Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/cLkhK_fUn737AF53hVIl9T2XOP0.roa
File: cLkhK_fUn737AF53hVIl9T2XOP0.roa (raw, json)
Hash identifier: nshmEPz+wuS3obNS92SFJCFo2WxufWwIR+I+x5QfyRg=
Subject key identifier: 70:B9:21:2B:F7:D4:9F:BD:FB:00:5E:77:85:52:25:F5:3D:97:38:FD
Certificate issuer: /CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Certificate serial: 018D78AEC5C014B88FD425A712F186215F3B
Authority key identifier: F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/cLkhK_fUn737AF53hVIl9T2XOP0.roa
Signing time: Mon 05 Feb 2024 09:52:16 +0000
ROA not before: Mon 05 Feb 2024 09:52:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 193.30.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:78:ae:c5:c0:14:b8:8f:d4:25:a7:12:f1:86:21:5f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f651dc9875e35ec580c571fd0416f4d5f5d4158a
Validity
Not Before: Feb 5 09:52:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=70b9212bf7d49fbdfb005e77855225f53d9738fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:35:db:fa:a7:1d:61:e6:0f:36:42:79:2b:bc:
c5:30:f8:62:5c:f8:e2:1a:c5:b7:b9:3e:4e:50:d3:
68:ae:4c:4e:4e:22:11:1d:ba:5a:e0:59:5f:c9:16:
75:33:e7:46:db:6d:4a:b6:e5:14:57:34:77:29:27:
84:bf:8d:d4:52:29:00:32:d8:59:08:2e:5d:c3:cd:
25:ab:8d:52:d1:20:3d:c9:d1:87:d0:9e:95:31:a9:
29:ab:01:af:81:50:30:9a:5c:31:e7:5b:62:de:9b:
98:45:2d:e4:51:32:49:7a:9c:11:0a:88:38:98:23:
66:f7:b1:84:c9:c7:9b:99:9a:02:9a:eb:6e:2d:3e:
4d:4a:b2:a6:cb:f3:d2:6b:30:d2:22:86:42:74:b5:
f6:07:61:b1:fc:0f:e6:d2:61:d7:98:9d:16:6b:e2:
9d:18:ce:11:8a:1a:8d:f5:60:6f:9e:be:b6:57:3d:
04:ac:aa:34:b1:be:aa:fe:10:b0:ef:9d:1d:ed:1e:
08:ec:a2:8b:93:a8:f7:62:00:af:b1:45:b9:36:d0:
38:04:ad:94:94:a1:43:fe:08:b7:c7:3b:83:f4:cf:
67:2b:3b:dc:c8:e5:fb:d6:38:9e:35:c8:59:8c:71:
d8:9c:7b:fa:df:10:e9:9e:6b:ac:02:70:bb:8b:3d:
33:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B9:21:2B:F7:D4:9F:BD:FB:00:5E:77:85:52:25:F5:3D:97:38:FD
X509v3 Authority Key Identifier:
keyid:F6:51:DC:98:75:E3:5E:C5:80:C5:71:FD:04:16:F4:D5:F5:D4:15:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lHcmHXjXsWAxXH9BBb01fXUFYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/cLkhK_fUn737AF53hVIl9T2XOP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b4d9d7-6703-4b06-b3ee-07510381420a/1/9lHcmHXjXsWAxXH9BBb01fXUFYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.30.101.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:31:bd:ca:92:db:f7:71:ef:2f:ac:1a:61:de:87:e3:8b:a8:
