Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1SFMVmVVQCZ8CHj_b_LREIBJh9g.roa
File: 1SFMVmVVQCZ8CHj_b_LREIBJh9g.roa (raw, json)
Hash identifier: XwK6DbJwyMitWXhF0dJsE9TILffoWSuqmBmmBF5DUbI=
Subject key identifier: D5:21:4C:56:65:55:40:26:7C:08:78:FF:6F:F2:D1:10:80:49:87:D8
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 018EE84CB8931AE9080A7934A17A1B7CA027
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1SFMVmVVQCZ8CHj_b_LREIBJh9g.roa
Signing time: Tue 16 Apr 2024 19:05:25 +0000
ROA not before: Tue 16 Apr 2024 19:05:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 188.209.132.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e8:4c:b8:93:1a:e9:08:0a:79:34:a1:7a:1b:7c:a0:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Apr 16 19:05:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5214c56655540267c0878ff6ff2d110804987d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2d:06:a2:33:ae:b3:44:ba:e8:58:58:f4:b8:
7e:a0:d1:0c:85:de:55:e0:1c:4b:7f:97:b9:e0:4f:
7e:7b:de:03:2e:a2:09:00:9f:f7:59:33:cf:3e:bd:
40:fe:09:37:5c:5e:b5:b5:3d:49:be:a6:60:6d:57:
7b:f8:37:f9:1e:98:22:d2:09:01:9d:88:d6:f1:7b:
87:11:8a:2c:b0:c0:21:b0:bd:94:2d:e0:ba:e5:a8:
12:ff:c8:9a:d7:0e:1f:ab:b9:3a:25:a4:fd:cf:08:
86:cf:40:f4:f7:23:07:e2:81:12:20:a2:56:93:5c:
93:35:7d:3a:7a:ad:7a:5d:0e:3b:c1:55:6a:be:27:
5b:ef:6f:12:be:5d:58:8f:44:b9:ab:4e:0e:53:a3:
77:2c:e9:26:a8:5c:19:8b:c9:1b:d1:06:c5:7f:5a:
cd:f4:05:f4:bb:89:e0:b4:a7:9a:bd:6b:b3:e9:25:
e5:5b:56:6d:f9:17:3e:f1:81:2d:07:7d:3a:3e:44:
4d:3f:a1:a4:0e:fd:2f:f4:05:ff:7a:43:88:77:a4:
03:f6:2e:ae:5d:2b:50:38:74:0e:ba:18:0f:d9:18:
44:b2:b5:4e:f2:5e:7a:f0:99:d8:39:e5:41:ee:49:
b8:6e:f9:2a:9e:35:32:cb:a3:81:3f:cf:2a:b0:d9:
8a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:21:4C:56:65:55:40:26:7C:08:78:FF:6F:F2:D1:10:80:49:87:D8
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/1SFMVmVVQCZ8CHj_b_LREIBJh9g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.132.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:c5:31:2d:49:b0:94:a4:bb:10:7a:ac:03:d7:a8:d1:f0:20:
74:07:9b:e4:c9:46:9a:b5:5f:e4:c2:1e:e4:eb:48:c4:5f:20:
e3:56:d5:46:a5:ec:55:5f:89:57:ee:3a:c3:39:4b:0b:5e:b3:
dd:87:88:6d:35:61:82:81:7d:5c:09:f2:f1:f6:d3:5c:4b:68:
e3:67:54:f7:57:3b:79:de:c4:ef:eb:f5:a3:f6:45:66:77:56:
b7:fa:50:6a:7d:f3:39:bf:93:78:48:f4:3a:33:1a:9b:1a:8a:
f2:04:d1:23:1c:ac:45:ac:09:9b:c8:5b:11:83:01:61:e6:f4:
f1:14:8a:18:67:ad:6d:af:77:aa:07:25:4d:5d:f0:4c:cd:93:
6d:4b:b1:3a:6e:a6:4d:17:ca:98:da:2c:3f:fe:2e:f0:58:8d:
9a:82:70:27:4e:a5:c6:d5:47:dd:df:2a:59:37:4f:f0:7d:aa:
f3:46:64:29:5c:a6:e2:52:5a:08:5a:e8:ba:cd:63:e1:cd:10:
a3:e3:56:2e:4b:2a:16:28:08:3d:11:7b:ef:9f:03:de:21:7a:
6b:41:f2:ea:04:24:76:58:03:99:b4:39:ed:61:8d:42:b0:a4:
a8:23:1c:93:0a:0e:5a:6d:77:a0:6c:d1:74:46:a2:a9:d6:b9:
35:86:d8:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7oTLiTGukICnk0oXobfKAnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQwNDE2MTkwNTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTIxNGM1NjY1NTU0MDI2N2MwODc4ZmY2ZmYyZDExMDgwNDk4N2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC0GojOus0S66FhY9Lh+oNEMhd5V
4BxLf5e54E9+e94DLqIJAJ/3WTPPPr1A/gk3XF61tT1JvqZgbVd7+Df5Hpgi0gkB
nYjW8XuHEYossMAhsL2ULeC65agS/8ia1w4fq7k6JaT9zwiGz0D09yMH4oESIKJW
k1yTNX06eq16XQ47wVVqvidb728Svl1Yj0S5q04OU6N3LOkmqFwZi8kb0QbFf1rN
9AX0u4ngtKeavWuz6SXlW1Zt+Rc+8YEtB306PkRNP6GkDv0v9AX/ekOId6QD9i6u
XStQOHQOuhgP2RhEsrVO8l568JnYOeVB7km4bvkqnjUyy6OBP88qsNmKowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNUhTFZlVUAmfAh4/2/y0RCASYfYMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvMVNGTVZtVlZRQ1o4Q0hqX2JfTFJFSUJKaDlnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCvNGEMA0G
CSqGSIb3DQEBCwUAA4IBAQCxxTEtSbCUpLsQeqwD16jR8CB0B5vkyUaatV/kwh7k
60jEXyDjVtVGpexVX4lX7jrDOUsLXrPdh4htNWGCgX1cCfLx9tNcS2jjZ1T3Vzt5
3sTv6/Wj9kVmd1a3+lBqffM5v5N4SPQ6MxqbGoryBNEjHKxFrAmbyFsRgwFh5vTx
FIoYZ61tr3eqByVNXfBMzZNtS7E6bqZNF8qY2iw//i7wWI2agnAnTqXG1Ufd3ypZ
N0/wfarzRmQpXKbiUloIWui6zWPhzRCj41YuSyoWKAg9EXvvnwPeIXprQfLqBCR2
WAOZtDntYY1CsKSoIxyTCg5abXegbNF0RqKp1rk1hthi
-----END CERTIFICATE-----
Generated at Thu May 2 04:33:40 2024 by rpki-client on console-fra.rpki-client.org