Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/A8hpPTVQKk-RawKJX5AUpV1zpqI.roa
File: A8hpPTVQKk-RawKJX5AUpV1zpqI.roa (raw, json)
Hash identifier: mZF7rwGPuchHaeY3BFNB9U7iF2Xnt2mwg4+C647E51I=
Subject key identifier: 03:C8:69:3D:35:50:2A:4F:91:6B:02:89:5F:90:14:A5:5D:73:A6:A2
Certificate issuer: /CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Certificate serial: 0191122ADD68490D7E133890A95F1D643BEF
Authority key identifier: F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/A8hpPTVQKk-RawKJX5AUpV1zpqI.roa
Signing time: Fri 02 Aug 2024 08:18:04 +0000
ROA not before: Fri 02 Aug 2024 08:18:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5432
IP address blocks: 195.66.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:12:2a:dd:68:49:0d:7e:13:38:90:a9:5f:1d:64:3b:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19918ed219e7d3d922737ecdc731f0ca60a68b8
Validity
Not Before: Aug 2 08:18:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03c8693d35502a4f916b02895f9014a55d73a6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b1:cb:d5:5e:c1:c0:76:7c:cc:04:84:29:ea:
c4:00:50:fa:a9:70:f4:fd:f9:41:0f:6c:82:e5:f3:
1c:38:c0:88:69:b4:20:2e:59:ee:a8:5b:f3:58:3f:
46:41:d1:91:ec:49:a9:f9:ee:3c:33:67:52:88:ae:
ab:b9:9a:09:52:bb:f5:45:3c:4f:0b:e5:1e:e5:77:
13:76:b9:9c:c2:19:c2:91:e5:cb:81:ef:d6:2f:1c:
c8:0e:19:b5:53:e2:73:38:42:94:15:dc:e9:e4:a7:
8b:63:7f:d4:d2:77:b3:92:01:35:07:34:23:47:99:
77:de:22:11:17:b1:5d:91:71:af:73:ca:28:4b:99:
18:bb:2b:93:24:cb:13:6c:88:5b:b4:50:14:41:45:
77:19:28:34:67:46:dc:b6:6d:4b:b9:c9:a8:85:fc:
5f:e9:3b:a8:a0:43:a1:66:31:28:a5:cb:cf:04:1c:
fd:57:61:66:f6:cb:84:9a:1a:a9:fe:35:67:69:95:
c4:49:9d:1c:a1:47:a9:db:ab:e8:fa:b2:3e:77:6c:
24:1b:a5:a2:e3:3a:56:0e:51:ce:db:2e:9f:f5:7d:
8b:14:c0:03:39:be:4a:b3:bd:a0:b4:cc:1a:2d:86:
c1:68:96:10:48:f8:70:df:e8:b9:c5:f4:64:58:f7:
02:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:C8:69:3D:35:50:2A:4F:91:6B:02:89:5F:90:14:A5:5D:73:A6:A2
X509v3 Authority Key Identifier:
keyid:F1:99:18:ED:21:9E:7D:3D:92:27:37:EC:DC:73:1F:0C:A6:0A:68:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZkY7SGefT2SJzfs3HMfDKYKaLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/A8hpPTVQKk-RawKJX5AUpV1zpqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/62b098-568d-4872-a032-313efeb0b19d/1/8ZkY7SGefT2SJzfs3HMfDKYKaLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.66.107.0/24
Signature Algorithm: sha256WithRSAEncryption
