Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/k0tRvOgFr0-s00shnkWW6WYksbQ.roa
File: k0tRvOgFr0-s00shnkWW6WYksbQ.roa (raw, json)
Hash identifier: WL7nwvFWt3SRWiYCsexgSPNrVImAPlL1TrznWn7+TNM=
Subject key identifier: 93:4B:51:BC:E8:05:AF:4F:AC:D3:4B:21:9E:45:96:E9:66:24:B1:B4
Certificate issuer: /CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Certificate serial: 0190C10515BBFE9FDB94B6A868B13CC8284E
Authority key identifier: C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/k0tRvOgFr0-s00shnkWW6WYksbQ.roa
Signing time: Wed 17 Jul 2024 14:07:34 +0000
ROA not before: Wed 17 Jul 2024 14:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210635
IP address blocks: 193.33.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 14:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c1:05:15:bb:fe:9f:db:94:b6:a8:68:b1:3c:c8:28:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a0f3110984ccfbf529980b6d416ddd4e1a8825
Validity
Not Before: Jul 17 14:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=934b51bce805af4facd34b219e4596e96624b1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ea:9f:09:a3:ec:b6:ca:51:60:85:ff:f5:66:
e8:52:4f:f8:46:1b:86:87:65:4a:f8:c3:2a:0e:f8:
c0:41:f5:6c:f7:30:55:d9:af:c3:2e:f5:f9:58:4c:
ab:7e:31:86:08:f2:17:12:5e:16:1f:ff:a7:a5:71:
bb:df:34:a0:5d:69:e4:9f:28:0b:bc:42:b9:a2:29:
0c:f9:53:2b:98:13:f9:85:ca:e0:14:bb:f3:df:a8:
2f:2e:46:38:2a:8e:2e:3c:a5:10:da:53:58:4f:7a:
74:79:c6:96:b8:ae:05:5d:7d:b9:b2:39:de:87:95:
62:dd:25:2f:51:0b:a3:d5:e9:95:76:31:60:f0:ac:
3b:5d:ec:0e:0b:bf:d3:97:9f:f0:c7:ce:81:46:48:
f3:17:d0:77:4f:17:08:af:fd:af:44:05:6c:0d:ab:
6d:63:f9:12:89:66:fc:64:24:41:07:4d:ae:55:89:
76:4c:42:e4:fb:6d:ee:88:ef:65:b1:fd:67:26:ba:
bd:aa:53:b8:f8:ce:05:80:d6:b8:7d:49:97:cb:5b:
4a:b4:f7:81:34:10:43:6b:04:a7:3b:f5:62:ae:6b:
bd:b0:01:03:f4:48:ae:4c:ef:ad:7a:7f:3c:ea:a6:
82:03:2b:6b:d4:14:3d:30:9d:b7:01:cd:84:77:8e:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:4B:51:BC:E8:05:AF:4F:AC:D3:4B:21:9E:45:96:E9:66:24:B1:B4
X509v3 Authority Key Identifier:
keyid:C4:A0:F3:11:09:84:CC:FB:F5:29:98:0B:6D:41:6D:DD:4E:1A:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKDzEQmEzPv1KZgLbUFt3U4aiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/k0tRvOgFr0-s00shnkWW6WYksbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6c5f6-604f-4399-9443-d12a90bf502e/1/xKDzEQmEzPv1KZgLbUFt3U4aiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.28.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c6:88:b1:c1:55:6a:5b:22:c8:f1:6f:4b:5a:5f:82:8e:e6:
