Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/XiRArs40bpmK80U0U3QnyZP5ncA.roa
File: XiRArs40bpmK80U0U3QnyZP5ncA.roa (raw, json)
Hash identifier: rI+ccKxm7CsxHnkOJwtIy3iwiYHb87oKetEQWxtOOy4=
Subject key identifier: 5E:24:40:AE:CE:34:6E:99:8A:F3:45:34:53:74:27:C9:93:F9:9D:C0
Certificate issuer: /CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Certificate serial: 018CC8011C1A09BB406699BCB37E9DC883E5
Authority key identifier: D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/XiRArs40bpmK80U0U3QnyZP5ncA.roa
Signing time: Tue 02 Jan 2024 02:29:25 +0000
ROA not before: Tue 02 Jan 2024 02:29:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12329
IP address blocks: 194.24.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:1c:1a:09:bb:40:66:99:bc:b3:7e:9d:c8:83:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0012bf8f572484a6f6068562ca9919c6da5446f
Validity
Not Before: Jan 2 02:29:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e2440aece346e998af34534537427c993f99dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:02:06:34:61:72:ca:3d:7d:57:70:73:90:58:
fb:96:22:0e:0b:8c:2e:aa:ae:28:e3:ae:67:c7:98:
8f:24:ab:aa:19:59:c4:eb:ba:89:7b:b9:98:01:d2:
26:88:25:28:2e:48:e5:7e:bf:2f:f0:3f:cd:48:02:
31:0f:85:b8:35:50:05:ee:8d:36:41:ad:ad:f7:c2:
9c:3c:17:fd:67:a0:6d:ff:89:d5:e7:de:33:b2:c2:
39:c7:24:5c:f0:51:92:8d:30:9c:2c:2c:bf:e1:8a:
98:6e:4a:1c:bd:20:f1:44:9c:e8:8a:f7:07:1a:c8:
0b:5e:7b:b1:be:13:ef:8b:38:c1:c6:79:bc:f7:4a:
34:09:b7:61:96:23:2f:15:0c:81:2d:af:03:aa:f3:
d7:0d:0f:e0:cb:51:37:2d:f7:00:b1:b5:a9:af:ed:
db:1d:a4:cc:82:42:5e:7a:aa:ee:20:ce:4b:64:73:
08:af:42:4f:5b:a9:88:b6:ae:1f:a7:0a:b3:87:7a:
71:d3:3f:51:0d:09:4c:59:97:03:af:6d:77:86:82:
f4:35:7d:c5:c0:83:c5:cf:03:85:7b:62:af:25:95:
f3:43:68:1b:f9:f5:09:7f:62:6a:ed:b7:e6:bd:49:
33:77:ea:ce:5e:37:19:08:d3:14:58:64:94:1d:d8:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:24:40:AE:CE:34:6E:99:8A:F3:45:34:53:74:27:C9:93:F9:9D:C0
X509v3 Authority Key Identifier:
keyid:D0:01:2B:F8:F5:72:48:4A:6F:60:68:56:2C:A9:91:9C:6D:A5:44:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0AEr-PVySEpvYGhWLKmRnG2lRG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/XiRArs40bpmK80U0U3QnyZP5ncA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/55eb96-f121-4cf4-ac94-8477b6638f31/1/0AEr-PVySEpvYGhWLKmRnG2lRG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.24.230.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:0b:25:82:d9:2f:6c:3a:3c:42:a6:d9:64:8e:aa:e4:df:50:
