fFgF46XDL8PSU
xc/cVy2b2VdKtVVuTR2rSMd0sg7tnLFMDvNmzrK4LiojoQ86LXu+6Kv/iE3JljSX
tnPxu16ddcvvsVIFPPHc5XnGZjglra1qoc955zUKsucTszVK0gcm30n7lTaYbFCE
qtWtRs2ZFXjs6fqUE/Ean8TqLi0mX8k45QNu3kvR9Uor
-----END CERTIFICATE-----
Generated at Wed Nov 27 05:59:03 2024 by rpki-client on console-fra.rpki-client.org