Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/mE8FJ6HvJNCaNOm_lXsNf2-9qNg.roa
File: mE8FJ6HvJNCaNOm_lXsNf2-9qNg.roa (raw, json)
Hash identifier: VWbGe8nnJyuF3Uli129MFPEeIw1WiMCLGkmtRx3iJQA=
Subject key identifier: 98:4F:05:27:A1:EF:24:D0:9A:34:E9:BF:95:7B:0D:7F:6F:BD:A8:D8
Certificate issuer: /CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Certificate serial: 018CC26D42FE3393198AF1552FB63856163E
Authority key identifier: D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/mE8FJ6HvJNCaNOm_lXsNf2-9qNg.roa
Signing time: Mon 01 Jan 2024 00:29:49 +0000
ROA not before: Mon 01 Jan 2024 00:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34379
IP address blocks: 193.111.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:42:fe:33:93:19:8a:f1:55:2f:b6:38:56:16:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5d902a07fc7d48e0db29bffbe3ab10543fc1465
Validity
Not Before: Jan 1 00:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=984f0527a1ef24d09a34e9bf957b0d7f6fbda8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b8:a9:11:bc:6f:49:ed:10:d6:c3:09:c8:d6:
91:0b:fe:10:78:bf:aa:5a:98:18:58:c2:dd:75:1f:
db:d0:24:10:94:21:80:42:5a:5c:58:ef:09:b7:35:
ed:8a:89:54:13:b2:83:42:0b:72:97:b1:99:2b:fe:
23:f8:da:cd:d3:42:a6:59:e4:13:8d:d9:4e:bf:62:
4d:d5:cc:d7:08:31:82:0b:e3:c2:05:93:23:9f:f9:
2c:8d:48:6d:03:3f:f9:78:e3:bf:56:4b:94:b0:92:
22:e7:d2:dc:3e:e2:e5:a2:d9:df:48:ae:57:17:ac:
3b:ad:67:ad:99:93:3e:4a:d8:1d:cd:88:a8:ee:af:
9c:30:78:f3:ee:92:02:95:8e:c8:ca:c1:00:41:09:
ee:0c:fb:ac:a5:d2:17:00:db:8f:f2:16:59:52:e9:
a5:86:2c:5f:a2:59:49:c0:50:6e:6f:ad:79:27:39:
d2:73:3d:98:a7:4f:8c:9c:96:c3:8e:2f:1c:75:17:
77:45:d8:47:15:a9:f2:ba:80:27:25:80:18:e7:55:
d4:b6:ff:8d:14:1f:74:6b:a9:01:49:a6:21:7a:b7:
d6:69:3e:bb:40:87:9b:71:2d:c2:6b:55:4a:39:5f:
04:d8:ab:1c:c7:fd:30:94:d0:58:9b:7c:f0:5a:e5:
79:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:4F:05:27:A1:EF:24:D0:9A:34:E9:BF:95:7B:0D:7F:6F:BD:A8:D8
X509v3 Authority Key Identifier:
keyid:D5:D9:02:A0:7F:C7:D4:8E:0D:B2:9B:FF:BE:3A:B1:05:43:FC:14:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1dkCoH_H1I4Nspv_vjqxBUP8FGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/mE8FJ6HvJNCaNOm_lXsNf2-9qNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b52291-dc7f-46e1-b361-a6cec25b8006/1/1dkCoH_H1I4Nspv_vjqxBUP8FGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:83:78:4e:14:d4:f8:8e:8d:62:b6:90:3d:4e:3b:23:57:ad:
