Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/XgY9_W1baPI1aAeC4K51VOkAlqQ.roa
File: XgY9_W1baPI1aAeC4K51VOkAlqQ.roa (raw, json)
Hash identifier: 6tmkN1qCB2D5izIa7vIx03Xw1r3rCZvaDXKPG1HXiFM=
Subject key identifier: 5E:06:3D:FD:6D:5B:68:F2:35:68:07:82:E0:AE:75:54:E9:00:96:A4
Certificate issuer: /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial: 01909E29712124BBF7B44F9F4E1102F47F3D
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/XgY9_W1baPI1aAeC4K51VOkAlqQ.roa
Signing time: Wed 10 Jul 2024 19:40:34 +0000
ROA not before: Wed 10 Jul 2024 19:40:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 193.135.40.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Sep 2024 14:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:9e:29:71:21:24:bb:f7:b4:4f:9f:4e:11:02:f4:7f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Validity
Not Before: Jul 10 19:40:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e063dfd6d5b68f235680782e0ae7554e90096a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:93:dd:db:1a:95:7c:69:4a:7a:3b:aa:58:b4:
95:03:5d:78:18:2b:e3:6c:e4:ed:25:43:7f:ac:ad:
c5:5e:25:94:dd:d2:4a:31:29:b6:f0:2a:bb:06:2f:
b1:7b:12:fb:30:0d:01:2b:81:e7:31:d7:72:cf:37:
3b:a8:67:0c:c3:cc:d4:9a:37:65:ad:98:01:7c:ff:
26:8d:d7:bf:89:39:1a:5c:ad:af:84:ed:65:7f:12:
04:04:b5:4c:6e:1d:88:25:88:2b:a2:bf:d8:5e:54:
ab:fe:46:d7:97:71:30:f3:95:b7:a6:0d:06:be:37:
6b:b2:0b:e2:08:ad:2f:b8:6d:bf:63:c6:ec:fb:d3:
e2:49:83:c7:1d:6a:33:a4:06:56:a1:73:78:8a:37:
fa:67:33:46:68:ab:5c:53:77:4a:2d:a5:2b:5f:52:
ae:08:9b:b1:bc:22:df:8f:10:a8:cc:df:b5:6f:20:
b7:f7:5c:2e:28:9f:e6:a0:f3:0c:66:97:cf:da:30:
bf:ce:7b:f1:16:14:da:52:ca:73:6f:fd:01:85:6e:
fc:94:e6:99:41:e7:de:7b:db:40:3f:09:ec:09:10:
c2:c1:fb:06:75:d9:dc:77:22:fe:06:47:49:27:46:
0d:2b:9d:35:e4:86:d6:33:cf:16:f1:05:fe:3d:e0:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:06:3D:FD:6D:5B:68:F2:35:68:07:82:E0:AE:75:54:E9:00:96:A4
X509v3 Authority Key Identifier:
keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/XgY9_W1baPI1aAeC4K51VOkAlqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.40.0/21
Signature Algorithm: sha256WithRSAEncryption
4e:9c:e2:f1:03:bb:70:6d:a1:fb:27:89:2d:fd:35:40:bc:a8:
ea:1a:84:1d:39:62:7e:e4:1a:1e:9c:e1:f5:13:d6:f4:54:20:
76:ea:9b:69:fc:bd:f7:cc:81:97:da:b6:ae:74:02:8f:cc:9d:
e3:1a:e4:f9:76:ce:12:77:d1:a8:f6:72:d4:79:d2:84:d7:58:
48:44:0b:1c:19:02:d2:9f:d3:b6:01:9e:a2:2f:a1:83:ff:96:
b7:e4:21:87:88:10:87:92:e4:f9:f5:41:de:f0:8d:ae:a2:f0:
33:7b:71:6e:67:d1:e3:c1:a9:56:15:73:eb:7c:e7:ce:4c:03:
9b:d2:f7:08:7a:b7:0c:4d:50:53:f1:6c:a0:ab:6f:2b:53:0c:
52:01:a1:63:a7:14:61:ec:9f:99:f5:53:ab:6f:39:5d:cb:88:
1f:26:77:3e:b7:2b:d7:6d:b2:08:16:55:4c:12:53:80:e1:6f:
b1:65:2f:25:5e:21:59:f0:fe:b5:17:8d:3b:6b:fd:7d:e8:31:
ff:3d:ec:2b:49:6e:b8:bc:bf:36:23:48:d5:5b:1a:22:b8:49:
5d:b1:dd:e2:17:b4:f1:73:69:72:f4:62:85:08:aa:46:4d:5c:
87:e5:87:34:6c:01:3b:30:38:cb:f1:a6:96:2d:43:74:3e:4a:
e9:ee:83:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCeKXEhJLv3tE+fThEC9H89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYWQ5YzBjZTViYTM5MDViNDE5NzBhMDRlNTE5NzYwNzZj
NjdlMDAwHhcNMjQwNzEwMTk0MDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTA2M2RmZDZkNWI2OGYyMzU2ODA3ODJlMGFlNzU1NGU5MDA5NmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZPd2xqVfGlKejuqWLSVA114GCvj
bOTtJUN/rK3FXiWU3dJKMSm28Cq7Bi+xexL7MA0BK4HnMddyzzc7qGcMw8zUmjdl
rZgBfP8mjde/iTkaXK2vhO1lfxIEBLVMbh2IJYgror/YXlSr/kbXl3Ew85W3pg0G
vjdrsgviCK0vuG2/Y8bs+9PiSYPHHWozpAZWoXN4ijf6ZzNGaKtcU3dKLaUrX1Ku
CJuxvCLfjxCozN+1byC391wuKJ/moPMMZpfP2jC/znvxFhTaUspzb/0BhW78lOaZ
Qefee9tAPwnsCRDCwfsGddncdyL+BkdJJ0YNK5015IbWM88W8QX+PeB/AwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF4GPf1tW2jyNWgHguCudVTpAJakMB8GA1UdIwQY
MBaAFIqtnAzlujkFtBlwoE5Rl2B2xn4AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGIt
N2EwZWNlOWMwYWY4LzEvWGdZOV9XMWJhUEkxYUFlQzRLNTFWT2tBbHFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lNDQ1ZTQtMjZiZC00OGM5LTgzZGItN2EwZWNlOWMwYWY4
LzEvaXEyY0RPVzZPUVcwR1hDZ1RsR1hZSGJHZmdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwYcoMA0G
CSqGSIb3DQEBCwUAA4IBAQBOnOLxA7twbaH7J4kt/TVAvKjqGoQdOWJ+5BoenOH1
E9b0VCB26ptp/L33zIGX2raudAKPzJ3jGuT5ds4Sd9Go9nLUedKE11hIRAscGQLS
n9O2AZ6iL6GD/5a35CGHiBCHkuT59UHe8I2uovAze3FuZ9HjwalWFXPrfOfOTAOb
0vcIercMTVBT8Wygq28rUwxSAaFjpxRh7J+Z9VOrbzldy4gfJnc+tyvXbbIIFlVM
ElOA4W+xZS8lXiFZ8P61F407a/196DH/PewrSW64vL82I0jVWxoiuEldsd3iF7Tx
c2ly9GKFCKpGTVyH5Yc0bAE7MDjL8aaWLUN0Pkrp7oOf
-----END CERTIFICATE-----
Generated at Sat Sep 7 20:59:40 2024 by rpki-client on console-ams.rpki-client.org