Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/6TzWnsJp-Qc1yM3COpWH0bBBvGc.roa
File: 6TzWnsJp-Qc1yM3COpWH0bBBvGc.roa (raw, json)
Hash identifier: pFQ7lHuL0oUe9o+p59D0gUmks0k6NODjDAlTckSZGNI=
Subject key identifier: E9:3C:D6:9E:C2:69:F9:07:35:C8:CD:C2:3A:95:87:D1:B0:41:BC:67
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 018CC6B832E23C1124CEFC272040BFE609B8
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/6TzWnsJp-Qc1yM3COpWH0bBBvGc.roa
Signing time: Mon 01 Jan 2024 20:30:09 +0000
ROA not before: Mon 01 Jan 2024 20:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56611
IP address blocks: 193.160.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:46:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:32:e2:3c:11:24:ce:fc:27:20:40:bf:e6:09:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Jan 1 20:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e93cd69ec269f90735c8cdc23a9587d1b041bc67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:2c:e5:17:69:77:34:e9:3c:a5:db:9c:d0:79:
9c:86:f8:62:d4:2d:5c:b2:a9:46:f1:68:71:bd:20:
06:7d:f9:57:b8:fc:b7:37:54:00:37:88:55:5d:03:
b4:19:33:7b:da:25:73:5a:b0:5a:8f:f9:f1:b1:f3:
3b:d3:2d:e6:5c:2d:29:4c:c6:d0:28:98:d5:a0:78:
17:16:ab:99:11:69:c8:60:82:2a:a7:fd:9d:e8:d1:
7b:94:a0:fc:85:f7:58:de:5e:d8:a1:bd:cc:ff:26:
6b:e0:aa:95:5d:ae:a1:63:6b:e4:96:6a:4d:0c:50:
ed:09:ca:2f:03:f5:51:e0:a8:60:24:c7:09:c8:06:
9a:81:44:bf:0c:49:34:6f:8f:c9:48:49:ef:7b:a5:
cc:c4:ed:cd:93:cd:81:14:c3:e4:ec:f1:90:5f:5b:
69:65:ed:ef:c7:ab:29:6a:22:3b:9e:d6:79:2c:35:
c2:82:a2:16:17:bc:ed:61:eb:1c:d4:f2:0f:b4:3e:
a6:0a:59:cd:c8:61:39:71:b1:ae:2c:31:79:92:de:
ba:ec:44:13:28:5d:31:b6:9a:55:59:8d:1e:84:06:
db:e2:15:08:37:41:a0:0c:0e:37:1f:fe:36:f8:40:
6d:9b:dd:9a:36:33:46:f7:b7:e6:a1:13:87:77:af:
88:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3C:D6:9E:C2:69:F9:07:35:C8:CD:C2:3A:95:87:D1:B0:41:BC:67
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/6TzWnsJp-Qc1yM3COpWH0bBBvGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.96.0/24
Signature Algorithm: sha256WithRSAEncryption
99:79:d8:fe:35:ec:d4:62:aa:9e:8f:4e:92:f9:ee:5e:60:84:
7c:4f:3a:6f:5b:eb:10:f9:b1:89:31:d7:39:91:c2:e6:5d:16:
ae:7e:64:08:5d:fd:27:53:bf:a5:28:0e:11:f0:7b:32:ae:e3:
77:d2:97:1a:c4:a3:fb:33:dc:71:70:be:f3:bb:85:44:18:ef:
0e:28:cf:72:9e:e4:4b:ac:d6:1c:7d:14:2d:23:50:9b:5c:b2:
fa:4a:7c:92:38:b5:bb:2e:7d:85:57:ed:16:d8:4c:3c:e6:99:
1a:18:13:72:d9:21:b9:c7:77:a8:35:bb:45:af:76:da:3c:c3:
97:11:5a:ef:3d:1c:00:6f:11:52:79:6f:a8:a3:ea:8a:49:30:
22:42:3e:4e:e8:d6:76:bc:c6:e7:58:45:81:7a:48:3a:74:b6:
56:7d:33:4b:38:5a:f0:bb:34:8f:11:6d:56:19:66:f1:e3:ae:
b1:b1:c8:c0:79:29:0e:84:fa:58:28:58:cb:43:0e:c1:21:71:
31:1e:1e:5b:93:51:03:8b:a2:65:75:0a:13:1c:4f:18:88:1d:
92:db:c4:27:e3:53:eb:87:d9:92:cc:0a:e0:1b:ae:1e:1b:f6:
c9:52:ae:70:50:37:a6:c8:3c:85:2b:0d:04:39:11:d4:7d:c4:
1a:85:9d:67
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuDLiPBEkzvwnIEC/5gm4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZDA4YTFlMWNiYzkwOTI1NGU5ZTZiOWM5MzlmZDg1YTI2
OGIxZTEwHhcNMjQwMTAxMjAzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTNjZDY5ZWMyNjlmOTA3MzVjOGNkYzIzYTk1ODdkMWIwNDFiYzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArizlF2l3NOk8pduc0Hmchvhi1C1c
sqlG8WhxvSAGfflXuPy3N1QAN4hVXQO0GTN72iVzWrBaj/nxsfM70y3mXC0pTMbQ
KJjVoHgXFquZEWnIYIIqp/2d6NF7lKD8hfdY3l7Yob3M/yZr4KqVXa6hY2vklmpN
DFDtCcovA/VR4KhgJMcJyAaagUS/DEk0b4/JSEnve6XMxO3Nk82BFMPk7PGQX1tp
Ze3vx6spaiI7ntZ5LDXCgqIWF7ztYesc1PIPtD6mClnNyGE5cbGuLDF5kt667EQT
KF0xtppVWY0ehAbb4hUIN0GgDA43H/42+EBtm92aNjNG97fmoROHd6+I3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOk81p7CafkHNcjNwjqVh9GwQbxnMB8GA1UdIwQY
MBaAFPTQih4cvJCSVOnmuck5/YWiaLHhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2Ut
ZGNlOTQ3ZTI5NGI2LzEvNlR6V25zSnAtUWMxeU0zQ09wV0gwYkJCdkdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NDlmZGMtMGQzYS00MWVjLWExY2UtZGNlOTQ3ZTI5NGI2
LzEvOU5DS0hoeThrSkpVNmVhNXlUbjloYUpvc2VFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaBgMA0G
CSqGSIb3DQEBCwUAA4IBAQCZedj+NezUYqqej06S+e5eYIR8TzpvW+sQ+bGJMdc5
kcLmXRaufmQIXf0nU7+lKA4R8HsyruN30pcaxKP7M9xxcL7zu4VEGO8OKM9ynuRL
rNYcfRQtI1CbXLL6SnySOLW7Ln2FV+0W2Ew85pkaGBNy2SG5x3eoNbtFr3baPMOX
EVrvPRwAbxFSeW+oo+qKSTAiQj5O6NZ2vMbnWEWBekg6dLZWfTNLOFrwuzSPEW1W
GWbx466xscjAeSkOhPpYKFjLQw7BIXExHh5bk1EDi6JldQoTHE8YiB2S28Qn41Pr
h9mSzArgG64eG/bJUq5wUDemyDyFKw0EORHUfcQahZ1n
-----END CERTIFICATE-----
Generated at Fri May 17 17:56:06 2024 by rpki-client on console-ams.rpki-client.org