Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/P6mU7zqXkmUrEOL_gQQ-LD5GyB0.roa
File: P6mU7zqXkmUrEOL_gQQ-LD5GyB0.roa (raw, json)
Hash identifier: /tjwbMLFEYfqIW7kYGsgU4Qiw9sMATebwQOdbgCR2dY=
Subject key identifier: 3F:A9:94:EF:3A:97:92:65:2B:10:E2:FF:81:04:3E:2C:3E:46:C8:1D
Certificate issuer: /CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Certificate serial: 018CC3B6894611502CAA506EBFA9B1D493B8
Authority key identifier: A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/P6mU7zqXkmUrEOL_gQQ-LD5GyB0.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33910
IP address blocks: 194.126.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:89:46:11:50:2c:aa:50:6e:bf:a9:b1:d4:93:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a78c03f45908df4c45c3f07d2a4b2c40245d5132
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fa994ef3a9792652b10e2ff81043e2c3e46c81d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2e:ac:58:68:cb:b4:a5:1e:12:be:17:c5:cd:
97:4b:1e:bf:e4:62:1e:e6:0e:b3:30:d3:09:26:57:
0f:ae:b0:13:35:fe:d1:ba:58:ba:88:e6:9c:54:26:
c4:f6:1a:44:9b:32:75:3f:e7:44:37:7d:ec:ca:ca:
c3:50:17:69:b5:d3:32:12:3a:c7:6f:85:65:a7:65:
cd:56:10:9f:5c:41:1c:98:08:44:f8:4d:9d:a7:a1:
2a:75:8a:9b:30:46:39:e3:c1:b0:a0:60:c5:e8:4a:
11:5d:db:dd:26:e9:9c:75:8a:10:6e:a8:48:82:aa:
c8:f5:31:47:91:4e:14:b3:a9:a6:68:b5:f7:f4:b8:
4b:50:ba:83:3f:b1:b3:a9:c4:52:69:c0:26:dc:7b:
5f:61:92:f2:79:f1:33:4f:0c:c9:36:7b:4a:84:53:
b3:c2:71:7f:66:7d:a2:fe:11:bf:49:49:00:fa:e8:
03:ad:1b:de:16:35:5b:d3:85:95:e9:e1:ed:df:c3:
2a:a2:90:d3:70:c1:72:68:10:43:3e:2e:63:11:43:
b6:66:72:98:56:58:c9:71:71:29:e3:5a:76:53:ec:
9c:b8:40:44:07:ea:a8:31:26:82:42:3f:5d:2a:78:
9a:e4:d3:ce:85:42:1b:b4:60:05:3c:c2:7a:b8:83:
bc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:A9:94:EF:3A:97:92:65:2B:10:E2:FF:81:04:3E:2C:3E:46:C8:1D
X509v3 Authority Key Identifier:
keyid:A7:8C:03:F4:59:08:DF:4C:45:C3:F0:7D:2A:4B:2C:40:24:5D:51:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p4wD9FkI30xFw_B9KkssQCRdUTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/P6mU7zqXkmUrEOL_gQQ-LD5GyB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/e5c697-cc93-4d71-b940-9ba85be3bf09/1/p4wD9FkI30xFw_B9KkssQCRdUTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.230.0/24
Signature Algorithm: sha256WithRSAEncryption
21:74:95:28:31:67:7d:12:65:13:4e:4b:b1:19:da:b7:fe:fc:
