Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/1-Xx7f8pI7qnIoGOlxdEOkFBRebk.roa
File: 1-Xx7f8pI7qnIoGOlxdEOkFBRebk.roa (raw, json)
Hash identifier: ksH1Kre+AqbgtCzRRcWqBpv0Q9RMY6D73LPi59DhMas=
Subject key identifier: F9:7C:7B:7F:CA:48:EE:A9:C8:A0:63:A5:C5:D1:0E:90:50:51:79:B9
Certificate issuer: /CN=1486b4a08ace60e670edcd89fadb254011562f53
Certificate serial: 018F805688E40B958B7C4E6DD45C79C9F233
Authority key identifier: 14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/1-Xx7f8pI7qnIoGOlxdEOkFBRebk.roa
Signing time: Thu 16 May 2024 07:38:25 +0000
ROA not before: Thu 16 May 2024 07:38:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202914
IP address blocks: 193.242.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:56:88:e4:0b:95:8b:7c:4e:6d:d4:5c:79:c9:f2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1486b4a08ace60e670edcd89fadb254011562f53
Validity
Not Before: May 16 07:38:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f97c7b7fca48eea9c8a063a5c5d10e90505179b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:2e:0b:2f:9d:e9:5b:e0:b4:f7:8a:94:fe:9d:
58:d9:99:e6:7c:11:72:c0:6b:cc:7d:58:56:6c:d0:
a0:4a:c2:28:fb:0e:fa:34:9a:59:d4:77:aa:2f:aa:
c6:fc:76:c5:1c:ae:f4:ea:27:8d:4d:10:09:b7:9e:
35:34:d4:83:ef:23:bb:da:8c:67:57:f5:67:94:21:
28:4f:dc:6c:ff:57:16:ca:cd:8a:46:97:99:a9:87:
cf:b8:f5:82:a2:85:28:86:b7:09:60:a1:fa:81:af:
ae:74:71:2b:75:d8:66:99:d5:33:a7:0c:c6:8d:e5:
f9:d9:2e:58:f1:8c:38:5a:47:2a:a0:87:e0:1a:20:
f2:81:93:e1:e7:a2:6c:11:28:ca:0f:f9:30:ed:6d:
c1:c1:31:5c:2b:28:01:e1:97:40:fb:d5:1c:e4:c2:
5f:2b:1f:74:2e:c6:c3:27:da:65:65:74:7f:9d:b7:
b3:72:03:46:95:fd:80:cd:6a:f7:61:bd:ff:59:f3:
39:89:aa:e2:c5:24:1e:d8:81:c8:75:c1:62:c9:3a:
36:2b:e4:2a:53:65:2c:2e:75:18:59:52:5a:54:4c:
8a:a8:c1:96:03:4d:5e:9a:23:08:ba:5f:c6:51:49:
6c:4b:70:f8:f4:70:a7:67:f4:b9:75:5f:ce:1b:bf:
57:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7C:7B:7F:CA:48:EE:A9:C8:A0:63:A5:C5:D1:0E:90:50:51:79:B9
X509v3 Authority Key Identifier:
keyid:14:86:B4:A0:8A:CE:60:E6:70:ED:CD:89:FA:DB:25:40:11:56:2F:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FIa0oIrOYOZw7c2J-tslQBFWL1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/1-Xx7f8pI7qnIoGOlxdEOkFBRebk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bb9182-cd77-4dd0-bf15-e8187f344c80/1/FIa0oIrOYOZw7c2J-tslQBFWL1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.155.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b1:80:17:de:e7:3f:bb:b2:c5:bb:fa:2c:f2:04:e8:c6:66:
3e:03:38:a7:c6:81:aa:a5:fd:b1:ae:83:46:b0:ae:dd:00:53:
25:b2:6a:f1:a1:12:15:4b:cb:99:bd:ce:f4:c6:e7:d9:db:8d:
a9:3e:f8:7f:fc:a4:9b:2a:c6:bf:ef:46:14:c3:c2:8c:84:a9:
13:a9:7d:a7:9c:52:de:8e:4a:55:fb:7b:20:a1:28:74:2d:fc:
00:48:0c:81:2a:b7:69:51:7a:79:bb:ef:fe:03:8c:a0:b1:f3:
51:06:2b:90:f6:5c:0e:2b:32:88:08:db:98:3d:d4:59:bd:5a:
a7:14:cc:68:ca:3b:77:41:34:90:82:31:2e:d1:e6:b8:f2:4b:
77:bc:37:4b:eb:8b:b8:42:77:60:d1:75:4a:3d:b3:41:73:4c:
f1:77:56:df:43:c3:9f:0f:e2:48:4d:61:09:c4:03:bf:d0:e7:
b9:cc:70:cd:22:31:6f:21:fe:c3:cd:16:89:3f:7e:ae:13:26:
7e:2f:a7:d2:35:80:4f:4a:5d:07:23:33:cd:ed:8e:6b:59:e6:
aa:dd:00:b7:7f:a9:2a:14:ee:2f:19:9c:01:f5:f8:12:33:9c:
42:2a:b9:9b:ba:40:e1:12:cd:27:22:c9:61:85:06:1a:fd:fa:
2c:f8:29:5f
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY+AVojkC5WLfE5t1Fx5yfIzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ODZiNGEwOGFjZTYwZTY3MGVkY2Q4OWZhZGIyNTQwMTE1
NjJmNTMwHhcNMjQwNTE2MDczODI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOTdjN2I3ZmNhNDhlZWE5YzhhMDYzYTVjNWQxMGU5MDUwNTE3OWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlC4LL53pW+C094qU/p1Y2ZnmfBFy
wGvMfVhWbNCgSsIo+w76NJpZ1HeqL6rG/HbFHK706ieNTRAJt541NNSD7yO72oxn
V/VnlCEoT9xs/1cWys2KRpeZqYfPuPWCooUohrcJYKH6ga+udHErddhmmdUzpwzG
jeX52S5Y8Yw4WkcqoIfgGiDygZPh56JsESjKD/kw7W3BwTFcKygB4ZdA+9Uc5MJf
Kx90LsbDJ9plZXR/nbezcgNGlf2AzWr3Yb3/WfM5iarixSQe2IHIdcFiyTo2K+Qq
U2UsLnUYWVJaVEyKqMGWA01emiMIul/GUUlsS3D49HCnZ/S5dV/OG79XuwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPl8e3/KSO6pyKBjpcXRDpBQUXm5MB8GA1UdIwQY
MBaAFBSGtKCKzmDmcO3NifrbJUARVi9TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRklhMG9Jck9ZT1p3N2MySi10c2xRQkZXTDFNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iYjkxODItY2Q3Ny00ZGQwLWJmMTUt
ZTgxODdmMzQ0YzgwLzEvMS1YeDdmOHBJN3FuSW9HT2x4ZEVPa0ZCUmViay5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNDAvYmI5MTgyLWNkNzctNGRkMC1iZjE1LWU4MTg3ZjM0NGM4
MC8xL0ZJYTBvSXJPWU9adzdjMkotdHNsUUJGV0wxTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHymzAN
BgkqhkiG9w0BAQsFAAOCAQEAEbGAF97nP7uyxbv6LPIE6MZmPgM4p8aBqqX9sa6D
RrCu3QBTJbJq8aESFUvLmb3O9Mbn2duNqT74f/ykmyrGv+9GFMPCjISpE6l9p5xS
3o5KVft7IKEodC38AEgMgSq3aVF6ebvv/gOMoLHzUQYrkPZcDisyiAjbmD3UWb1a
pxTMaMo7d0E0kIIxLtHmuPJLd7w3S+uLuEJ3YNF1Sj2zQXNM8XdW30PDnw/iSE1h
CcQDv9DnucxwzSIxbyH+w80WiT9+rhMmfi+n0jWAT0pdByMzze2Oa1nmqt0At3+p
KhTuLxmcAfX4EjOcQiq5m7pA4RLNJyLJYYUGGv36LPgpXw==
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:22:20 2024 by rpki-client on console-ams.rpki-client.org