Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/vEkhIQbjKt1qzZyuioN1NQB9x-A.roa
File: vEkhIQbjKt1qzZyuioN1NQB9x-A.roa (raw, json)
Hash identifier: /KwM/1CpjVc38VC6Xk0iJKc8a7LIQnSWKKs5b99Dcvs=
Subject key identifier: BC:49:21:21:06:E3:2A:DD:6A:CD:9C:AE:8A:83:75:35:00:7D:C7:E0
Certificate issuer: /CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Certificate serial: 018CC9BCDFC7FE64D1677D208D7B23615E42
Authority key identifier: 2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/vEkhIQbjKt1qzZyuioN1NQB9x-A.roa
Signing time: Tue 02 Jan 2024 10:34:07 +0000
ROA not before: Tue 02 Jan 2024 10:34:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.116.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:df:c7:fe:64:d1:67:7d:20:8d:7b:23:61:5e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c887302d1e740f5f98481fb4b7a461696bfe5c1
Validity
Not Before: Jan 2 10:34:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bc49212106e32add6acd9cae8a837535007dc7e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:93:6c:fb:ad:3d:04:87:9c:45:f5:3a:bb:
bc:cc:37:8e:e1:3f:b8:f0:bd:e4:87:2a:c7:f5:44:
71:22:20:2c:1c:7e:6f:36:35:92:f1:ea:86:86:72:
e8:55:1c:e1:b9:0f:14:f4:c9:d2:8c:fd:7e:1e:fb:
9a:02:40:45:92:00:52:dc:99:9b:d7:55:f2:82:1c:
8b:c5:1d:a6:63:2c:c9:51:85:4f:bf:f1:0c:d3:fc:
29:a4:cc:3c:df:c3:f4:ca:d1:a8:d2:9d:f0:ba:3d:
85:95:55:f5:de:6a:62:bf:a6:a7:d8:92:8d:1b:fc:
51:df:fd:1e:3a:25:53:d2:c0:a4:df:af:62:85:a9:
01:01:29:98:ce:91:c4:33:10:9d:d9:da:b8:fc:3e:
1e:a1:98:d2:5f:28:c7:0e:1e:e0:d1:61:60:bd:e6:
43:04:32:43:3b:6c:75:96:b1:2d:fc:e4:67:29:19:
5a:9b:02:38:2c:2d:a4:a9:72:c4:a0:11:1a:37:60:
06:04:b4:80:99:1a:54:65:4f:9d:96:da:01:2a:ef:
88:a3:7d:78:4c:9c:c3:3b:8d:b8:3f:60:77:73:ed:
5a:21:b6:fa:06:90:6e:dd:6f:d4:d8:43:94:63:eb:
01:6d:1d:d1:b2:6b:c3:a3:4c:57:86:ec:01:64:62:
4e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:49:21:21:06:E3:2A:DD:6A:CD:9C:AE:8A:83:75:35:00:7D:C7:E0
X509v3 Authority Key Identifier:
keyid:2C:88:73:02:D1:E7:40:F5:F9:84:81:FB:4B:7A:46:16:96:BF:E5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LIhzAtHnQPX5hIH7S3pGFpa_5cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/vEkhIQbjKt1qzZyuioN1NQB9x-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/645b74-d8fb-4488-bbfd-c028d91ebc9c/1/LIhzAtHnQPX5hIH7S3pGFpa_5cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.96.0/24
Signature Algorithm: sha256WithRSAEncryption