78:a9:49:89:d0:bd:ac:b4:cf:41:eb:d1:b8:f6:cf:60:b7:bd:
ae:06:b9:76:26:26:c6:b1:c0:31:36:68:17:5d:0b:93:eb:5e:
81:64:43:97:d7:40:2e:9a:a8:db:2f:ec:96:c9:47:23:76:41:
0b:da:68:6f:33:16:ba:93:f9:0d:38:c3:79:bc:1b:50:1c:27:
78:4d:5e:96:49:9c:9c:52:a7:82:5b:ae:b9:00:ef:4d:a5:bc:
5c:7a:fa:7d:e9:a8:1e:94:f9:29:52:2a:18:e7:66:b2:8b:4d:
a4:43:67:e0:10:80:48:8c:9c:a2:c7:36:1d:ee:e6:2d:9c:48:
81:2a:59:d7:10:00:48:8b:04:57:69:cb:e3:a5:95:d5:0c:61:
fa:ed:74:86:26:82:40:eb:20:40:b0:9e:69:ab:b1:8d:61:ab:
42:4c:c2:b7:c9:d7:2f:4f:9a:09:3c:f2:dd:5b:50:75:31:fa:
b6:e2:4a:a9:e3:38:fb:fd:54:04:ac:69:2d:47:b4:cf:a2:b4:
ed:d1:4c:b5:c5:30:5f:c4:f5:25:b5:27:70:c7:db:32:3b:34:
45:08:ee:63:33:8d:82:f6:46:13:3b:e9:53:c1:87:74:37:b4:
7e:4e:29:46:63:66:35:56:f4:09:45:96:f1:b3:2a:ef:47:ea:
02:66:24:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZESKt1oSQ1+EziQqV8dZDvvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOTkxOGVkMjE5ZTdkM2Q5MjI3MzdlY2RjNzMxZjBjYTYw
YTY4YjgwHhcNMjQwODAyMDgxODA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2M4NjkzZDM1NTAyYTRmOTE2YjAyODk1ZjkwMTRhNTVkNzNhNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7HL1V7BwHZ8zASEKerEAFD6qXD0
/flBD2yC5fMcOMCIabQgLlnuqFvzWD9GQdGR7Emp+e48M2dSiK6ruZoJUrv1RTxP
C+Ue5XcTdrmcwhnCkeXLge/WLxzIDhm1U+JzOEKUFdzp5KeLY3/U0nezkgE1BzQj
R5l33iIRF7FdkXGvc8ooS5kYuyuTJMsTbIhbtFAUQUV3GSg0Z0bctm1Lucmohfxf
6TuooEOhZjEopcvPBBz9V2Fm9suEmhqp/jVnaZXESZ0coUep26vo+rI+d2wkG6Wi
4zpWDlHO2y6f9X2LFMADOb5Ks72gtMwaLYbBaJYQSPhw3+i5xfRkWPcC7wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPIaT01UCpPkWsCiV+QFKVdc6aiMB8GA1UdIwQY
MBaAFPGZGO0hnn09kic37NxzHwymCmi4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzIt
MzEzZWZlYjBiMTlkLzEvQThocFBUVlFLay1SYXdLSlg1QVVwVjF6cHFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82MmIwOTgtNTY4ZC00ODcyLWEwMzItMzEzZWZlYjBiMTlk
LzEvOFprWTdTR2VmVDJTSnpmczNITWZES1lLYUxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0JrMA0G
CSqGSIb3DQEBCwUAA4IBAQB4qUmJ0L2stM9B69G49s9gt72uBrl2JibGscAxNmgX
XQuT616BZEOX10AumqjbL+yWyUcjdkEL2mhvMxa6k/kNOMN5vBtQHCd4TV6WSZyc
UqeCW665AO9Npbxcevp96agelPkpUioY52ayi02kQ2fgEIBIjJyixzYd7uYtnEiB
KlnXEABIiwRXacvjpZXVDGH67XSGJoJA6yBAsJ5pq7GNYatCTMK3ydcvT5oJPPLd
W1B1Mfq24kqp4zj7/VQErGktR7TPorTt0Uy1xTBfxPUltSdwx9syOzRFCO5jM42C
9kYTO+lTwYd0N7R+TilGY2Y1VvQJRZbxsyrvR+oCZiQp
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:38:25 2024 by rpki-client on console-fra.rpki-client.org