Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_0AiM3YnZcrMf59PbBaeGe9BGZc.roa
File: _0AiM3YnZcrMf59PbBaeGe9BGZc.roa (raw, json)
Hash identifier: bR19gD7n/Npx74PQZCx+qPobU5aNkExXqzTtUKX6xMI=
Subject key identifier: FF:40:22:33:76:27:65:CA:CC:7F:9F:4F:6C:16:9E:19:EF:41:19:97
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64ADCA42DB4D5F76142B76D2ECB05DC
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_0AiM3YnZcrMf59PbBaeGe9BGZc.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16157
IP address blocks: 194.176.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:dc:a4:2d:b4:d5:f7:61:42:b7:6d:2e:cb:05:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ff402233762765cacc7f9f4f6c169e19ef411997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e7:96:32:b0:66:73:e8:cc:d1:56:24:89:1a:
ea:60:81:a2:e7:07:38:b8:97:5b:aa:54:ba:ea:9e:
8c:03:9f:a2:f3:56:05:12:b1:20:76:92:a7:99:de:
4e:92:41:10:26:a3:99:05:b6:60:c2:c9:9f:a8:c1:
a3:70:10:cb:11:30:b3:d9:e6:4a:56:37:5e:c0:e0:
47:20:b8:64:70:35:04:c5:fd:25:d9:a1:e6:80:7a:
01:df:6c:43:33:87:1c:51:5d:f8:42:a4:cd:be:3b:
f9:1f:0c:27:e8:a3:49:a0:0f:c3:07:44:a8:c5:01:
88:28:88:d8:db:73:3a:2e:dd:00:ae:1a:25:3e:30:
71:38:ca:bc:e2:a0:92:cc:4b:59:c3:63:65:ac:5b:
fd:cd:e9:58:45:42:35:da:78:f7:33:b4:e7:f3:3e:
c6:3f:3b:a6:2e:f7:ed:95:1e:64:35:14:1b:fc:28:
10:cf:56:b5:f4:42:f1:b4:91:a3:e5:37:43:fb:d0:
a7:38:b9:d2:31:60:54:23:18:fe:a9:19:3b:89:61:
e5:5e:8d:d9:5e:3e:74:5b:59:1b:75:d6:31:9c:2d:
bc:0c:f2:5c:cd:dd:6a:51:cf:9b:7f:13:be:4f:c8:
02:75:d8:58:c6:1a:c6:29:04:d9:51:c0:ef:63:1f:
7f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:40:22:33:76:27:65:CA:CC:7F:9F:4F:6C:16:9E:19:EF:41:19:97
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/_0AiM3YnZcrMf59PbBaeGe9BGZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.185.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c0:f6:4e:ce:e1:4c:d7:e8:22:f5:43:2b:26:51:5a:d8:a8:
d7:3a:69:27:6d:ee:3c:a3:d8:72:19:8e:b6:cc:00:5f:0f:27:
84:a2:37:9a:07:80:b3:9a:1b:87:57:6d:0b:da:fa:01:9a:ad:
48:2a:8b:68:07:f9:68:c8:df:f6:6b:f5:36:8c:2f:db:26:b5:
b2:66:c3:7c:4b:6b:d7:5b:ad:1b:f7:0e:e2:59:2c:26:ea:4b:
25:9d:e1:6d:19:1f:76:eb:ac:5c:56:6e:40:8e:06:ac:cc:e3:
c0:89:b9:df:34:88:c3:a4:9d:23:f0:d2:6c:dc:1b:74:54:f2:
b8:59:db:9a:49:dc:98:df:b6:6a:02:39:29:a4:fe:a9:82:b6:
a0:1b:c8:54:d7:48:13:36:92:68:37:a4:d1:07:fb:c9:48:ee:
4b:9a:bd:ec:19:59:a6:eb:71:d2:dd:35:6d:92:8f:04:42:df:
9f:da:e9:55:66:38:65:0f:d5:a3:81:65:57:20:a7:10:75:06:
f5:eb:07:12:ae:2d:ca:e2:fd:39:1c:61:21:16:cc:a3:db:e9:
9a:66:7c:67:df:e1:ed:b0:e0:ae:46:29:b8:07:54:b2:ba:c7:
59:37:6a:23:4e:53:73:b7:18:12:b0:f9:82:bf:55:e7:b4:e4:
e3:c4:ed:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGStykLbTV92FCt20uywXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjQwMTAxMTgzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZjQwMjIzMzc2Mjc2NWNhY2M3ZjlmNGY2YzE2OWUxOWVmNDExOTk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+eWMrBmc+jM0VYkiRrqYIGi5wc4
uJdbqlS66p6MA5+i81YFErEgdpKnmd5OkkEQJqOZBbZgwsmfqMGjcBDLETCz2eZK
VjdewOBHILhkcDUExf0l2aHmgHoB32xDM4ccUV34QqTNvjv5Hwwn6KNJoA/DB0So
xQGIKIjY23M6Lt0ArholPjBxOMq84qCSzEtZw2NlrFv9zelYRUI12nj3M7Tn8z7G
PzumLvftlR5kNRQb/CgQz1a19ELxtJGj5TdD+9CnOLnSMWBUIxj+qRk7iWHlXo3Z
Xj50W1kbddYxnC28DPJczd1qUc+bfxO+T8gCddhYxhrGKQTZUcDvYx9/4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP9AIjN2J2XKzH+fT2wWnhnvQRmXMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvXzBBaU0zWW5aY3JNZjU5UGJCYWVHZTlCR1pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwrC5MA0G
CSqGSIb3DQEBCwUAA4IBAQA7wPZOzuFM1+gi9UMrJlFa2KjXOmknbe48o9hyGY62
zABfDyeEojeaB4CzmhuHV20L2voBmq1IKotoB/loyN/2a/U2jC/bJrWyZsN8S2vX
W60b9w7iWSwm6kslneFtGR9266xcVm5AjgaszOPAibnfNIjDpJ0j8NJs3Bt0VPK4
WduaSdyY37ZqAjkppP6pgragG8hU10gTNpJoN6TRB/vJSO5Lmr3sGVmm63HS3TVt
ko8EQt+f2ulVZjhlD9WjgWVXIKcQdQb16wcSri3K4v05HGEhFsyj2+maZnxn3+Ht
sOCuRim4B1SyusdZN2ojTlNztxgSsPmCv1XntOTjxO3M
-----END CERTIFICATE-----
Generated at Mon May 20 17:28:50 2024 by rpki-client on console-fra.rpki-client.org