Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/KS8s2mQ1YOWSMcrbv0Y0GJxXJAo.roa
File: KS8s2mQ1YOWSMcrbv0Y0GJxXJAo.roa (raw, json)
Hash identifier: 1aESSzSf+BS+rdZEwC4D4/nVuNpfRMHTjSI3LOcyr1M=
Subject key identifier: 29:2F:2C:DA:64:35:60:E5:92:31:CA:DB:BF:46:34:18:9C:57:24:0A
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC8012B5A5BD91ED6F69B21B57A117FC1
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/KS8s2mQ1YOWSMcrbv0Y0GJxXJAo.roa
Signing time: Tue 02 Jan 2024 02:29:29 +0000
ROA not before: Tue 02 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44242
IP address blocks: 159.148.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2b:5a:5b:d9:1e:d6:f6:9b:21:b5:7a:11:7f:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=292f2cda643560e59231cadbbf4634189c57240a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7f:6f:26:8a:66:19:a9:29:d4:04:8a:88:a7:
35:25:8c:33:6f:e2:94:ec:0e:2b:39:4b:55:ce:7a:
12:6f:2c:18:66:c5:53:b4:a0:4b:f7:0f:8f:35:be:
1f:ee:4d:d5:4e:e9:93:99:4e:fe:88:a1:15:7b:b2:
cf:29:4d:71:7b:15:dc:24:15:a9:8d:ea:02:fa:a3:
ab:50:71:13:49:8f:1a:66:07:d1:4a:57:54:26:0a:
4e:7b:0f:20:85:63:1e:a5:b9:b7:6e:88:83:18:1c:
07:1f:0c:45:c0:34:48:c2:16:d8:57:63:02:92:d7:
fd:35:77:d1:b5:1f:38:3e:00:bb:62:b0:d5:55:30:
98:c6:a6:a4:5f:d2:62:67:f1:5f:6d:1d:e4:d6:57:
42:e4:2e:9c:31:89:ab:3d:99:30:88:6e:10:7e:bf:
22:d5:f8:ee:c7:93:5c:cd:5d:05:01:28:2c:23:c3:
3f:82:20:70:a4:07:7e:6e:cb:cf:07:d1:19:8b:f8:
2e:51:20:ff:7f:ac:e1:5d:fa:26:5d:4c:85:e1:43:
c1:ed:ff:2c:26:f0:5d:cd:e8:83:98:db:db:83:e1:
4a:57:96:08:86:e6:65:ff:d3:d7:aa:e7:79:4b:56:
58:66:6e:94:2e:54:6a:e1:3c:3a:24:9e:a6:4d:23:
c6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:2F:2C:DA:64:35:60:E5:92:31:CA:DB:BF:46:34:18:9C:57:24:0A
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/KS8s2mQ1YOWSMcrbv0Y0GJxXJAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.30.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:56:e2:8f:b3:db:22:44:1c:24:a8:cf:c0:18:df:6f:41:ab:
86:de:c2:12:c5:50:46:a5:2b:24:5e:97:34:8a:de:45:73:7b:
db:3f:45:07:21:84:8f:da:7e:fd:90:0a:fb:4d:c1:60:d8:a1:
52:eb:e3:ce:d9:e5:9e:b2:5b:cf:b9:8a:aa:07:58:15:62:f4:
08:a7:7d:91:40:89:61:fe:b3:5d:53:e8:3d:e8:1b:65:aa:04:
15:b2:06:06:c2:24:fc:c0:d7:5e:61:a1:f3:7f:b5:e8:7f:13:
65:f6:28:8f:68:8e:e9:39:49:76:83:a4:e2:74:ad:eb:02:f2:
d4:3e:b6:e7:da:f3:34:e0:00:17:14:b3:24:46:8e:d3:3f:29:
62:2f:94:0e:37:96:bf:43:6f:63:be:18:7d:01:c1:02:af:55:
ca:1c:a3:ee:27:5d:13:28:9b:a5:f4:15:9b:7d:50:ef:15:8f:
93:ad:23:36:fb:c2:6c:2e:9b:ed:47:06:15:19:c1:b7:42:62:
66:8c:e7:22:d5:f9:64:38:40:03:dc:5f:cd:fd:b4:5c:32:15:
1a:ee:9a:d2:7a:72:69:0f:b6:a1:e4:81:6b:ae:1d:b1:4b:72:
d8:22:9e:74:e8:72:fe:26:44:12:f5:0a:2f:62:b1:e9:6e:e0:
ea:43:4d:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAStaW9ke1vabIbV6EX/BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDk1MmM4YmE4ZGFkYjFkMzRkZTZjNmE5Mzg2NGE2MDlm
YzQxZWMwHhcNMjQwMTAyMDIyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTJmMmNkYTY0MzU2MGU1OTIzMWNhZGJiZjQ2MzQxODljNTcyNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxX9vJopmGakp1ASKiKc1JYwzb+KU
7A4rOUtVznoSbywYZsVTtKBL9w+PNb4f7k3VTumTmU7+iKEVe7LPKU1xexXcJBWp
jeoC+qOrUHETSY8aZgfRSldUJgpOew8ghWMepbm3boiDGBwHHwxFwDRIwhbYV2MC
ktf9NXfRtR84PgC7YrDVVTCYxqakX9JiZ/FfbR3k1ldC5C6cMYmrPZkwiG4Qfr8i
1fjux5NczV0FASgsI8M/giBwpAd+bsvPB9EZi/guUSD/f6zhXfomXUyF4UPB7f8s
JvBdzeiDmNvbg+FKV5YIhuZl/9PXqud5S1ZYZm6ULlRq4Tw6JJ6mTSPG3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCkvLNpkNWDlkjHK279GNBicVyQKMB8GA1UdIwQY
MBaAFKsJUsi6ja2x003mxqk4ZKYJ/EHsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAt
NTU1NGQ2ZTE2ODZmLzEvS1M4czJtUTFZT1dTTWNyYnYwWTBHSnhYSkFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zNTU1ZmUtMTJjZC00MDJhLWE4MTAtNTU1NGQ2ZTE2ODZm
LzEvcXdsU3lMcU5yYkhUVGViR3FUaGtwZ244UWV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAn5QeMA0G
CSqGSIb3DQEBCwUAA4IBAQDGVuKPs9siRBwkqM/AGN9vQauG3sISxVBGpSskXpc0
it5Fc3vbP0UHIYSP2n79kAr7TcFg2KFS6+PO2eWeslvPuYqqB1gVYvQIp32RQIlh
/rNdU+g96BtlqgQVsgYGwiT8wNdeYaHzf7XofxNl9iiPaI7pOUl2g6TidK3rAvLU
Prbn2vM04AAXFLMkRo7TPyliL5QON5a/Q29jvhh9AcECr1XKHKPuJ10TKJul9BWb
fVDvFY+TrSM2+8JsLpvtRwYVGcG3QmJmjOci1flkOEAD3F/N/bRcMhUa7prSenJp
D7ah5IFrrh2xS3LYIp506HL+JkQS9QovYrHpbuDqQ03T
-----END CERTIFICATE-----
Generated at Wed May 1 22:33:05 2024 by rpki-client on console-fra.rpki-client.org