Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/x9xWmDJPI2JpWj3bE7FclZZu_FU.roa
File: x9xWmDJPI2JpWj3bE7FclZZu_FU.roa (raw, json)
Hash identifier: D4VbpeGxVHNCHr3udOmoumv7Gc4FGAptZUnguOAYR9Y=
Subject key identifier: C7:DC:56:98:32:4F:23:62:69:5A:3D:DB:13:B1:5C:95:96:6E:FC:55
Certificate issuer: /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial: 01928F1466565DFA7D344ECFA1819F3EEC52
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/x9xWmDJPI2JpWj3bE7FclZZu_FU.roa
Signing time: Tue 15 Oct 2024 07:28:51 +0000
ROA not before: Tue 15 Oct 2024 07:28:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1759
IP address blocks: 193.143.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:8f:14:66:56:5d:fa:7d:34:4e:cf:a1:81:9f:3e:ec:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Validity
Not Before: Oct 15 07:28:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c7dc5698324f2362695a3ddb13b15c95966efc55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e5:31:ba:93:d2:fa:f9:fc:0b:91:1e:46:88:
2e:6a:72:95:c9:6d:85:b6:e7:fc:ce:cb:bf:99:22:
f4:71:ce:af:48:af:be:7e:63:c8:78:e3:9e:d8:1b:
36:2e:69:e8:9f:bf:16:b1:76:94:bd:a7:0b:68:7a:
80:52:ac:11:5c:fd:d4:60:bf:ab:4d:2f:bd:15:a7:
cb:80:0e:fc:75:e9:61:dc:00:08:90:cf:64:fb:e0:
3f:be:3d:e8:88:21:00:b6:6a:df:c5:43:d0:fc:88:
c8:f9:bb:40:7d:aa:37:83:14:19:6f:9c:8f:a5:9b:
4d:09:36:4b:9c:07:1a:5a:bf:17:20:03:7a:50:1a:
69:5b:3c:a4:ab:3b:1c:0b:47:dc:57:5a:64:59:fa:
d5:25:f2:7a:1f:1b:c0:5e:b7:94:ed:b4:03:71:5d:
47:e2:8f:68:23:85:33:11:92:fa:a1:f2:20:62:0b:
c3:f4:b6:4d:3f:54:2b:bf:f8:e5:bb:49:a7:d5:f3:
6d:18:ef:a2:b1:90:49:17:a9:7f:9e:eb:aa:e2:9a:
ae:88:e2:21:31:91:a2:03:5b:b5:7a:c6:1c:fc:5f:
d3:7f:b3:89:18:ce:a9:17:93:de:7a:1b:c0:ba:6c:
05:9c:9a:8d:87:fb:3f:70:47:d6:fb:56:7e:fb:38:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:DC:56:98:32:4F:23:62:69:5A:3D:DB:13:B1:5C:95:96:6E:FC:55
X509v3 Authority Key Identifier:
keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/x9xWmDJPI2JpWj3bE7FclZZu_FU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.143.115.0/24
Signature Algorithm: sha256WithRSAEncryption
73:5f:75:35:51:2a:dc:f8:2b:14:a7:e0:a9:c0:8a:ee:cc:e3:
da:50:67:6f:0d:d4:04:30:1f:7d:b5:5f:0b:4b:a7:d0:ef:3a:
12:b7:01:a3:15:a2:ab:f8:1f:4b:95:0a:a7:46:5c:58:ca:97:
54:61:4d:a0:a5:b1:3c:18:29:65:d1:9c:01:98:2e:29:d8:6b:
0a:57:5e:d0:6b:a1:e0:4c:f4:ff:9c:e5:70:0f:9b:bf:06:7b:
36:a3:7e:33:84:ca:7c:9c:8b:a4:f4:99:c9:4a:b9:3c:62:05:
61:6e:39:52:8d:93:17:fb:34:4a:05:5b:ec:2f:b4:83:6b:3d:
dd:47:17:85:31:99:c7:bd:9b:61:93:31:55:5e:33:c4:82:29:
19:09:2b:d7:08:4a:54:ba:71:d6:a2:f2:ca:b6:15:b9:2e:a2:
1a:e9:31:67:7b:84:c9:94:0d:0d:d9:2c:34:fb:3e:c4:1a:f7:
8b:96:c4:5b:55:b0:5e:6f:bd:c5:04:bf:1c:5e:c1:d3:3f:7f:
b4:a7:62:f9:85:4e:31:c5:81:91:32:1b:f9:50:35:28:ef:a8:
3a:59:81:42:8f:48:09:d1:1c:99:74:a2:0b:e9:61:4d:ca:b3:
47:c9:29:6e:37:f9:23:4b:17:5e:33:7b:09:ef:d6:a9:e4:57:
3f:93:ec:ea
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKPFGZWXfp9NE7PoYGfPuxSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYTk4NjdlYTYwM2ZjOGNmOTJiYjViYWM2ZjI1NTcxMGUz
YmYzNmEwHhcNMjQxMDE1MDcyODUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjN2RjNTY5ODMyNGYyMzYyNjk1YTNkZGIxM2IxNWM5NTk2NmVmYzU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+UxupPS+vn8C5EeRoguanKVyW2F
tuf8zsu/mSL0cc6vSK++fmPIeOOe2Bs2Lmnon78WsXaUvacLaHqAUqwRXP3UYL+r
TS+9FafLgA78delh3AAIkM9k++A/vj3oiCEAtmrfxUPQ/IjI+btAfao3gxQZb5yP
pZtNCTZLnAcaWr8XIAN6UBppWzykqzscC0fcV1pkWfrVJfJ6HxvAXreU7bQDcV1H
4o9oI4UzEZL6ofIgYgvD9LZNP1Qrv/jlu0mn1fNtGO+isZBJF6l/nuuq4pquiOIh
MZGiA1u1esYc/F/Tf7OJGM6pF5PeehvAumwFnJqNh/s/cEfW+1Z++zhHdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMfcVpgyTyNiaVo92xOxXJWWbvxVMB8GA1UdIwQY
MBaAFCOphn6mA/yM+Su1usbyVXEOO/NqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEt
NTk0YTI3ZGIxNDZiLzEveDl4V21ESlBJMkpwV2ozYkU3RmNsWlp1X0ZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi82ZWNlNWItMzYwZi00YmU0LWFhNjEtNTk0YTI3ZGIxNDZi
LzEvSTZtR2ZxWURfSXo1SzdXNnh2SlZjUTQ3ODJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY9zMA0G
CSqGSIb3DQEBCwUAA4IBAQBzX3U1USrc+CsUp+CpwIruzOPaUGdvDdQEMB99tV8L
S6fQ7zoStwGjFaKr+B9LlQqnRlxYypdUYU2gpbE8GCll0ZwBmC4p2GsKV17Qa6Hg
TPT/nOVwD5u/Bns2o34zhMp8nIuk9JnJSrk8YgVhbjlSjZMX+zRKBVvsL7SDaz3d
RxeFMZnHvZthkzFVXjPEgikZCSvXCEpUunHWovLKthW5LqIa6TFne4TJlA0N2Sw0
+z7EGveLlsRbVbBeb73FBL8cXsHTP3+0p2L5hU4xxYGRMhv5UDUo76g6WYFCj0gJ
0RyZdKIL6WFNyrNHySluN/kjSxdeM3sJ79ap5Fc/k+zq
-----END CERTIFICATE-----
Generated at Sat Nov 23 08:44:43 2024 by rpki-client on console-fra.rpki-client.org