01:66:ed:69:3d:e3:16:ed:f6:e7:ab:f6:e5:81:b5:d9:9b:c7:
83:77:56:14:32:2c:79:00:84:a4:52:f6:f1:76:94:5e:1f:64:
64:e1:40:4a:a5:61:94:f6:7c:0e:b8:d8:3d:c1:da:2f:85:bb:
98:9a:b3:29:f0:40:95:f4:75:fe:54:e3:e5:8d:39:36:50:86:
f5:1c:61:a6:68:b7:31:7a:f0:fe:b4:3c:28:a7:98:7e:34:d1:
b8:fe:0b:c5:44:07:4c:74:6f:4f:a6:2d:aa:6c:6f:95:46:35:
e6:7b:57:29:c9:40:82:2d:20:de:84:93:3f:3d:3a:77:28:50:
5a:ce:cc:af:cb:70:1f:f1:3c:99:2f:72:f6:52:87:d7:3e:d5:
97:e7:ea:1c:f9:86:78:0f:b9:f4:13:ff:ee:ff:e1:a5:58:c9:
4e:4e:7a:89:90:d4:16:b7:35:3f:c8:cb:3d:e7:92:da:d7:a7:
d3:24:84:71:37:09:44:b1:10:cc:85:8d:8b:86:5a:c2:83:88:
3d:92:db:e0:5b:8f:61:23:a4:9d:9a:e7:c9:eb:c0:80:9a:1a:
a6:94:ed:5b:53:d5:57:28:7c:f0:49:e7:2e:1f:b9:2c:09:5d:
41:90:c0:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIARwaCbtAZpm8s36dyIPlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMDEyYmY4ZjU3MjQ4NGE2ZjYwNjg1NjJjYTk5MTljNmRh
NTQ0NmYwHhcNMjQwMTAyMDIyOTI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZTI0NDBhZWNlMzQ2ZTk5OGFmMzQ1MzQ1Mzc0MjdjOTkzZjk5ZGMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQIGNGFyyj19V3BzkFj7liIOC4wu
qq4o465nx5iPJKuqGVnE67qJe7mYAdImiCUoLkjlfr8v8D/NSAIxD4W4NVAF7o02
Qa2t98KcPBf9Z6Bt/4nV594zssI5xyRc8FGSjTCcLCy/4YqYbkocvSDxRJzoivcH
GsgLXnuxvhPvizjBxnm890o0CbdhliMvFQyBLa8DqvPXDQ/gy1E3LfcAsbWpr+3b
HaTMgkJeeqruIM5LZHMIr0JPW6mItq4fpwqzh3px0z9RDQlMWZcDr213hoL0NX3F
wIPFzwOFe2KvJZXzQ2gb+fUJf2Jq7bfmvUkzd+rOXjcZCNMUWGSUHdiNuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF4kQK7ONG6ZivNFNFN0J8mT+Z3AMB8GA1UdIwQY
MBaAFNABK/j1ckhKb2BoViypkZxtpURvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQt
ODQ3N2I2NjM4ZjMxLzEvWGlSQXJzNDBicG1LODBVMFUzUW55WlA1bmNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC81NWViOTYtZjEyMS00Y2Y0LWFjOTQtODQ3N2I2NjM4ZjMx
LzEvMEFFci1QVnlTRXB2WUdoV0xLbVJuRzJsUkc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhjmMA0G
CSqGSIb3DQEBCwUAA4IBAQB7CyWC2S9sOjxCptlkjqrk31ABZu1pPeMW7fbnq/bl
gbXZm8eDd1YUMix5AISkUvbxdpReH2Rk4UBKpWGU9nwOuNg9wdovhbuYmrMp8ECV
9HX+VOPljTk2UIb1HGGmaLcxevD+tDwop5h+NNG4/gvFRAdMdG9Ppi2qbG+VRjXm
e1cpyUCCLSDehJM/PTp3KFBazsyvy3Af8TyZL3L2UofXPtWX5+oc+YZ4D7n0E//u
/+GlWMlOTnqJkNQWtzU/yMs955La16fTJIRxNwlEsRDMhY2LhlrCg4g9ktvgW49h
I6SdmufJ68CAmhqmlO1bU9VXKHzwSecuH7ksCV1BkMDe
-----END CERTIFICATE-----
Generated at Sun May 12 02:28:34 2024 by rpki-client on console-fra.rpki-client.org