b6:27:81:15:ae:b6:19:83:81:0a:93:3f:c8:40:82:68:fb:c1:
9b:31:55:82:69:a1:ef:c5:dd:2c:ca:01:66:3a:68:c2:56:b5:
bf:f3:70:21:d8:6b:15:99:97:0d:0e:c0:b6:67:c0:a3:5d:f3:
7a:db:83:e1:d9:38:cb:89:94:c6:cc:24:0e:9d:da:44:1c:fb:
a2:bf:2f:36:fb:8c:e9:0d:27:e1:85:60:47:2e:e1:e2:c7:c6:
58:0e:d0:65:b7:0c:09:a2:9a:7e:60:11:6f:48:7c:1c:d5:8f:
bd:9e:a1:7f:7b:01:05:67:31:8c:5b:c9:ba:5e:2f:2b:bc:c4:
49:38:b3:84:3e:a1:4d:89:46:df:62:f4:11:42:c0:3c:55:49:
57:63:44:7c:75:18:50:e9:bf:68:95:cc:e5:3a:f1:87:62:a1:
e1:54:28:73:57:96:05:6b:2d:b2:33:82:00:47:7e:3c:11:77:
34:1d:3f:ff:41:8b:66:83:dc:3c:ed:8b:3b:97:94:b1:11:1b:
01:7a:18:bb:88:a1:29:46:62:35:09:ae:28:58:d2:59:f8:1c:
d1:94:43:b2:68:1c:f4:0c:f4:46:40:7e:6e:fe:a7:d2:d1:73:
db:2f:a2:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbUL+M5MZivFVL7Y4VhY+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZDkwMmEwN2ZjN2Q0OGUwZGIyOWJmZmJlM2FiMTA1NDNm
YzE0NjUwHhcNMjQwMTAxMDAyOTQ5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ODRmMDUyN2ExZWYyNGQwOWEzNGU5YmY5NTdiMGQ3ZjZmYmRhOGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLipEbxvSe0Q1sMJyNaRC/4QeL+q
WpgYWMLddR/b0CQQlCGAQlpcWO8JtzXtiolUE7KDQgtyl7GZK/4j+NrN00KmWeQT
jdlOv2JN1czXCDGCC+PCBZMjn/ksjUhtAz/5eOO/VkuUsJIi59LcPuLlotnfSK5X
F6w7rWetmZM+StgdzYio7q+cMHjz7pIClY7IysEAQQnuDPuspdIXANuP8hZZUuml
hixfollJwFBub615JznScz2Yp0+MnJbDji8cdRd3RdhHFanyuoAnJYAY51XUtv+N
FB90a6kBSaYherfWaT67QIebcS3Ca1VKOV8E2Kscx/0wlNBYm3zwWuV5VwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJhPBSeh7yTQmjTpv5V7DX9vvajYMB8GA1UdIwQY
MBaAFNXZAqB/x9SODbKb/746sQVD/BRlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iNTIyOTEtZGM3Zi00NmUxLWIzNjEt
YTZjZWMyNWI4MDA2LzEvbUU4Rko2SHZKTkNhTk9tX2xYc05mMi05cU5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iNTIyOTEtZGM3Zi00NmUxLWIzNjEtYTZjZWMyNWI4MDA2
LzEvMWRrQ29IX0gxSTROc3B2X3ZqcXhCVVA4RkdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwW/vMA0G
CSqGSIb3DQEBCwUAA4IBAQA/g3hOFNT4jo1itpA9TjsjV622J4EVrrYZg4EKkz/I
QIJo+8GbMVWCaaHvxd0sygFmOmjCVrW/83Ah2GsVmZcNDsC2Z8CjXfN624Ph2TjL
iZTGzCQOndpEHPuivy82+4zpDSfhhWBHLuHix8ZYDtBltwwJopp+YBFvSHwc1Y+9
nqF/ewEFZzGMW8m6Xi8rvMRJOLOEPqFNiUbfYvQRQsA8VUlXY0R8dRhQ6b9olczl
OvGHYqHhVChzV5YFay2yM4IAR348EXc0HT//QYtmg9w87Ys7l5SxERsBehi7iKEp
RmI1Ca4oWNJZ+BzRlEOyaBz0DPRGQH5u/qfS0XPbL6IV
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:41:31 2024 by rpki-client on console-fra.rpki-client.org