Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/8bi6dCz1NnfUldPc7u-f5e74f78.roa
File: 8bi6dCz1NnfUldPc7u-f5e74f78.roa (raw, json)
Hash identifier: uDkud0iBPcuGbAmWJ/kXZQMri/pSKKjaSfrZDLGkSHk=
Subject key identifier: F1:B8:BA:74:2C:F5:36:77:D4:95:D3:DC:EE:EF:9F:E5:EE:F8:7F:BF
Certificate issuer: /CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Certificate serial: 018CC4931BCAFCEA8B361F44F0DCE17A9BEC
Authority key identifier: 44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/8bi6dCz1NnfUldPc7u-f5e74f78.roa
Signing time: Mon 01 Jan 2024 10:30:24 +0000
ROA not before: Mon 01 Jan 2024 10:30:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8412
IP address blocks: 193.187.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:1b:ca:fc:ea:8b:36:1f:44:f0:dc:e1:7a:9b:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=443ed4ae43fa190c10fd2c53a10e3de0abd98b78
Validity
Not Before: Jan 1 10:30:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1b8ba742cf53677d495d3dceeef9fe5eef87fbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:ee:ce:9a:7d:73:f4:28:3c:c2:32:89:86:
2a:d1:26:55:b9:03:f5:38:a8:9f:59:2f:23:a9:af:
87:24:1d:9a:ec:4c:65:07:8c:dc:ae:1d:5c:79:47:
95:29:f9:10:6b:0c:45:04:b9:7a:65:f1:91:f4:b8:
7d:eb:f5:e8:f8:f6:e0:a4:af:ce:07:9a:db:42:2a:
04:0e:0f:b9:6d:3a:d5:48:48:63:47:a6:73:73:9a:
d5:57:9c:3e:42:e7:c0:a6:b1:cc:0b:dd:28:a9:a3:
23:3f:16:83:02:8b:90:5d:40:51:44:a0:8b:ad:e1:
c4:e1:44:49:61:e4:5e:44:3b:a8:48:15:c0:5a:05:
62:c4:20:14:a9:07:25:78:8c:c1:81:40:b3:6b:ac:
92:78:06:a8:0b:37:41:41:18:3e:d4:19:9b:fa:c1:
0a:fc:0a:a9:88:28:95:b9:16:07:74:8e:e7:c3:ea:
c9:a8:e3:73:b4:92:60:6d:14:8c:22:4c:63:74:df:
ac:1c:4e:6a:28:85:f4:c1:58:3b:4e:b8:3a:e2:51:
6b:96:7f:9b:2a:fc:ff:b1:14:53:fc:78:70:63:9f:
95:d9:f6:69:b3:13:e8:08:1b:70:3b:12:57:31:8b:
ec:9c:57:40:ca:c9:d0:a2:5f:a1:0b:53:71:5d:da:
ff:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B8:BA:74:2C:F5:36:77:D4:95:D3:DC:EE:EF:9F:E5:EE:F8:7F:BF
X509v3 Authority Key Identifier:
keyid:44:3E:D4:AE:43:FA:19:0C:10:FD:2C:53:A1:0E:3D:E0:AB:D9:8B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RD7UrkP6GQwQ_SxToQ494KvZi3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/8bi6dCz1NnfUldPc7u-f5e74f78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/98415a-f12e-4c1e-8806-21fe5ae9ef3b/1/RD7UrkP6GQwQ_SxToQ494KvZi3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.248.0/22
Signature Algorithm: sha256WithRSAEncryption
