Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/xcSpljv4Vh2AzmFvsFfx4yBkINY.roa
File: xcSpljv4Vh2AzmFvsFfx4yBkINY.roa (raw, json)
Hash identifier: d4owc30OZmT3K3FSerjLKFrJZ7tNozpVa6f54QLvrYw=
Subject key identifier: C5:C4:A9:96:3B:F8:56:1D:80:CE:61:6F:B0:57:F1:E3:20:64:20:D6
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 018CC2DB1419B8FD542DB1F8375F558D05FD
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/xcSpljv4Vh2AzmFvsFfx4yBkINY.roa
Signing time: Mon 01 Jan 2024 02:29:46 +0000
ROA not before: Mon 01 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 194.99.96.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:14:19:b8:fd:54:2d:b1:f8:37:5f:55:8d:05:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Jan 1 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c5c4a9963bf8561d80ce616fb057f1e3206420d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7b:d6:f0:3a:2e:48:90:22:ac:55:4d:f5:e3:
44:c1:0e:de:c5:29:7e:ac:19:4a:12:fb:1f:f0:03:
67:7d:bf:28:22:46:51:fd:4f:94:c5:a3:30:82:72:
43:a3:8c:4c:b1:9a:8f:d3:78:77:58:a5:5e:4e:14:
50:ae:5b:2f:19:c8:9e:0d:45:dd:a9:32:f3:61:16:
84:f1:f8:4f:0d:de:85:be:e8:15:ea:80:65:fb:59:
c5:df:bd:0d:36:67:b1:d9:2b:e9:db:f0:71:e4:80:
5e:5b:a7:29:dc:b6:8c:9e:9e:36:fe:e8:10:28:d2:
0d:d7:2b:6e:5b:5f:26:86:50:af:c0:c1:84:80:9b:
8f:1e:d2:f8:36:04:bb:21:15:e5:5e:17:e6:c1:db:
ed:b9:f8:f4:fd:59:62:8b:15:c0:a2:66:10:a7:4c:
ad:16:bc:3a:15:55:ee:87:76:13:3e:77:28:96:fe:
e8:39:0a:26:92:5b:4a:ca:00:1d:b4:8c:92:20:dc:
f5:33:35:b5:18:6f:92:93:2e:75:54:fc:ef:f0:9b:
c7:71:7a:be:8c:17:ed:49:d2:41:13:4b:e9:23:2e:
20:f3:10:16:27:29:14:98:62:4e:fa:d9:0d:c1:21:
2c:d2:5b:0a:3a:37:0d:8e:f7:a8:ec:6d:d8:45:3f:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C4:A9:96:3B:F8:56:1D:80:CE:61:6F:B0:57:F1:E3:20:64:20:D6
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/xcSpljv4Vh2AzmFvsFfx4yBkINY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.99.96.0/23
Signature Algorithm: sha256WithRSAEncryption
55:53:7f:a2:6f:ef:85:6c:6f:fa:95:d1:0b:93:b3:82:43:18:
21:bf:d6:fb:02:0d:01:a8:56:bf:e0:ac:c0:80:6c:05:35:1f:
1b:6b:8d:bb:48:df:af:5b:40:95:3e:bb:dc:98:dc:5d:0a:d6:
e4:f4:38:9f:c7:82:a6:5f:d1:32:7f:b0:e8:e7:42:e5:76:e7:
4a:c3:ba:56:7a:d0:ba:79:ab:03:45:29:14:ab:d3:67:0f:38:
43:9e:22:ed:0c:9f:b6:48:8e:4d:6b:c6:c0:7c:47:13:3b:ec:
2f:30:40:42:4e:ed:61:a1:07:25:6f:e3:3d:82:0e:f2:2e:12:
73:a5:41:fb:7a:0b:0b:32:c0:75:0e:04:9f:1f:2a:7c:d0:51:
bf:40:ed:e1:dc:29:3d:85:47:38:e0:c9:c0:0d:89:53:41:ef:
2a:20:fc:53:56:41:25:c0:99:00:51:29:62:2b:a5:e9:d9:40:
84:12:e4:b8:35:99:2f:2d:b3:cc:74:26:40:75:09:88:cd:ed:
b7:0f:b4:ed:2e:3b:e5:b6:e9:ed:fd:b9:f6:9d:f6:35:ab:55:
5b:d3:fb:80:5e:73:ac:44:0d:e9:ed:7c:d8:35:94:69:be:47:
d4:b2:69:70:fd:4d:f2:86:bf:e7:1f:2a:08:e3:90:f0:12:44:
8e:e7:de:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2xQZuP1ULbH4N19VjQX9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NGNlM2YzYzVlNWEyZjlkOGI4YTRjNzdhODM2MWY4YTIx
NmYzYWQwHhcNMjQwMTAxMDIyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWM0YTk5NjNiZjg1NjFkODBjZTYxNmZiMDU3ZjFlMzIwNjQyMGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnvW8DouSJAirFVN9eNEwQ7exSl+
rBlKEvsf8ANnfb8oIkZR/U+UxaMwgnJDo4xMsZqP03h3WKVeThRQrlsvGcieDUXd
qTLzYRaE8fhPDd6FvugV6oBl+1nF370NNmex2Svp2/Bx5IBeW6cp3LaMnp42/ugQ
KNIN1ytuW18mhlCvwMGEgJuPHtL4NgS7IRXlXhfmwdvtufj0/VliixXAomYQp0yt
Frw6FVXuh3YTPncolv7oOQomkltKygAdtIySINz1MzW1GG+Sky51VPzv8JvHcXq+
jBftSdJBE0vpIy4g8xAWJykUmGJO+tkNwSEs0lsKOjcNjveo7G3YRT9ufQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMXEqZY7+FYdgM5hb7BX8eMgZCDWMB8GA1UdIwQY
MBaAFLdM4/PF5aL52Likx3qDYfiiFvOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAt
NWViZGQ5ZTI4ODdjLzEveGNTcGxqdjRWaDJBem1GdnNGZng0eUJrSU5ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hYzY4MWYtMDVkMi00MDQ1LWFlMTAtNWViZGQ5ZTI4ODdj
LzEvdDB6ajg4WGxvdm5ZdUtUSGVvTmgtS0lXODYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwmNgMA0G
CSqGSIb3DQEBCwUAA4IBAQBVU3+ib++FbG/6ldELk7OCQxghv9b7Ag0BqFa/4KzA
gGwFNR8ba427SN+vW0CVPrvcmNxdCtbk9Difx4KmX9Eyf7Do50LldudKw7pWetC6
easDRSkUq9NnDzhDniLtDJ+2SI5Na8bAfEcTO+wvMEBCTu1hoQclb+M9gg7yLhJz
pUH7egsLMsB1DgSfHyp80FG/QO3h3Ck9hUc44MnADYlTQe8qIPxTVkElwJkAUSli
K6Xp2UCEEuS4NZkvLbPMdCZAdQmIze23D7TtLjvltunt/bn2nfY1q1Vb0/uAXnOs
RA3p7XzYNZRpvkfUsmlw/U3yhr/nHyoI45DwEkSO594f
-----END CERTIFICATE-----
Generated at Thu May 2 15:17:22 2024 by rpki-client on console-ams.rpki-client.org