Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/1kn98V5c3Nv-9VCgKHT-7zH74qY.roa
File: 1kn98V5c3Nv-9VCgKHT-7zH74qY.roa (raw, json)
Hash identifier: Vqel4uHiWHpecKwYWxCmMZpOI4CsFU/EQlnDOpIY9KE=
Subject key identifier: D6:49:FD:F1:5E:5C:DC:DB:FE:F5:50:A0:28:74:FE:EF:31:FB:E2:A6
Certificate issuer: /CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Certificate serial: 018CC79549F6DC797A7FB45CB5FF3AECFD38
Authority key identifier: 7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/1kn98V5c3Nv-9VCgKHT-7zH74qY.roa
Signing time: Tue 02 Jan 2024 00:31:38 +0000
ROA not before: Tue 02 Jan 2024 00:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1930
IP address blocks: 192.92.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.mft
rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:49:f6:dc:79:7a:7f:b4:5c:b5:ff:3a:ec:fd:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f92df7610f048f43bf44c336d41c6c1157ef0e2
Validity
Not Before: Jan 2 00:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d649fdf15e5cdcdbfef550a02874feef31fbe2a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d4:14:12:1c:43:b0:28:ca:96:fd:4c:ab:ba:
06:d4:96:7f:3a:b0:37:86:1b:00:8f:9f:dd:ce:54:
13:fb:00:f6:5b:97:a3:8b:17:7a:d4:79:9b:6c:9b:
65:10:81:09:93:75:9f:d6:b2:aa:3c:22:90:a1:5e:
7d:f8:2f:46:5e:7c:da:15:99:f5:57:b9:bc:44:1b:
f9:c8:49:16:3b:01:3b:6d:ed:c7:13:4a:fd:f1:d5:
90:ea:d8:02:e8:45:27:5e:49:92:a7:77:ba:d8:f8:
d4:e8:e8:76:1f:0c:84:c3:bd:52:65:95:4b:18:ae:
0d:99:ad:96:c9:85:c2:d2:47:46:77:c9:4f:3c:40:
c2:08:e2:90:5e:39:38:77:39:c3:cb:c6:66:76:3e:
1e:5b:4a:e7:07:ad:66:04:0e:fb:07:1f:59:6a:3a:
55:b2:45:65:ff:ae:35:3c:71:43:c6:f5:6d:0a:a4:
f2:bb:65:a2:09:70:f8:45:74:e7:0a:9e:c2:4a:e0:
0d:c1:09:eb:69:58:6d:0c:59:43:32:c4:2e:3d:dd:
ee:29:83:56:ba:2c:8a:8f:40:a1:a5:72:8f:ef:5f:
a6:0e:95:28:55:a5:76:c2:c9:08:58:ec:c5:1c:c5:
97:cf:8c:8f:a1:c9:c9:91:4b:e7:0b:ba:1b:5f:5b:
4c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:49:FD:F1:5E:5C:DC:DB:FE:F5:50:A0:28:74:FE:EF:31:FB:E2:A6
X509v3 Authority Key Identifier:
keyid:7F:92:DF:76:10:F0:48:F4:3B:F4:4C:33:6D:41:C6:C1:15:7E:F0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5LfdhDwSPQ79EwzbUHGwRV-8OI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/1kn98V5c3Nv-9VCgKHT-7zH74qY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/58be18-2f35-4c6a-aa6a-7f72f44b8982/1/f5LfdhDwSPQ79EwzbUHGwRV-8OI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.92.149.0/24
