Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/rFcUf0_1CPlB5uSe0PPgZWYinlk.roa
File: rFcUf0_1CPlB5uSe0PPgZWYinlk.roa (raw, json)
Hash identifier: e38dPifqqLJ+UCJjHxMSNZq810vSU5GNBjkfw6xlDlo=
Subject key identifier: AC:57:14:7F:4F:F5:08:F9:41:E6:E4:9E:D0:F3:E0:65:66:22:9E:59
Certificate issuer: /CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Certificate serial: 018CC7953A70BBB15D87653893D022465B79
Authority key identifier: D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/rFcUf0_1CPlB5uSe0PPgZWYinlk.roa
Signing time: Tue 02 Jan 2024 00:31:34 +0000
ROA not before: Tue 02 Jan 2024 00:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33821
IP address blocks: 195.28.176.0/24 maxlen: 24
195.28.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:3a:70:bb:b1:5d:87:65:38:93:d0:22:46:5b:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d61eb53cb56718df0d9476cd984aac4432b90f6c
Validity
Not Before: Jan 2 00:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac57147f4ff508f941e6e49ed0f3e06566229e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:01:bf:49:f8:b9:63:15:62:a9:e8:3f:bd:40:
0d:48:50:6f:3b:63:f7:45:6b:56:16:6d:8b:84:b0:
7f:28:f7:00:32:d0:90:5c:fc:c6:f6:e0:a1:37:93:
6e:ce:e3:2f:ba:b7:34:83:99:9f:44:08:29:a0:6c:
93:ca:0e:64:e4:7b:b8:fd:e0:ba:27:7f:68:bd:a0:
38:5b:46:e5:a3:ab:86:6d:14:33:9e:91:bd:c2:f7:
68:8b:75:67:6e:0f:9e:3c:31:bc:d3:44:a1:05:19:
31:ca:2b:bb:74:d5:ee:31:c4:3d:94:13:9d:98:75:
79:32:6d:9d:01:7f:85:dd:72:97:2d:c7:4f:ef:ee:
dc:ec:b7:87:fa:5c:27:58:f0:f3:2b:f8:2e:36:8e:
21:06:10:ad:d6:6f:c2:f7:33:ca:bf:1a:67:5e:2d:
bc:cb:c0:da:b1:83:df:c9:69:b7:c3:a8:ad:17:1a:
0f:d4:d8:af:19:fe:89:81:e1:bb:5a:7b:ff:77:44:
8e:88:fd:74:fa:aa:c9:5d:59:eb:95:ea:56:f1:df:
08:7e:ce:cb:13:aa:9b:ea:88:32:30:b7:8f:fe:1f:
a6:81:fa:03:be:7f:bb:28:81:b5:86:3c:8f:f9:ae:
7c:eb:84:57:ed:e6:35:6e:ee:65:5f:3e:9d:78:a7:
ad:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:57:14:7F:4F:F5:08:F9:41:E6:E4:9E:D0:F3:E0:65:66:22:9E:59
X509v3 Authority Key Identifier:
keyid:D6:1E:B5:3C:B5:67:18:DF:0D:94:76:CD:98:4A:AC:44:32:B9:0F:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1h61PLVnGN8NlHbNmEqsRDK5D2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/rFcUf0_1CPlB5uSe0PPgZWYinlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3db9a9-abef-4ed7-b392-9ae3dfe97481/1/1h61PLVnGN8NlHbNmEqsRDK5D2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.28.176.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:1e:72:36:02:f0:d6:1f:d4:de:bb:5a:c4:c8:20:c8:e9:b9:
