Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/sRgfCVpmsqGfrq7pnYrOOaEudAE.roa
File: sRgfCVpmsqGfrq7pnYrOOaEudAE.roa (raw, json)
Hash identifier: xViU2DlvjjjZ4ktrS4AWE/KFK5Y1ur0Fj7xVauNS96g=
Subject key identifier: B1:18:1F:09:5A:66:B2:A1:9F:AE:AE:E9:9D:8A:CE:39:A1:2E:74:01
Certificate issuer: /CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Certificate serial: 018CC56EE198C0BF7C81267EA81E32C12162
Authority key identifier: 17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/sRgfCVpmsqGfrq7pnYrOOaEudAE.roa
Signing time: Mon 01 Jan 2024 14:30:27 +0000
ROA not before: Mon 01 Jan 2024 14:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24882
IP address blocks: 193.111.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:e1:98:c0:bf:7c:81:26:7e:a8:1e:32:c1:21:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a6fa80b2d1c43ec9ea824e7e8395f79294e38a
Validity
Not Before: Jan 1 14:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1181f095a66b2a19faeaee99d8ace39a12e7401
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:51:28:d2:44:fa:8c:29:fb:79:3e:e8:31:b0:
27:58:32:d0:b9:b7:39:c9:0c:d8:39:3e:3a:33:b5:
6e:9d:e6:20:8b:78:e2:6e:a8:d5:cc:2a:b4:40:d5:
83:6b:44:b9:8e:5e:47:07:1c:77:eb:4b:45:2f:84:
0d:be:1f:c6:1d:a2:d1:36:5c:fc:c6:4c:45:1f:9f:
a1:4f:2c:43:b2:bf:a9:79:4a:ba:a3:34:43:b2:e4:
fe:14:e4:63:76:8f:92:fb:82:35:36:a6:41:2e:27:
22:10:21:82:b8:ba:3f:73:a3:1f:a7:04:2c:62:52:
d2:2b:5a:51:49:85:1a:bb:6b:45:66:0d:73:b0:d8:
23:14:90:7c:63:7c:36:45:37:b2:15:22:04:e1:05:
29:7d:9e:e8:36:0d:de:52:9e:d4:ab:35:bc:68:6b:
4b:7c:9a:af:b4:ea:f9:df:a9:9b:23:52:d2:e4:24:
0e:af:17:51:d9:a1:0c:89:a4:07:79:4b:c1:26:11:
db:b0:e3:3b:84:a6:23:83:0a:45:9f:83:b7:9c:73:
d5:39:9b:91:63:b9:8b:ee:4b:a9:6a:9b:49:01:61:
d5:4b:36:10:68:0b:40:88:c2:29:3e:bb:40:04:ff:
0b:a9:70:e8:5c:c4:af:26:c0:4c:7e:9d:b6:6e:ef:
7a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:1F:09:5A:66:B2:A1:9F:AE:AE:E9:9D:8A:CE:39:A1:2E:74:01
X509v3 Authority Key Identifier:
keyid:17:A6:FA:80:B2:D1:C4:3E:C9:EA:82:4E:7E:83:95:F7:92:94:E3:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6b6gLLRxD7J6oJOfoOV95KU44o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/sRgfCVpmsqGfrq7pnYrOOaEudAE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/bbfe48-f14d-40d1-9f1a-cb9e45bb0c63/1/F6b6gLLRxD7J6oJOfoOV95KU44o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.173.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:ce:5f:39:a0:da:e0:e1:90:b0:cb:a1:d9:a0:15:f3:ed:48:
