Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/t6fHPUVtAK6NcQwuD9jJJzpUYr0.roa
File: t6fHPUVtAK6NcQwuD9jJJzpUYr0.roa (raw, json)
Hash identifier: I9bUdOUPYVHi57zWZXv5NFsPGoA0gZpRslomYhDcdaM=
Subject key identifier: B7:A7:C7:3D:45:6D:00:AE:8D:71:0C:2E:0F:D8:C9:27:3A:54:62:BD
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 018CC7272FEF2A5A98F04E790089757526D8
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/t6fHPUVtAK6NcQwuD9jJJzpUYr0.roa
Signing time: Mon 01 Jan 2024 22:31:23 +0000
ROA not before: Mon 01 Jan 2024 22:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2852
IP address blocks: 193.84.116.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2f:ef:2a:5a:98:f0:4e:79:00:89:75:75:26:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Jan 1 22:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b7a7c73d456d00ae8d710c2e0fd8c9273a5462bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:9e:6b:fd:ec:d6:29:28:30:b0:fe:6e:aa:59:
c8:09:77:f7:8a:33:c3:9f:92:7e:41:d5:f7:74:ab:
c2:9c:51:15:5f:28:45:25:cb:ef:79:59:fa:97:38:
3a:8b:74:50:63:e2:f1:df:ea:9d:c0:19:6f:70:c1:
8b:f7:ed:2d:b2:f0:6c:e0:62:87:52:92:8e:cc:5c:
e7:46:4f:40:a7:96:7b:cc:0d:08:33:9e:fc:75:7e:
47:d0:18:3a:01:3f:cd:01:fb:59:6a:c5:cd:8c:13:
03:2b:79:40:3f:bc:64:f1:e8:31:1a:15:1a:56:ae:
bf:e9:b5:bc:ea:93:be:88:4a:6b:9e:01:2f:52:93:
3e:99:d2:a7:cd:4b:60:6e:26:3e:f3:32:2d:19:ec:
17:e0:1e:75:fe:0c:ed:5a:8b:0c:42:c6:ef:fb:35:
2d:5e:3c:7c:7a:ea:52:8a:ad:56:02:bb:d9:62:e5:
7b:fd:55:a9:2b:e1:e6:1f:6c:71:6b:c3:f4:ba:27:
1f:a1:b3:9d:83:6a:27:bc:39:50:ca:78:01:ab:a0:
f3:5e:2c:e0:10:5b:4c:5d:ab:01:24:ad:d1:5c:9a:
b1:45:6d:be:b8:07:9f:ee:33:5d:e7:da:07:e7:00:
70:df:30:a1:3f:98:d8:8d:2f:4c:4e:cb:13:ba:1f:
a9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A7:C7:3D:45:6D:00:AE:8D:71:0C:2E:0F:D8:C9:27:3A:54:62:BD
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/t6fHPUVtAK6NcQwuD9jJJzpUYr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.116.0/23
Signature Algorithm: sha256WithRSAEncryption
33:88:5d:d7:40:53:a7:4b:76:a9:eb:e3:27:12:4a:39:b8:a7:
59:fc:37:4f:15:c7:eb:a6:4c:16:91:3f:46:49:20:25:9e:a2:
d5:72:84:94:f7:88:48:c3:ae:c7:e6:3a:be:1f:3a:33:fe:51:
5a:94:5b:b2:98:3f:d8:9d:ed:35:3d:47:78:14:b0:02:8e:3c:
8a:69:f8:39:47:5d:3b:df:b8:90:26:fe:9a:6b:e3:5f:d8:40:
ee:8f:be:be:f1:b9:d0:a5:1f:f2:9c:0a:9d:39:b1:dc:b5:7c:
34:e1:d9:50:5c:0e:22:be:a8:01:37:24:de:8d:ba:e6:de:da:
77:67:6a:0d:92:ed:ed:27:70:48:09:4f:be:a6:82:1c:07:45:
43:e0:75:7e:a5:e7:53:33:8d:67:2f:d7:b8:22:7d:b8:94:ec:
ca:d3:1a:69:26:b4:5e:0a:87:00:07:71:47:9b:58:54:11:a7:
05:df:e0:bc:1d:ef:75:0b:01:d5:22:f8:40:6c:d7:19:7d:86:
be:e2:cc:2b:75:b0:16:3f:fe:82:24:28:4e:bb:5b:a3:42:c0:
56:ec:ba:c8:5b:f2:8a:63:88:63:51:5e:36:f7:1b:eb:ea:3b:
75:d4:4e:ee:ef:39:a6:97:e1:82:a6:7f:fe:49:fd:88:1d:3b:
7b:6d:6b:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJy/vKlqY8E55AIl1dSbYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzQxMzViYjA3YzY1NDBjZDMwN2JkYTA4Y2EwNjc0YmM4
NGM5MzkwHhcNMjQwMTAxMjIzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiN2E3YzczZDQ1NmQwMGFlOGQ3MTBjMmUwZmQ4YzkyNzNhNTQ2MmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgp5r/ezWKSgwsP5uqlnICXf3ijPD
n5J+QdX3dKvCnFEVXyhFJcvveVn6lzg6i3RQY+Lx3+qdwBlvcMGL9+0tsvBs4GKH
UpKOzFznRk9Ap5Z7zA0IM578dX5H0Bg6AT/NAftZasXNjBMDK3lAP7xk8egxGhUa
Vq6/6bW86pO+iEprngEvUpM+mdKnzUtgbiY+8zItGewX4B51/gztWosMQsbv+zUt
Xjx8eupSiq1WArvZYuV7/VWpK+HmH2xxa8P0uicfobOdg2onvDlQyngBq6DzXizg
EFtMXasBJK3RXJqxRW2+uAef7jNd59oH5wBw3zChP5jYjS9MTssTuh+ptQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLenxz1FbQCujXEMLg/YySc6VGK9MB8GA1UdIwQY
MBaAFJ50E1uwfGVAzTB72gjKBnS8hMk5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQt
NWRjODBmYWVkMmRjLzEvdDZmSFBVVnRBSzZOY1F3dUQ5akpKenBVWXIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS81ZTc4ZjYtMjUzYS00MTE1LWFlNWQtNWRjODBmYWVkMmRj
LzEvbm5RVFc3QjhaVUROTUh2YUNNb0dkTHlFeVRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwVR0MA0G
CSqGSIb3DQEBCwUAA4IBAQAziF3XQFOnS3ap6+MnEko5uKdZ/DdPFcfrpkwWkT9G
SSAlnqLVcoSU94hIw67H5jq+Hzoz/lFalFuymD/Yne01PUd4FLACjjyKafg5R107
37iQJv6aa+Nf2EDuj76+8bnQpR/ynAqdObHctXw04dlQXA4ivqgBNyTejbrm3tp3
Z2oNku3tJ3BICU++poIcB0VD4HV+pedTM41nL9e4In24lOzK0xppJrReCocAB3FH
m1hUEacF3+C8He91CwHVIvhAbNcZfYa+4swrdbAWP/6CJChOu1ujQsBW7LrIW/KK
Y4hjUV429xvr6jt11E7u7zmml+GCpn/+Sf2IHTt7bWtZ
-----END CERTIFICATE-----
Generated at Mon Jun 3 06:56:53 2024 by rpki-client on console-fra.rpki-client.org