1a:62:15:d1:d3:53:e4:74:ca:b1:2a:0e:49:14:d2:42:26:08:
79:d5:1a:28:3d:32:ec:23:2e:3c:10:f4:c8:6b:fd:93:7c:c2:
69:72:0a:23:c0:50:c8:83:5c:43:e2:03:7b:01:bd:80:28:aa:
fe:49:ba:b2:a8:2e:d1:9d:3b:2f:4d:7a:c3:81:ed:bd:34:31:
85:68:c1:56:ff:81:e0:46:b1:e5:b9:d0:1f:31:1f:88:e2:13:
cd:84:09:65:e1:0d:5b:d8:28:ea:ad:3e:4f:57:9a:d9:d7:5f:
58:fa:94:56:aa:22:0f:58:a0:4f:4a:59:5d:a8:8c:44:a8:f3:
2e:20:1b:04:be:6e:b2:3a:2d:56:35:23:38:d7:cc:1c:13:67:
b6:71:c3:b0:50:47:95:1c:8d:cc:de:cb:3a:c4:ce:0d:a0:26:
6a:4d:22:b9:2b:6a:0c:49:ff:9a:64:89:89:a7:f4:19:7b:ac:
e6:67:45:32:14:c4:d2:85:5d:2c:bd:ec:a1:b1:5c:e4:8d:ae:
46:7d:a2:64:7b:b4:1d:b3:74:35:2d:23:c0:d2:9e:5e:bc:46:
32:48:c6:f9:13:8c:59:95:56:09:5a:a1:0e:a1:da:8c:ad:d3:
ba:c7:5c:64
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtolGEVAsqlBuv6mx1JO4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OGMwM2Y0NTkwOGRmNGM0NWMzZjA3ZDJhNGIyYzQwMjQ1
ZDUxMzIwHhcNMjQwMTAxMDYyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmE5OTRlZjNhOTc5MjY1MmIxMGUyZmY4MTA0M2UyYzNlNDZjODFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApy6sWGjLtKUeEr4Xxc2XSx6/5GIe
5g6zMNMJJlcPrrATNf7Ruli6iOacVCbE9hpEmzJ1P+dEN33sysrDUBdptdMyEjrH
b4Vlp2XNVhCfXEEcmAhE+E2dp6EqdYqbMEY548GwoGDF6EoRXdvdJumcdYoQbqhI
gqrI9TFHkU4Us6mmaLX39LhLULqDP7GzqcRSacAm3HtfYZLyefEzTwzJNntKhFOz
wnF/Zn2i/hG/SUkA+ugDrRveFjVb04WV6eHt38MqopDTcMFyaBBDPi5jEUO2ZnKY
VljJcXEp41p2U+ycuEBEB+qoMSaCQj9dKnia5NPOhUIbtGAFPMJ6uIO8MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD+plO86l5JlKxDi/4EEPiw+RsgdMB8GA1UdIwQY
MBaAFKeMA/RZCN9MRcPwfSpLLEAkXVEyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAt
OWJhODViZTNiZjA5LzEvUDZtVTd6cVhrbVVyRU9MX2dRUS1MRDVHeUIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS9lNWM2OTctY2M5My00ZDcxLWI5NDAtOWJhODViZTNiZjA5
LzEvcDR3RDlGa0kzMHhGd19COUtrc3NRQ1JkVVRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwn7mMA0G
CSqGSIb3DQEBCwUAA4IBAQAhdJUoMWd9EmUTTkuxGdq3/vwaYhXR01PkdMqxKg5J
FNJCJgh51RooPTLsIy48EPTIa/2TfMJpcgojwFDIg1xD4gN7Ab2AKKr+SbqyqC7R
nTsvTXrDge29NDGFaMFW/4HgRrHludAfMR+I4hPNhAll4Q1b2CjqrT5PV5rZ119Y
+pRWqiIPWKBPSlldqIxEqPMuIBsEvm6yOi1WNSM418wcE2e2ccOwUEeVHI3M3ss6
xM4NoCZqTSK5K2oMSf+aZImJp/QZe6zmZ0UyFMTShV0sveyhsVzkja5GfaJke7Qd
s3Q1LSPA0p5evEYySMb5E4xZlVYJWqEOodqMrdO6x1xk
-----END CERTIFICATE-----
Generated at Tue Nov 26 03:08:48 2024 by rpki-client on console-ams.rpki-client.org