Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/tMPHx62sM9ZzCAVTWxmh3s0sZgw.roa
File: tMPHx62sM9ZzCAVTWxmh3s0sZgw.roa (raw, json)
Hash identifier: FtoQ9FRcIVcy/xZRw7X2By5752snna78wjBPVc7OBo4=
Subject key identifier: B4:C3:C7:C7:AD:AC:33:D6:73:08:05:53:5B:19:A1:DE:CD:2C:66:0C
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018E9A18435CE5DCEC4888E6FCABB1E49091
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/tMPHx62sM9ZzCAVTWxmh3s0sZgw.roa
Signing time: Mon 01 Apr 2024 14:37:45 +0000
ROA not before: Mon 01 Apr 2024 14:37:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209737
IP address blocks: 93.190.8.0/24 maxlen: 24
193.17.5.0/24 maxlen: 24
193.111.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.mft
rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:9a:18:43:5c:e5:dc:ec:48:88:e6:fc:ab:b1:e4:90:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Apr 1 14:37:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4c3c7c7adac33d6730805535b19a1decd2c660c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:52:36:b5:bc:0d:5f:e7:7c:82:d7:cd:bc:
c1:a7:ad:f4:0a:09:93:6a:9d:dc:d6:35:ec:dd:2e:
8e:09:7b:4a:dc:83:91:70:a1:39:5b:bc:88:6b:60:
47:46:58:e1:ba:3c:13:f4:a6:28:6a:7b:dd:e7:cc:
59:ab:de:38:c6:d1:fa:96:f2:85:f5:07:fb:20:5a:
88:97:38:d2:74:60:5e:61:61:94:b6:d7:59:83:3d:
f9:5f:1f:7f:de:9c:7a:cb:60:08:70:e7:8d:89:36:
be:81:db:ea:52:29:a5:72:9b:8f:19:fc:03:e1:f8:
2f:12:2c:c5:d4:84:99:c0:8a:98:a7:2a:ae:90:09:
4d:5e:fa:4c:7b:b2:42:be:4a:1a:b9:2b:af:18:ef:
a1:a1:93:27:3a:76:2d:fd:c4:d4:a3:e1:e3:a2:a5:
54:12:18:8f:cd:82:86:89:ec:43:ca:c8:6f:09:00:
73:d9:2d:68:51:6f:e7:fb:8d:76:fd:d8:78:88:3c:
bf:ec:6b:17:f9:35:d8:ec:04:ef:00:67:eb:ef:dd:
f2:da:46:9d:7c:3b:a3:bc:c0:1c:b9:73:20:c6:68:
16:e0:ab:e5:4b:6f:75:c6:39:a4:2c:28:e5:16:f0:
bd:6f:69:c7:44:60:86:f4:2d:76:84:ab:44:7f:c8:
93:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:C3:C7:C7:AD:AC:33:D6:73:08:05:53:5B:19:A1:DE:CD:2C:66:0C
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/tMPHx62sM9ZzCAVTWxmh3s0sZgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.190.8.0/24
193.17.5.0/24
193.111.76.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a3:02:db:59:d1:08:e8:f0:5d:d1:f7:cc:cb:0c:d8:fc:88:
54:f1:6c:88:58:8a:be:6d:6e:47:b9:09:9b:51:fd:0c:8a:43:
5c:73:2e:22:09:d9:cd:16:dd:f5:f9:82:74:39:68:bd:a6:2b:
e4:fa:8f:02:3c:a2:34:01:62:1c:3f:e4:34:96:a6:17:4b:89:
5e:c6:b2:7c:56:35:64:50:40:3d:4b:2d:5f:a0:1d:b5:05:3d:
d2:23:85:e7:62:4b:4e:6b:01:c8:b7:e9:24:8d:11:7b:fb:e7:
76:17:72:05:72:7c:fd:1d:70:b1:07:e7:f8:bd:4e:59:41:8b:
ea:4c:a1:e4:f1:31:35:63:1e:ab:16:ca:2c:91:d3:ad:c6:85:
d3:ad:b1:03:56:38:59:ed:e2:39:bb:24:70:cc:42:61:32:68:
a5:50:1a:a2:fa:19:27:b5:44:2b:43:8d:cf:6d:05:45:dc:96:
8c:96:44:ea:c6:ec:fa:e4:87:5d:c5:ca:55:78:00:f5:2a:19:
4f:da:b9:63:d9:13:ee:20:e3:f7:04:2f:c2:16:e4:6b:cb:ad:
2e:56:9e:e2:d0:61:45:18:05:2c:ce:a4:9e:b1:bb:85:31:ec:
86:0e:18:ef:f1:6c:c7:6b:0f:5d:5c:ce:5a:e3:df:de:d4:f6:
9c:f2:de:40
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY6aGENc5dzsSIjm/Kux5JCRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTUwOWIzM2RhNTVmM2U1ZDUyODNlYjYyMWQwZDM1ZDdh
ZWVkNWMwHhcNMjQwNDAxMTQzNzQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGMzYzdjN2FkYWMzM2Q2NzMwODA1NTM1YjE5YTFkZWNkMmM2NjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoNSNrW8DV/nfILXzbzBp630CgmT
ap3c1jXs3S6OCXtK3IORcKE5W7yIa2BHRljhujwT9KYoanvd58xZq944xtH6lvKF
9Qf7IFqIlzjSdGBeYWGUttdZgz35Xx9/3px6y2AIcOeNiTa+gdvqUimlcpuPGfwD
4fgvEizF1ISZwIqYpyqukAlNXvpMe7JCvkoauSuvGO+hoZMnOnYt/cTUo+HjoqVU
EhiPzYKGiexDyshvCQBz2S1oUW/n+412/dh4iDy/7GsX+TXY7ATvAGfr793y2kad
fDujvMAcuXMgxmgW4KvlS291xjmkLCjlFvC9b2nHRGCG9C12hKtEf8iTZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFLTDx8etrDPWcwgFU1sZod7NLGYMMB8GA1UdIwQY
MBaAFE+VCbM9pV8+XVKD62IdDTXXru1cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQt
NjAxMDdlMmI1MTA5LzEvdE1QSHg2MnNNOVp6Q0FWVFd4bWgzczBzWmd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi82ZmMxYmMtYTVmOC00MmE4LTk1ZTQtNjAxMDdlMmI1MTA5
LzEvVDVVSnN6MmxYejVkVW9QclloME5OZGV1N1Z3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAXb4IAwQA
wREFAwQAwW9MMA0GCSqGSIb3DQEBCwUAA4IBAQB1owLbWdEI6PBd0ffMywzY/IhU
8WyIWIq+bW5HuQmbUf0MikNccy4iCdnNFt31+YJ0OWi9pivk+o8CPKI0AWIcP+Q0
lqYXS4lexrJ8VjVkUEA9Sy1foB21BT3SI4XnYktOawHIt+kkjRF7++d2F3IFcnz9
HXCxB+f4vU5ZQYvqTKHk8TE1Yx6rFsoskdOtxoXTrbEDVjhZ7eI5uyRwzEJhMmil
UBqi+hkntUQrQ43PbQVF3JaMlkTqxuz65IddxcpVeAD1KhlP2rlj2RPuIOP3BC/C
FuRry60uVp7i0GFFGAUszqSesbuFMeyGDhjv8WzHaw9dXM5a49/e1Pac8t5A
-----END CERTIFICATE-----
Generated at Sun May 5 12:07:08 2024 by rpki-client on console-ams.rpki-client.org