Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/V9-OPp5CO_ZOLNufwo_oAmWq560.roa
File: V9-OPp5CO_ZOLNufwo_oAmWq560.roa (raw, json)
Hash identifier: pjQ5z3g7zdtnKAhc8wOA/UKKekNBmjlMTC9ALfutZfY=
Subject key identifier: 57:DF:8E:3E:9E:42:3B:F6:4E:2C:DB:9F:C2:8F:E8:02:65:AA:E7:AD
Certificate issuer: /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial: 018D5BA0794D99CCCE5B1E7CA34CA6D5CAA6
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/V9-OPp5CO_ZOLNufwo_oAmWq560.roa
Signing time: Tue 30 Jan 2024 18:27:39 +0000
ROA not before: Tue 30 Jan 2024 18:27:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 193.56.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5b:a0:79:4d:99:cc:ce:5b:1e:7c:a3:4c:a6:d5:ca:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Validity
Not Before: Jan 30 18:27:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57df8e3e9e423bf64e2cdb9fc28fe80265aae7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7a:2f:2f:8c:5a:7e:e3:22:83:ca:77:97:df:
4a:b6:f2:a1:f6:a7:cf:f2:75:9c:82:b1:bb:cf:b1:
ff:87:a8:d0:b8:69:58:5b:06:8d:08:ed:f8:f7:e8:
5c:6b:03:53:66:00:37:37:62:ab:58:54:12:cd:b8:
09:c5:3f:bc:ea:c4:b7:c4:1a:42:69:9b:90:ef:87:
75:6e:81:5d:36:0d:a8:be:f9:6b:72:27:aa:6d:a7:
41:cb:1f:07:59:e0:39:f4:b8:e5:c3:70:5c:90:e0:
b4:13:39:45:04:06:12:cb:24:28:5a:be:bd:b8:e2:
03:81:97:92:5e:8f:6a:29:71:a6:f6:77:6c:ad:1a:
e4:09:35:37:2b:7f:53:b8:5e:6a:5b:7c:ba:b4:26:
0d:a4:37:4e:bd:2d:e1:0b:be:eb:bb:74:11:76:1d:
3e:66:a5:98:dd:a3:ea:c6:82:4e:2c:5d:e8:ea:96:
8e:7a:6e:48:87:4e:e2:52:7e:21:bc:7e:9c:e8:75:
da:3d:09:27:d8:19:d1:a7:b2:6e:2a:d3:e3:d6:60:
4f:a6:5f:0a:6d:3b:ba:22:bd:c9:70:01:ec:4f:54:
29:eb:ea:6e:58:d9:e7:65:da:51:ff:c7:ac:59:0e:
b7:55:53:4b:a0:22:c1:56:2e:bf:3e:79:4b:10:3b:
e6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DF:8E:3E:9E:42:3B:F6:4E:2C:DB:9F:C2:8F:E8:02:65:AA:E7:AD
X509v3 Authority Key Identifier:
keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/V9-OPp5CO_ZOLNufwo_oAmWq560.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.116.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:6f:0b:3c:8e:80:3b:e8:4e:e0:c3:b3:52:1d:eb:26:7b:9c:
40:86:5e:44:2f:d3:cb:a3:83:a3:49:bc:93:38:76:fc:56:d6:
9d:3b:6d:7f:dc:b1:a6:f1:ef:37:bb:fe:f6:1b:ca:ea:08:9e:
a0:7f:1a:0a:a6:05:8e:bf:b6:e7:68:9b:ae:f1:ee:63:da:c3:
ec:43:3b:db:67:d8:0b:59:a1:44:71:eb:78:f3:6e:70:07:ad:
73:4d:77:49:52:b1:61:41:de:55:2f:4f:33:41:10:77:c0:ba:
09:8a:eb:2b:a7:47:b8:4c:75:5c:8d:30:da:14:19:f1:79:17:
ba:34:e0:ad:17:4b:6d:21:f9:ec:d6:83:05:d9:dc:38:d8:df:
05:67:e8:98:7a:03:7d:81:d9:1e:f2:bd:7c:29:bb:4a:01:16:
29:69:d6:a2:19:da:55:cb:f7:5c:06:15:0d:c8:d8:0b:3c:94:
ee:2c:5f:bc:8e:2c:32:46:50:e5:4d:0d:84:be:85:bf:c1:e5:
4a:98:46:da:fa:4f:7a:88:30:df:b1:4e:1d:53:6a:6e:19:1b:
69:c9:37:04:d1:c5:3f:82:2b:a1:16:5b:60:e0:0f:43:f9:9f:
20:71:eb:26:27:0d:7b:24:6c:9b:5c:34:30:9c:76:43:73:a1:
1c:32:d4:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1boHlNmczOWx58o0ym1cqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YmJkMjE5MzY0MjUzMGEwMTdmNGYxY2JlNTYyZTIxNzBi
M2RmYmQwHhcNMjQwMTMwMTgyNzM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2RmOGUzZTllNDIzYmY2NGUyY2RiOWZjMjhmZTgwMjY1YWFlN2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnovL4xafuMig8p3l99KtvKh9qfP
8nWcgrG7z7H/h6jQuGlYWwaNCO349+hcawNTZgA3N2KrWFQSzbgJxT+86sS3xBpC
aZuQ74d1boFdNg2ovvlrcieqbadByx8HWeA59Ljlw3BckOC0EzlFBAYSyyQoWr69
uOIDgZeSXo9qKXGm9ndsrRrkCTU3K39TuF5qW3y6tCYNpDdOvS3hC77ru3QRdh0+
ZqWY3aPqxoJOLF3o6paOem5Ih07iUn4hvH6c6HXaPQkn2BnRp7JuKtPj1mBPpl8K
bTu6Ir3JcAHsT1Qp6+puWNnnZdpR/8esWQ63VVNLoCLBVi6/PnlLEDvm1QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFffjj6eQjv2Tizbn8KP6AJlquetMB8GA1UdIwQY
MBaAFEW70hk2QlMKAX9PHL5WLiFws9+9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTIt
Yzc3OTA1ZmJiYTdiLzEvVjktT1BwNUNPX1pPTE51ZndvX29BbVdxNTYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jZmZmZjgtMzUzMC00ZTViLWE1ZTItYzc3OTA1ZmJiYTdi
LzEvUmJ2U0dUWkNVd29CZjA4Y3ZsWXVJWEN6MzcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwTh0MA0G
CSqGSIb3DQEBCwUAA4IBAQCPbws8joA76E7gw7NSHesme5xAhl5EL9PLo4OjSbyT
OHb8VtadO21/3LGm8e83u/72G8rqCJ6gfxoKpgWOv7bnaJuu8e5j2sPsQzvbZ9gL
WaFEcet4825wB61zTXdJUrFhQd5VL08zQRB3wLoJiusrp0e4THVcjTDaFBnxeRe6
NOCtF0ttIfns1oMF2dw42N8FZ+iYegN9gdke8r18KbtKARYpadaiGdpVy/dcBhUN
yNgLPJTuLF+8jiwyRlDlTQ2EvoW/weVKmEba+k96iDDfsU4dU2puGRtpyTcE0cU/
giuhFltg4A9D+Z8gcesmJw17JGybXDQwnHZDc6EcMtSt
-----END CERTIFICATE-----
Generated at Mon May 6 06:02:42 2024 by rpki-client on console-ams.rpki-client.org