Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/RItRRXvLE8yRNRYUJjMGpPEHYYY.roa
File: RItRRXvLE8yRNRYUJjMGpPEHYYY.roa (raw, json)
Hash identifier: XvLqHBGfcVW1///wWrMpaNMU/tjYhgt5iDEpPXaRkc8=
Subject key identifier: 44:8B:51:45:7B:CB:13:CC:91:35:16:14:26:33:06:A4:F1:07:61:86
Certificate issuer: /CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Certificate serial: 018CC348A6473299636695FBC048A5C57F10
Authority key identifier: 8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/RItRRXvLE8yRNRYUJjMGpPEHYYY.roa
Signing time: Mon 01 Jan 2024 04:29:27 +0000
ROA not before: Mon 01 Jan 2024 04:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 194.105.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:a6:47:32:99:63:66:95:fb:c0:48:a5:c5:7f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ae139af0899f5d6b5b32581373eda3037ea30c0
Validity
Not Before: Jan 1 04:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=448b51457bcb13cc91351614263306a4f1076186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:2f:be:dc:ff:7a:bf:16:a0:30:f2:89:38:
f0:20:a4:df:7c:b8:91:85:d5:77:a3:d5:00:64:cc:
d4:34:3d:87:3f:4b:fa:53:30:48:fe:f7:ad:c5:a2:
c8:bd:4f:99:bb:03:b6:bf:27:d1:cc:27:37:29:68:
49:d9:15:a9:9c:b6:18:76:80:32:dc:e3:97:b4:c9:
7f:c1:25:c2:a0:22:3b:fe:86:da:e9:11:4e:91:91:
7e:07:9b:82:c5:07:57:c1:cb:1d:99:6d:6e:5b:f3:
ea:9c:13:8a:b8:8b:e1:c7:7c:81:36:da:24:c7:f9:
2f:7c:11:0c:5d:c2:dc:77:06:21:f2:9e:2e:1d:8e:
0b:c5:fa:bc:80:37:b4:d7:e6:ab:83:b9:ac:f1:5a:
2a:80:e6:4f:f8:11:83:61:8c:d5:d9:d0:25:d6:66:
34:40:3f:3d:8d:b7:78:f0:77:57:27:c6:6c:84:4d:
e2:99:72:d5:54:a7:44:e8:26:9b:18:13:5d:f8:fc:
94:f4:ed:17:5d:af:72:4e:e4:60:4d:76:53:70:b3:
69:fb:a2:d4:b1:c7:2d:f1:90:de:8b:0e:64:8c:fe:
d4:d6:c8:36:47:18:c0:fa:a7:6f:c7:fc:2d:5f:65:
68:b9:c9:16:79:ba:3a:33:33:5f:5e:ca:13:9f:27:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8B:51:45:7B:CB:13:CC:91:35:16:14:26:33:06:A4:F1:07:61:86
X509v3 Authority Key Identifier:
keyid:8A:E1:39:AF:08:99:F5:D6:B5:B3:25:81:37:3E:DA:30:37:EA:30:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iuE5rwiZ9da1syWBNz7aMDfqMMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/RItRRXvLE8yRNRYUJjMGpPEHYYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/b203f4-8271-46e7-8a4a-f9e2c2fdbf35/1/iuE5rwiZ9da1syWBNz7aMDfqMMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.19.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:0a:55:8b:80:23:4a:a8:fd:d1:6d:2e:9c:15:a6:1d:f5:e0:
