Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/C458L53slEFFEMP8v_q-bf7Mugg.roa
File: C458L53slEFFEMP8v_q-bf7Mugg.roa (raw, json)
Hash identifier: /KGysP5+d/xRRpZ5gUR1QE+VOrNvlIpCrPaeHtQyLsE=
Subject key identifier: 0B:8E:7C:2F:9D:EC:94:41:45:10:C3:FC:BF:FA:BE:6D:FE:CC:BA:08
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01933A007BFDB047C74B0BC942C9DC5918CE
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/C458L53slEFFEMP8v_q-bf7Mugg.roa
Signing time: Sun 17 Nov 2024 12:02:10 +0000
ROA not before: Sun 17 Nov 2024 12:02:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 188.209.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.mft
rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:3a:00:7b:fd:b0:47:c7:4b:0b:c9:42:c9:dc:59:18:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Nov 17 12:02:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b8e7c2f9dec94414510c3fcbffabe6dfeccba08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f9:96:d6:4e:57:19:f5:fa:35:34:4a:4e:11:
e2:8a:20:b2:57:43:93:ba:15:72:c4:a7:85:b9:c0:
ea:e3:01:53:d0:40:8c:a2:2b:62:31:fa:91:da:48:
55:be:e5:05:72:2b:84:56:44:54:28:63:e3:39:e8:
67:58:bb:6e:a7:2e:fe:ad:b7:e5:73:72:53:db:e4:
18:b7:7a:5f:cf:6f:bb:5c:0d:f4:f9:14:54:0a:b4:
ca:ec:50:da:ca:17:ac:07:e9:59:5f:d8:e7:dd:ed:
59:21:ff:fc:98:11:19:5e:e8:1b:43:03:1e:ca:92:
aa:81:fd:e6:b2:95:4e:f8:db:d2:52:db:f7:7a:45:
05:58:86:9d:a5:42:fd:a4:b3:4f:f1:48:cd:4a:2d:
8c:86:44:14:a0:2b:04:bf:bf:f2:33:eb:3c:38:e1:
87:90:50:5e:6c:75:d8:e8:22:6b:20:72:fd:40:20:
36:c4:8c:59:8e:f1:62:47:8e:e1:b2:55:0a:e6:22:
b4:22:41:a7:6e:4d:ad:87:39:97:ef:f5:57:bd:af:
95:70:84:9d:9f:77:9b:9e:1c:d4:db:43:11:ab:16:
60:06:44:2e:f8:2c:58:d6:bf:6c:f8:4f:f1:da:cd:
c4:fa:a7:f4:46:ca:65:a4:b1:94:cf:b9:20:98:55:
a5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:8E:7C:2F:9D:EC:94:41:45:10:C3:FC:BF:FA:BE:6D:FE:CC:BA:08
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/C458L53slEFFEMP8v_q-bf7Mugg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.134.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:a5:67:0a:f9:6e:50:cc:63:b1:91:ca:8a:97:93:aa:06:6f:
fc:8a:9b:bd:2b:39:94:f8:67:2f:91:91:ee:98:8b:c3:b4:4d:
d9:ee:35:08:7a:5a:9f:ab:de:aa:5d:0c:ab:25:81:da:b4:fb:
ed:9d:d6:02:8d:bc:9d:b5:a3:4e:7a:1c:c7:33:37:44:8a:ce:
07:c9:da:fb:52:34:c2:12:d1:50:c6:4a:35:a8:16:ab:0b:ee:
e1:68:3a:c9:e5:d2:97:28:f3:8f:0e:9f:4b:41:38:12:a0:38:
80:de:30:50:cc:35:32:4d:f2:d5:e0:b5:4c:5b:5b:d8:10:75:
d9:ee:31:98:e6:e2:5b:2e:14:85:4f:f3:18:c5:e6:c7:dd:8b:
6d:93:c4:18:46:ef:5e:37:df:a0:cc:9d:3d:47:e6:12:eb:88:
0d:8e:1e:b4:00:49:01:96:59:de:f9:5e:50:8b:0f:ae:d1:d8:
cd:03:ee:7d:16:4f:ba:2e:e0:1a:3b:70:29:b4:fd:ba:8c:ed:
bf:3b:9e:ca:38:49:20:03:a6:eb:0d:51:20:ab:d0:9c:ab:75:
2b:1f:48:60:cb:89:d6:f4:ce:95:68:b6:94:37:93:9d:63:38:
57:7f:23:0b:4d:ae:5f:53:89:b5:3d:a9:83:06:67:4d:73:7b:
4e:1e:2a:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZM6AHv9sEfHSwvJQsncWRjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2RhMjAxOTkwOWQ5ZmMzNzgyOWZkOWVjMjlkOTQ4ZWNm
ZjdjOTIwHhcNMjQxMTE3MTIwMjEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjhlN2MyZjlkZWM5NDQxNDUxMGMzZmNiZmZhYmU2ZGZlY2NiYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/mW1k5XGfX6NTRKThHiiiCyV0OT
uhVyxKeFucDq4wFT0ECMoitiMfqR2khVvuUFciuEVkRUKGPjOehnWLtupy7+rbfl
c3JT2+QYt3pfz2+7XA30+RRUCrTK7FDayhesB+lZX9jn3e1ZIf/8mBEZXugbQwMe
ypKqgf3mspVO+NvSUtv3ekUFWIadpUL9pLNP8UjNSi2MhkQUoCsEv7/yM+s8OOGH
kFBebHXY6CJrIHL9QCA2xIxZjvFiR47hslUK5iK0IkGnbk2thzmX7/VXva+VcISd
n3ebnhzU20MRqxZgBkQu+CxY1r9s+E/x2s3E+qf0RsplpLGUz7kgmFWlbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAuOfC+d7JRBRRDD/L/6vm3+zLoIMB8GA1UdIwQY
MBaAFNk9ogGZCdn8N4Kf2ewp2Ujs/3ySMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgt
ZjVhZGRkZGYxZWM1LzEvQzQ1OEw1M3NsRUZGRU1QOHZfcS1iZjdNdWdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80N2FmYTMtY2UzMS00MDYwLWEwNzgtZjVhZGRkZGYxZWM1
LzEvMlQyaUFaa0oyZnczZ3BfWjdDblpTT3pfZkpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGGMA0G
CSqGSIb3DQEBCwUAA4IBAQChpWcK+W5QzGOxkcqKl5OqBm/8ipu9KzmU+GcvkZHu
mIvDtE3Z7jUIelqfq96qXQyrJYHatPvtndYCjbydtaNOehzHMzdEis4Hydr7UjTC
EtFQxko1qBarC+7haDrJ5dKXKPOPDp9LQTgSoDiA3jBQzDUyTfLV4LVMW1vYEHXZ
7jGY5uJbLhSFT/MYxebH3Yttk8QYRu9eN9+gzJ09R+YS64gNjh60AEkBllne+V5Q
iw+u0djNA+59Fk+6LuAaO3AptP26jO2/O57KOEkgA6brDVEgq9Ccq3UrH0hgy4nW
9M6VaLaUN5OdYzhXfyMLTa5fU4m1PamDBmdNc3tOHir5
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:09:30 2024 by rpki-client on console-ams.rpki-client.org