Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/IgCEfqJ-yJPJCn03OmLfPu4OuUQ.roa
File: IgCEfqJ-yJPJCn03OmLfPu4OuUQ.roa (raw, json)
Hash identifier: frALc9qmGpkWAANf5ep1AKJj893pd7d8YtUOZoENNGA=
Subject key identifier: 22:00:84:7E:A2:7E:C8:93:C9:0A:7D:37:3A:62:DF:3E:EE:0E:B9:44
Certificate issuer: /CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Certificate serial: 018CC3490BD182CF807FB07F317733555033
Authority key identifier: A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/IgCEfqJ-yJPJCn03OmLfPu4OuUQ.roa
Signing time: Mon 01 Jan 2024 04:29:53 +0000
ROA not before: Mon 01 Jan 2024 04:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44489
IP address blocks: 93.91.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:0b:d1:82:cf:80:7f:b0:7f:31:77:33:55:50:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a137891dd4f3df83772d7cfe7183843cbff44d54
Validity
Not Before: Jan 1 04:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2200847ea27ec893c90a7d373a62df3eee0eb944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:77:92:8d:b6:6d:ca:c3:81:9a:ea:b3:05:46:
ee:d6:68:f3:da:1b:28:96:1c:5c:e4:77:ed:3d:cb:
36:4b:4c:2a:ff:0f:57:b7:29:4c:32:1b:ee:aa:c7:
2a:1d:8d:b9:c5:fa:ec:64:24:ad:69:df:42:4a:cc:
bd:21:c2:07:88:0d:d8:fe:82:33:cf:e6:3c:6e:09:
b8:b6:1d:a8:d1:65:1a:54:3f:cd:fa:e8:73:34:15:
93:cc:6e:9d:25:87:96:5d:5e:f0:05:ab:9c:f4:d7:
68:c6:27:b6:72:9a:a5:8b:47:00:e2:40:98:2f:49:
ae:30:e8:fd:19:22:0f:49:86:6c:71:66:fb:c1:22:
dd:73:cd:e6:c5:76:33:a4:12:3f:98:2f:2e:74:0e:
11:ca:77:e1:9f:3f:9c:00:10:25:d9:3a:c3:23:52:
c4:8a:a4:cc:d1:8a:da:93:df:20:35:54:4c:bb:24:
62:fb:e4:be:ca:69:f5:3f:5f:b8:c2:df:b6:b1:53:
ee:c6:75:6b:39:80:5c:d0:c1:91:85:dc:07:d0:ef:
8a:ab:d3:66:61:cb:3f:47:db:91:ae:c2:43:0f:ba:
82:2c:10:85:6d:ee:e7:98:ed:59:9e:3e:dc:9c:2c:
34:80:cb:7e:99:7c:16:82:48:39:a7:49:55:d4:ab:
e2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:00:84:7E:A2:7E:C8:93:C9:0A:7D:37:3A:62:DF:3E:EE:0E:B9:44
X509v3 Authority Key Identifier:
keyid:A1:37:89:1D:D4:F3:DF:83:77:2D:7C:FE:71:83:84:3C:BF:F4:4D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oTeJHdTz34N3LXz-cYOEPL_0TVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/IgCEfqJ-yJPJCn03OmLfPu4OuUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a2bb92-c591-4250-b2d3-8dda6c6ca81d/1/oTeJHdTz34N3LXz-cYOEPL_0TVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.91.48.0/20
Signature Algorithm: sha256WithRSAEncryption