b2:ce:44:50:0f:66:02:f3:0a:75:fa:c9:46:d0:74:b8:c9:b7:
a3:47:ec:c8:26:e5:71:d1:12:cd:bc:0c:47:4d:e3:1b:73:ed:
c8:77:fc:cf:33:3f:95:17:51:d2:42:69:48:97:c2:a2:97:24:
eb:9f:18:03:6a:96:5a:2a:a9:e4:b6:6f:07:a8:6a:e3:e3:2c:
54:43:64:c8:1e:36:b0:ba:f4:ef:8b:dc:45:c9:67:68:a0:a4:
94:8a:00:20:b2:08:d0:f4:a3:1e:4d:86:5a:9b:05:8a:12:4f:
e5:b3:d5:2c:83:25:e9:98:80:4a:dc:ce:25:7d:ff:f7:6f:ea:
0f:c4:17:fd:ed:ca:1d:72:27:e6:ca:cf:40:04:9f:34:31:6d:
b5:c5:be:40:51:54:6b:50:cb:52:f8:55:7d:bf:a1:5a:ad:b8:
a3:78:79:4d:36:6a:50:69:b3:3f:2f:65:11:13:3a:24:aa:54:
64:5c:6c:e0:7f:e7:9f:b3:a5:31:a1:86:c1:8f:53:0f:69:85:
3f:f0:58:7a:60:d0:20:94:5e:61:de:db:5d:73:5e:8f:a3:ac:
d3:d6:da:4d:f0:d5:7a:fe:d0:b2:2b:ec:9f:d1:17:ad:f1:c5:
52:ea:eb:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY14rsXAFLiP1CWnEvGGIV87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTFkYzk4NzVlMzVlYzU4MGM1NzFmZDA0MTZmNGQ1ZjVk
NDE1OGEwHhcNMjQwMjA1MDk1MjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGI5MjEyYmY3ZDQ5ZmJkZmIwMDVlNzc4NTUyMjVmNTNkOTczOGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzXb+qcdYeYPNkJ5K7zFMPhiXPji
GsW3uT5OUNNorkxOTiIRHbpa4FlfyRZ1M+dG221KtuUUVzR3KSeEv43UUikAMthZ
CC5dw80lq41S0SA9ydGH0J6VMakpqwGvgVAwmlwx51ti3puYRS3kUTJJepwRCog4
mCNm97GEycebmZoCmutuLT5NSrKmy/PSazDSIoZCdLX2B2Gx/A/m0mHXmJ0Wa+Kd
GM4RihqN9WBvnr62Vz0ErKo0sb6q/hCw750d7R4I7KKLk6j3YgCvsUW5NtA4BK2U
lKFD/gi3xzuD9M9nKzvcyOX71jieNchZjHHYnHv63xDpnmusAnC7iz0zrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHC5ISv31J+9+wBed4VSJfU9lzj9MB8GA1UdIwQY
MBaAFPZR3Jh1417FgMVx/QQW9NX11BWKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUt
MDc1MTAzODE0MjBhLzEvY0xraEtfZlVuNzM3QUY1M2hWSWw5VDJYT1AwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9iNGQ5ZDctNjcwMy00YjA2LWIzZWUtMDc1MTAzODE0MjBh
LzEvOWxIY21IWGpYc1dBeFhIOUJCYjAxZlhVRllvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwR5lMA0G
CSqGSIb3DQEBCwUAA4IBAQBrMb3Kktv3ce8vrBph3ofji6iyzkRQD2YC8wp1+slG
0HS4ybejR+zIJuVx0RLNvAxHTeMbc+3Id/zPMz+VF1HSQmlIl8KilyTrnxgDapZa
Kqnktm8HqGrj4yxUQ2TIHjawuvTvi9xFyWdooKSUigAgsgjQ9KMeTYZamwWKEk/l
s9UsgyXpmIBK3M4lff/3b+oPxBf97codcifmys9ABJ80MW21xb5AUVRrUMtS+FV9
v6FarbijeHlNNmpQabM/L2UREzokqlRkXGzgf+efs6UxoYbBj1MPaYU/8Fh6YNAg
lF5h3ttdc16Po6zT1tpN8NV6/tCyK+yf0Ret8cVS6utG
-----END CERTIFICATE-----
Generated at Fri May 3 23:56:51 2024 by rpki-client on console-ams.rpki-client.org