Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/SwjqkCXl3atRWN3pPZVhKMmfx8o.roa
File: SwjqkCXl3atRWN3pPZVhKMmfx8o.roa (raw, json)
Hash identifier: fJjmrBBwvLX+llqD/Z7Opg0/YAd0B60g3ncBIV++URE=
Subject key identifier: 4B:08:EA:90:25:E5:DD:AB:51:58:DD:E9:3D:95:61:28:C9:9F:C7:CA
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 018CC4930D48BC78107BF3B258AF5C5F129D
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/SwjqkCXl3atRWN3pPZVhKMmfx8o.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42473
IP address blocks: 185.93.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0d:48:bc:78:10:7b:f3:b2:58:af:5c:5f:12:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b08ea9025e5ddab5158dde93d956128c99fc7ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:d9:ca:90:6a:fb:5c:00:e1:90:43:93:78:
fd:b9:5c:20:ec:b4:eb:a7:f0:59:d0:b9:26:77:a3:
3e:d9:4e:ec:6b:9b:93:cd:84:67:ce:bf:10:dd:12:
4c:c7:cf:a5:82:ba:bc:43:69:c7:16:9a:4b:d9:81:
5b:2c:86:f7:ed:fb:ab:f9:90:86:00:4b:0e:71:49:
64:2c:d5:a7:57:ca:03:4e:ba:34:48:0d:a1:3d:66:
1f:0a:ba:cc:ef:3c:e6:76:7f:8c:13:ed:40:68:05:
97:0a:6e:1d:82:ff:a2:7a:39:d7:45:ae:c2:54:eb:
44:b3:8e:2e:c1:07:0a:9f:f3:f3:82:ea:a8:9e:99:
f4:31:1f:95:0b:03:21:b9:28:cc:bd:99:20:34:28:
51:e0:de:53:e9:dc:84:74:e2:5b:14:57:a0:ea:32:
86:82:2c:71:c8:44:6e:b3:e0:cb:a0:31:7e:9b:98:
92:fd:cc:b1:d5:09:c4:7f:17:0d:87:3c:58:d3:16:
fa:a0:1a:14:20:ff:fc:87:21:ec:12:28:ac:eb:8c:
1e:77:53:9d:6f:20:2a:8e:a8:e0:6a:cc:20:21:c6:
9a:0d:b3:b6:51:5c:09:ae:9a:61:d1:e4:67:f9:28:
7d:a3:19:b1:43:05:cb:ca:f7:66:e4:18:f8:8f:9b:
a3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:08:EA:90:25:E5:DD:AB:51:58:DD:E9:3D:95:61:28:C9:9F:C7:CA
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/SwjqkCXl3atRWN3pPZVhKMmfx8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.213.0/24
Signature Algorithm: sha256WithRSAEncryption
38:ec:d8:9e:e2:a0:41:3d:f3:9e:89:04:da:3c:a4:4b:ac:45:
f4:57:52:6d:bf:f6:05:41:fd:84:0b:35:4a:4d:be:b6:bb:13:
4e:b7:1f:37:92:db:b0:6b:63:91:a2:a6:48:5a:f0:2e:71:19:
6d:38:19:2d:6c:68:99:38:31:c0:2e:d2:76:4e:67:80:44:de:
14:8f:fa:f2:3f:f9:ed:c0:c3:57:8f:e1:ec:13:23:75:13:00:
c3:91:70:02:47:42:21:34:0e:13:e1:cb:67:d9:e5:c7:e8:7f:
0d:9e:8a:ae:bf:25:a0:d4:7f:f1:c9:c0:25:d8:af:12:6a:6d:
06:5a:7b:37:3c:c0:0f:6b:08:4b:90:f6:00:db:2a:fc:eb:c3:
34:31:9f:88:2d:1b:ba:0c:3d:ac:9c:cd:46:92:0b:bd:38:23:
aa:c8:31:66:3c:72:66:61:f4:37:cb:b3:42:39:3d:80:5a:a0:
db:49:67:c8:65:ae:c4:cc:20:88:67:d1:fc:cf:21:2e:54:ce:
c5:81:93:2f:51:66:d9:eb:5a:05:1f:4d:ce:f2:58:01:07:80:
d5:93:c6:08:c2:9d:34:12:f5:c7:6a:94:9c:00:5f:5d:13:21:
c6:62:77:fd:d0:60:5b:1a:35:7a:fb:68:58:3c:5e:18:86:a8:
61:c3:70:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkw1IvHgQe/OyWK9cXxKdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2I4MTQ3NTAzZWExOWY1ODFjYTAwZDI4ZGJlZTVlNThj
YjhmNDgwHhcNMjQwMTAxMTAzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjA4ZWE5MDI1ZTVkZGFiNTE1OGRkZTkzZDk1NjEyOGM5OWZjN2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZfZypBq+1wA4ZBDk3j9uVwg7LTr
p/BZ0Lkmd6M+2U7sa5uTzYRnzr8Q3RJMx8+lgrq8Q2nHFppL2YFbLIb37fur+ZCG
AEsOcUlkLNWnV8oDTro0SA2hPWYfCrrM7zzmdn+ME+1AaAWXCm4dgv+iejnXRa7C
VOtEs44uwQcKn/Pzguqonpn0MR+VCwMhuSjMvZkgNChR4N5T6dyEdOJbFFeg6jKG
gixxyERus+DLoDF+m5iS/cyx1QnEfxcNhzxY0xb6oBoUIP/8hyHsEiis64wed1Od
byAqjqjgaswgIcaaDbO2UVwJrpph0eRn+Sh9oxmxQwXLyvdm5Bj4j5ujYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEsI6pAl5d2rUVjd6T2VYSjJn8fKMB8GA1UdIwQY
MBaAFDF7gUdQPqGfWBygDSjb7l5Yy49IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEt
NzU0NjFhYmJiNWE0LzEvU3dqcWtDWGwzYXRSV04zcFBaVmhLTW1meDhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEtNzU0NjFhYmJiNWE0
LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV3VMA0G
CSqGSIb3DQEBCwUAA4IBAQA47Nie4qBBPfOeiQTaPKRLrEX0V1Jtv/YFQf2ECzVK
Tb62uxNOtx83ktuwa2ORoqZIWvAucRltOBktbGiZODHALtJ2TmeARN4Uj/ryP/nt
wMNXj+HsEyN1EwDDkXACR0IhNA4T4ctn2eXH6H8NnoquvyWg1H/xycAl2K8Sam0G
Wns3PMAPawhLkPYA2yr868M0MZ+ILRu6DD2snM1Gkgu9OCOqyDFmPHJmYfQ3y7NC
OT2AWqDbSWfIZa7EzCCIZ9H8zyEuVM7FgZMvUWbZ61oFH03O8lgBB4DVk8YIwp00
EvXHapScAF9dEyHGYnf90GBbGjV6+2hYPF4Yhqhhw3Bn
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:26:46 2024 by rpki-client on console-fra.rpki-client.org