Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7HkMXMHSThrtgZKaP6Z5BeNrmXA.roa
File: 7HkMXMHSThrtgZKaP6Z5BeNrmXA.roa (raw, json)
Hash identifier: p7tbkpqZ+iV47W7W3IqzIFYC50Vawr8ny8FXa5ZvIb4=
Subject key identifier: EC:79:0C:5C:C1:D2:4E:1A:ED:81:92:9A:3F:A6:79:05:E3:6B:99:70
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019151CDAE1D36D5812FA9736446B6BA53B4
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7HkMXMHSThrtgZKaP6Z5BeNrmXA.roa
Signing time: Wed 14 Aug 2024 16:51:59 +0000
ROA not before: Wed 14 Aug 2024 16:51:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214366
IP address blocks: 194.147.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:51:cd:ae:1d:36:d5:81:2f:a9:73:64:46:b6:ba:53:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Aug 14 16:51:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ec790c5cc1d24e1aed81929a3fa67905e36b9970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8a:e7:85:28:fe:d1:c6:04:18:b2:71:a2:89:
9f:89:88:af:9b:56:ad:47:ae:5c:36:46:bf:61:fe:
3b:e3:b0:96:f4:29:b6:15:e6:dd:b7:82:21:9e:96:
8d:73:e6:f9:64:a3:a5:49:28:1f:bf:0d:e7:8a:05:
36:ac:88:d0:b0:36:0a:1b:5b:67:a7:67:4b:34:1e:
ae:81:db:37:61:b8:59:ae:7d:32:fc:74:5f:e6:b4:
ee:bd:56:22:46:7a:15:4c:a2:70:a7:e9:ae:fd:5b:
f4:7c:90:49:d9:73:45:ed:b5:27:5e:64:75:07:44:
b4:15:a6:08:88:9f:17:2c:1c:68:9f:06:b9:96:ed:
d5:67:a9:f2:b7:d5:d6:cf:c8:13:bf:86:f1:a4:16:
d6:92:22:29:14:fd:3b:87:37:92:fb:4a:04:39:f7:
81:c9:07:42:a5:d8:24:c6:3f:e3:fc:e4:5c:fb:3f:
cd:09:d3:75:ae:ca:12:b8:d8:55:1f:20:88:f6:52:
0b:0b:47:e3:29:55:d0:a4:fa:b5:16:fd:56:c8:c2:
0a:32:9f:ec:43:91:dd:2d:59:42:55:c5:64:34:ed:
70:ad:fa:14:1a:b4:c9:d4:4c:cc:37:ed:0a:fc:fa:
b9:ba:17:5f:fd:b7:53:d5:58:c7:7c:20:57:84:cf:
b7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:79:0C:5C:C1:D2:4E:1A:ED:81:92:9A:3F:A6:79:05:E3:6B:99:70
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7HkMXMHSThrtgZKaP6Z5BeNrmXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.140.0/24
Signature Algorithm: sha256WithRSAEncryption
29:00:77:17:8b:c8:57:51:cc:be:ca:3d:02:3a:11:8f:e1:f1:
14:11:d9:43:d6:f4:58:ae:6c:aa:37:0c:b5:88:b9:c0:6c:61:
6d:60:13:47:e8:30:b8:37:5e:e9:a8:b6:b9:19:69:e6:5c:21:
49:28:ff:5a:06:71:cc:e1:e9:67:e6:e4:bf:b0:08:67:98:14:
c5:41:38:01:54:35:62:dc:41:50:d6:78:16:31:ee:31:78:41:
08:4e:6d:b7:29:43:58:0b:21:f7:3e:46:30:d3:b6:e4:bc:81:
a2:4f:3d:0b:ad:8b:40:ef:f2:ce:3f:1a:c1:e5:0a:81:db:c1:
a4:ef:a5:7a:8f:bc:22:8d:22:39:e9:2a:66:1c:38:9d:bd:32:
9d:66:85:47:91:a4:00:26:cc:21:1a:9a:e3:d1:1f:78:e0:34:
c5:78:50:28:5b:34:52:4c:a5:7d:30:e9:b0:9c:78:28:d6:96:
6e:09:0e:64:6d:56:cc:b9:76:51:c0:90:05:f0:77:f1:4e:f7:
7d:2e:7e:24:50:e6:4a:ae:97:23:d9:5c:a0:bc:ad:89:9c:d1:
4d:9c:2c:b4:cc:64:2c:6b:72:52:67:38:76:8f:62:e7:40:8d:
c9:4b:07:2b:71:47:7d:5b:7a:92:b3:ca:c9:9c:53:e9:8b:64:
b5:04:be:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZFRza4dNtWBL6lzZEa2ulO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx
ZjZhZDEwHhcNMjQwODE0MTY1MTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzc5MGM1Y2MxZDI0ZTFhZWQ4MTkyOWEzZmE2NzkwNWUzNmI5OTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYrnhSj+0cYEGLJxoomfiYivm1at
R65cNka/Yf4747CW9Cm2Febdt4IhnpaNc+b5ZKOlSSgfvw3nigU2rIjQsDYKG1tn
p2dLNB6ugds3YbhZrn0y/HRf5rTuvVYiRnoVTKJwp+mu/Vv0fJBJ2XNF7bUnXmR1
B0S0FaYIiJ8XLBxonwa5lu3VZ6nyt9XWz8gTv4bxpBbWkiIpFP07hzeS+0oEOfeB
yQdCpdgkxj/j/ORc+z/NCdN1rsoSuNhVHyCI9lILC0fjKVXQpPq1Fv1WyMIKMp/s
Q5HdLVlCVcVkNO1wrfoUGrTJ1EzMN+0K/Pq5uhdf/bdT1VjHfCBXhM+3MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOx5DFzB0k4a7YGSmj+meQXja5lwMB8GA1UdIwQY
MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt
NGIzYjFiNjNiNmFiLzEvN0hrTVhNSFNUaHJ0Z1pLYVA2WjVCZU5ybVhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi
LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpOMMA0G
CSqGSIb3DQEBCwUAA4IBAQApAHcXi8hXUcy+yj0COhGP4fEUEdlD1vRYrmyqNwy1
iLnAbGFtYBNH6DC4N17pqLa5GWnmXCFJKP9aBnHM4eln5uS/sAhnmBTFQTgBVDVi
3EFQ1ngWMe4xeEEITm23KUNYCyH3PkYw07bkvIGiTz0LrYtA7/LOPxrB5QqB28Gk
76V6j7wijSI56SpmHDidvTKdZoVHkaQAJswhGprj0R944DTFeFAoWzRSTKV9MOmw
nHgo1pZuCQ5kbVbMuXZRwJAF8HfxTvd9Ln4kUOZKrpcj2VygvK2JnNFNnCy0zGQs
a3JSZzh2j2LnQI3JSwcrcUd9W3qSs8rJnFPpi2S1BL5N
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:46:00 2024 by rpki-client on console-fra.rpki-client.org