Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/N3J2exA9TCoQe0fPQ87H9TUeEUs.roa
File: N3J2exA9TCoQe0fPQ87H9TUeEUs.roa (raw, json)
Hash identifier: ukMF3ZJRwF2Xi4nqQHRs0k6J0ADW3F5NR1OOEXzYdek=
Subject key identifier: 37:72:76:7B:10:3D:4C:2A:10:7B:47:CF:43:CE:C7:F5:35:1E:11:4B
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019074B9E884C77273BE2C88D942FB701D7E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/N3J2exA9TCoQe0fPQ87H9TUeEUs.roa
Signing time: Tue 02 Jul 2024 18:34:18 +0000
ROA not before: Tue 02 Jul 2024 18:34:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 193.233.21.0/24 maxlen: 24
193.233.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:74:b9:e8:84:c7:72:73:be:2c:88:d9:42:fb:70:1d:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 2 18:34:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3772767b103d4c2a107b47cf43cec7f5351e114b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a5:34:09:ed:34:5e:2d:1e:63:10:da:4c:3c:
d1:cc:d4:71:17:d3:2e:f2:05:aa:01:eb:eb:ef:5d:
73:3c:62:c8:d7:94:bc:fa:33:5d:49:e9:80:7f:dd:
f2:f1:a3:65:47:d8:45:19:9d:77:42:c1:12:dd:26:
ae:e3:97:94:07:6d:f4:f9:00:8e:9c:4e:04:45:c6:
55:56:44:a4:f6:67:6b:3e:1c:f3:ee:b1:ad:b0:5a:
fa:71:57:c3:0a:e5:8f:71:f5:01:db:3c:8a:e7:01:
91:6f:96:e8:b6:68:7c:25:d2:4e:a4:91:45:73:76:
3d:fb:22:2c:88:a9:00:66:79:85:de:49:d2:fb:c9:
fb:f2:aa:ed:11:0f:2c:6b:9d:ce:a4:a1:81:32:a3:
2f:51:fc:5d:53:32:d3:50:65:7e:c0:b4:e1:b9:d3:
b6:e4:26:40:0b:40:11:54:ae:a3:a8:40:3b:d6:13:
b8:79:c5:d6:c8:56:d1:8b:d5:37:fc:0a:8c:72:79:
04:11:c0:7f:cd:cc:dc:82:75:0c:ed:2b:51:08:d1:
de:14:63:7a:52:8f:43:3a:a5:45:09:7f:06:b7:f2:
b9:6e:b8:0b:d9:cc:90:5c:a7:b1:62:25:07:c8:56:
f9:d5:c7:8a:a5:0c:1d:fd:13:34:41:bb:44:96:d9:
e6:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:72:76:7B:10:3D:4C:2A:10:7B:47:CF:43:CE:C7:F5:35:1E:11:4B
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/N3J2exA9TCoQe0fPQ87H9TUeEUs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.21.0/24
193.233.132.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:f8:d8:a7:2e:2c:8e:ab:33:2a:fb:c2:1d:c2:75:f5:6c:d8:
7f:a5:c5:93:29:cc:ec:b3:e8:74:6a:2e:4e:46:69:24:cc:76:
d0:08:dc:b5:89:74:f1:c4:39:fb:1d:ce:ce:26:c2:6b:05:dd:
bd:f2:8f:45:03:94:46:9e:32:16:05:4c:9f:61:06:4d:8b:f8:
39:b4:10:b9:e7:4a:25:ef:12:da:63:a8:be:40:ee:65:48:ce:
c7:dd:2c:76:b3:3c:12:5f:34:cc:d7:92:3c:df:02:99:53:e9:
28:be:1d:1f:7e:7f:42:64:17:22:ef:54:65:dc:b7:ec:5d:0e:
63:ce:15:f1:fd:d9:99:a6:ae:99:f5:3c:f3:ad:d0:30:a7:1a:
81:59:8e:6b:55:ec:12:38:bf:75:bb:a8:34:d1:34:c1:15:bb:
71:f6:0f:bf:57:bf:e1:25:48:9d:31:26:bb:47:dc:2f:87:8d:
e9:b6:37:4d:5f:b1:38:77:77:ec:2e:a9:f2:f5:2c:18:ef:ba:
fa:56:ef:6a:ff:ff:b1:83:06:cb:45:83:59:ed:cb:01:cc:5c:
c9:a2:c3:ec:1b:d7:c8:2e:b2:b8:dc:26:d5:c8:54:b9:78:f7:
8c:a5:21:19:b2:fd:71:2e:24:d1:ae:18:e0:16:11:ab:5d:c3:
66:46:08:d4
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZB0ueiEx3JzviyI2UL7cB1+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjQwNzAyMTgzNDE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNzcyNzY3YjEwM2Q0YzJhMTA3YjQ3Y2Y0M2NlYzdmNTM1MWUxMTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqU0Ce00Xi0eYxDaTDzRzNRxF9Mu
8gWqAevr711zPGLI15S8+jNdSemAf93y8aNlR9hFGZ13QsES3Sau45eUB230+QCO
nE4ERcZVVkSk9mdrPhzz7rGtsFr6cVfDCuWPcfUB2zyK5wGRb5botmh8JdJOpJFF
c3Y9+yIsiKkAZnmF3knS+8n78qrtEQ8sa53OpKGBMqMvUfxdUzLTUGV+wLThudO2
5CZAC0ARVK6jqEA71hO4ecXWyFbRi9U3/AqMcnkEEcB/zczcgnUM7StRCNHeFGN6
Uo9DOqVFCX8Gt/K5brgL2cyQXKexYiUHyFb51ceKpQwd/RM0QbtEltnmiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDdydnsQPUwqEHtHz0POx/U1HhFLMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvTjNKMmV4QTlUQ29RZTBmUFE4N0g5VFVlRVVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwekVAwQA
wemEMA0GCSqGSIb3DQEBCwUAA4IBAQAN+NinLiyOqzMq+8IdwnX1bNh/pcWTKczs
s+h0ai5ORmkkzHbQCNy1iXTxxDn7Hc7OJsJrBd298o9FA5RGnjIWBUyfYQZNi/g5
tBC550ol7xLaY6i+QO5lSM7H3Sx2szwSXzTM15I83wKZU+kovh0ffn9CZBci71Rl
3LfsXQ5jzhXx/dmZpq6Z9TzzrdAwpxqBWY5rVewSOL91u6g00TTBFbtx9g+/V7/h
JUidMSa7R9wvh43ptjdNX7E4d3fsLqny9SwY77r6Vu9q//+xgwbLRYNZ7csBzFzJ
osPsG9fILrK43CbVyFS5ePeMpSEZsv1xLiTRrhjgFhGrXcNmRgjU
-----END CERTIFICATE-----
Generated at Fri Nov 22 04:33:08 2024 by rpki-client on console-fra.rpki-client.org