Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/jSM3Bi_XfOAcOVqyCoG5w56OYfs.roa
File: jSM3Bi_XfOAcOVqyCoG5w56OYfs.roa (raw, json)
Hash identifier: n9qNXAGvoQSW9doRyE6GLBoKJxyDiHjtIT8U1UWF+y8=
Subject key identifier: 8D:23:37:06:2F:D7:7C:E0:1C:39:5A:B2:0A:81:B9:C3:9E:8E:61:FB
Certificate issuer: /CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Certificate serial: 018CC26D1F475B99155B96F473100D9F29BA
Authority key identifier: D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/jSM3Bi_XfOAcOVqyCoG5w56OYfs.roa
Signing time: Mon 01 Jan 2024 00:29:40 +0000
ROA not before: Mon 01 Jan 2024 00:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212829
IP address blocks: 193.36.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:1f:47:5b:99:15:5b:96:f4:73:10:0d:9f:29:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8fb96ea3af51c532d7e8fe8c94376f51e1ea402
Validity
Not Before: Jan 1 00:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8d2337062fd77ce01c395ab20a81b9c39e8e61fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9e:9f:09:d5:34:5b:fd:c5:2e:ed:58:1a:4d:
6d:d0:a2:5c:bf:1d:82:2f:f9:5c:04:d3:20:8f:84:
15:ee:cb:cf:ad:ac:ae:9d:09:6d:da:70:7b:e9:5e:
b6:36:79:42:b8:8f:34:4a:97:1b:e1:f7:06:47:a5:
00:c8:f6:21:1d:56:47:b4:b3:f0:8a:2a:34:d4:af:
fd:16:a4:33:36:50:a4:98:aa:5c:2f:56:01:4f:10:
a7:97:b4:72:01:15:96:7b:09:96:a5:06:9c:2f:53:
c7:b8:42:f5:1b:73:16:20:7c:ee:71:eb:be:12:00:
98:56:87:16:b0:30:6b:47:21:46:fc:b8:4d:a3:a1:
d9:45:e0:76:6f:d2:0b:4a:ae:f9:79:65:41:be:5e:
54:6e:12:50:8c:4e:37:80:45:b2:d2:a6:1c:85:9e:
19:9f:55:18:c8:53:b7:ea:ea:3f:15:c7:5b:d7:77:
8e:37:10:76:06:46:7f:ad:b9:09:c7:ef:4c:1d:f5:
6a:8e:f0:72:46:06:7d:a8:f8:45:8e:7a:c8:a7:63:
29:78:a4:0a:8b:37:d8:19:52:fd:58:bb:75:21:0f:
53:a2:9d:07:a8:c3:4d:57:1d:53:73:a3:53:ca:c8:
90:87:10:e7:fc:eb:53:11:8b:a9:e0:a1:45:67:78:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:23:37:06:2F:D7:7C:E0:1C:39:5A:B2:0A:81:B9:C3:9E:8E:61:FB
X509v3 Authority Key Identifier:
keyid:D8:FB:96:EA:3A:F5:1C:53:2D:7E:8F:E8:C9:43:76:F5:1E:1E:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2PuW6jr1HFMtfo_oyUN29R4epAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/jSM3Bi_XfOAcOVqyCoG5w56OYfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/53ffa0-9060-472c-aac2-8eb85e3283e2/1/2PuW6jr1HFMtfo_oyUN29R4epAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.183.0/24
Signature Algorithm: sha256WithRSAEncryption
