Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/mIq40arAbrd3eJARzYQCEgRzlhc.roa
File: mIq40arAbrd3eJARzYQCEgRzlhc.roa (raw, json)
Hash identifier: Cw1aZ+tvLLla8meS0WQMmGMxenb71+uSpmbjfb3VtBQ=
Subject key identifier: 98:8A:B8:D1:AA:C0:6E:B7:77:78:90:11:CD:84:02:12:04:73:96:17
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCE411CD4EAD146278E9CBDD988187
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/mIq40arAbrd3eJARzYQCEgRzlhc.roa
Signing time: Tue 02 Jan 2024 10:34:08 +0000
ROA not before: Tue 02 Jan 2024 10:34:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60944
IP address blocks: 80.90.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:e4:11:cd:4e:ad:14:62:78:e9:cb:dd:98:81:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=988ab8d1aac06eb777789011cd84021204739617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f0:21:b6:60:df:33:15:bb:69:66:e1:91:7d:
28:80:7a:93:76:62:75:07:81:74:11:aa:de:0c:64:
86:bb:6a:d9:b6:68:14:86:a8:8a:91:29:71:a1:0e:
1f:63:94:ab:e9:08:f1:30:d5:41:79:50:b2:21:4d:
f8:4e:f3:44:e4:b4:8c:64:c3:9b:22:16:77:1f:35:
17:f5:d9:49:24:9b:8f:d6:21:91:2f:e6:64:69:94:
52:f7:9b:b2:60:04:de:7e:07:b5:77:b2:19:36:97:
fc:19:3a:58:e4:4c:e5:10:19:40:f0:a1:82:ab:04:
83:ac:ca:f3:c6:a3:1c:58:3f:31:bb:21:10:b3:67:
b1:e6:1a:5c:df:99:a9:dc:6b:43:12:48:d1:42:98:
99:fc:1c:3e:93:de:13:51:4c:22:6f:ea:03:a6:48:
1b:ab:a4:f0:a1:db:4b:32:0c:7c:a8:5d:87:a6:3d:
c3:35:4e:03:ed:7e:77:38:db:cc:5d:19:11:b9:6e:
18:1e:c7:d8:ec:66:ca:ca:ab:29:a7:56:ec:f0:9e:
c3:ef:be:68:95:54:37:6d:48:78:e2:64:69:af:d1:
48:f5:bf:f9:e2:4e:16:bc:ea:38:3f:ec:69:72:9a:
b7:a5:a3:b6:16:dc:90:00:ad:91:ba:b2:a2:54:39:
ee:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:8A:B8:D1:AA:C0:6E:B7:77:78:90:11:CD:84:02:12:04:73:96:17
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/mIq40arAbrd3eJARzYQCEgRzlhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.90.243.0/24
Signature Algorithm: sha256WithRSAEncryption
28:a4:cf:29:93:d5:6e:c6:00:6a:38:26:8b:4f:46:57:fe:e7:
4b:7a:2c:1b:9e:89:7a:33:f2:8f:71:78:e2:1b:d4:99:d0:05:
20:eb:de:65:b5:c2:15:f4:0d:ac:2c:ab:d8:3b:07:37:b6:66:
a5:73:a5:8b:35:78:cc:bd:12:fd:41:a7:04:d9:b0:36:29:76:
a7:fc:9e:b8:b5:bf:5c:10:ae:22:07:c3:dc:8d:37:59:d0:9c:
d0:f5:43:85:b3:fa:15:93:0e:ee:16:8d:e8:a7:c1:3b:d1:f3:
39:eb:8e:c6:00:9d:13:b1:3a:ab:fd:1a:b1:e1:0c:f3:03:3c:
ba:d1:d3:48:6d:4e:ee:8d:19:15:43:7e:a6:b4:c3:73:b5:58:
08:58:17:70:5b:b6:e4:56:d5:af:7b:f9:e8:73:f1:fc:39:fe:
1b:2f:53:36:46:c7:03:2f:a1:5a:f5:b4:11:49:9f:7d:6a:11:
87:09:e6:45:1e:80:54:c3:72:b7:76:35:36:21:8b:79:43:4e:
40:c3:de:86:5e:03:73:a9:6d:a7:52:1b:1e:57:30:45:ef:a8:
6f:40:50:fd:30:a0:2c:15:1c:25:6a:41:e0:49:23:88:51:96:
ae:ed:d5:a6:0e:a1:15:ee:08:97:dc:3e:94:58:61:ae:31:47:
17:ff:9d:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvOQRzU6tFGJ46cvdmIGHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjQwMTAyMTAzNDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODhhYjhkMWFhYzA2ZWI3Nzc3ODkwMTFjZDg0MDIxMjA0NzM5NjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofAhtmDfMxW7aWbhkX0ogHqTdmJ1
B4F0EareDGSGu2rZtmgUhqiKkSlxoQ4fY5Sr6QjxMNVBeVCyIU34TvNE5LSMZMOb
IhZ3HzUX9dlJJJuP1iGRL+ZkaZRS95uyYATefge1d7IZNpf8GTpY5EzlEBlA8KGC
qwSDrMrzxqMcWD8xuyEQs2ex5hpc35mp3GtDEkjRQpiZ/Bw+k94TUUwib+oDpkgb
q6TwodtLMgx8qF2Hpj3DNU4D7X53ONvMXRkRuW4YHsfY7GbKyqspp1bs8J7D775o
lVQ3bUh44mRpr9FI9b/54k4WvOo4P+xpcpq3paO2FtyQAK2RurKiVDnuswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJiKuNGqwG63d3iQEc2EAhIEc5YXMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEvbUlxNDBhckFicmQzZUpBUnpZUUNFZ1J6bGhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUFrzMA0G
CSqGSIb3DQEBCwUAA4IBAQAopM8pk9VuxgBqOCaLT0ZX/udLeiwbnol6M/KPcXji
G9SZ0AUg695ltcIV9A2sLKvYOwc3tmalc6WLNXjMvRL9QacE2bA2KXan/J64tb9c
EK4iB8PcjTdZ0JzQ9UOFs/oVkw7uFo3op8E70fM5647GAJ0TsTqr/Rqx4QzzAzy6
0dNIbU7ujRkVQ36mtMNztVgIWBdwW7bkVtWve/noc/H8Of4bL1M2RscDL6Fa9bQR
SZ99ahGHCeZFHoBUw3K3djU2IYt5Q05Aw96GXgNzqW2nUhseVzBF76hvQFD9MKAs
FRwlakHgSSOIUZau7dWmDqEV7giX3D6UWGGuMUcX/53r
-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:31 2024 by rpki-client on console-fra.rpki-client.org