Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XwpMLA6XHZ51SJsfsJY5y5SY_tc.roa
File: XwpMLA6XHZ51SJsfsJY5y5SY_tc.roa (raw, json)
Hash identifier: by90qsOuVUC8EP1Iy+r7riqmz5OzAA9BOd4jqMSDCkA=
Subject key identifier: 5F:0A:4C:2C:0E:97:1D:9E:75:48:9B:1F:B0:96:39:CB:94:98:FE:D7
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018F0567F20F3ABB2F96D145797EB6389AF5
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XwpMLA6XHZ51SJsfsJY5y5SY_tc.roa
Signing time: Mon 22 Apr 2024 10:44:09 +0000
ROA not before: Mon 22 Apr 2024 10:44:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5065
IP address blocks: 93.123.74.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:05:67:f2:0f:3a:bb:2f:96:d1:45:79:7e:b6:38:9a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 22 10:44:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f0a4c2c0e971d9e75489b1fb09639cb9498fed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5f:be:c6:84:f0:0f:ea:8b:17:71:5b:b5:a3:
0d:6b:59:e3:18:e4:f2:c3:48:ab:d5:04:7b:e1:62:
c5:a8:ef:5a:b9:98:18:02:5e:d0:d9:51:0a:cd:86:
02:42:f6:f9:48:b6:02:aa:bf:79:68:5a:0e:e6:8f:
18:81:80:17:47:75:94:f2:af:5b:72:41:36:73:22:
d5:29:54:59:ec:3e:8e:1b:bb:7f:0e:51:35:c2:79:
c7:3b:07:1b:2a:56:71:d9:9f:52:4f:31:96:6f:0d:
24:2b:c7:bb:37:be:8f:80:83:10:e3:de:70:2d:b6:
2e:b3:1a:b1:b2:da:02:3d:bb:1c:3e:36:2c:e0:09:
ff:99:e3:b9:6f:3c:e3:7d:fc:ab:9a:c6:73:fa:a7:
4d:03:94:a3:3a:39:29:c6:66:35:ed:0a:66:c9:76:
c8:26:ae:c5:39:4f:de:cb:ea:96:c8:e5:14:b5:e0:
0d:95:8d:9e:2b:10:f2:71:bd:2b:1b:b9:0f:89:0a:
e7:17:07:e2:fe:06:5e:10:3a:99:c3:82:6e:a2:ed:
33:62:5f:e1:25:19:88:49:8e:e9:ae:67:c5:a8:da:
f0:15:dd:97:7a:b0:46:b0:d7:7c:68:30:7a:90:50:
93:04:20:a0:ce:7e:70:0a:fc:66:9d:f1:07:2c:bf:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:0A:4C:2C:0E:97:1D:9E:75:48:9B:1F:B0:96:39:CB:94:98:FE:D7
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/XwpMLA6XHZ51SJsfsJY5y5SY_tc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.74.0/23
Signature Algorithm: sha256WithRSAEncryption
47:e0:85:9e:cf:eb:9a:5a:95:e4:4c:21:7c:d8:0c:8d:0f:c2:
c9:68:dd:a7:fa:05:18:b4:5f:6f:6e:78:ef:ab:1f:ec:ca:ba:
01:53:ca:a9:d8:c7:04:76:48:d0:69:52:45:09:d9:72:83:7e:
7f:42:d5:47:a6:54:08:8e:91:3e:96:22:c7:8c:4e:88:46:68:
18:0b:2a:99:17:31:71:f8:9d:05:f9:e5:9c:f8:b5:2c:dd:15:
f3:32:9e:a9:3d:50:7a:d7:08:49:10:d6:fc:ea:fc:a7:ae:de:
c7:c1:ea:b9:0e:1b:d5:a2:fa:73:d0:7a:26:ed:30:fd:3a:6f:
e5:4a:cb:ab:cd:8b:32:3d:d5:e0:2f:27:2d:1a:80:49:4a:84:
bb:2c:42:ef:77:11:a8:19:d8:3b:fe:b1:c6:d7:5a:61:63:f0:
5d:43:91:2c:94:55:71:c8:73:24:e5:e2:41:67:2a:e6:4e:0f:
80:62:36:1c:55:f2:97:ab:25:77:58:9b:74:81:15:f3:ba:89:
ab:d5:5e:26:6d:d2:42:69:b8:0f:a5:aa:2f:17:e5:c3:28:95:
8d:a0:45:bb:cd:73:38:b4:59:c9:ea:a6:8a:63:22:ee:4b:96:
82:fb:d8:f7:0f:62:91:2d:a6:58:fa:2f:53:c4:67:85:b3:32:
22:3e:11:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8FZ/IPOrsvltFFeX62OJr1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwNDIyMTA0NDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjBhNGMyYzBlOTcxZDllNzU0ODliMWZiMDk2MzljYjk0OThmZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF++xoTwD+qLF3FbtaMNa1njGOTy
w0ir1QR74WLFqO9auZgYAl7Q2VEKzYYCQvb5SLYCqr95aFoO5o8YgYAXR3WU8q9b
ckE2cyLVKVRZ7D6OG7t/DlE1wnnHOwcbKlZx2Z9STzGWbw0kK8e7N76PgIMQ495w
LbYusxqxstoCPbscPjYs4An/meO5bzzjffyrmsZz+qdNA5SjOjkpxmY17QpmyXbI
Jq7FOU/ey+qWyOUUteANlY2eKxDycb0rG7kPiQrnFwfi/gZeEDqZw4Juou0zYl/h
JRmISY7prmfFqNrwFd2XerBGsNd8aDB6kFCTBCCgzn5wCvxmnfEHLL8LbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF8KTCwOlx2edUibH7CWOcuUmP7XMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvWHdwTUxBNlhIWjUxU0pzZnNKWTV5NVNZX3RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXXtKMA0G
CSqGSIb3DQEBCwUAA4IBAQBH4IWez+uaWpXkTCF82AyND8LJaN2n+gUYtF9vbnjv
qx/syroBU8qp2McEdkjQaVJFCdlyg35/QtVHplQIjpE+liLHjE6IRmgYCyqZFzFx
+J0F+eWc+LUs3RXzMp6pPVB61whJENb86vynrt7Hweq5DhvVovpz0Hom7TD9Om/l
SsurzYsyPdXgLyctGoBJSoS7LELvdxGoGdg7/rHG11phY/BdQ5EslFVxyHMk5eJB
ZyrmTg+AYjYcVfKXqyV3WJt0gRXzuomr1V4mbdJCabgPpaovF+XDKJWNoEW7zXM4
tFnJ6qaKYyLuS5aC+9j3D2KRLaZY+i9TxGeFszIiPhF5
-----END CERTIFICATE-----
Generated at Sun May 5 06:14:22 2024 by rpki-client on console-ams.rpki-client.org