Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/rN0EluIZm185B1LGuOAWOVeeEIg.roa
File: rN0EluIZm185B1LGuOAWOVeeEIg.roa (raw, json)
Hash identifier: BzGTbIqCma6uQg2v9cInDCuiVhhcWiaGoQyxuTuFN2o=
Subject key identifier: AC:DD:04:96:E2:19:9B:5F:39:07:52:C6:B8:E0:16:39:57:9E:10:88
Certificate issuer: /CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Certificate serial: 018CC4930DD673BA7A2519DC567C2E689A9F
Authority key identifier: 31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/rN0EluIZm185B1LGuOAWOVeeEIg.roa
Signing time: Mon 01 Jan 2024 10:30:20 +0000
ROA not before: Mon 01 Jan 2024 10:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47147
IP address blocks: 185.93.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 01:03:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:0d:d6:73:ba:7a:25:19:dc:56:7c:2e:68:9a:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=317b8147503ea19f581ca00d28dbee5e58cb8f48
Validity
Not Before: Jan 1 10:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=acdd0496e2199b5f390752c6b8e01639579e1088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f5:e4:09:43:b6:3e:2f:4a:65:0c:52:ec:3a:
7a:78:51:5a:40:89:39:a5:03:94:7b:f3:ab:bb:df:
03:7c:5c:7c:cd:3f:9e:3b:6a:e3:6b:e8:6d:36:4b:
4c:5a:ca:91:0a:16:3d:46:af:4c:f7:f4:3f:16:01:
82:23:0c:1e:72:73:10:7c:32:79:e1:ba:4b:fd:1d:
ea:c0:e2:2c:5d:22:af:e5:83:9e:17:ad:aa:96:63:
57:10:3b:d2:53:34:36:39:dc:43:76:1c:9f:75:1f:
83:00:a9:7f:35:95:f3:92:7a:57:97:da:e9:1a:47:
37:4c:13:8e:ad:70:92:d5:0f:fa:f9:40:f3:ab:83:
d5:30:84:4a:ea:5e:be:92:3d:fe:0c:93:88:de:ea:
6a:08:d1:c7:62:ed:3c:40:8c:77:60:c1:26:71:b3:
dc:bf:b7:2d:6c:73:d0:c1:ca:9f:8b:5d:e0:80:d3:
ec:42:11:91:ba:16:b2:75:1a:08:38:0b:ef:ff:a6:
9e:ca:c6:9e:e0:f0:78:6c:fe:d0:72:96:a7:48:9a:
48:3c:93:e1:cb:f7:90:8b:0b:44:bb:23:4f:ee:5a:
7c:5a:8b:f2:61:4e:ae:3f:3c:d9:a9:69:32:16:b0:
2d:6b:bc:4e:a8:9b:0f:92:e5:7d:9e:1a:77:ba:36:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DD:04:96:E2:19:9B:5F:39:07:52:C6:B8:E0:16:39:57:9E:10:88
X509v3 Authority Key Identifier:
keyid:31:7B:81:47:50:3E:A1:9F:58:1C:A0:0D:28:DB:EE:5E:58:CB:8F:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MXuBR1A-oZ9YHKANKNvuXljLj0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/rN0EluIZm185B1LGuOAWOVeeEIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2e4e54-0548-4d0c-93f1-75461abbb5a4/1/MXuBR1A-oZ9YHKANKNvuXljLj0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.213.0/24
