Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/8KaNyZjx5d7d8rIXun5no50EgA4.roa
File: 8KaNyZjx5d7d8rIXun5no50EgA4.roa (raw, json)
Hash identifier: 3JhGxFzgiipCO73w3DsasC+iXfsJHX9qdnEGBTIJZMs=
Subject key identifier: F0:A6:8D:C9:98:F1:E5:DE:DD:F2:B2:17:BA:7E:67:A3:9D:04:80:0E
Certificate issuer: /CN=8c33ddceab154bdf63e789f4443484ad5548664c
Certificate serial: 018CC86F0CC18B68539B1B4410330A2F7942
Authority key identifier: 8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/8KaNyZjx5d7d8rIXun5no50EgA4.roa
Signing time: Tue 02 Jan 2024 04:29:30 +0000
ROA not before: Tue 02 Jan 2024 04:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25445
IP address blocks: 193.178.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:0c:c1:8b:68:53:9b:1b:44:10:33:0a:2f:79:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c33ddceab154bdf63e789f4443484ad5548664c
Validity
Not Before: Jan 2 04:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f0a68dc998f1e5deddf2b217ba7e67a39d04800e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f6:06:af:58:b2:3a:e1:6f:f3:90:1a:ca:ad:
b3:c0:74:d1:ce:8a:3c:32:01:40:e6:fb:83:2e:12:
a6:a8:ef:35:95:e8:eb:78:f5:0f:8b:43:ce:26:d3:
e5:ec:83:1f:5a:ce:ee:a9:b7:bb:05:d4:e1:b1:97:
6e:b5:23:d2:73:3d:b7:96:03:e2:63:d3:7a:7a:3c:
22:3d:ce:24:ea:5d:e4:87:8c:49:23:d2:87:08:3c:
bf:cd:26:de:11:fa:9f:14:5b:a2:a9:03:73:9e:d7:
92:d2:84:32:17:5e:94:90:54:9a:7b:cc:b6:03:1f:
7c:cb:d9:3d:01:be:44:75:48:c3:7f:ef:63:3f:57:
9a:2b:33:65:91:e6:16:d0:3c:79:5f:a9:b7:35:60:
d2:ec:5d:45:08:d1:8e:35:75:25:58:52:26:3f:5e:
56:ce:9d:7e:c3:1e:6d:f4:b1:b1:10:95:e6:47:9d:
41:f6:de:51:66:59:47:d8:ca:fa:25:c0:10:d6:d9:
c5:ce:ab:02:f7:fe:4f:19:71:06:2d:42:d8:3c:2c:
82:58:74:fc:a9:1b:fe:b5:83:b8:ed:9d:db:1e:14:
33:11:46:c5:e8:f3:a5:34:f7:f8:28:09:72:c6:c7:
6c:56:7d:16:5f:75:a1:79:90:9a:29:5c:57:aa:5f:
15:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:A6:8D:C9:98:F1:E5:DE:DD:F2:B2:17:BA:7E:67:A3:9D:04:80:0E
X509v3 Authority Key Identifier:
keyid:8C:33:DD:CE:AB:15:4B:DF:63:E7:89:F4:44:34:84:AD:55:48:66:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jDPdzqsVS99j54n0RDSErVVIZkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/8KaNyZjx5d7d8rIXun5no50EgA4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/cc4516-1b94-45ab-b161-f2b0fd3c3137/1/jDPdzqsVS99j54n0RDSErVVIZkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.184.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:44:d9:a5:d8:43:c2:0d:04:ca:dd:68:6e:b0:98:60:a4:83:
4f:84:3f:1b:42:2a:62:6c:3f:28:84:6b:28:ad:01:f5:62:31:
13:3c:b0:40:3b:a0:5e:8b:11:e0:e1:c5:be:e6:74:f2:46:df:
d5:07:c8:b3:a2:b2:32:5b:53:62:32:89:1a:9c:8a:48:dd:fa:
dc:d0:ca:e8:6e:63:e1:43:aa:1b:25:eb:87:90:9c:d5:eb:dc:
2e:59:6b:6d:28:9d:58:78:ec:01:78:32:a5:fb:57:49:3a:83:
39:e3:29:fd:18:99:6d:7a:ff:8d:13:33:2c:59:eb:92:1b:26:
ba:0d:73:84:90:c1:23:e5:83:7f:82:e5:1e:9d:e6:b3:b3:13:
c4:6b:28:95:dc:e6:7f:07:bd:e0:7f:df:f2:2d:71:95:67:27:
a0:8b:5a:e8:39:bf:9b:83:a0:4a:7d:42:9b:69:65:d5:41:05:
67:63:54:62:ae:56:77:27:fb:1f:fa:f5:29:40:3b:74:2f:85:
bc:74:7b:80:41:2c:d5:b2:3a:4a:12:91:07:67:c9:5e:16:7f:
54:cb:e2:3f:48:8e:44:44:6e:3d:35:f2:b2:6c:54:ed:98:81:
09:10:49:db:04:bb:ba:a8:90:0a:60:56:98:e2:be:35:69:03:
3f:c8:5e:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbwzBi2hTmxtEEDMKL3lCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjMzNkZGNlYWIxNTRiZGY2M2U3ODlmNDQ0MzQ4NGFkNTU0
ODY2NGMwHhcNMjQwMTAyMDQyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMGE2OGRjOTk4ZjFlNWRlZGRmMmIyMTdiYTdlNjdhMzlkMDQ4MDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgfYGr1iyOuFv85Aayq2zwHTRzoo8
MgFA5vuDLhKmqO81lejrePUPi0POJtPl7IMfWs7uqbe7BdThsZdutSPScz23lgPi
Y9N6ejwiPc4k6l3kh4xJI9KHCDy/zSbeEfqfFFuiqQNznteS0oQyF16UkFSae8y2
Ax98y9k9Ab5EdUjDf+9jP1eaKzNlkeYW0Dx5X6m3NWDS7F1FCNGONXUlWFImP15W
zp1+wx5t9LGxEJXmR51B9t5RZllH2Mr6JcAQ1tnFzqsC9/5PGXEGLULYPCyCWHT8
qRv+tYO47Z3bHhQzEUbF6POlNPf4KAlyxsdsVn0WX3WheZCaKVxXql8VMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPCmjcmY8eXe3fKyF7p+Z6OdBIAOMB8GA1UdIwQY
MBaAFIwz3c6rFUvfY+eJ9EQ0hK1VSGZMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9jYzQ1MTYtMWI5NC00NWFiLWIxNjEt
ZjJiMGZkM2MzMTM3LzEvOEthTnlaang1ZDdkOHJJWHVuNW5vNTBFZ0E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9jYzQ1MTYtMWI5NC00NWFiLWIxNjEtZjJiMGZkM2MzMTM3
LzEvakRQZHpxc1ZTOTlqNTRuMFJEU0VyVlZJWmt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbK4MA0G
CSqGSIb3DQEBCwUAA4IBAQBLRNml2EPCDQTK3WhusJhgpINPhD8bQipibD8ohGso
rQH1YjETPLBAO6BeixHg4cW+5nTyRt/VB8izorIyW1NiMokanIpI3frc0MrobmPh
Q6obJeuHkJzV69wuWWttKJ1YeOwBeDKl+1dJOoM54yn9GJltev+NEzMsWeuSGya6
DXOEkMEj5YN/guUeneazsxPEayiV3OZ/B73gf9/yLXGVZyegi1roOb+bg6BKfUKb
aWXVQQVnY1RirlZ3J/sf+vUpQDt0L4W8dHuAQSzVsjpKEpEHZ8leFn9Uy+I/SI5E
RG49NfKybFTtmIEJEEnbBLu6qJAKYFaY4r41aQM/yF4+
-----END CERTIFICATE-----
Generated at Fri Jun 7 17:56:46 2024 by rpki-client on console-fra.rpki-client.org