Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/eI0pTqo0q3_lQ4BeHMDcmTT_Hbg.roa
File: eI0pTqo0q3_lQ4BeHMDcmTT_Hbg.roa (raw, json)
Hash identifier: 165jw2UjuqQLbyxHHif3nPLuM6HLAnKOt+f9H+KKTjg=
Subject key identifier: 78:8D:29:4E:AA:34:AB:7F:E5:43:80:5E:1C:C0:DC:99:34:FF:1D:B8
Certificate issuer: /CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Certificate serial: 018CC793369035D6991F4E4B55C6C1C07514
Authority key identifier: 3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/eI0pTqo0q3_lQ4BeHMDcmTT_Hbg.roa
Signing time: Tue 02 Jan 2024 00:29:22 +0000
ROA not before: Tue 02 Jan 2024 00:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56655
IP address blocks: 193.200.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:05:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:36:90:35:d6:99:1f:4e:4b:55:c6:c1:c0:75:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e482fb3c9f9af470e4e48b6df382d3d50154661
Validity
Not Before: Jan 2 00:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=788d294eaa34ab7fe543805e1cc0dc9934ff1db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:ef:0d:59:85:c4:5e:8b:e9:8f:2e:ec:3a:
8b:e2:c5:80:a0:2f:63:94:e9:88:bc:7c:4e:7f:25:
d7:24:a8:24:f1:78:ed:fe:c7:92:3f:f4:63:8d:df:
9f:1a:30:dc:76:2d:bd:e5:0e:05:5c:d6:f1:c5:b9:
b6:6d:69:77:d3:40:a0:3a:1a:e3:41:b2:de:d8:c6:
a9:1e:55:fc:b9:e7:60:53:97:1a:92:ee:3a:cf:cf:
64:14:b2:07:cd:33:6c:fe:89:d5:c1:bb:8e:23:d2:
df:12:c0:1c:80:5e:f6:5a:7d:20:cc:0e:f8:b4:51:
db:04:0b:84:09:f0:6e:47:7a:40:f3:5a:d0:d4:30:
89:2c:16:c7:ab:07:51:a7:31:ab:1f:ee:7f:79:e4:
1b:cf:be:c3:f6:c8:8c:68:59:ba:7a:fb:ac:77:e2:
65:56:87:4e:77:e1:6b:3a:56:25:fb:4b:0d:7a:47:
0c:03:45:fd:1c:d8:e9:21:97:0e:5c:58:d8:87:4f:
32:1c:e2:ef:5e:35:e7:95:87:b1:05:ce:aa:79:bb:
df:e3:90:0e:c9:81:9a:6d:08:e1:da:31:bf:28:5f:
04:3a:c1:dd:72:fe:c4:ff:e6:13:77:11:46:56:17:
93:47:1c:6f:43:ee:06:12:6d:47:d9:c0:57:12:dc:
13:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:8D:29:4E:AA:34:AB:7F:E5:43:80:5E:1C:C0:DC:99:34:FF:1D:B8
X509v3 Authority Key Identifier:
keyid:3E:48:2F:B3:C9:F9:AF:47:0E:4E:48:B6:DF:38:2D:3D:50:15:46:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pkgvs8n5r0cOTki23zgtPVAVRmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/eI0pTqo0q3_lQ4BeHMDcmTT_Hbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/543b15-fb1b-445f-8aa4-db4d714859b5/1/Pkgvs8n5r0cOTki23zgtPVAVRmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.238.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a7:8d:17:5e:b4:c2:52:1f:a1:25:51:bd:23:61:8a:19:4d:
3a:9b:36:6c:9d:0c:d0:c3:de:61:15:8a:b7:ef:93:f2:db:2e:
a0:7b:93:76:c8:75:6e:00:a5:cb:d1:07:8c:dc:01:20:00:06:
78:5e:04:b3:b2:d1:76:ca:7f:41:e7:39:ed:82:13:7e:46:cf:
4c:22:66:a4:9a:49:a1:6c:a8:92:1b:70:18:ec:c3:87:0f:5e:
c8:cd:30:e3:27:4c:ee:8f:94:dc:ac:e3:e9:dd:f9:e3:b0:de:
2f:05:1b:4f:12:3f:7f:d7:88:78:c4:1d:20:7d:a7:22:ed:8a:
a8:4f:af:f4:52:f4:13:b2:40:38:d1:e6:dc:7c:21:b6:dc:4e:
87:be:a3:5b:f8:ce:3f:81:21:ae:a4:45:77:35:f9:32:40:c1:
ac:bb:30:95:d2:3b:c5:c5:b2:ce:43:c5:0a:d9:0d:0a:2e:12:
3b:45:34:3b:9d:16:7c:2a:86:5e:5b:8d:6e:f6:ac:db:bf:87:
c0:60:49:92:ad:21:c0:0d:6b:b4:d5:9b:05:2d:2f:97:59:87:
4b:f6:1d:38:4e:6c:3a:c5:60:a5:1f:34:5a:43:25:f8:e2:4d:
bc:78:82:7e:bc:d8:6f:aa:3c:db:41:47:d6:81:d4:c0:4c:3f:
8c:0e:28:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHkzaQNdaZH05LVcbBwHUUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlNDgyZmIzYzlmOWFmNDcwZTRlNDhiNmRmMzgyZDNkNTAx
NTQ2NjEwHhcNMjQwMTAyMDAyOTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODhkMjk0ZWFhMzRhYjdmZTU0MzgwNWUxY2MwZGM5OTM0ZmYxZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjTvDVmFxF6L6Y8u7DqL4sWAoC9j
lOmIvHxOfyXXJKgk8Xjt/seSP/Rjjd+fGjDcdi295Q4FXNbxxbm2bWl300CgOhrj
QbLe2MapHlX8uedgU5caku46z89kFLIHzTNs/onVwbuOI9LfEsAcgF72Wn0gzA74
tFHbBAuECfBuR3pA81rQ1DCJLBbHqwdRpzGrH+5/eeQbz77D9siMaFm6evusd+Jl
VodOd+FrOlYl+0sNekcMA0X9HNjpIZcOXFjYh08yHOLvXjXnlYexBc6qebvf45AO
yYGabQjh2jG/KF8EOsHdcv7E/+YTdxFGVheTRxxvQ+4GEm1H2cBXEtwTmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHiNKU6qNKt/5UOAXhzA3Jk0/x24MB8GA1UdIwQY
MBaAFD5IL7PJ+a9HDk5Itt84LT1QFUZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQt
ZGI0ZDcxNDg1OWI1LzEvZUkwcFRxbzBxM19sUTRCZUhNRGNtVFRfSGJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80My81NDNiMTUtZmIxYi00NDVmLThhYTQtZGI0ZDcxNDg1OWI1
LzEvUGtndnM4bjVyMGNPVGtpMjN6Z3RQVkFWUm1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcjuMA0G
CSqGSIb3DQEBCwUAA4IBAQARp40XXrTCUh+hJVG9I2GKGU06mzZsnQzQw95hFYq3
75Py2y6ge5N2yHVuAKXL0QeM3AEgAAZ4XgSzstF2yn9B5zntghN+Rs9MImakmkmh
bKiSG3AY7MOHD17IzTDjJ0zuj5TcrOPp3fnjsN4vBRtPEj9/14h4xB0gfaci7Yqo
T6/0UvQTskA40ebcfCG23E6HvqNb+M4/gSGupEV3NfkyQMGsuzCV0jvFxbLOQ8UK
2Q0KLhI7RTQ7nRZ8KoZeW41u9qzbv4fAYEmSrSHADWu01ZsFLS+XWYdL9h04Tmw6
xWClHzRaQyX44k28eIJ+vNhvqjzbQUfWgdTATD+MDij9
-----END CERTIFICATE-----
Generated at Sat Jun 8 08:53:21 2024 by rpki-client on console-ams.rpki-client.org