Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9o-xwAvIxI-aNSeGMdPUW9cq7Gs.roa
File: 9o-xwAvIxI-aNSeGMdPUW9cq7Gs.roa (raw, json)
Hash identifier: fQtv6CKp601bQuzB+mgiTl01Kh2DWtBEtIl+da3NK2w=
Subject key identifier: F6:8F:B1:C0:0B:C8:C4:8F:9A:35:27:86:31:D3:D4:5B:D7:2A:EC:6B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64ADC0ECC85940A5CB1A4F077E1BD42
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9o-xwAvIxI-aNSeGMdPUW9cq7Gs.roa
Signing time: Mon 01 Jan 2024 18:30:43 +0000
ROA not before: Mon 01 Jan 2024 18:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13059
IP address blocks: 193.231.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:dc:0e:cc:85:94:0a:5c:b1:a4:f0:77:e1:bd:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f68fb1c00bc8c48f9a35278631d3d45bd72aec6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ff:b1:28:c5:64:ea:6a:42:84:c2:b4:43:cf:
e8:f1:33:a8:7f:9a:9a:d0:24:c1:99:9a:4b:ff:64:
d9:6d:07:35:04:d5:c0:35:4a:5d:03:77:a2:86:48:
24:34:bd:53:2a:a5:0c:78:63:b0:90:9e:66:51:74:
4e:45:43:ab:d2:46:fd:82:ff:32:30:6c:dd:67:8e:
0c:a3:a1:c0:a9:48:6f:d3:23:23:31:3f:6e:f0:7b:
8b:b2:19:c9:c0:24:06:b9:36:31:1b:ac:00:98:57:
0a:cd:b1:5e:aa:2c:99:86:c7:05:83:b0:28:a4:ea:
95:bf:fb:23:5c:44:f1:15:02:7b:23:3a:d4:43:84:
3d:a6:09:15:e0:f4:9b:d0:80:8e:b1:55:f5:af:b2:
7a:ca:f7:85:37:0b:1c:aa:00:9f:4b:ac:8c:e0:dd:
d7:4a:2d:5e:6c:be:44:45:ad:72:6e:02:a4:59:03:
a0:96:25:7d:27:d2:93:97:d9:00:81:bf:c9:ac:0c:
26:b7:66:b5:1f:d8:38:8b:02:9c:a3:b9:9d:87:5c:
09:4c:70:6c:c2:31:05:47:46:7a:f2:ce:06:ef:7e:
e3:c9:30:a2:74:67:54:1c:94:43:5d:20:a9:a2:ca:
04:f6:9b:2e:07:55:d5:52:b3:4c:1c:8f:b3:48:03:
f1:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8F:B1:C0:0B:C8:C4:8F:9A:35:27:86:31:D3:D4:5B:D7:2A:EC:6B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9o-xwAvIxI-aNSeGMdPUW9cq7Gs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.231.83.0/24
Signature Algorithm: sha256WithRSAEncryption
06:0e:a5:af:a7:c0:c5:19:67:3d:da:a6:ab:76:d0:6e:0e:b5:
d2:99:e6:45:a8:76:06:a9:c1:79:20:9c:38:51:2b:5a:64:be:
98:db:30:65:5e:23:50:44:3e:4a:5c:6a:d4:a7:fb:3a:fe:23:
03:59:cf:f7:cf:31:e3:6c:da:35:42:00:84:d9:63:b3:ea:ea:
6e:e6:b6:a9:d5:8b:53:6e:3e:c3:0a:d2:50:1c:01:e7:24:c1:
fc:7c:44:7e:20:03:c6:54:37:92:90:31:e3:33:a9:28:5c:36:
0a:4c:9d:fc:ab:72:0e:c7:3a:31:2b:7d:67:23:76:93:65:7d:
f4:e6:54:42:9a:3a:15:e3:b3:6c:53:9f:05:d7:07:65:8f:bf:
d5:24:c1:c8:c4:08:fb:69:03:6f:4d:f8:03:f9:55:b5:e4:5f:
63:99:5f:37:8c:04:e0:f0:92:fc:50:32:18:73:60:d8:d0:e4:
b0:f0:c2:8e:32:9d:8d:3e:8e:99:f9:9a:00:c2:be:d8:44:fb:
40:ad:01:24:0e:ee:22:79:d3:74:01:57:10:75:3e:bf:89:e4:
dc:8a:a1:61:8a:4b:2e:00:08:2c:c3:6f:71:6d:c3:c3:10:ee:
8f:e0:be:8a:10:a5:40:12:0c:15:3e:3f:c7:ea:32:28:73:dc:
70:ea:e8:e7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGStwOzIWUClyxpPB34b1CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjQwMTAxMTgzMDQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjhmYjFjMDBiYzhjNDhmOWEzNTI3ODYzMWQzZDQ1YmQ3MmFlYzZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlf+xKMVk6mpChMK0Q8/o8TOof5qa
0CTBmZpL/2TZbQc1BNXANUpdA3eihkgkNL1TKqUMeGOwkJ5mUXRORUOr0kb9gv8y
MGzdZ44Mo6HAqUhv0yMjMT9u8HuLshnJwCQGuTYxG6wAmFcKzbFeqiyZhscFg7Ao
pOqVv/sjXETxFQJ7IzrUQ4Q9pgkV4PSb0ICOsVX1r7J6yveFNwscqgCfS6yM4N3X
Si1ebL5ERa1ybgKkWQOgliV9J9KTl9kAgb/JrAwmt2a1H9g4iwKco7mdh1wJTHBs
wjEFR0Z68s4G737jyTCidGdUHJRDXSCposoE9psuB1XVUrNMHI+zSAPxWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPaPscALyMSPmjUnhjHT1FvXKuxrMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvOW8teHdBdkl4SS1hTlNlR01kUFVXOWNxN0dzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwedTMA0G
CSqGSIb3DQEBCwUAA4IBAQAGDqWvp8DFGWc92qardtBuDrXSmeZFqHYGqcF5IJw4
UStaZL6Y2zBlXiNQRD5KXGrUp/s6/iMDWc/3zzHjbNo1QgCE2WOz6upu5rap1YtT
bj7DCtJQHAHnJMH8fER+IAPGVDeSkDHjM6koXDYKTJ38q3IOxzoxK31nI3aTZX30
5lRCmjoV47NsU58F1wdlj7/VJMHIxAj7aQNvTfgD+VW15F9jmV83jATg8JL8UDIY
c2DY0OSw8MKOMp2NPo6Z+ZoAwr7YRPtArQEkDu4iedN0AVcQdT6/ieTciqFhiksu
AAgsw29xbcPDEO6P4L6KEKVAEgwVPj/H6jIoc9xw6ujn
-----END CERTIFICATE-----
Generated at Mon May 20 17:28:50 2024 by rpki-client on console-fra.rpki-client.org