Signature Algorithm: sha256WithRSAEncryption
46:24:57:56:75:b2:d0:f1:e4:c1:4d:6a:76:9e:ea:ba:bb:11:
42:94:d9:bf:1a:e1:32:ee:57:1e:67:e8:72:8e:db:24:06:ec:
ef:21:55:1a:cb:c8:04:b3:dc:73:94:a6:6b:49:37:f3:99:24:
dd:23:76:ef:a2:8a:d7:7d:04:56:dc:51:5f:ce:6c:f6:5c:82:
ec:ac:1c:82:14:7e:07:71:05:03:0b:17:24:7d:c4:2f:3e:4a:
eb:02:17:15:47:1c:81:35:fd:81:fd:15:46:c8:91:ff:07:8c:
d3:eb:21:f9:1b:01:71:8e:10:be:71:f7:1e:21:aa:e6:bd:a8:
2f:e2:7a:54:f8:66:dc:cc:64:61:41:e1:f9:d9:75:36:bc:fd:
9e:1c:48:65:46:d4:23:55:58:bc:0d:d1:e2:1c:7c:ea:4a:49:
7b:0c:ea:88:18:ba:ae:46:a6:69:cc:77:5c:07:c8:19:ad:40:
e1:be:e6:11:f1:f7:e3:a5:ad:a6:fa:73:cc:7a:01:bf:94:11:
06:cf:2e:cc:a0:fa:0f:c7:e7:58:4a:61:6f:51:3b:40:8a:24:
62:33:5b:a8:f0:a9:2e:f2:3c:45:e5:62:9d:dd:9f:73:46:c4:
5b:b8:0e:6f:3e:ae:3d:f4:67:2f:e7:14:93:d5:41:2f:2c:78:
a2:95:28:09
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHlUn23Hl6f7Rctf867P04MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmOTJkZjc2MTBmMDQ4ZjQzYmY0NGMzMzZkNDFjNmMxMTU3
ZWYwZTIwHhcNMjQwMTAyMDAzMTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNjQ5ZmRmMTVlNWNkY2RiZmVmNTUwYTAyODc0ZmVlZjMxZmJlMmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNQUEhxDsCjKlv1Mq7oG1JZ/OrA3
hhsAj5/dzlQT+wD2W5ejixd61HmbbJtlEIEJk3Wf1rKqPCKQoV59+C9GXnzaFZn1
V7m8RBv5yEkWOwE7be3HE0r98dWQ6tgC6EUnXkmSp3e62PjU6Oh2HwyEw71SZZVL
GK4Nma2WyYXC0kdGd8lPPEDCCOKQXjk4dznDy8Zmdj4eW0rnB61mBA77Bx9ZajpV
skVl/641PHFDxvVtCqTyu2WiCXD4RXTnCp7CSuANwQnraVhtDFlDMsQuPd3uKYNW
uiyKj0ChpXKP71+mDpUoVaV2wskIWOzFHMWXz4yPocnJkUvnC7obX1tMewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNZJ/fFeXNzb/vVQoCh0/u8x++KmMB8GA1UdIwQY
MBaAFH+S33YQ8Ej0O/RMM21BxsEVfvDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEt
N2Y3MmY0NGI4OTgyLzEvMWtuOThWNWMzTnYtOVZDZ0tIVC03ekg3NHFZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OGJlMTgtMmYzNS00YzZhLWFhNmEtN2Y3MmY0NGI4OTgy
LzEvZjVMZmRoRHdTUFE3OUV3emJVSEd3UlYtOE9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFyVMA0G
CSqGSIb3DQEBCwUAA4IBAQBGJFdWdbLQ8eTBTWp2nuq6uxFClNm/GuEy7lceZ+hy
jtskBuzvIVUay8gEs9xzlKZrSTfzmSTdI3bvoorXfQRW3FFfzmz2XILsrByCFH4H
cQUDCxckfcQvPkrrAhcVRxyBNf2B/RVGyJH/B4zT6yH5GwFxjhC+cfceIarmvagv
4npU+GbczGRhQeH52XU2vP2eHEhlRtQjVVi8DdHiHHzqSkl7DOqIGLquRqZpzHdc
B8gZrUDhvuYR8ffjpa2m+nPMegG/lBEGzy7MoPoPx+dYSmFvUTtAiiRiM1uo8Kku
8jxF5WKd3Z9zRsRbuA5vPq499Gcv5xST1UEvLHiilSgJ
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:53:16 2024 by rpki-client on console-fra.rpki-client.org