Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/6v4Gz1GZoYB2XDssgJf0sqf-hTQ.roa
File: 6v4Gz1GZoYB2XDssgJf0sqf-hTQ.roa (raw, json)
Hash identifier: OD10L64xCkNqOnR+8md/1imTOb1ljgYkHwDmRxGPHas=
Subject key identifier: EA:FE:06:CF:51:99:A1:80:76:5C:3B:2C:80:97:F4:B2:A7:FE:85:34
Certificate issuer: /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial: 018CC500D09A195B57CC539C1E2EA170F5FC
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/6v4Gz1GZoYB2XDssgJf0sqf-hTQ.roa
Signing time: Mon 01 Jan 2024 12:30:14 +0000
ROA not before: Mon 01 Jan 2024 12:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206932
IP address blocks: 194.242.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:d0:9a:19:5b:57:cc:53:9c:1e:2e:a1:70:f5:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Validity
Not Before: Jan 1 12:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eafe06cf5199a180765c3b2c8097f4b2a7fe8534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:04:6e:41:45:ee:36:03:35:4c:33:cc:97:df:
14:1e:5f:7b:cf:48:1f:51:aa:3c:4a:c4:9a:be:39:
2d:eb:e7:0f:b1:d5:34:fd:c1:e5:99:ea:1a:0d:5e:
b1:c0:b5:81:db:6e:4b:c8:78:d9:31:0d:98:60:64:
e1:23:85:ac:cb:8a:be:78:d0:c5:de:ce:4c:30:2e:
f6:d0:fe:f6:3c:75:8f:d6:fb:b0:1f:1a:22:86:8f:
90:54:bd:82:1c:46:9e:4e:6e:fb:7c:dc:7c:a8:da:
dc:b1:36:df:0d:83:ed:b3:9f:78:09:a4:a3:04:3b:
b0:d3:c5:5e:e6:2d:f5:3c:5f:88:94:17:31:d2:a9:
84:cc:bf:ba:cf:92:08:89:1e:0d:45:8d:48:97:9b:
f9:9e:5e:2b:31:7c:41:e1:2d:0a:e4:59:8e:d9:26:
e3:11:05:56:0c:b5:6f:e4:84:83:af:16:b1:6e:19:
e0:45:f6:fc:8b:19:b5:8e:1b:38:d0:1a:58:98:ec:
28:a8:99:e6:61:e8:38:63:ad:04:6d:7f:bc:95:e0:
96:22:66:c1:4b:90:85:91:a3:52:5a:5a:c4:5c:ca:
a7:e7:11:5d:1c:f8:bf:a7:27:49:ff:8b:4e:df:c2:
af:54:37:5f:47:27:36:87:88:21:27:97:cb:6c:cd:
9a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:FE:06:CF:51:99:A1:80:76:5C:3B:2C:80:97:F4:B2:A7:FE:85:34
X509v3 Authority Key Identifier:
keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/6v4Gz1GZoYB2XDssgJf0sqf-hTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.242.45.0/24
Signature Algorithm: sha256WithRSAEncryption
28:aa:5b:3e:e9:0f:3a:28:92:52:d1:5c:0d:9f:89:58:fd:df:
27:be:19:fb:63:f6:c7:f4:1c:14:c5:52:4f:b2:dc:81:71:e9:
02:62:aa:51:26:7a:94:dd:28:f6:96:43:57:44:49:e3:da:0b:
8f:14:c5:b1:75:10:32:b5:b7:56:a6:c6:c4:c8:f5:d9:73:47:
28:c4:0c:3c:51:74:8e:04:99:b0:55:f9:7b:ff:40:cd:ff:94:
44:03:95:f9:8f:fa:63:0f:1e:71:fd:5a:56:d3:5b:86:a2:f2:
64:a9:44:65:7a:f5:87:a1:01:52:fb:70:c5:53:f3:e1:3a:7c:
ca:2f:d3:04:1d:7d:36:da:17:fc:e6:33:d8:e8:19:94:6b:8c:
15:bd:1f:16:28:ab:70:bc:9d:d2:7e:29:6a:42:bd:1e:7c:53:
f0:aa:4d:db:d6:d9:94:0d:ab:b3:30:79:bf:cc:5b:e5:26:a6:
99:7a:a4:f6:06:c7:e8:f7:7a:a3:83:eb:a3:43:06:f8:3d:43:
19:03:8b:79:46:4b:0d:11:94:7a:dd:75:92:42:9a:a0:a1:dd:
18:1e:27:a8:39:e1:c2:ad:90:ee:64:2c:dd:97:91:2a:2f:79:
cf:27:0a:b1:72:3f:c8:48:0e:9c:f9:48:b2:fd:89:d1:9e:c6:
f7:e3:5b:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFANCaGVtXzFOcHi6hcPX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzljZTRjMjlhYjNmODAyZjlkZTkzM2Y0NDk1MDI2YzRk
MGVlNGEwHhcNMjQwMTAxMTIzMDE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWZlMDZjZjUxOTlhMTgwNzY1YzNiMmM4MDk3ZjRiMmE3ZmU4NTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgRuQUXuNgM1TDPMl98UHl97z0gf
Uao8SsSavjkt6+cPsdU0/cHlmeoaDV6xwLWB225LyHjZMQ2YYGThI4Wsy4q+eNDF
3s5MMC720P72PHWP1vuwHxoiho+QVL2CHEaeTm77fNx8qNrcsTbfDYPts594CaSj
BDuw08Ve5i31PF+IlBcx0qmEzL+6z5IIiR4NRY1Il5v5nl4rMXxB4S0K5FmO2Sbj
EQVWDLVv5ISDrxaxbhngRfb8ixm1jhs40BpYmOwoqJnmYeg4Y60EbX+8leCWImbB
S5CFkaNSWlrEXMqn5xFdHPi/pydJ/4tO38KvVDdfRyc2h4ghJ5fLbM2aBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOr+Bs9RmaGAdlw7LICX9LKn/oU0MB8GA1UdIwQY
MBaAFG05zkwpqz+AL53pM/RJUCbE0O5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5Nzkt
Y2RjMzFkNWZiOGE0LzEvNnY0R3oxR1pvWUIyWERzc2dKZjBzcWYtaFRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5NzktY2RjMzFkNWZiOGE0
LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwvItMA0G
CSqGSIb3DQEBCwUAA4IBAQAoqls+6Q86KJJS0VwNn4lY/d8nvhn7Y/bH9BwUxVJP
styBcekCYqpRJnqU3Sj2lkNXREnj2guPFMWxdRAytbdWpsbEyPXZc0coxAw8UXSO
BJmwVfl7/0DN/5REA5X5j/pjDx5x/VpW01uGovJkqURlevWHoQFS+3DFU/PhOnzK
L9MEHX022hf85jPY6BmUa4wVvR8WKKtwvJ3SfilqQr0efFPwqk3b1tmUDauzMHm/
zFvlJqaZeqT2Bsfo93qjg+ujQwb4PUMZA4t5RksNEZR63XWSQpqgod0YHieoOeHC
rZDuZCzdl5EqL3nPJwqxcj/ISA6c+Uiy/YnRnsb341vR
-----END CERTIFICATE-----
Generated at Wed Jun 26 10:02:32 2024 by rpki-client on console-fra.rpki-client.org