Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/anjtzGFNQFf930m5gVZSif3gwBw.roa
File: anjtzGFNQFf930m5gVZSif3gwBw.roa (raw, json)
Hash identifier: 3CwYL6H1c064cZ4aL4ql32n2Xe+t4J9pUNFvzo9AMhw=
Subject key identifier: 6A:78:ED:CC:61:4D:40:57:FD:DF:49:B9:81:56:52:89:FD:E0:C0:1C
Certificate issuer: /CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Certificate serial: 018CCA96E1D147AE8F30A4B4D1CC50AC8D1B
Authority key identifier: E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/anjtzGFNQFf930m5gVZSif3gwBw.roa
Signing time: Tue 02 Jan 2024 14:32:14 +0000
ROA not before: Tue 02 Jan 2024 14:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 193.8.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:e1:d1:47:ae:8f:30:a4:b4:d1:cc:50:ac:8d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6e1af37a60a99868efbbaa0817b4980f19a54fb
Validity
Not Before: Jan 2 14:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6a78edcc614d4057fddf49b981565289fde0c01c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:43:2c:80:67:92:f7:92:e1:e7:a9:f3:05:b3:
ec:13:26:d0:6e:98:20:12:2a:c3:85:7b:12:69:2a:
77:6c:34:46:a2:af:3d:47:ab:4e:c8:e1:bb:04:11:
62:52:4e:1e:7e:19:f8:29:bb:7a:ac:16:0b:f6:83:
ff:5e:da:76:ea:0c:43:6a:49:72:06:73:b6:37:0d:
ea:3b:a6:12:dc:00:47:fc:8b:c7:16:5d:17:4c:30:
80:be:17:9d:e3:fa:34:fc:e5:af:91:05:fc:67:81:
04:de:e2:66:78:b0:76:e0:62:9c:3b:31:2d:b1:9b:
b1:ab:df:93:2c:39:c4:5b:f4:5b:40:f0:7a:57:65:
54:ca:f4:a8:46:43:c8:fc:cb:db:6b:25:f5:64:9a:
f4:a7:25:af:fa:26:95:a3:59:a6:86:46:d3:00:b4:
a6:9a:be:c9:a6:72:db:bb:33:12:09:e4:b6:92:1f:
95:cb:ac:da:21:b0:a2:f9:7f:8c:c1:73:21:82:76:
9c:de:0a:c4:ea:26:a3:20:e7:f4:e4:53:01:e7:7e:
2c:d1:5b:b2:52:66:8c:ff:e6:08:3e:6f:4d:ef:e8:
c9:ba:67:dd:13:a6:26:f0:7d:56:3c:98:a7:fd:50:
90:57:50:a8:61:dc:f3:1f:29:97:41:5a:f5:35:d3:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:78:ED:CC:61:4D:40:57:FD:DF:49:B9:81:56:52:89:FD:E0:C0:1C
X509v3 Authority Key Identifier:
keyid:E6:E1:AF:37:A6:0A:99:86:8E:FB:BA:A0:81:7B:49:80:F1:9A:54:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5uGvN6YKmYaO-7qggXtJgPGaVPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/anjtzGFNQFf930m5gVZSif3gwBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e6580b-bff7-41e8-b314-14045b64ae29/1/5uGvN6YKmYaO-7qggXtJgPGaVPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.170.0/24
Signature Algorithm: sha256WithRSAEncryption
