Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/lTuOyc1GHpHN6Kb8axpjMkmM8Bo.roa
File: lTuOyc1GHpHN6Kb8axpjMkmM8Bo.roa (raw, json)
Hash identifier: Dj2toNdLmasH7yPC6MrMdO9vgCrxie7QtIISMCuM3Dg=
Subject key identifier: 95:3B:8E:C9:CD:46:1E:91:CD:E8:A6:FC:6B:1A:63:32:49:8C:F0:1A
Certificate issuer: /CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Certificate serial: 018CC8DECBDEB44DDBF3EA8798CF54309CA7
Authority key identifier: 92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/lTuOyc1GHpHN6Kb8axpjMkmM8Bo.roa
Signing time: Tue 02 Jan 2024 06:31:33 +0000
ROA not before: Tue 02 Jan 2024 06:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43805
IP address blocks: 194.107.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.mft
rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:cb:de:b4:4d:db:f3:ea:87:98:cf:54:30:9c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92503aaf126af7cd031cac3ce1e398c174b82e02
Validity
Not Before: Jan 2 06:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=953b8ec9cd461e91cde8a6fc6b1a6332498cf01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3b:88:5c:2f:52:62:29:f7:fd:bf:16:cc:d6:
42:04:a5:de:ce:07:b5:a5:c6:5c:07:ab:89:34:7f:
b7:35:4a:be:3e:67:b0:db:0e:68:c5:f4:02:8c:9c:
cf:92:d1:dc:9d:98:95:70:cb:6d:09:c8:79:4b:52:
01:42:28:ea:6b:1c:59:d2:be:40:3b:de:bc:0c:81:
42:39:72:5b:ba:a3:08:03:8a:d3:fd:27:df:10:8d:
da:fc:a1:d9:88:96:fb:54:a5:cc:b2:98:01:f6:9a:
d5:b1:39:b9:cf:37:8d:aa:16:09:09:8e:a7:12:07:
af:36:6b:e5:e1:04:af:42:c3:bb:34:eb:6e:dc:21:
15:f3:f4:87:04:4d:1a:f4:c3:ff:04:2c:b9:f6:da:
da:b1:03:fe:c5:cb:93:1d:72:c9:50:e6:fa:41:d1:
20:4f:64:51:a6:c0:e6:45:0e:93:ef:06:da:f9:2d:
af:1f:ab:4c:16:b1:28:9d:22:45:1f:a5:0d:0a:e5:
f1:d7:34:33:58:32:7a:53:38:98:a8:e9:6b:19:1b:
48:b1:b2:0a:38:6d:11:da:65:d6:48:0b:85:e3:6d:
08:01:73:ba:a1:de:b7:dc:05:3d:ee:17:90:6b:48:
27:2a:3d:48:b8:54:75:b3:2f:fe:92:c8:85:b3:a0:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3B:8E:C9:CD:46:1E:91:CD:E8:A6:FC:6B:1A:63:32:49:8C:F0:1A
X509v3 Authority Key Identifier:
keyid:92:50:3A:AF:12:6A:F7:CD:03:1C:AC:3C:E1:E3:98:C1:74:B8:2E:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klA6rxJq980DHKw84eOYwXS4LgI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/lTuOyc1GHpHN6Kb8axpjMkmM8Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/79bdb0-bd5c-4800-9768-afd1268fdbfd/1/klA6rxJq980DHKw84eOYwXS4LgI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.107.23.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:4d:23:b3:71:f7:6d:3d:23:7b:63:f4:31:d4:23:31:2e:42:
