Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/1-Sq6rPeKSvYhvIChQvreo7oaycU.roa
File: 1-Sq6rPeKSvYhvIChQvreo7oaycU.roa (raw, json)
Hash identifier: FSskL0OwGSFumvcltYTbHirN1Lx7SMciMcU1vW/ToC0=
Subject key identifier: F9:2A:BA:AC:F7:8A:4A:F6:21:BC:80:A1:42:FA:DE:A3:BA:1A:C9:C5
Certificate issuer: /CN=aa8093354e565ac4838a51f47d2769769c66944e
Certificate serial: 019017E4E1E8DDD4B36E84F2E48208CDFA82
Authority key identifier: AA:80:93:35:4E:56:5A:C4:83:8A:51:F4:7D:27:69:76:9C:66:94:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/1-Sq6rPeKSvYhvIChQvreo7oaycU.roa
Signing time: Fri 14 Jun 2024 17:56:34 +0000
ROA not before: Fri 14 Jun 2024 17:56:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209242
IP address blocks: 193.163.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:17:e4:e1:e8:dd:d4:b3:6e:84:f2:e4:82:08:cd:fa:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa8093354e565ac4838a51f47d2769769c66944e
Validity
Not Before: Jun 14 17:56:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f92abaacf78a4af621bc80a142fadea3ba1ac9c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:55:67:4c:89:0a:66:04:75:03:44:1e:b9:
6a:51:77:df:3b:b0:53:0c:e0:e4:6c:a5:a4:11:5a:
3a:8e:c5:92:75:92:a8:c5:80:e9:6e:ee:1b:29:f0:
73:70:b5:64:bc:2c:f8:55:29:74:6b:34:ed:d9:32:
27:b1:21:07:c3:c7:25:fd:c5:59:7a:87:9c:24:3c:
d3:66:64:98:97:e2:ac:81:ad:41:5c:6d:86:8c:c4:
64:e6:8b:d2:e1:bf:c7:12:c0:54:54:81:48:b5:7a:
53:24:22:a2:c3:24:3c:b1:49:1d:1b:56:15:1a:ff:
da:a9:29:97:0d:e6:1e:52:93:37:1b:ea:3b:bf:11:
d0:2b:5d:3e:66:f4:05:48:a5:c3:bf:c2:b8:6c:38:
73:f0:d6:ca:be:9d:c3:c0:bc:9e:c1:31:fb:19:df:
5b:92:50:85:da:a7:c3:ba:93:25:22:1c:4e:30:7c:
6a:63:c3:8b:e7:94:51:68:ba:a6:c2:1c:b2:d9:7f:
c0:01:04:a0:fe:5c:8a:7f:c5:42:b7:05:5e:2e:09:
7f:e2:7b:8c:3a:72:a9:7c:ae:52:d3:26:3e:6a:4c:
a8:69:ff:03:41:44:74:d0:7b:8c:38:81:6f:4c:58:
93:4e:7a:2b:ff:56:e6:28:82:38:77:f2:c9:50:d0:
19:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2A:BA:AC:F7:8A:4A:F6:21:BC:80:A1:42:FA:DE:A3:BA:1A:C9:C5
X509v3 Authority Key Identifier:
keyid:AA:80:93:35:4E:56:5A:C4:83:8A:51:F4:7D:27:69:76:9C:66:94:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoCTNU5WWsSDilH0fSdpdpxmlE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/1-Sq6rPeKSvYhvIChQvreo7oaycU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ee9ddc-acd0-481d-8c0b-788b46e10497/1/qoCTNU5WWsSDilH0fSdpdpxmlE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.170.0/24
Signature Algorithm: sha256WithRSAEncryption
