Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/4vrOVtyTSMWH1xGaX9EdNWzwmns.roa
File: 4vrOVtyTSMWH1xGaX9EdNWzwmns.roa (raw, json)
Hash identifier: 3P2+16tWalC0dolFoXnoH4ZH1YoMxyr2dQqJsHeO0xE=
Subject key identifier: E2:FA:CE:56:DC:93:48:C5:87:D7:11:9A:5F:D1:1D:35:6C:F0:9A:7B
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 018CCA2961026055C6C972F184B1FBC01410
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/4vrOVtyTSMWH1xGaX9EdNWzwmns.roa
Signing time: Tue 02 Jan 2024 12:32:38 +0000
ROA not before: Tue 02 Jan 2024 12:32:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15536
IP address blocks: 194.26.23.0/24 maxlen: 24
194.26.22.0/23 maxlen: 23
194.26.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:61:02:60:55:c6:c9:72:f1:84:b1:fb:c0:14:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Jan 2 12:32:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2face56dc9348c587d7119a5fd11d356cf09a7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:06:a4:42:a3:66:e8:48:4e:16:6b:1c:b4:
1c:06:97:1b:0a:c6:e6:f4:61:e0:1b:01:8a:11:a4:
f1:70:38:f6:1c:00:46:7e:55:aa:2b:ea:1c:06:b9:
f5:4d:3b:e8:35:b8:78:5d:76:68:94:6a:d8:c7:43:
77:31:f8:c0:31:ae:49:f9:e8:d7:20:ab:b6:6a:cc:
7b:85:3c:1c:b2:46:b0:aa:d9:f1:09:43:d9:b4:25:
91:27:6a:46:a0:af:cc:9f:dc:d5:f4:a5:28:fc:2e:
7a:60:93:54:ed:fa:6e:f9:3d:0c:24:49:c7:24:1d:
dd:a4:5e:af:84:6f:17:48:34:54:5c:ad:e4:5d:ae:
ab:f3:7e:64:13:db:25:7a:7d:c9:a8:8e:6e:e4:97:
ab:fc:3a:38:e9:f2:91:a6:c5:1e:e1:fb:18:41:9a:
1c:53:43:32:ee:4c:61:59:b9:a2:fa:60:e1:5b:a5:
6e:a5:de:23:de:41:2f:1e:ab:31:7c:a3:1d:66:1d:
39:95:d1:df:6a:53:47:4c:c9:a8:cf:64:bf:8a:cd:
1c:b6:f2:ae:75:69:77:34:97:29:da:6d:e8:19:1e:
84:ca:a1:03:9b:79:73:95:26:7f:c9:e8:07:fb:7e:
75:f0:6e:fd:03:32:29:d2:c5:f1:2d:57:fc:d1:63:
bb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FA:CE:56:DC:93:48:C5:87:D7:11:9A:5F:D1:1D:35:6C:F0:9A:7B
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/4vrOVtyTSMWH1xGaX9EdNWzwmns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.22.0/23
Signature Algorithm: sha256WithRSAEncryption
98:6e:08:c6:7c:b5:35:7c:21:ba:c1:53:91:89:d3:45:16:33:
c9:43:ee:1b:44:04:48:a5:c8:2d:59:77:4c:5e:29:6c:0e:bb:
67:a0:ea:5d:7a:3a:b3:8a:02:26:68:5a:8a:65:6b:f8:fd:ba:
00:bd:f0:6d:62:2f:d8:fa:85:ae:68:35:56:ff:b3:58:70:5c:
e2:7f:69:a9:2e:b8:94:5c:6e:f1:04:42:01:7a:52:a0:65:b5:
24:75:73:68:f8:19:ab:e9:70:13:4e:6c:a6:4e:f6:2b:3a:e5:
eb:31:56:ce:70:f2:d0:8b:44:40:af:82:24:a2:4b:90:c3:05:
18:93:02:c7:df:9c:93:5e:b0:a2:71:e4:91:d1:ee:f1:aa:c9:
34:47:66:36:c3:ca:5c:b5:f4:d7:00:a5:78:72:78:f0:b8:74:
95:1e:2f:85:12:f2:fc:eb:ec:d4:4b:ea:32:82:cb:92:4a:a2:
59:33:be:2a:04:2c:66:ca:8e:04:04:55:f7:33:88:cb:fe:ad:
c2:5f:e6:9b:6b:38:a9:c8:2c:d6:26:86:57:5a:d5:f6:a0:4a:
fc:68:d5:5c:36:24:43:70:eb:ae:4c:89:49:f4:43:86:5a:50:
47:93:c4:3e:aa:4d:75:c1:e6:ec:b7:d2:3d:85:77:3f:70:40:
3f:4c:42:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKKWECYFXGyXLxhLH7wBQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNDNmOGVhYWQ4NGVjMDkxZTg3MDZhN2M5ODY2YzFhZGU1
NjVlZGIwHhcNMjQwMTAyMTIzMjM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMmZhY2U1NmRjOTM0OGM1ODdkNzExOWE1ZmQxMWQzNTZjZjA5YTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmicGpEKjZuhIThZrHLQcBpcbCsbm
9GHgGwGKEaTxcDj2HABGflWqK+ocBrn1TTvoNbh4XXZolGrYx0N3MfjAMa5J+ejX
IKu2asx7hTwcskawqtnxCUPZtCWRJ2pGoK/Mn9zV9KUo/C56YJNU7fpu+T0MJEnH
JB3dpF6vhG8XSDRUXK3kXa6r835kE9slen3JqI5u5Jer/Do46fKRpsUe4fsYQZoc
U0My7kxhWbmi+mDhW6Vupd4j3kEvHqsxfKMdZh05ldHfalNHTMmoz2S/is0ctvKu
dWl3NJcp2m3oGR6EyqEDm3lzlSZ/yegH+3518G79AzIp0sXxLVf80WO77wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOL6zlbck0jFh9cRml/RHTVs8Jp7MB8GA1UdIwQY
MBaAFPJD+OqthOwJHocGp8mGbBreVl7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDct
ZWY2MWE2MTQxNDJkLzEvNHZyT1Z0eVRTTVdIMXhHYVg5RWROV3p3bW5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDctZWY2MWE2MTQxNDJk
LzEvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwhoWMA0G
CSqGSIb3DQEBCwUAA4IBAQCYbgjGfLU1fCG6wVORidNFFjPJQ+4bRARIpcgtWXdM
XilsDrtnoOpdejqzigImaFqKZWv4/boAvfBtYi/Y+oWuaDVW/7NYcFzif2mpLriU
XG7xBEIBelKgZbUkdXNo+Bmr6XATTmymTvYrOuXrMVbOcPLQi0RAr4IkokuQwwUY
kwLH35yTXrCiceSR0e7xqsk0R2Y2w8pctfTXAKV4cnjwuHSVHi+FEvL86+zUS+oy
gsuSSqJZM74qBCxmyo4EBFX3M4jL/q3CX+abazipyCzWJoZXWtX2oEr8aNVcNiRD
cOuuTIlJ9EOGWlBHk8Q+qk11webst9I9hXc/cEA/TELF
-----END CERTIFICATE-----
Generated at Sun May 19 06:19:15 2024 by rpki-client on console-ams.rpki-client.org