92:0a:cd:99:33:69:cd:20:8b:7f:87:8c:56:4f:55:97:d0:c3:
5e:75:b6:e2:bf:49:47:fa:d5:3b:62:32:da:92:aa:ed:17:e9:
4f:df:88:d1:39:ac:51:f7:4d:64:65:93:fc:08:de:6d:5b:90:
20:12:28:24:80:0b:92:8c:12:dd:8f:e1:dc:60:c6:18:fb:5c:
bb:92:7a:0d:9b:c0:a2:99:79:92:80:3b:17:a9:62:08:51:4f:
4f:0a:01:1a:79:30:54:48:cf:59:42:90:20:33:da:25:a3:e5:
d8:01:a9:84:6b:ce:e4:7e:20:98:c3:75:3f:f7:36:bb:cc:4a:
4a:27:91:22:06:0f:67:71:0d:58:b1:16:70:5f:93:40:05:41:
74:f1:e6:ba:a6:ad:05:4f:ec:8e:87:d0:b2:d6:3b:aa:b0:6b:
ae:e5:cb:53:94:d4:cb:58:40:68:60:57:51:ed:08:ef:12:e8:
2e:3d:9a:17:f7:e3:8b:dd:a0:db:e1:a3:e8:f5:87:71:27:52:
18:94:33:f3:aa:14:86:58:37:e6:8c:fa:01:32:b1:5b:bc:5e:
dd:aa:83:85:56:9d:44:1e:12:13:c2:73:68:7b:38:87:d5:26:
50:b9:ce:9a:3e:a6:d3:e2:4f:83:d5:f1:0b:b0:f3:46:bb:2f:
3d:4f:29:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzKluHRR66PMKS00cxQrI0bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZTFhZjM3YTYwYTk5ODY4ZWZiYmFhMDgxN2I0OTgwZjE5
YTU0ZmIwHhcNMjQwMTAyMTQzMjE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YTc4ZWRjYzYxNGQ0MDU3ZmRkZjQ5Yjk4MTU2NTI4OWZkZTBjMDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkMsgGeS95Lh56nzBbPsEybQbpgg
EirDhXsSaSp3bDRGoq89R6tOyOG7BBFiUk4efhn4Kbt6rBYL9oP/Xtp26gxDakly
BnO2Nw3qO6YS3ABH/IvHFl0XTDCAvhed4/o0/OWvkQX8Z4EE3uJmeLB24GKcOzEt
sZuxq9+TLDnEW/RbQPB6V2VUyvSoRkPI/MvbayX1ZJr0pyWv+iaVo1mmhkbTALSm
mr7JpnLbuzMSCeS2kh+Vy6zaIbCi+X+MwXMhgnac3grE6iajIOf05FMB534s0Vuy
UmaM/+YIPm9N7+jJumfdE6Ym8H1WPJin/VCQV1CoYdzzHymXQVr1NdPbBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGp47cxhTUBX/d9JuYFWUon94MAcMB8GA1UdIwQY
MBaAFObhrzemCpmGjvu6oIF7SYDxmlT7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQt
MTQwNDViNjRhZTI5LzEvYW5qdHpHRk5RRmY5MzBtNWdWWlNpZjNnd0J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9lNjU4MGItYmZmNy00MWU4LWIzMTQtMTQwNDViNjRhZTI5
LzEvNXVHdk42WUttWWFPLTdxZ2dYdEpnUEdhVlBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQiqMA0G
CSqGSIb3DQEBCwUAA4IBAQCSCs2ZM2nNIIt/h4xWT1WX0MNedbbiv0lH+tU7YjLa
kqrtF+lP34jROaxR901kZZP8CN5tW5AgEigkgAuSjBLdj+HcYMYY+1y7knoNm8Ci
mXmSgDsXqWIIUU9PCgEaeTBUSM9ZQpAgM9olo+XYAamEa87kfiCYw3U/9za7zEpK
J5EiBg9ncQ1YsRZwX5NABUF08ea6pq0FT+yOh9Cy1juqsGuu5ctTlNTLWEBoYFdR
7QjvEuguPZoX9+OL3aDb4aPo9YdxJ1IYlDPzqhSGWDfmjPoBMrFbvF7dqoOFVp1E
HhITwnNoeziH1SZQuc6aPqbT4k+D1fELsPNGuy89Tyn+
-----END CERTIFICATE-----
Generated at Sat May 18 22:20:07 2024 by rpki-client on console-fra.rpki-client.org