83:2d:bd:74:7d:5f:e9:cf:0e:dd:bc:26:91:bc:8f:50:52:8a:
00:0c:18:e3:6f:e1:89:07:8d:6e:5f:ab:a2:e5:b9:bf:4b:21:
a2:e8:3a:e8:da:7d:8c:0c:b5:0a:59:81:38:db:84:b2:a7:07:
d7:46:f6:41:f0:26:58:1f:76:0d:7b:a0:5c:41:eb:74:d7:91:
d5:c8:cb:16:e2:60:bc:ef:ad:07:e5:bf:d9:ea:f8:26:32:95:
d5:ef:ac:5f:6c:f8:fe:18:8b:70:84:6e:41:e4:76:dd:f1:5d:
f5:5d:86:3a:19:76:35:d6:ed:b1:ea:24:7b:b1:57:79:ba:23:
a5:0e:78:3c:cf:a6:79:71:6e:06:30:03:47:a2:1f:2c:4b:62:
55:ec:30:38:6f:e7:bf:e6:86:a9:01:24:ce:b8:24:72:19:eb:
f7:01:91:fc:57:5a:32:58:a7:82:46:ca:66:15:46:41:f8:5a:
bb:ac:fb:ee:7f:c2:96:2c:f2:23:a4:6f:58:79:de:97:4d:fe:
12:3a:d5:cf:b6:94:d0:6c:60:ed:e7:62:09:ba:48:16:89:18:
1c:95:e0:80:6d:db:8c:12:c9:b9:b3:b4:4f:a7:39:ad:af:85:
4c:74:7f:d4:aa:6d:31:e1:e1:e9:55:2a:2c:1f:42:c3:44:3a:
9a:50:9d:53
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZAX5OHo3dSzboTy5IIIzfqCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODA5MzM1NGU1NjVhYzQ4MzhhNTFmNDdkMjc2OTc2OWM2
Njk0NGUwHhcNMjQwNjE0MTc1NjM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTJhYmFhY2Y3OGE0YWY2MjFiYzgwYTE0MmZhZGVhM2JhMWFjOWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIJVZ0yJCmYEdQNEHrlqUXffO7BT
DODkbKWkEVo6jsWSdZKoxYDpbu4bKfBzcLVkvCz4VSl0azTt2TInsSEHw8cl/cVZ
eoecJDzTZmSYl+Ksga1BXG2GjMRk5ovS4b/HEsBUVIFItXpTJCKiwyQ8sUkdG1YV
Gv/aqSmXDeYeUpM3G+o7vxHQK10+ZvQFSKXDv8K4bDhz8NbKvp3DwLyewTH7Gd9b
klCF2qfDupMlIhxOMHxqY8OL55RRaLqmwhyy2X/AAQSg/lyKf8VCtwVeLgl/4nuM
OnKpfK5S0yY+akyoaf8DQUR00HuMOIFvTFiTTnor/1bmKII4d/LJUNAZswIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPkquqz3ikr2IbyAoUL63qO6GsnFMB8GA1UdIwQY
MBaAFKqAkzVOVlrEg4pR9H0naXacZpROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9DVE5VNVdXc1NEaWxIMGZTZHBkcHhtbEU0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lZTlkZGMtYWNkMC00ODFkLThjMGIt
Nzg4YjQ2ZTEwNDk3LzEvMS1TcTZyUGVLU3ZZaHZJQ2hRdnJlbzdvYXljVS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMmEvZWU5ZGRjLWFjZDAtNDgxZC04YzBiLTc4OGI0NmUxMDQ5
Ny8xL3FvQ1ROVTVXV3NTRGlsSDBmU2RwZHB4bWxFNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGjqjAN
BgkqhkiG9w0BAQsFAAOCAQEAgy29dH1f6c8O3bwmkbyPUFKKAAwY42/hiQeNbl+r
ouW5v0shoug66Np9jAy1ClmBONuEsqcH10b2QfAmWB92DXugXEHrdNeR1cjLFuJg
vO+tB+W/2er4JjKV1e+sX2z4/hiLcIRuQeR23fFd9V2GOhl2Ndbtseoke7FXeboj
pQ54PM+meXFuBjADR6IfLEtiVewwOG/nv+aGqQEkzrgkchnr9wGR/FdaMlingkbK
ZhVGQfhau6z77n/ClizyI6RvWHnel03+EjrVz7aU0Gxg7ediCbpIFokYHJXggG3b
jBLJubO0T6c5ra+FTHR/1KptMeHh6VUqLB9Cw0Q6mlCdUw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:08:52 2024 by rpki-client on console-ams.rpki-client.org