cc:99:7d:41:f0:d5:13:07:05:a5:5d:61:69:69:e5:05:d1:42:
ac:2d:d9:a5:cb:db:43:d0:c7:f4:6d:a0:66:f6:a4:c7:fd:e6:
58:f1:56:2f:5a:b8:7a:19:5a:2a:94:06:09:ec:79:72:6a:5f:
0e:b2:21:a7:24:43:e2:e4:80:f2:c0:67:91:dd:e2:32:bc:a4:
47:c8:4e:36:2b:f9:be:7f:5d:07:69:a5:62:4c:5a:9a:82:95:
55:84:75:a1:a5:e2:72:68:63:16:53:0e:de:77:3a:82:e4:f0:
80:43:8f:bb:7b:c9:44:1b:13:f3:e0:72:c0:db:cf:06:a4:b1:
e0:fc:12:d2:95:2b:84:f5:63:c9:fe:2c:f4:b8:a5:45:73:72:
1d:69:3a:83:bd:cb:04:b8:35:10:9d:ab:64:2f:1f:e7:5d:04:
98:ae:18:3e:39:56:ec:23:51:55:88:0e:38:37:e5:c8:be:02:
ef:72:d7:58:c6:b3:5f:e9:5e:f6:ac:e8:86:46:b4:fc:c2:e8:
0f:43:f6:b0:a1:19:63:87:38:73:de:49:be:f8:25:cc:80:0e:
18:be:5b:92:6e:ba:f9:c0:df:0b:c9:4e:9c:c5:0f:2d:40:61:
cb:2a:48:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlTpwu7Fdh2U4k9AiRlt5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MWViNTNjYjU2NzE4ZGYwZDk0NzZjZDk4NGFhYzQ0MzJi
OTBmNmMwHhcNMjQwMTAyMDAzMTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzU3MTQ3ZjRmZjUwOGY5NDFlNmU0OWVkMGYzZTA2NTY2MjI5ZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgG/Sfi5YxViqeg/vUANSFBvO2P3
RWtWFm2LhLB/KPcAMtCQXPzG9uChN5NuzuMvurc0g5mfRAgpoGyTyg5k5Hu4/eC6
J39ovaA4W0blo6uGbRQznpG9wvdoi3Vnbg+ePDG800ShBRkxyiu7dNXuMcQ9lBOd
mHV5Mm2dAX+F3XKXLcdP7+7c7LeH+lwnWPDzK/guNo4hBhCt1m/C9zPKvxpnXi28
y8DasYPfyWm3w6itFxoP1NivGf6JgeG7Wnv/d0SOiP10+qrJXVnrlepW8d8Ifs7L
E6qb6ogyMLeP/h+mgfoDvn+7KIG1hjyP+a5864RX7eY1bu5lXz6deKetzQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKxXFH9P9Qj5QebkntDz4GVmIp5ZMB8GA1UdIwQY
MBaAFNYetTy1ZxjfDZR2zZhKrEQyuQ9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zZGI5YTktYWJlZi00ZWQ3LWIzOTIt
OWFlM2RmZTk3NDgxLzEvckZjVWYwXzFDUGxCNXVTZTBQUGdaV1lpbmxrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zZGI5YTktYWJlZi00ZWQ3LWIzOTItOWFlM2RmZTk3NDgx
LzEvMWg2MVBMVm5HTjhObEhiTm1FcXNSREs1RDJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwxywMA0G
CSqGSIb3DQEBCwUAA4IBAQAfHnI2AvDWH9Teu1rEyCDI6bnMmX1B8NUTBwWlXWFp
aeUF0UKsLdmly9tD0Mf0baBm9qTH/eZY8VYvWrh6GVoqlAYJ7Hlyal8OsiGnJEPi
5IDywGeR3eIyvKRHyE42K/m+f10HaaViTFqagpVVhHWhpeJyaGMWUw7edzqC5PCA
Q4+7e8lEGxPz4HLA288GpLHg/BLSlSuE9WPJ/iz0uKVFc3IdaTqDvcsEuDUQnatk
Lx/nXQSYrhg+OVbsI1FViA44N+XIvgLvctdYxrNf6V72rOiGRrT8wugPQ/awoRlj
hzhz3km++CXMgA4YvluSbrr5wN8LyU6cxQ8tQGHLKkgT
-----END CERTIFICATE-----
Generated at Mon May 13 09:54:54 2024 by rpki-client on console-ams.rpki-client.org