cf:c5:47:61:8f:88:c9:33:c0:bf:25:91:6c:fb:da:89:d5:90:
9e:d0:a3:0a:fc:6f:06:ed:93:3d:ff:b4:02:02:62:07:53:4a:
2c:97:f0:c2:67:dd:1b:ba:8d:8f:ef:cb:d3:17:75:98:43:1e:
4a:d4:eb:6b:90:21:34:f9:30:15:64:85:a1:0e:0c:ec:61:89:
3f:82:79:a4:4d:14:1d:8e:96:71:d6:b1:30:75:8a:da:05:a0:
b5:37:31:c1:15:d5:2d:9a:7f:1f:94:21:f6:4f:4d:49:ff:06:
73:82:7c:4e:3e:0a:a0:1f:da:94:23:66:91:37:6d:6c:30:9d:
4f:2f:b8:32:14:43:34:ad:6f:84:c8:f0:6a:74:c4:2f:06:d4:
f5:7b:a6:1b:8e:04:3e:e1:39:8d:e2:67:dc:6d:e5:52:07:c8:
a8:ad:17:52:ea:9e:9b:39:6f:ca:49:50:76:fa:d5:a4:5e:4a:
24:11:ce:26:bd:10:1c:86:f5:e8:e6:26:b6:bc:62:7a:0e:45:
51:b5:8c:4a:e5:e0:1f:52:77:41:99:a8:81:96:78:1e:cf:24:
1e:73:04:eb:36:8c:0a:61:a0:41:f0:6b:9e:b6:c6:a3:17:88:
0c:72:90:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSKZHMpljZpX7wEilxX8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZTEzOWFmMDg5OWY1ZDZiNWIzMjU4MTM3M2VkYTMwMzdl
YTMwYzAwHhcNMjQwMTAxMDQyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDhiNTE0NTdiY2IxM2NjOTEzNTE2MTQyNjMzMDZhNGYxMDc2MTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTUvvtz/er8WoDDyiTjwIKTffLiR
hdV3o9UAZMzUND2HP0v6UzBI/vetxaLIvU+ZuwO2vyfRzCc3KWhJ2RWpnLYYdoAy
3OOXtMl/wSXCoCI7/oba6RFOkZF+B5uCxQdXwcsdmW1uW/PqnBOKuIvhx3yBNtok
x/kvfBEMXcLcdwYh8p4uHY4Lxfq8gDe01+arg7ms8VoqgOZP+BGDYYzV2dAl1mY0
QD89jbd48HdXJ8ZshE3imXLVVKdE6CabGBNd+PyU9O0XXa9yTuRgTXZTcLNp+6LU
scct8ZDeiw5kjP7U1sg2RxjA+qdvx/wtX2VouckWebo6MzNfXsoTnyfolQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFESLUUV7yxPMkTUWFCYzBqTxB2GGMB8GA1UdIwQY
MBaAFIrhOa8ImfXWtbMlgTc+2jA36jDAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEt
ZjllMmMyZmRiZjM1LzEvUkl0UlJYdkxFOHlSTlJZVUpqTUdwUEVIWVlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9iMjAzZjQtODI3MS00NmU3LThhNGEtZjllMmMyZmRiZjM1
LzEvaXVFNXJ3aVo5ZGExc3lXQk56N2FNRGZxTU1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmkTMA0G
CSqGSIb3DQEBCwUAA4IBAQAPClWLgCNKqP3RbS6cFaYd9eDPxUdhj4jJM8C/JZFs
+9qJ1ZCe0KMK/G8G7ZM9/7QCAmIHU0osl/DCZ90buo2P78vTF3WYQx5K1OtrkCE0
+TAVZIWhDgzsYYk/gnmkTRQdjpZx1rEwdYraBaC1NzHBFdUtmn8flCH2T01J/wZz
gnxOPgqgH9qUI2aRN21sMJ1PL7gyFEM0rW+EyPBqdMQvBtT1e6YbjgQ+4TmN4mfc
beVSB8iorRdS6p6bOW/KSVB2+tWkXkokEc4mvRAchvXo5ia2vGJ6DkVRtYxK5eAf
UndBmaiBlngezyQecwTrNowKYaBB8GuetsajF4gMcpDT
-----END CERTIFICATE-----
Generated at Sun May 26 08:26:20 2024 by rpki-client on console-ams.rpki-client.org