Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/K-M8tcrgMEUU1kmDP9aMRVpLvZo.roa
File: K-M8tcrgMEUU1kmDP9aMRVpLvZo.roa (raw, json)
Hash identifier: cVX3+vWSKxCSuaQA2b010nkjlzsvlUt7vaYJb61fPVY=
Subject key identifier: 2B:E3:3C:B5:CA:E0:30:45:14:D6:49:83:3F:D6:8C:45:5A:4B:BD:9A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018F064756F8FB92D8C28D4EB525D8F29CC9
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/K-M8tcrgMEUU1kmDP9aMRVpLvZo.roa
Signing time: Mon 22 Apr 2024 14:48:09 +0000
ROA not before: Mon 22 Apr 2024 14:48:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 133944
IP address blocks: 160.19.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:06:47:56:f8:fb:92:d8:c2:8d:4e:b5:25:d8:f2:9c:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 22 14:48:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2be33cb5cae0304514d649833fd68c455a4bbd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:84:63:87:07:4e:d9:23:74:11:3a:21:a7:
16:1d:9c:56:64:58:b6:90:d1:fd:ce:ca:c9:3b:46:
2b:6f:65:be:b7:77:9c:62:79:19:4b:99:8e:f1:3c:
ca:63:09:4f:dd:c8:9e:79:ce:1e:2a:dd:26:b5:e1:
5f:50:31:27:68:fa:7a:90:24:ae:95:d7:e3:3f:f2:
7f:07:d5:c6:2a:f9:65:c7:20:3c:f3:77:81:4c:ae:
4b:b9:8e:a2:ec:e6:ad:f3:9b:a1:ce:3e:fe:93:06:
86:d5:13:64:e1:92:35:8b:9e:39:46:f6:8b:54:8f:
b3:8e:47:67:c5:a9:14:95:3d:94:eb:b7:48:42:cb:
f0:3d:4d:f1:cf:5b:ed:6b:a9:04:ba:61:5f:b8:40:
cc:d1:29:68:5a:a8:4a:6b:4a:5b:56:77:bf:0b:af:
28:77:07:7e:08:8b:fa:5e:d5:d5:d9:10:33:c7:04:
0e:15:30:1b:24:6a:64:2f:a4:4d:7c:92:26:8b:21:
fc:a0:e4:e8:8f:86:df:92:54:f8:c1:4e:39:2b:f1:
25:8e:99:f6:1d:3a:0b:62:4d:5b:82:9d:c9:05:d5:
42:38:fe:c0:fd:38:2b:13:2b:c0:01:24:36:66:57:
18:af:ba:f9:f1:b8:43:f7:ec:e6:00:27:fd:40:f0:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E3:3C:B5:CA:E0:30:45:14:D6:49:83:3F:D6:8C:45:5A:4B:BD:9A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/K-M8tcrgMEUU1kmDP9aMRVpLvZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.19.92.0/23
Signature Algorithm: sha256WithRSAEncryption
30:ce:eb:e2:3c:7e:03:04:a0:94:91:78:41:05:73:ce:d5:f1:
fe:9c:dc:31:f6:02:55:d9:65:55:2a:38:e5:de:f7:25:4b:51:
6f:d8:87:99:46:1b:51:be:59:62:70:78:06:23:61:14:bb:f9:
7b:33:ba:f2:9c:7d:9d:9b:09:a6:91:1c:c7:62:23:bd:ab:21:
af:2f:7f:6c:7b:71:3f:c5:ba:fc:85:95:00:f1:aa:1f:c3:f3:
74:0c:8e:ac:04:3f:be:1b:7d:ad:d1:b9:d6:d6:5d:c3:72:e1:
b4:be:14:7a:be:a7:f0:1a:c8:83:6c:f9:46:69:8b:1b:9c:f1:
7f:0a:0a:cb:04:f4:c0:0a:9c:6b:bb:b2:63:1c:4a:3f:41:79:
e3:18:30:40:1d:80:ea:70:e9:04:1e:74:34:14:c6:e3:8a:7f:
79:6f:16:05:a9:00:95:9f:15:bc:bb:82:0a:a7:d8:30:5f:8e:
72:85:ed:6d:c7:93:d4:24:f7:eb:e4:91:b4:84:dd:2b:e6:60:
d7:c8:1c:3e:ef:79:86:ad:c8:5d:2c:23:df:0a:4c:db:b8:30:
72:55:35:16:be:9f:32:5f:03:70:c3:48:08:3b:f6:82:89:ab:
7f:77:7d:05:90:04:20:cd:ab:d9:20:f8:42:22:65:63:01:a7:
1e:8a:08:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY8GR1b4+5LYwo1OtSXY8pzJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjQwNDIyMTQ0ODA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmUzM2NiNWNhZTAzMDQ1MTRkNjQ5ODMzZmQ2OGM0NTVhNGJiZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOyEY4cHTtkjdBE6IacWHZxWZFi2
kNH9zsrJO0Yrb2W+t3ecYnkZS5mO8TzKYwlP3cieec4eKt0mteFfUDEnaPp6kCSu
ldfjP/J/B9XGKvllxyA883eBTK5LuY6i7Oat85uhzj7+kwaG1RNk4ZI1i545RvaL
VI+zjkdnxakUlT2U67dIQsvwPU3xz1vta6kEumFfuEDM0SloWqhKa0pbVne/C68o
dwd+CIv6XtXV2RAzxwQOFTAbJGpkL6RNfJImiyH8oOToj4bfklT4wU45K/Eljpn2
HToLYk1bgp3JBdVCOP7A/TgrEyvAASQ2ZlcYr7r58bhD9+zmACf9QPCzpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCvjPLXK4DBFFNZJgz/WjEVaS72aMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvSy1NOHRjcmdNRVVVMWttRFA5YU1SVnBMdlpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBoBNcMA0G
CSqGSIb3DQEBCwUAA4IBAQAwzuviPH4DBKCUkXhBBXPO1fH+nNwx9gJV2WVVKjjl
3vclS1Fv2IeZRhtRvllicHgGI2EUu/l7M7rynH2dmwmmkRzHYiO9qyGvL39se3E/
xbr8hZUA8aofw/N0DI6sBD++G32t0bnW1l3DcuG0vhR6vqfwGsiDbPlGaYsbnPF/
CgrLBPTACpxru7JjHEo/QXnjGDBAHYDqcOkEHnQ0FMbjin95bxYFqQCVnxW8u4IK
p9gwX45yhe1tx5PUJPfr5JG0hN0r5mDXyBw+73mGrchdLCPfCkzbuDByVTUWvp8y
XwNww0gIO/aCiat/d30FkAQgzavZIPhCImVjAaceigiP
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:48 2024 by rpki-client on console-ams.rpki-client.org