64:e7:64:b3:31:b5:d4:22:fc:1e:06:46:5a:08:a0:75:e3:e3:
34:bb:40:02:62:83:20:c2:f2:f2:8f:ff:e0:10:b1:63:69:38:
6d:fe:d5:7b:db:7d:1b:71:c2:c7:ac:ee:0d:7b:08:f8:4c:e9:
29:1e:2b:f5:4d:85:ab:12:12:ca:29:dd:38:3a:f1:1c:7a:d2:
40:37:b6:96:01:4a:fe:49:40:ba:b3:89:ec:00:be:a8:bc:99:
bd:d3:72:32:21:1e:1d:ea:ba:3d:88:5c:26:3a:45:6b:52:d8:
3d:c9:c0:85:dd:30:13:71:c1:d1:93:af:67:e9:a5:b3:9c:ff:
43:62:9b:24:f2:7e:be:dd:38:ed:49:e0:7e:5f:f0:42:9c:8d:
8e:1b:26:d4:00:db:1c:71:1c:e4:60:1e:bd:fd:85:64:e2:74:
a0:69:a1:6b:91:4a:21:5c:7b:e5:7c:73:12:e8:97:c1:98:f2:
20:ee:5d:c3:50:2f:16:14:86:11:7c:71:4c:8c:c5:8d:4a:aa:
99:11:99:fd:8a:73:9a:c1:d1:46:3b:7e:1f:2f:6c:f7:2f:7e:
19:90:ef:5d:a7:b5:1a:72:67:b1:f6:92:47:7e:44:1d:54:b6:
8a:c1:73:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZDBBRW7/p/blLaoaLE8yChOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0YTBmMzExMDk4NGNjZmJmNTI5OTgwYjZkNDE2ZGRkNGUx
YTg4MjUwHhcNMjQwNzE3MTQwNzM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzRiNTFiY2U4MDVhZjRmYWNkMzRiMjE5ZTQ1OTZlOTY2MjRiMWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuqfCaPstspRYIX/9WboUk/4RhuG
h2VK+MMqDvjAQfVs9zBV2a/DLvX5WEyrfjGGCPIXEl4WH/+npXG73zSgXWnknygL
vEK5oikM+VMrmBP5hcrgFLvz36gvLkY4Ko4uPKUQ2lNYT3p0ecaWuK4FXX25sjne
h5Vi3SUvUQuj1emVdjFg8Kw7XewOC7/Tl5/wx86BRkjzF9B3TxcIr/2vRAVsDatt
Y/kSiWb8ZCRBB02uVYl2TELk+23uiO9lsf1nJrq9qlO4+M4FgNa4fUmXy1tKtPeB
NBBDawSnO/Virmu9sAED9EiuTO+ten886qaCAytr1BQ9MJ23Ac2Ed44jQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNLUbzoBa9PrNNLIZ5FlulmJLG0MB8GA1UdIwQY
MBaAFMSg8xEJhMz79SmYC21Bbd1OGoglMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMt
ZDEyYTkwYmY1MDJlLzEvazB0UnZPZ0ZyMC1zMDBzaG5rV1c2V1lrc2JRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hNmM1ZjYtNjA0Zi00Mzk5LTk0NDMtZDEyYTkwYmY1MDJl
LzEveEtEekVRbUV6UHYxS1pnTGJVRnQzVTRhaUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSEcMA0G
CSqGSIb3DQEBCwUAA4IBAQAtxoixwVVqWyLI8W9LWl+CjuZk52SzMbXUIvweBkZa
CKB14+M0u0ACYoMgwvLyj//gELFjaTht/tV7230bccLHrO4Newj4TOkpHiv1TYWr
EhLKKd04OvEcetJAN7aWAUr+SUC6s4nsAL6ovJm903IyIR4d6ro9iFwmOkVrUtg9
ycCF3TATccHRk69n6aWznP9DYpsk8n6+3TjtSeB+X/BCnI2OGybUANsccRzkYB69
/YVk4nSgaaFrkUohXHvlfHMS6JfBmPIg7l3DUC8WFIYRfHFMjMWNSqqZEZn9inOa
wdFGO34fL2z3L34ZkO9dp7Uacmex9pJHfkQdVLaKwXNK
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:35:55 2024 by rpki-client on console-fra.rpki-client.org