Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iDMhH5rVV6jj9NG7eJQNvplpFH0.roa
File: iDMhH5rVV6jj9NG7eJQNvplpFH0.roa (raw, json)
Hash identifier: 5tfJBNevRLDxDFNN23IKb7rci/nFIGJoysJy/dRiokA=
Subject key identifier: 88:33:21:1F:9A:D5:57:A8:E3:F4:D1:BB:78:94:0D:BE:99:69:14:7D
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCE47EED1855AB2DBA1BECCF2ABF3B
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iDMhH5rVV6jj9NG7eJQNvplpFH0.roa
Signing time: Tue 02 Jan 2024 10:34:08 +0000
ROA not before: Tue 02 Jan 2024 10:34:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199658
IP address blocks: 109.167.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e4:7e:ed:18:55:ab:2d:ba:1b:ec:cf:2a:bf:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8833211f9ad557a8e3f4d1bb78940dbe9969147d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:14:70:c2:bd:47:12:21:da:fa:52:71:87:75:
90:0e:0a:c6:92:28:4c:8d:63:b5:55:65:9c:8a:42:
30:44:f0:4d:ba:fa:66:19:1c:5f:d7:ff:4f:7d:ae:
e0:ac:39:db:ec:18:a5:d6:40:13:54:c0:a9:d5:5f:
35:2b:d4:b3:45:cc:1b:3e:84:57:30:8b:94:1d:5c:
af:06:5c:e3:99:21:4a:13:11:3c:47:c5:50:4b:75:
bd:51:c3:a1:0b:35:0b:dc:12:ea:83:24:2d:8d:e2:
49:5d:4e:fb:cb:22:d2:1e:dd:07:e5:ad:09:0f:1c:
cd:3e:b7:44:09:7f:a3:e4:b3:1b:ed:05:dc:34:3c:
04:b1:ed:26:96:b3:fe:a8:e8:d4:5e:23:84:87:b9:
f8:89:78:67:52:ae:ed:49:78:30:6e:64:1d:33:83:
7f:46:17:75:d0:a6:75:f5:4a:8c:54:71:dc:fb:9c:
d1:0e:6b:ee:46:98:9d:ae:63:0d:97:a0:ff:d1:ff:
19:a1:d6:f3:3a:42:cc:21:67:77:aa:e8:fb:76:36:
27:6e:a6:9d:db:49:dd:56:8a:a4:8d:d3:e2:e1:dc:
f4:fe:5f:d8:86:f6:e6:1a:2a:07:0b:82:4d:32:86:
fe:07:ab:fb:64:6e:c2:af:be:20:f1:97:a4:4d:53:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:33:21:1F:9A:D5:57:A8:E3:F4:D1:BB:78:94:0D:BE:99:69:14:7D
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/iDMhH5rVV6jj9NG7eJQNvplpFH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.167.254.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:25:21:a9:38:9b:ff:13:25:5e:c0:02:73:09:56:7f:1c:80:
d9:f8:b3:0b:e5:46:5a:f3:ad:95:01:e9:9b:52:cc:4a:18:36:
76:21:38:59:e2:ff:ea:a2:91:f0:ce:da:c4:a2:e6:fe:65:bf:
4e:a9:7b:76:f8:41:08:b3:89:54:ef:2f:54:45:13:4e:95:cb:
17:b5:cc:0e:55:e1:f2:c7:46:61:20:6b:a5:f1:d5:9f:d4:af:
5d:fd:09:a9:41:59:71:87:a3:3c:41:65:a3:99:ed:78:af:2d:
e5:a1:ef:53:bb:f7:11:28:5a:b5:de:82:c5:1c:e3:ff:54:c7:
46:b1:7e:cd:1c:d5:c7:af:f2:50:79:e5:cc:4f:f1:dc:e1:21:
e9:38:0d:ae:c3:ca:a0:9e:f5:33:92:3a:f8:93:b6:cc:28:64:
6c:08:19:ce:0b:d6:c9:43:21:25:fc:ee:3e:4f:b9:b3:78:85:
59:ae:0f:6a:30:76:aa:f4:a7:34:3c:76:d7:04:26:a5:09:38:
b9:17:d4:e7:67:56:27:bb:6c:1d:a3:18:fa:31:db:0e:d4:6b:
f5:5c:b2:56:81:69:b4:2f:a1:f2:03:b7:47:8b:e9:03:3e:fe:
39:87:b7:75:af:76:bb:22:70:29:f2:09:b3:b4:a5:0f:d3:7a:
69:0d:52:7a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvOR+7RhVqy26G+zPKr87MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjQwMTAyMTAzNDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ODMzMjExZjlhZDU1N2E4ZTNmNGQxYmI3ODk0MGRiZTk5NjkxNDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhRRwwr1HEiHa+lJxh3WQDgrGkihM
jWO1VWWcikIwRPBNuvpmGRxf1/9Pfa7grDnb7Bil1kATVMCp1V81K9SzRcwbPoRX
MIuUHVyvBlzjmSFKExE8R8VQS3W9UcOhCzUL3BLqgyQtjeJJXU77yyLSHt0H5a0J
DxzNPrdECX+j5LMb7QXcNDwEse0mlrP+qOjUXiOEh7n4iXhnUq7tSXgwbmQdM4N/
Rhd10KZ19UqMVHHc+5zRDmvuRpidrmMNl6D/0f8ZodbzOkLMIWd3quj7djYnbqad
20ndVoqkjdPi4dz0/l/YhvbmGioHC4JNMob+B6v7ZG7Cr74g8ZekTVNWCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIgzIR+a1Veo4/TRu3iUDb6ZaRR9MB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvaURNaEg1clZWNmpqOU5HN2VKUU52cGxwRkgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbaf+MA0G
CSqGSIb3DQEBCwUAA4IBAQCtJSGpOJv/EyVewAJzCVZ/HIDZ+LML5UZa862VAemb
UsxKGDZ2IThZ4v/qopHwztrEoub+Zb9OqXt2+EEIs4lU7y9URRNOlcsXtcwOVeHy
x0ZhIGul8dWf1K9d/QmpQVlxh6M8QWWjme14ry3loe9Tu/cRKFq13oLFHOP/VMdG
sX7NHNXHr/JQeeXMT/Hc4SHpOA2uw8qgnvUzkjr4k7bMKGRsCBnOC9bJQyEl/O4+
T7mzeIVZrg9qMHaq9Kc0PHbXBCalCTi5F9TnZ1Ynu2wdoxj6MdsO1Gv1XLJWgWm0
L6HyA7dHi+kDPv45h7d1r3a7InAp8gmztKUP03ppDVJ6
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:45 2024 by rpki-client on console-fra.rpki-client.org