83:49:45:fa:60:27:4f:73:9a:50:35:e6:d6:16:55:bb:d8:4a:
6c:25:a0:89:c7:43:bb:25:27:f6:f8:46:f6:32:26:9c:c6:12:
27:f5:3c:8c:d6:71:ee:bf:2b:1d:1a:3a:b3:b0:a4:be:22:55:
69:df:d9:ea:f6:a6:de:16:66:91:a1:b0:d0:cd:fc:6d:3c:64:
f2:52:be:a3:df:2b:bf:35:2e:9b:cc:38:cb:6f:78:69:80:e6:
c4:65:15:95:4a:b4:9d:37:30:66:08:17:4c:68:77:dd:f8:89:
8d:d9:f4:cb:b9:a2:27:d7:89:b8:70:2e:e6:dc:61:a8:8a:51:
08:b6:e6:10:24:41:75:d3:b2:21:bf:37:8d:e3:be:ba:37:a2:
04:0b:79:35:0c:07:05:80:af:05:94:3e:4c:1c:98:4a:a1:81:
63:a7:6a:83:4f:67:96:0e:50:c4:d6:a7:07:5d:02:2a:82:99:
2b:13:56:6a:6f:bf:d7:8c:4e:05:0c:8c:4e:a6:57:d4:12:22:
5a:3f:bc:7f:54:4e:30:c4:2e:0f:86:8c:c6:94:50:f8:d5:98:
59:0b:4a:ee:00:87:1f:29:d3:cf:4e:92:9c:44:a0:45:60:ec:
fa:34:b2:32:f8:52:7b:85:f4:6a:96:2c:a8:67:bb:d2:37:1b:
3c:9e:1a:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbR9HW5kVW5b0cxANnym6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4ZmI5NmVhM2FmNTFjNTMyZDdlOGZlOGM5NDM3NmY1MWUx
ZWE0MDIwHhcNMjQwMTAxMDAyOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZDIzMzcwNjJmZDc3Y2UwMWMzOTVhYjIwYTgxYjljMzllOGU2MWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnp6fCdU0W/3FLu1YGk1t0KJcvx2C
L/lcBNMgj4QV7svPrayunQlt2nB76V62NnlCuI80Spcb4fcGR6UAyPYhHVZHtLPw
iio01K/9FqQzNlCkmKpcL1YBTxCnl7RyARWWewmWpQacL1PHuEL1G3MWIHzuceu+
EgCYVocWsDBrRyFG/LhNo6HZReB2b9ILSq75eWVBvl5UbhJQjE43gEWy0qYchZ4Z
n1UYyFO36uo/Fcdb13eONxB2BkZ/rbkJx+9MHfVqjvByRgZ9qPhFjnrIp2MpeKQK
izfYGVL9WLt1IQ9Top0HqMNNVx1Tc6NTysiQhxDn/OtTEYup4KFFZ3j5rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI0jNwYv13zgHDlasgqBucOejmH7MB8GA1UdIwQY
MBaAFNj7luo69RxTLX6P6MlDdvUeHqQCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzIt
OGViODVlMzI4M2UyLzEvalNNM0JpX1hmT0FjT1ZxeUNvRzV3NTZPWWZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81M2ZmYTAtOTA2MC00NzJjLWFhYzItOGViODVlMzI4M2Uy
LzEvMlB1VzZqcjFIRk10Zm9fb3lVTjI5UjRlcEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSS3MA0G
CSqGSIb3DQEBCwUAA4IBAQCDSUX6YCdPc5pQNebWFlW72EpsJaCJx0O7JSf2+Eb2
MiacxhIn9TyM1nHuvysdGjqzsKS+IlVp39nq9qbeFmaRobDQzfxtPGTyUr6j3yu/
NS6bzDjLb3hpgObEZRWVSrSdNzBmCBdMaHfd+ImN2fTLuaIn14m4cC7m3GGoilEI
tuYQJEF107IhvzeN4766N6IEC3k1DAcFgK8FlD5MHJhKoYFjp2qDT2eWDlDE1qcH
XQIqgpkrE1Zqb7/XjE4FDIxOplfUEiJaP7x/VE4wxC4PhozGlFD41ZhZC0ruAIcf
KdPPTpKcRKBFYOz6NLIy+FJ7hfRqliyoZ7vSNxs8nhq7
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:36:15 2024 by rpki-client on console-ams.rpki-client.org