Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/XVSwCJ5CkBEkzmupVzzA0kxqTC8.roa
File: XVSwCJ5CkBEkzmupVzzA0kxqTC8.roa (raw, json)
Hash identifier: 9NFkBYbft4ewoILSGqJ7lu99BIe8qrt3VRTDxupWg+M=
Subject key identifier: 5D:54:B0:08:9E:42:90:11:24:CE:6B:A9:57:3C:C0:D2:4C:6A:4C:2F
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 018CC26CFFAB558CFCEBAF90735BFD251F2A
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/XVSwCJ5CkBEkzmupVzzA0kxqTC8.roa
Signing time: Mon 01 Jan 2024 00:29:32 +0000
ROA not before: Mon 01 Jan 2024 00:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56640
IP address blocks: 195.22.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:ff:ab:55:8c:fc:eb:af:90:73:5b:fd:25:1f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Jan 1 00:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d54b0089e42901124ce6ba9573cc0d24c6a4c2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:0a:cf:f1:01:cc:dc:fa:be:9b:cb:87:8b:
9f:95:ca:4f:bb:7d:8f:75:1f:a9:e9:9b:a7:af:78:
72:a5:73:89:ef:40:a3:e3:70:10:75:10:d0:f1:31:
dd:5f:98:e8:59:37:c4:78:a2:49:25:42:fc:40:df:
89:56:49:49:59:6f:74:26:5d:19:0c:b9:d6:88:ec:
2e:05:2f:d4:16:e7:a1:02:7e:f5:27:23:26:c7:e0:
47:b6:a7:04:56:a3:a7:0b:67:f1:8d:32:10:53:54:
1d:86:20:66:b3:57:f9:fc:50:84:66:a2:97:0c:ee:
be:1e:ec:de:11:96:52:06:20:7a:ad:75:a5:29:fc:
33:2e:6c:ec:5a:b7:bc:56:75:2e:50:17:bc:2f:0e:
bd:c0:bc:a2:0a:25:3c:6f:85:a6:40:f6:37:56:8e:
ec:ce:39:63:18:23:fc:cc:fb:99:be:ff:a8:93:7d:
af:5a:e2:ee:58:a5:ac:27:d3:98:7d:5d:56:79:6a:
14:a3:be:64:4e:43:3e:06:fb:c9:ac:1e:82:23:d6:
85:5c:cf:5d:bc:23:8a:aa:29:7d:3a:82:0e:6a:bf:
14:e0:dc:06:b6:c0:36:50:96:45:8d:bd:19:b2:e3:
35:6f:fa:28:e5:cb:1b:9b:28:d3:31:39:7a:2b:51:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:54:B0:08:9E:42:90:11:24:CE:6B:A9:57:3C:C0:D2:4C:6A:4C:2F
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/XVSwCJ5CkBEkzmupVzzA0kxqTC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.22.121.0/24
Signature Algorithm: sha256WithRSAEncryption
84:cd:14:7a:09:bd:9d:c5:d8:3b:e9:34:5f:7f:a1:e7:2b:f3:
4a:e3:7a:5a:ad:b5:6c:2d:0b:eb:5c:09:c4:22:83:eb:17:53:
20:54:90:a5:17:f3:b5:b6:72:7e:e7:74:64:10:fb:d6:08:93:
b9:9a:b2:0e:16:19:25:f2:3f:f0:4e:c4:c9:28:34:00:5d:20:
10:2f:97:bc:46:83:f2:ac:5b:f8:18:1e:f1:91:b8:97:67:83:
77:34:18:f0:f7:31:1d:50:e6:3d:27:f0:7c:55:19:b5:41:d6:
20:e3:12:33:6d:5a:de:7e:56:2f:f3:1a:2b:da:45:d7:c1:47:
f0:2b:82:73:6f:f0:ac:a1:52:ef:10:73:02:d7:33:7a:05:64:
b0:3c:3c:9e:22:f3:81:24:d3:5b:99:41:ae:8b:84:ce:81:d0:
46:84:6d:cb:39:1b:d4:9c:54:7a:fc:ea:26:0d:e3:c5:57:aa:
76:8d:22:ce:da:97:54:9a:4c:ce:87:ba:8d:d5:b2:7a:0c:b6:
6f:b4:76:a4:d1:87:df:36:5a:c6:66:d1:e4:ab:df:d3:2b:39:
00:4f:2e:a2:6b:13:90:cd:53:cb:4d:ca:45:aa:78:35:41:6b:
b2:7a:33:27:a2:45:5b:99:70:e9:12:74:9d:dc:16:ee:a7:fb:
57:ab:f9:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbP+rVYz866+Qc1v9JR8qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZjAxZTkwODZkNDBkNTA4ZjU4NDJlOTgyZjI1MzY4OWY3
ZmU0YzkwHhcNMjQwMTAxMDAyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDU0YjAwODllNDI5MDExMjRjZTZiYTk1NzNjYzBkMjRjNmE0YzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx4Kz/EBzNz6vpvLh4uflcpPu32P
dR+p6Zunr3hypXOJ70Cj43AQdRDQ8THdX5joWTfEeKJJJUL8QN+JVklJWW90Jl0Z
DLnWiOwuBS/UFuehAn71JyMmx+BHtqcEVqOnC2fxjTIQU1QdhiBms1f5/FCEZqKX
DO6+HuzeEZZSBiB6rXWlKfwzLmzsWre8VnUuUBe8Lw69wLyiCiU8b4WmQPY3Vo7s
zjljGCP8zPuZvv+ok32vWuLuWKWsJ9OYfV1WeWoUo75kTkM+BvvJrB6CI9aFXM9d
vCOKqil9OoIOar8U4NwGtsA2UJZFjb0ZsuM1b/oo5csbmyjTMTl6K1G2UQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF1UsAieQpARJM5rqVc8wNJMakwvMB8GA1UdIwQY
MBaAFJPwHpCG1A1Qj1hC6YLyU2iff+TJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MjVhOTItYzJkMS00ZWE4LTljZTgt
ZTljOTJiNzFmNTBjLzEvWFZTd0NKNUNrQkVrem11cFZ6ekEwa3hxVEM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MjVhOTItYzJkMS00ZWE4LTljZTgtZTljOTJiNzFmNTBj
LzEva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwxZ5MA0G
CSqGSIb3DQEBCwUAA4IBAQCEzRR6Cb2dxdg76TRff6HnK/NK43parbVsLQvrXAnE
IoPrF1MgVJClF/O1tnJ+53RkEPvWCJO5mrIOFhkl8j/wTsTJKDQAXSAQL5e8RoPy
rFv4GB7xkbiXZ4N3NBjw9zEdUOY9J/B8VRm1QdYg4xIzbVreflYv8xor2kXXwUfw
K4Jzb/CsoVLvEHMC1zN6BWSwPDyeIvOBJNNbmUGui4TOgdBGhG3LORvUnFR6/Oom
DePFV6p2jSLO2pdUmkzOh7qN1bJ6DLZvtHak0YffNlrGZtHkq9/TKzkATy6iaxOQ
zVPLTcpFqng1QWuyejMnokVbmXDpEnSd3Bbup/tXq/l1
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:00:19 2024 by rpki-client on console-ams.rpki-client.org