b0:d6:6e:89:5d:98:dc:38:c9:32:92:05:b5:28:13:52:85:7f:
a8:db:d5:4e:a5:57:a4:82:68:be:27:d7:cc:2d:a1:18:ee:79:
c7:3d:7b:32:42:e2:29:10:a7:ab:26:b7:ae:8a:62:c9:84:c6:
8c:87:ad:76:ed:e7:f1:51:e1:77:ac:95:02:24:48:b2:86:89:
ec:f9:9d:53:6b:c4:4d:6a:71:f3:35:ee:ee:f1:71:6d:3a:05:
43:fc:de:7c:fa:d0:3f:f3:b8:b2:77:02:0a:01:b2:f8:d7:e2:
91:94:3a:df:01:6b:be:16:5e:57:fc:aa:16:f8:fc:33:24:18:
34:08:09:48:09:2c:aa:9c:2f:a3:6e:d6:3d:fa:34:8b:38:76:
bb:16:0e:68:ac:22:ca:6f:40:1e:12:2f:55:9f:f6:9b:75:81:
87:7b:37:09:6a:b9:f3:ca:9d:e9:7a:a9:e9:01:99:79:6b:42:
97:25:af:45:b1:1c:a6:24:85:b3:99:a6:24:e1:46:6f:14:11:
a0:0c:b8:48:7b:04:f5:2e:72:3b:9c:a8:25:2e:62:30:f5:35:
c8:3c:0b:f2:46:bf:57:c3:05:ce:2f:41:0b:f5:bd:a2:d3:0a:
5f:27:58:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3svetE3b8+qHmM9UMJynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNTAzYWFmMTI2YWY3Y2QwMzFjYWMzY2UxZTM5OGMxNzRi
ODJlMDIwHhcNMjQwMTAyMDYzMTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NTNiOGVjOWNkNDYxZTkxY2RlOGE2ZmM2YjFhNjMzMjQ5OGNmMDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTuIXC9SYin3/b8WzNZCBKXezge1
pcZcB6uJNH+3NUq+Pmew2w5oxfQCjJzPktHcnZiVcMttCch5S1IBQijqaxxZ0r5A
O968DIFCOXJbuqMIA4rT/SffEI3a/KHZiJb7VKXMspgB9prVsTm5zzeNqhYJCY6n
EgevNmvl4QSvQsO7NOtu3CEV8/SHBE0a9MP/BCy59trasQP+xcuTHXLJUOb6QdEg
T2RRpsDmRQ6T7wba+S2vH6tMFrEonSJFH6UNCuXx1zQzWDJ6UziYqOlrGRtIsbIK
OG0R2mXWSAuF420IAXO6od633AU97heQa0gnKj1IuFR1sy/+ksiFs6CN3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJU7jsnNRh6Rzeim/GsaYzJJjPAaMB8GA1UdIwQY
MBaAFJJQOq8SavfNAxysPOHjmMF0uC4CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3Njgt
YWZkMTI2OGZkYmZkLzEvbFR1T3ljMUdIcEhONktiOGF4cGpNa21NOEJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS83OWJkYjAtYmQ1Yy00ODAwLTk3NjgtYWZkMTI2OGZkYmZk
LzEva2xBNnJ4SnE5ODBESEt3ODRlT1l3WFM0TGdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmsXMA0G
CSqGSIb3DQEBCwUAA4IBAQCfTSOzcfdtPSN7Y/Qx1CMxLkKw1m6JXZjcOMkykgW1
KBNShX+o29VOpVekgmi+J9fMLaEY7nnHPXsyQuIpEKerJreuimLJhMaMh6127efx
UeF3rJUCJEiyhons+Z1Ta8RNanHzNe7u8XFtOgVD/N58+tA/87iydwIKAbL41+KR
lDrfAWu+Fl5X/KoW+PwzJBg0CAlICSyqnC+jbtY9+jSLOHa7Fg5orCLKb0AeEi9V
n/abdYGHezcJarnzyp3peqnpAZl5a0KXJa9FsRymJIWzmaYk4UZvFBGgDLhIewT1
LnI7nKglLmIw9TXIPAvyRr9XwwXOL0EL9b2i0wpfJ1jx
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:19:03 2024 by rpki-client on console-ams.rpki-client.org