Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-C4KV098cOFrS4Nl-D2Lu1nTAYY.roa
File: 1-C4KV098cOFrS4Nl-D2Lu1nTAYY.roa (raw, json)
Hash identifier: A10j0VmXmk4Z3hTcNkfMxkF36+LnR9fw+rEdXGReQjo=
Subject key identifier: F8:2E:0A:57:4F:7C:70:E1:6B:4B:83:65:F8:3D:8B:BB:59:D3:01:86
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 01912C4BB5060925BDBE7BF985EB87C90BE5
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-C4KV098cOFrS4Nl-D2Lu1nTAYY.roa
Signing time: Wed 07 Aug 2024 10:04:04 +0000
ROA not before: Wed 07 Aug 2024 10:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199654
IP address blocks: 2.56.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:2c:4b:b5:06:09:25:bd:be:7b:f9:85:eb:87:c9:0b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Aug 7 10:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f82e0a574f7c70e16b4b8365f83d8bbb59d30186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:31:39:d3:b4:77:e8:8f:5e:96:e9:89:0d:
b8:0f:c6:d8:e3:ae:31:54:6a:1c:99:01:e6:8b:4d:
04:b0:f8:4a:78:8c:80:97:df:23:76:d9:0a:9f:aa:
31:81:26:78:92:59:f9:52:ee:11:5c:53:7a:c5:58:
07:41:ab:e3:9c:03:04:75:6d:15:d7:24:94:76:ac:
1f:06:7d:5c:ce:81:f2:00:5f:64:f1:b3:91:37:a3:
91:0e:96:e1:2c:db:a9:10:5b:06:ef:d0:7a:ce:fe:
25:64:79:ce:b8:57:0d:f9:a3:9a:9a:41:d6:96:b1:
86:2b:e6:a4:9b:e8:31:b8:c0:c2:14:a6:66:b7:5b:
79:75:52:cb:42:94:83:f6:51:bb:9d:19:8c:b0:85:
ee:62:96:40:50:bc:ff:45:c4:a0:34:3f:ac:38:80:
7d:c9:c9:d0:93:5b:cb:1c:5e:b4:9b:13:0d:70:2c:
59:21:df:fd:ba:f3:f7:0c:a0:c3:84:7c:4d:0f:7a:
e5:d7:ad:da:e5:88:52:a4:b7:c8:dd:05:5a:8f:23:
1d:ff:da:34:3a:0e:93:71:d2:20:4e:fb:78:45:1e:
5f:6c:82:85:52:2d:37:ef:93:29:17:0d:1d:19:26:
9b:b4:7f:dc:c8:6d:d8:37:9c:f4:96:e5:3d:14:f6:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2E:0A:57:4F:7C:70:E1:6B:4B:83:65:F8:3D:8B:BB:59:D3:01:86
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/1-C4KV098cOFrS4Nl-D2Lu1nTAYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.164.0/24
Signature Algorithm: sha256WithRSAEncryption
83:c9:90:f4:0e:b2:63:bf:50:fd:d1:c0:a6:db:28:a6:79:33:
7d:b8:ea:67:ac:87:c9:a6:1c:0d:b3:96:8a:c5:51:21:ed:42:
3a:ba:d1:0a:f7:9e:40:da:d9:a3:d4:5c:1b:e6:06:3e:e0:1b:
84:a6:29:da:38:3f:48:40:6b:f0:c8:11:66:bf:4e:bc:b2:b7:
75:8c:70:a6:a7:b6:70:d9:73:6d:b4:fb:f1:58:17:c9:9e:eb:
35:32:86:5a:aa:57:b4:4d:92:b4:d2:32:d6:ac:0c:c9:98:ec:
95:4c:85:7e:47:33:2b:61:e9:19:f6:f7:56:11:7c:0f:3d:13:
b6:9c:98:a9:c7:9a:34:c1:c6:90:05:6a:52:44:82:6f:01:c4:
10:fa:5e:ef:b7:0e:aa:79:84:53:d7:4f:bc:ad:00:7a:fc:53:
a1:1d:d4:20:e3:dc:03:1c:7b:18:77:74:a0:79:3c:bc:96:05:
64:22:49:e1:fd:e5:c0:2e:33:15:58:97:ad:8d:b7:1f:38:7f:
5f:f1:fa:6d:aa:fb:15:5b:49:ca:b8:94:00:f0:46:1f:39:b5:
c6:60:83:c3:03:39:51:2b:36:1c:5d:5e:3c:e8:42:3e:39:0e:
28:ac:32:0e:d2:da:a0:20:df:a1:ba:e3:e9:6f:4f:85:92:ae:
7c:d8:a2:16
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZEsS7UGCSW9vnv5heuHyQvlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYTdiMGQ4ZGU4MjUxZDM2ZDdjODNmYWY2YmM3ZWZlYzcz
YjUwMzQwHhcNMjQwODA3MTAwNDA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODJlMGE1NzRmN2M3MGUxNmI0YjgzNjVmODNkOGJiYjU5ZDMwMTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDIxOdO0d+iPXpbpiQ24D8bY464x
VGocmQHmi00EsPhKeIyAl98jdtkKn6oxgSZ4kln5Uu4RXFN6xVgHQavjnAMEdW0V
1ySUdqwfBn1czoHyAF9k8bORN6ORDpbhLNupEFsG79B6zv4lZHnOuFcN+aOamkHW
lrGGK+akm+gxuMDCFKZmt1t5dVLLQpSD9lG7nRmMsIXuYpZAULz/RcSgND+sOIB9
ycnQk1vLHF60mxMNcCxZId/9uvP3DKDDhHxND3rl163a5YhSpLfI3QVajyMd/9o0
Og6TcdIgTvt4RR5fbIKFUi0375MpFw0dGSabtH/cyG3YN5z0luU9FPZuYwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPguCldPfHDha0uDZfg9i7tZ0wGGMB8GA1UdIwQY
MBaAFLGnsNjeglHTbXyD+va8fv7HO1A0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2FldzJONkNVZE50ZklQNjlyeC1fc2M3VURRLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMTM0YzgtZjgxNC00YjcxLTk1N2It
Mzk0YWNkMjFmMzliLzEvMS1DNEtWMDk4Y09GclM0TmwtRDJMdTFuVEFZWS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMTcvZjEzNGM4LWY4MTQtNGI3MS05NTdiLTM5NGFjZDIxZjM5
Yi8xL3NhZXcyTjZDVWROdGZJUDY5cngtX3NjN1VEUS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAAI4pDAN
BgkqhkiG9w0BAQsFAAOCAQEAg8mQ9A6yY79Q/dHAptsopnkzfbjqZ6yHyaYcDbOW
isVRIe1COrrRCveeQNrZo9RcG+YGPuAbhKYp2jg/SEBr8MgRZr9OvLK3dYxwpqe2
cNlzbbT78VgXyZ7rNTKGWqpXtE2StNIy1qwMyZjslUyFfkczK2HpGfb3VhF8Dz0T
tpyYqceaNMHGkAVqUkSCbwHEEPpe77cOqnmEU9dPvK0AevxToR3UIOPcAxx7GHd0
oHk8vJYFZCJJ4f3lwC4zFViXrY23Hzh/X/H6bar7FVtJyriUAPBGHzm1xmCDwwM5
USs2HF1ePOhCPjkOKKwyDtLaoCDfobrj6W9PhZKufNiiFg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:57 2024 by rpki-client on console-ams.rpki-client.org