Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/C-ToZctXskEo7ARwENJUXwZGxX0.roa
File: C-ToZctXskEo7ARwENJUXwZGxX0.roa (raw, json)
Hash identifier: CTPzIfEo9JOvgMwNdwgn/W3Ibt4FTsPz8hO7zpCw9A4=
Subject key identifier: 0B:E4:E8:65:CB:57:B2:41:28:EC:04:70:10:D2:54:5F:06:46:C5:7D
Certificate issuer: /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial: 018CC5DC61CF0AF29354CC18A470DC4DDB67
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/C-ToZctXskEo7ARwENJUXwZGxX0.roa
Signing time: Mon 01 Jan 2024 16:30:03 +0000
ROA not before: Mon 01 Jan 2024 16:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209593
IP address blocks: 141.98.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:61:cf:0a:f2:93:54:cc:18:a4:70:dc:4d:db:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
Validity
Not Before: Jan 1 16:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0be4e865cb57b24128ec047010d2545f0646c57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:26:b7:74:68:d7:de:e2:a4:ce:a8:02:85:84:
6b:eb:f4:25:b7:0a:a3:fa:ff:43:2f:25:38:fd:83:
a7:aa:47:58:78:ca:04:96:6c:eb:4b:6a:1c:e6:cb:
84:3f:7c:7e:cf:96:53:24:03:c4:91:24:1a:ab:17:
07:fb:b6:b8:26:d3:c2:f7:c7:c4:b4:ec:53:5d:d8:
15:00:06:bc:06:1d:7f:91:78:38:ec:42:82:1d:61:
a3:b9:14:23:6e:11:d7:66:b6:7b:56:d7:86:da:fc:
e1:60:70:cf:66:ca:e0:7a:0f:9a:a7:76:8d:ed:0c:
73:61:20:97:69:43:58:46:67:21:fe:ef:4f:f1:95:
e0:6b:20:4e:38:fe:a5:bc:0d:2a:7d:cd:ae:58:3f:
4e:ec:2b:c9:73:f4:cd:10:28:17:08:5f:9b:d3:fe:
5a:42:a6:1a:c9:72:be:16:62:3b:41:24:40:17:5e:
e5:6b:cb:bc:f7:c9:20:d0:ce:2e:f4:1a:67:6e:e5:
e8:25:9e:df:79:54:ac:da:ce:91:77:32:49:8c:12:
53:de:b0:ec:2e:bb:39:34:ce:c0:92:1e:48:ab:a9:
dc:fe:d0:f1:d0:0b:7b:d6:ab:9c:d5:13:ba:9c:04:
6c:91:33:3d:cc:d3:e4:1f:bc:8f:2a:db:27:6f:fa:
d9:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:E4:E8:65:CB:57:B2:41:28:EC:04:70:10:D2:54:5F:06:46:C5:7D
X509v3 Authority Key Identifier:
keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/C-ToZctXskEo7ARwENJUXwZGxX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.108.0/24
Signature Algorithm: sha256WithRSAEncryption
73:68:9d:8c:99:e6:db:01:0a:96:a2:ca:f2:10:19:e6:83:b3:
42:f5:b2:a1:7b:39:0f:9a:e7:b4:dc:27:1f:31:74:dc:a4:2f:
f4:3b:d4:56:03:4a:18:8d:0f:ce:39:95:b9:6a:03:8c:d1:3a:
a9:0f:28:26:79:e4:e6:f2:d8:2c:75:88:08:4a:b9:2a:79:74:
8e:c3:e7:6b:3b:b7:53:0d:44:2e:29:cf:cd:dc:26:ff:49:1c:
a8:9b:fd:02:67:20:21:1d:6a:76:72:9a:03:cb:d6:fa:fb:b0:
2c:62:1a:d9:76:90:08:71:7c:a2:ec:ab:85:d0:a7:c6:5f:fd:
71:ad:d0:81:e6:78:34:85:42:fa:66:8a:47:44:78:a3:ba:d2:
a9:2c:c9:87:b2:e3:7b:5d:85:ab:be:39:67:4e:e2:29:25:d4:
e9:a2:50:bc:33:9e:86:4a:30:bf:a6:d2:fc:7d:37:e3:98:a7:
51:a3:d0:20:79:b5:14:8b:7a:b0:f0:77:bd:f4:84:ed:73:80:
21:0d:d8:a3:4b:ce:d3:af:9c:02:73:09:41:2f:d8:6a:58:a3:
84:49:b7:57:42:4a:bb:48:d3:ae:69:a1:52:b6:0e:00:bf:31:
ac:13:1d:d3:ed:e9:45:db:a9:d3:e0:90:8f:8d:3f:13:98:c7:
7a:91:ea:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3GHPCvKTVMwYpHDcTdtnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNjAyNjI3Njc5YTQ5ODBiNzBkOGFkZTU3OGYxNDE5MmZh
ZmViOTUwHhcNMjQwMTAxMTYzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmU0ZTg2NWNiNTdiMjQxMjhlYzA0NzAxMGQyNTQ1ZjA2NDZjNTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSa3dGjX3uKkzqgChYRr6/Qltwqj
+v9DLyU4/YOnqkdYeMoElmzrS2oc5suEP3x+z5ZTJAPEkSQaqxcH+7a4JtPC98fE
tOxTXdgVAAa8Bh1/kXg47EKCHWGjuRQjbhHXZrZ7VteG2vzhYHDPZsrgeg+ap3aN
7QxzYSCXaUNYRmch/u9P8ZXgayBOOP6lvA0qfc2uWD9O7CvJc/TNECgXCF+b0/5a
QqYayXK+FmI7QSRAF17la8u898kg0M4u9BpnbuXoJZ7feVSs2s6RdzJJjBJT3rDs
Lrs5NM7Akh5Iq6nc/tDx0At71quc1RO6nARskTM9zNPkH7yPKtsnb/rZOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAvk6GXLV7JBKOwEcBDSVF8GRsV9MB8GA1UdIwQY
MBaAFHFgJidnmkmAtw2K3lePFBkvr+uVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTct
N2Q1OTMwMzNkMDA1LzEvQy1Ub1pjdFhza0VvN0FSd0VOSlVYd1pHeFgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8yNmI0ZTItY2FhMC00OGEzLTgxMTctN2Q1OTMwMzNkMDA1
LzEvY1dBbUoyZWFTWUMzRFlyZVY0OFVHUy12NjVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjWJsMA0G
CSqGSIb3DQEBCwUAA4IBAQBzaJ2MmebbAQqWosryEBnmg7NC9bKhezkPmue03Ccf
MXTcpC/0O9RWA0oYjQ/OOZW5agOM0TqpDygmeeTm8tgsdYgISrkqeXSOw+drO7dT
DUQuKc/N3Cb/SRyom/0CZyAhHWp2cpoDy9b6+7AsYhrZdpAIcXyi7KuF0KfGX/1x
rdCB5ng0hUL6ZopHRHijutKpLMmHsuN7XYWrvjlnTuIpJdTpolC8M56GSjC/ptL8
fTfjmKdRo9AgebUUi3qw8He99ITtc4AhDdijS87Tr5wCcwlBL9hqWKOESbdXQkq7
SNOuaaFStg4AvzGsEx3T7elF26nT4JCPjT8TmMd6kepz
-----END CERTIFICATE-----
Generated at Sat Nov 23 18:55:00 2024 by rpki-client on console-fra.rpki-client.org