09:c6:3b:6d:de:9a:4d:aa:68:6f:9d:1f:e7:c0:78:7b:83:1c:
cd:33:36:11:85:19:ea:24:e9:2a:40:05:5f:20:8b:c6:8c:84:
a9:9c:ba:fe:a3:0d:42:8f:c5:ef:7f:a9:f4:19:cd:5d:39:38:
4e:1d:29:34:cc:55:fe:66:d3:1b:50:16:9b:1f:75:1c:5f:00:
69:df:45:36:f0:50:be:be:ea:f7:78:03:4a:f2:dd:e0:01:bc:
cb:c6:a1:46:79:d5:36:21:49:b6:9a:78:8a:8f:87:3e:57:92:
44:e1:99:f6:b2:14:6a:ba:8a:b1:5e:2a:a8:db:94:0c:58:92:
fd:56:78:21:6c:c3:aa:e5:f7:72:0b:6a:86:c8:aa:91:64:5f:
97:8c:b8:5a:d3:f1:74:06:a1:b8:6b:68:1c:94:8e:08:b3:1e:
2b:c8:8c:b0:49:a4:2a:b4:ec:9e:3f:b0:f6:a9:df:13:f1:9e:
eb:bd:7a:30:9a:01:10:5b:6d:c1:6e:f0:ed:24:30:15:86:a7:
ae:7f:5a:5a:1f:35:f4:08:47:4d:2a:26:52:3f:c5:da:92:69:
c2:e9:dc:5c:1e:8b:df:be:7b:86:70:ca:c1:fb:0d:55:97:99:
cf:4e:ee:80
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbuGYwL98gSZ+qB4ywSFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3YTZmYTgwYjJkMWM0M2VjOWVhODI0ZTdlODM5NWY3OTI5
NGUzOGEwHhcNMjQwMTAxMTQzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTE4MWYwOTVhNjZiMmExOWZhZWFlZTk5ZDhhY2UzOWExMmU3NDAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlEo0kT6jCn7eT7oMbAnWDLQubc5
yQzYOT46M7VuneYgi3jibqjVzCq0QNWDa0S5jl5HBxx360tFL4QNvh/GHaLRNlz8
xkxFH5+hTyxDsr+peUq6ozRDsuT+FORjdo+S+4I1NqZBLiciECGCuLo/c6MfpwQs
YlLSK1pRSYUau2tFZg1zsNgjFJB8Y3w2RTeyFSIE4QUpfZ7oNg3eUp7UqzW8aGtL
fJqvtOr536mbI1LS5CQOrxdR2aEMiaQHeUvBJhHbsOM7hKYjgwpFn4O3nHPVOZuR
Y7mL7kupaptJAWHVSzYQaAtAiMIpPrtABP8LqXDoXMSvJsBMfp22bu96xQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLEYHwlaZrKhn66u6Z2KzjmhLnQBMB8GA1UdIwQY
MBaAFBem+oCy0cQ+yeqCTn6DlfeSlOOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjZiNmdMTFJ4RDdKNm9KT2ZvT1Y5NUtVNDRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9iYmZlNDgtZjE0ZC00MGQxLTlmMWEt
Y2I5ZTQ1YmIwYzYzLzEvc1JnZkNWcG1zcUdmcnE3cG5Zck9PYUV1ZEFFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9iYmZlNDgtZjE0ZC00MGQxLTlmMWEtY2I5ZTQ1YmIwYzYz
LzEvRjZiNmdMTFJ4RDdKNm9KT2ZvT1Y5NUtVNDRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW+tMA0G
CSqGSIb3DQEBCwUAA4IBAQCazl85oNrg4ZCwy6HZoBXz7UgJxjtt3ppNqmhvnR/n
wHh7gxzNMzYRhRnqJOkqQAVfIIvGjISpnLr+ow1Cj8Xvf6n0Gc1dOThOHSk0zFX+
ZtMbUBabH3UcXwBp30U28FC+vur3eANK8t3gAbzLxqFGedU2IUm2mniKj4c+V5JE
4Zn2shRquoqxXiqo25QMWJL9VnghbMOq5fdyC2qGyKqRZF+XjLha0/F0BqG4a2gc
lI4Isx4ryIywSaQqtOyeP7D2qd8T8Z7rvXowmgEQW23BbvDtJDAVhqeuf1paHzX0
CEdNKiZSP8XakmnC6dxcHovfvnuGcMrB+w1Vl5nPTu6A
-----END CERTIFICATE-----
Generated at Sat Nov 23 06:14:47 2024 by rpki-client on console-ams.rpki-client.org