Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/frQuRRcU8qzsOpstQJTTI0SVWGk.roa
File: frQuRRcU8qzsOpstQJTTI0SVWGk.roa (raw, json)
Hash identifier: Qh5M2SQ9gX+2ISiyxyGxNzXMwSnNLgLYTWC9/+O8Mg8=
Subject key identifier: 7E:B4:2E:45:17:14:F2:AC:EC:3A:9B:2D:40:94:D3:23:44:95:58:69
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0190BD18C069E64ECA8ABF206C5D25AB2BA3
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/frQuRRcU8qzsOpstQJTTI0SVWGk.roa
Signing time: Tue 16 Jul 2024 19:50:34 +0000
ROA not before: Tue 16 Jul 2024 19:50:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 135391
IP address blocks: 194.26.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bd:18:c0:69:e6:4e:ca:8a:bf:20:6c:5d:25:ab:2b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jul 16 19:50:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7eb42e451714f2acec3a9b2d4094d32344955869
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ff:c8:fc:52:64:63:17:be:b9:bd:0c:ae:4c:
35:16:4d:07:6e:93:28:2a:f1:4b:6d:ce:5d:34:c0:
16:77:f7:46:54:1f:7a:33:3b:ec:ec:f6:a7:99:b2:
c1:5b:07:b8:7f:1c:67:17:6f:40:c0:5f:40:3b:f5:
9b:d2:81:28:1a:87:2d:2a:dc:8d:d5:d5:9d:92:9a:
d1:27:c3:d9:0f:d7:cb:30:6e:fc:c4:89:30:3d:5c:
be:1d:03:ca:d7:78:7f:72:08:b3:03:98:06:dc:81:
f4:24:26:c1:7c:4c:13:1b:19:c4:38:db:48:ab:19:
37:25:04:a8:5f:eb:10:8c:a7:34:6b:20:57:a2:e4:
52:22:ed:6d:50:2c:bd:d2:da:50:e6:7f:de:23:e4:
e2:a6:81:e7:6e:26:d4:07:6a:9c:41:ab:cd:65:f1:
fa:42:45:c1:00:fb:62:f6:5f:d1:c8:db:20:37:36:
2d:ad:61:fe:c0:22:15:07:66:24:5d:79:49:d7:68:
a8:4a:70:92:bb:db:c1:fc:7b:e9:d3:39:7a:53:04:
d8:dd:c4:20:94:2b:9d:b5:03:2c:f3:0f:c3:20:9b:
25:50:2b:b7:a4:e4:d0:42:9f:a6:1e:44:e3:67:52:
f1:e8:c1:49:ae:9e:ab:10:a7:79:e7:92:30:11:6c:
8f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B4:2E:45:17:14:F2:AC:EC:3A:9B:2D:40:94:D3:23:44:95:58:69
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/frQuRRcU8qzsOpstQJTTI0SVWGk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.215.0/24
Signature Algorithm: sha256WithRSAEncryption
81:61:7c:15:49:bd:f0:2a:1d:40:a0:04:e9:a3:57:52:7e:5c:
4b:ee:03:5c:00:fa:22:6d:ac:77:1e:cc:59:19:a9:4f:70:44:
93:56:e5:19:5d:ac:69:4e:5b:28:33:8a:b0:30:79:cc:f0:50:
cd:de:19:d3:fc:6a:c7:b6:9b:85:98:67:87:11:47:7e:70:db:
a3:52:6e:64:b4:70:f5:11:2f:e1:d9:f4:9f:ea:55:38:74:81:
35:82:72:95:43:b7:76:42:eb:19:bb:53:74:e9:58:8a:10:69:
9a:17:91:c3:5c:1d:4c:ff:89:75:0a:06:fc:21:6d:01:2c:e3:
6b:e2:66:0b:9c:56:2c:a4:a7:42:5f:69:a1:e9:63:4c:11:e8:
db:c8:dd:9d:90:22:8a:b8:69:9e:4f:ba:b5:d3:34:20:06:41:
74:cb:c1:56:9e:ef:b9:c9:95:ad:ee:52:62:ce:10:26:10:33:
1c:ab:43:4b:da:93:c9:0e:b9:b9:b6:c1:fc:b1:45:2d:35:a1:
40:23:8c:e4:4b:96:a8:c0:08:53:79:a3:9b:3d:91:2f:b3:45:
1a:bc:f2:a1:3e:33:cd:f4:c7:68:b7:a5:6b:cb:5c:b4:51:57:
7a:0a:77:d2:e9:75:7b:2e:78:69:56:55:f9:39:fc:bd:34:1e:
6a:1d:72:b4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZC9GMBp5k7Kir8gbF0lqyujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjQwNzE2MTk1MDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZWI0MmU0NTE3MTRmMmFjZWMzYTliMmQ0MDk0ZDMyMzQ0OTU1ODY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0P/I/FJkYxe+ub0Mrkw1Fk0HbpMo
KvFLbc5dNMAWd/dGVB96Mzvs7PanmbLBWwe4fxxnF29AwF9AO/Wb0oEoGoctKtyN
1dWdkprRJ8PZD9fLMG78xIkwPVy+HQPK13h/cgizA5gG3IH0JCbBfEwTGxnEONtI
qxk3JQSoX+sQjKc0ayBXouRSIu1tUCy90tpQ5n/eI+TipoHnbibUB2qcQavNZfH6
QkXBAPti9l/RyNsgNzYtrWH+wCIVB2YkXXlJ12ioSnCSu9vB/Hvp0zl6UwTY3cQg
lCudtQMs8w/DIJslUCu3pOTQQp+mHkTjZ1Lx6MFJrp6rEKd555IwEWyPfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH60LkUXFPKs7DqbLUCU0yNElVhpMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvZnJRdVJSY1U4cXpzT3BzdFFKVFRJMFNWV0drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhrXMA0G
CSqGSIb3DQEBCwUAA4IBAQCBYXwVSb3wKh1AoATpo1dSflxL7gNcAPoibax3HsxZ
GalPcESTVuUZXaxpTlsoM4qwMHnM8FDN3hnT/GrHtpuFmGeHEUd+cNujUm5ktHD1
ES/h2fSf6lU4dIE1gnKVQ7d2QusZu1N06ViKEGmaF5HDXB1M/4l1Cgb8IW0BLONr
4mYLnFYspKdCX2mh6WNMEejbyN2dkCKKuGmeT7q10zQgBkF0y8FWnu+5yZWt7lJi
zhAmEDMcq0NL2pPJDrm5tsH8sUUtNaFAI4zkS5aowAhTeaObPZEvs0UavPKhPjPN
9Mdot6Vry1y0UVd6CnfS6XV7LnhpVlX5Ofy9NB5qHXK0
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:19:48 2024 by rpki-client on console-ams.rpki-client.org