98:23:7c:28:98:05:64:cd:27:fc:8f:2f:c7:80:f5:c4:6e:63:
d4:fd:f4:e4:dc:77:b7:20:68:ee:e0:e1:c6:55:d3:f5:8b:78:
80:33:e7:df:1e:dd:17:73:81:54:93:d9:10:79:55:a1:43:0b:
75:e9:31:02:87:06:9d:f9:6d:ad:77:03:d9:82:9e:66:00:05:
96:c0:fa:73:59:5e:f2:ca:65:3d:6e:3e:d6:55:34:ce:3e:47:
23:f6:b2:46:0a:ff:6a:95:88:b2:9c:5d:ef:d8:4c:27:cc:b5:
7d:72:dd:50:ff:8e:06:bb:f5:6c:b0:84:47:35:89:b2:b2:18:
44:b3:0d:14:93:28:8b:54:a7:16:e1:d6:14:43:50:de:c4:fd:
1d:1a:5b:e0:f9:da:ca:4b:a7:dc:2a:8e:10:00:b4:f1:96:e5:
20:6b:34:5a:41:5b:ac:fc:ac:9f:d2:6a:39:11:43:8c:78:be:
78:d3:a3:32:6b:11:e4:5f:82:98:dc:35:c0:7b:62:14:33:0c:
e2:57:69:35:94:31:de:9b:f1:8c:07:39:34:ab:8d:0e:bb:dc:
fb:a1:03:4c:64:d0:93:34:d0:62:80:8a:a1:40:fe:24:e3:6e:
2c:27:33:2f:43:73:43:e5:50:96:ba:a4:9a:8f:6d:68:02:42:
24:83:44:ec
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvN/H/mTRZ30gjXsjYV5CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJjODg3MzAyZDFlNzQwZjVmOTg0ODFmYjRiN2E0NjE2OTZi
ZmU1YzEwHhcNMjQwMTAyMTAzNDA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzQ5MjEyMTA2ZTMyYWRkNmFjZDljYWU4YTgzNzUzNTAwN2RjN2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhyTbPutPQSHnEX1Oru8zDeO4T+4
8L3khyrH9URxIiAsHH5vNjWS8eqGhnLoVRzhuQ8U9MnSjP1+HvuaAkBFkgBS3Jmb
11XyghyLxR2mYyzJUYVPv/EM0/wppMw838P0ytGo0p3wuj2FlVX13mpiv6an2JKN
G/xR3/0eOiVT0sCk369ihakBASmYzpHEMxCd2dq4/D4eoZjSXyjHDh7g0WFgveZD
BDJDO2x1lrEt/ORnKRlamwI4LC2kqXLEoBEaN2AGBLSAmRpUZU+dltoBKu+Io314
TJzDO424P2B3c+1aIbb6BpBu3W/U2EOUY+sBbR3RsmvDo0xXhuwBZGJOnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLxJISEG4yrdas2croqDdTUAfcfgMB8GA1UdIwQY
MBaAFCyIcwLR50D1+YSB+0t6RhaWv+XBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQt
YzAyOGQ5MWViYzljLzEvdkVraElRYmpLdDFxelp5dWlvTjFOUUI5eC1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS82NDViNzQtZDhmYi00NDg4LWJiZmQtYzAyOGQ5MWViYzlj
LzEvTEloekF0SG5RUFg1aElIN1MzcEdGcGFfNWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnRgMA0G
CSqGSIb3DQEBCwUAA4IBAQCYI3womAVkzSf8jy/HgPXEbmPU/fTk3He3IGju4OHG
VdP1i3iAM+ffHt0Xc4FUk9kQeVWhQwt16TEChwad+W2tdwPZgp5mAAWWwPpzWV7y
ymU9bj7WVTTOPkcj9rJGCv9qlYiynF3v2EwnzLV9ct1Q/44Gu/VssIRHNYmyshhE
sw0UkyiLVKcW4dYUQ1DexP0dGlvg+drKS6fcKo4QALTxluUgazRaQVus/Kyf0mo5
EUOMeL5406MyaxHkX4KY3DXAe2IUMwziV2k1lDHem/GMBzk0q40Ou9z7oQNMZNCT
NNBigIqhQP4k424sJzMvQ3ND5VCWuqSaj21oAkIkg0Ts
-----END CERTIFICATE-----
Generated at Thu Apr 25 23:01:44 2024 by rpki-client on console-fra.rpki-client.org