5f:13:77:77:6e:e0:9b:93:22:87:51:23:0a:35:16:af:27:95:
ab:fd:cb:1e:46:13:39:91:18:c5:8e:1c:3c:30:b2:2e:56:7a:
40:a2:50:56:ba:19:71:ef:20:02:19:4d:3e:23:e0:4c:69:97:
58:18:b2:ba:8f:a0:1b:06:81:1a:96:71:78:2a:c0:35:42:04:
40:d6:2b:bb:2f:98:03:20:28:2b:e9:30:09:09:75:dd:8a:d6:
99:f1:60:9d:11:3f:56:96:4e:18:82:11:70:21:64:2e:20:bb:
3f:18:ff:54:b4:45:6e:84:3f:bb:d0:93:a9:52:5e:12:da:65:
4f:3f:27:96:b6:30:77:9c:5c:bc:64:43:51:47:6e:d5:6e:2b:
7c:91:dc:49:23:06:5e:4c:3e:c8:c2:9d:16:38:34:fd:6e:2c:
4a:34:ef:17:3f:2c:0d:fa:a4:19:5a:a6:b7:c2:f0:15:6b:04:
d0:69:78:f2:0c:bc:ec:ce:5c:e7:a8:2b:ce:e1:ca:23:51:f8:
f3:09:fc:46:02:fd:29:45:fc:70:c1:f1:2f:fe:59:6a:50:a3:
6e:ec:0e:59:f6:5f:87:1e:5c:a6:b9:da:f2:83:71:57:f0:0f:
f4:c9:7d:45:14:7b:77:4e:9d:4b:11:a1:c7:2e:df:e0:a5:19:
59:87:aa:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSQvRgs+Af7B/MXczVVAzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExMzc4OTFkZDRmM2RmODM3NzJkN2NmZTcxODM4NDNjYmZm
NDRkNTQwHhcNMjQwMTAxMDQyOTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMjAwODQ3ZWEyN2VjODkzYzkwYTdkMzczYTYyZGYzZWVlMGViOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3eSjbZtysOBmuqzBUbu1mjz2hso
lhxc5HftPcs2S0wq/w9XtylMMhvuqscqHY25xfrsZCStad9CSsy9IcIHiA3Y/oIz
z+Y8bgm4th2o0WUaVD/N+uhzNBWTzG6dJYeWXV7wBauc9Ndoxie2cpqli0cA4kCY
L0muMOj9GSIPSYZscWb7wSLdc83mxXYzpBI/mC8udA4Rynfhnz+cABAl2TrDI1LE
iqTM0Yrak98gNVRMuyRi++S+ymn1P1+4wt+2sVPuxnVrOYBc0MGRhdwH0O+Kq9Nm
Ycs/R9uRrsJDD7qCLBCFbe7nmO1Znj7cnCw0gMt+mXwWgkg5p0lV1KviKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCIAhH6ifsiTyQp9Nzpi3z7uDrlEMB8GA1UdIwQY
MBaAFKE3iR3U89+Ddy18/nGDhDy/9E1UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMt
OGRkYTZjNmNhODFkLzEvSWdDRWZxSi15SlBKQ24wM09tTGZQdTRPdVVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9hMmJiOTItYzU5MS00MjUwLWIyZDMtOGRkYTZjNmNhODFk
LzEvb1RlSkhkVHozNE4zTFh6LWNZT0VQTF8wVFZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXVswMA0G
CSqGSIb3DQEBCwUAA4IBAQBfE3d3buCbkyKHUSMKNRavJ5Wr/cseRhM5kRjFjhw8
MLIuVnpAolBWuhlx7yACGU0+I+BMaZdYGLK6j6AbBoEalnF4KsA1QgRA1iu7L5gD
ICgr6TAJCXXditaZ8WCdET9Wlk4YghFwIWQuILs/GP9UtEVuhD+70JOpUl4S2mVP
PyeWtjB3nFy8ZENRR27Vbit8kdxJIwZeTD7Iwp0WODT9bixKNO8XPywN+qQZWqa3
wvAVawTQaXjyDLzszlznqCvO4cojUfjzCfxGAv0pRfxwwfEv/llqUKNu7A5Z9l+H
Hlymudryg3FX8A/0yX1FFHt3Tp1LEaHHLt/gpRlZh6pL
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:10:42 2024 by rpki-client on console-fra.rpki-client.org