Signature Algorithm: sha256WithRSAEncryption
16:a3:0a:08:ff:60:df:eb:b5:17:f9:a9:81:aa:1e:f5:40:76:
b9:0f:63:af:b4:8f:f7:79:19:b8:ff:37:5b:a8:19:41:46:b2:
a7:b0:ed:b2:f5:1f:fe:f8:23:13:76:d8:6c:81:af:4e:fa:df:
cd:0d:a6:b6:14:a4:b2:87:6d:f2:2d:a4:db:4b:45:ad:4a:ce:
1e:e8:d1:7a:e2:c0:0b:c8:8a:1c:be:c9:df:93:36:bc:f6:16:
e0:82:32:87:0e:f4:58:3d:3c:b1:c3:3b:75:2e:a4:5b:f8:c5:
26:a5:5d:f4:98:db:03:88:73:bc:b3:3e:ce:b8:cf:38:49:c7:
91:0f:ff:dc:97:2b:1e:bf:a0:2c:32:72:03:35:de:42:fc:14:
59:08:07:84:b7:57:ab:52:23:c0:44:87:f1:fe:94:ff:5c:7d:
ed:7c:32:0a:89:bb:59:ee:34:60:e6:bb:9c:be:73:bc:67:77:
a5:ff:d2:e7:a6:92:b7:79:70:b8:e7:d3:b5:6f:a2:41:3b:c9:
87:3e:60:79:5c:03:1c:fa:b9:d6:01:e6:96:29:3b:ec:bd:69:
e3:92:13:fc:16:2f:de:16:36:38:fa:7e:45:33:0c:ee:6e:63:
1e:c6:ec:fb:f7:a0:d5:00:1d:78:a0:2d:d5:81:52:f6:9f:b4:
57:cc:b0:ba
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkw3Wc7p6JRncVnwuaJqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxN2I4MTQ3NTAzZWExOWY1ODFjYTAwZDI4ZGJlZTVlNThj
YjhmNDgwHhcNMjQwMTAxMTAzMDIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2RkMDQ5NmUyMTk5YjVmMzkwNzUyYzZiOGUwMTYzOTU3OWUxMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAifXkCUO2Pi9KZQxS7Dp6eFFaQIk5
pQOUe/Oru98DfFx8zT+eO2rja+htNktMWsqRChY9Rq9M9/Q/FgGCIwwecnMQfDJ5
4bpL/R3qwOIsXSKv5YOeF62qlmNXEDvSUzQ2OdxDdhyfdR+DAKl/NZXzknpXl9rp
Gkc3TBOOrXCS1Q/6+UDzq4PVMIRK6l6+kj3+DJOI3upqCNHHYu08QIx3YMEmcbPc
v7ctbHPQwcqfi13ggNPsQhGRuhaydRoIOAvv/6aeysae4PB4bP7QcpanSJpIPJPh
y/eQiwtEuyNP7lp8WovyYU6uPzzZqWkyFrAta7xOqJsPkuV9nhp3ujaqYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKzdBJbiGZtfOQdSxrjgFjlXnhCIMB8GA1UdIwQY
MBaAFDF7gUdQPqGfWBygDSjb7l5Yy49IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEt
NzU0NjFhYmJiNWE0LzEvck4wRWx1SVptMTg1QjFMR3VPQVdPVmVlRUlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8yZTRlNTQtMDU0OC00ZDBjLTkzZjEtNzU0NjFhYmJiNWE0
LzEvTVh1QlIxQS1vWjlZSEtBTktOdnVYbGpMajBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV3VMA0G
CSqGSIb3DQEBCwUAA4IBAQAWowoI/2Df67UX+amBqh71QHa5D2OvtI/3eRm4/zdb
qBlBRrKnsO2y9R/++CMTdthsga9O+t/NDaa2FKSyh23yLaTbS0WtSs4e6NF64sAL
yIocvsnfkza89hbggjKHDvRYPTyxwzt1LqRb+MUmpV30mNsDiHO8sz7OuM84SceR
D//clysev6AsMnIDNd5C/BRZCAeEt1erUiPARIfx/pT/XH3tfDIKibtZ7jRg5ruc
vnO8Z3el/9LnppK3eXC459O1b6JBO8mHPmB5XAMc+rnWAeaWKTvsvWnjkhP8Fi/e
FjY4+n5FMwzubmMexuz796DVAB14oC3VgVL2n7RXzLC6
-----END CERTIFICATE-----
Generated at Sat Jun 8 09:18:48 2024 by rpki-client on console-fra.rpki-client.org