00:b2:fa:74:48:60:0d:be:e3:ef:e5:07:7e:c7:c7:66:89:e6:
03:7e:8f:ea:2a:33:af:6b:fc:50:f6:9e:7a:13:ee:8d:08:93:
67:21:73:a2:94:64:99:fe:e7:33:53:cb:a2:e0:33:f8:fa:38:
57:9f:6c:20:8a:55:b5:3e:f6:f6:28:25:57:93:e5:c8:b2:a8:
7d:69:f6:5e:77:27:59:6f:cd:d5:e4:97:f6:42:36:b0:59:a4:
12:be:38:40:72:56:55:b0:fe:f4:ee:fe:84:96:3c:f0:0c:e0:
9d:7d:af:d7:88:ea:98:94:d2:0f:e8:c9:26:fa:1b:05:8b:55:
dd:c0:30:14:43:89:5a:b4:9d:dd:18:68:22:c3:ed:01:57:cf:
43:bf:56:92:59:b4:01:b3:b8:e6:8a:26:b5:95:7a:d5:67:26:
9b:81:d4:a7:c0:f3:e6:56:13:23:f2:f9:e3:26:22:cd:5f:32:
dd:3e:25:e1:7a:07:a6:80:41:71:aa:b6:37:20:ff:84:3e:62:
1e:dc:33:0f:be:b6:7a:f1:80:ac:3a:33:b4:2c:65:91:5b:14:
37:b2:dd:1c:d4:f1:90:86:b0:61:be:a7:82:fc:4e:c4:7b:d8:
f5:9d:75:7d:75:15:d9:b6:71:50:fe:7a:ae:0e:d8:49:83:63:
c6:cc:c5:79
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkxvK/OqLNh9E8NzhepvsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0M2VkNGFlNDNmYTE5MGMxMGZkMmM1M2ExMGUzZGUwYWJk
OThiNzgwHhcNMjQwMTAxMTAzMDI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMWI4YmE3NDJjZjUzNjc3ZDQ5NWQzZGNlZWVmOWZlNWVlZjg3ZmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVLuzpp9c/QoPMIyiYYq0SZVuQP1
OKifWS8jqa+HJB2a7ExlB4zcrh1ceUeVKfkQawxFBLl6ZfGR9Lh96/Xo+PbgpK/O
B5rbQioEDg+5bTrVSEhjR6Zzc5rVV5w+QufAprHMC90oqaMjPxaDAouQXUBRRKCL
reHE4URJYeReRDuoSBXAWgVixCAUqQcleIzBgUCza6ySeAaoCzdBQRg+1Bmb+sEK
/AqpiCiVuRYHdI7nw+rJqONztJJgbRSMIkxjdN+sHE5qKIX0wVg7Trg64lFrln+b
Kvz/sRRT/HhwY5+V2fZpsxPoCBtwOxJXMYvsnFdAysnQol+hC1NxXdr/MwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPG4unQs9TZ31JXT3O7vn+Xu+H+/MB8GA1UdIwQY
MBaAFEQ+1K5D+hkMEP0sU6EOPeCr2Yt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYt
MjFmZTVhZTllZjNiLzEvOGJpNmRDejFObmZVbGRQYzd1LWY1ZTc0Zjc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85ODQxNWEtZjEyZS00YzFlLTg4MDYtMjFmZTVhZTllZjNi
LzEvUkQ3VXJrUDZHUXdRX1N4VG9RNDk0S3ZaaTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbv4MA0G
CSqGSIb3DQEBCwUAA4IBAQAAsvp0SGANvuPv5Qd+x8dmieYDfo/qKjOva/xQ9p56
E+6NCJNnIXOilGSZ/uczU8ui4DP4+jhXn2wgilW1Pvb2KCVXk+XIsqh9afZedydZ
b83V5Jf2QjawWaQSvjhAclZVsP707v6EljzwDOCdfa/XiOqYlNIP6Mkm+hsFi1Xd
wDAUQ4latJ3dGGgiw+0BV89Dv1aSWbQBs7jmiia1lXrVZyabgdSnwPPmVhMj8vnj
JiLNXzLdPiXhegemgEFxqrY3IP+EPmIe3DMPvrZ68YCsOjO0LGWRWxQ3st0c1PGQ
hrBhvqeC/E7Ee9j1nXV9dRXZtnFQ/nquDthJg2PGzMV5
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:37:07 2024 by rpki-client on console-ams.rpki-client.org