Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/teTqAsPAtrmooOMqhJJ5nEOxvXE.roa
File: teTqAsPAtrmooOMqhJJ5nEOxvXE.roa (raw, json)
Hash identifier: L8eaC4mh4EtQIFnPnpKT2feM9Qlmnv+XD6/AOIog28w=
Subject key identifier: B5:E4:EA:02:C3:C0:B6:B9:A8:A0:E3:2A:84:92:79:9C:43:B1:BD:71
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 0192902C8D61F540448A67E8C20A97F2177A
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/teTqAsPAtrmooOMqhJJ5nEOxvXE.roa
Signing time: Tue 15 Oct 2024 12:34:51 +0000
ROA not before: Tue 15 Oct 2024 12:34:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206119
IP address blocks: 178.254.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:2c:8d:61:f5:40:44:8a:67:e8:c2:0a:97:f2:17:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Oct 15 12:34:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b5e4ea02c3c0b6b9a8a0e32a8492799c43b1bd71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:c6:2d:34:ef:74:1e:e2:6e:0d:4b:b0:98:
4d:ae:b9:b6:4d:49:33:b1:15:c5:9d:e4:2f:ea:7f:
05:e8:d9:33:82:de:f8:bd:a0:d7:27:7f:05:8d:d3:
10:2b:f0:42:f7:5f:7e:c2:c4:ba:a0:c4:c3:50:a9:
9c:4f:32:bd:f6:2c:4b:cd:da:50:7d:11:f4:3a:2a:
4d:24:f9:e2:6c:f7:c4:2e:4d:f3:a1:4b:06:60:41:
9e:3f:01:5c:eb:3c:80:71:b7:c9:b3:34:4f:c8:10:
be:4d:c1:1f:cc:16:69:ad:7e:fc:36:ce:6c:0f:4e:
ce:85:2e:9f:60:10:8c:66:43:61:5c:6d:c7:dc:6c:
ac:cd:5b:f7:83:e3:2f:38:ea:6d:8d:b0:22:b2:cd:
c5:ce:e4:aa:a6:8c:42:aa:46:be:ca:07:08:63:9f:
b3:bb:b9:e1:4b:1a:11:2d:f6:bb:ae:0a:00:94:07:
1a:68:d0:3c:33:31:05:ec:ad:87:0b:6b:1b:05:30:
04:71:e2:f8:3f:8a:6b:d2:77:8f:e1:61:67:8d:ba:
7d:86:26:56:9e:88:09:e9:d1:a8:10:2d:d3:c5:0b:
38:09:39:16:68:12:24:dd:c5:fb:55:d2:25:ff:92:
44:ff:08:35:43:87:15:c1:69:85:14:47:c6:4b:c3:
a0:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:E4:EA:02:C3:C0:B6:B9:A8:A0:E3:2A:84:92:79:9C:43:B1:BD:71
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/teTqAsPAtrmooOMqhJJ5nEOxvXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.254.168.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:fc:62:9a:3c:6a:86:47:33:df:f4:13:88:f2:b9:de:2f:6a:
d0:92:70:d3:c3:89:42:ee:1f:5d:6f:55:62:7c:3f:f0:46:c3:
3d:fa:52:86:2b:7c:32:cc:47:e5:eb:91:15:56:5e:2d:54:7e:
ab:b9:16:ea:85:7d:67:1d:9e:3c:8c:81:9e:ef:d0:a4:fb:b1:
6d:c2:3b:8d:06:15:89:59:b4:69:fe:f2:96:32:5b:f5:12:bb:
ec:b4:b2:b0:e4:d8:16:d0:1f:ba:bf:c3:23:91:bd:78:87:3c:
6c:1f:12:6d:86:ea:53:f0:64:3a:04:9f:1e:12:90:0e:fd:a6:
08:1b:1b:54:fa:be:eb:a4:40:68:ef:9b:e3:9d:ce:ed:77:fe:
88:ae:14:a0:11:0f:59:84:e9:ba:02:43:cf:2f:2f:d6:e5:9d:
94:bd:68:19:59:56:8b:36:a1:52:bf:27:bc:c7:d0:60:38:26:
84:af:e9:91:92:e3:8a:66:a8:58:86:84:de:aa:80:bc:c3:7c:
f9:9a:2e:7e:8e:94:53:db:cf:7b:d4:93:db:ef:42:ce:54:ba:
7d:84:42:26:fc:ea:3b:f2:36:4e:14:74:1d:47:0e:c8:81:f0:
9a:5c:26:30:ff:ae:d5:0f:fa:b7:ae:03:86:ed:e8:bd:03:38:
47:92:f7:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZKQLI1h9UBEimfowgqX8hd6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5NzEzZWYyNTI3N2UxM2RkNzNmNDQxOTZmZGE1Y2VjMGZk
OWNlMTYwHhcNMjQxMDE1MTIzNDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNWU0ZWEwMmMzYzBiNmI5YThhMGUzMmE4NDkyNzk5YzQzYjFiZDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R/GLTTvdB7ibg1LsJhNrrm2TUkz
sRXFneQv6n8F6Nkzgt74vaDXJ38FjdMQK/BC919+wsS6oMTDUKmcTzK99ixLzdpQ
fRH0OipNJPnibPfELk3zoUsGYEGePwFc6zyAcbfJszRPyBC+TcEfzBZprX78Ns5s
D07OhS6fYBCMZkNhXG3H3GyszVv3g+MvOOptjbAiss3FzuSqpoxCqka+ygcIY5+z
u7nhSxoRLfa7rgoAlAcaaNA8MzEF7K2HC2sbBTAEceL4P4pr0neP4WFnjbp9hiZW
nogJ6dGoEC3TxQs4CTkWaBIk3cX7VdIl/5JE/wg1Q4cVwWmFFEfGS8OgPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLXk6gLDwLa5qKDjKoSSeZxDsb1xMB8GA1UdIwQY
MBaAFOlxPvJSd+E91z9EGW/aXOwP2c4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEt
MGY2NmMxODg3OTE2LzEvdGVUcUFzUEF0cm1vb09NcWhKSjVuRU94dlhFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9lMTc2ZWItNTZmMi00ODA3LWIxMDEtMGY2NmMxODg3OTE2
LzEvNlhFLThsSjM0VDNYUDBRWmI5cGM3QV9aemhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv6oMA0G
CSqGSIb3DQEBCwUAA4IBAQBc/GKaPGqGRzPf9BOI8rneL2rQknDTw4lC7h9db1Vi
fD/wRsM9+lKGK3wyzEfl65EVVl4tVH6ruRbqhX1nHZ48jIGe79Ck+7FtwjuNBhWJ
WbRp/vKWMlv1ErvstLKw5NgW0B+6v8Mjkb14hzxsHxJthupT8GQ6BJ8eEpAO/aYI
GxtU+r7rpEBo75vjnc7td/6IrhSgEQ9ZhOm6AkPPLy/W5Z2UvWgZWVaLNqFSvye8
x9BgOCaEr+mRkuOKZqhYhoTeqoC8w3z5mi5+jpRT28971JPb70LOVLp9hEIm/Oo7
8jZOFHQdRw7IgfCaXCYw/67VD/q3rgOG7ei9AzhHkvfU
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:25:43 2024 by rpki-client on console-ams.rpki-client.org