Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/2nS4AbJo2gOZdcxIXe3kbla2ZBk.roa
File: 2nS4AbJo2gOZdcxIXe3kbla2ZBk.roa (raw, json)
Hash identifier: DJPMcrgRteKuVsMFPD33GkTWxOkMAcX24UiRflqhWA0=
Subject key identifier: DA:74:B8:01:B2:68:DA:03:99:75:CC:48:5D:ED:E4:6E:56:B6:64:19
Certificate issuer: /CN=5c8084db19f113d81b6448393fad1c132c584fcd
Certificate serial: 018CC2DAE808DF6937C36FE4593101014F51
Authority key identifier: 5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/2nS4AbJo2gOZdcxIXe3kbla2ZBk.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210583
IP address blocks: 176.116.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.mft
rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Oct 2024 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e8:08:df:69:37:c3:6f:e4:59:31:01:01:4f:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c8084db19f113d81b6448393fad1c132c584fcd
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=da74b801b268da039975cc485dede46e56b66419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:18:a2:41:e4:77:94:57:ff:94:14:cd:8a:9b:
75:93:33:3d:bd:c4:2e:de:19:c3:6b:fb:be:81:d6:
85:c2:e6:6c:1a:d3:ac:1d:6d:c4:da:1c:8f:25:61:
c2:71:a4:dc:64:1b:45:20:c4:c7:cb:1c:b2:ac:3f:
20:c5:95:cd:e6:d6:e0:86:ea:7d:b4:f1:19:15:8e:
ff:d3:85:b6:33:76:5c:96:0d:b2:f1:7b:99:31:53:
21:c8:67:d8:6c:9c:a0:dc:64:9f:2d:5a:78:df:96:
a8:07:17:72:f8:18:c0:e8:e6:cc:12:a8:3e:92:4d:
87:aa:e9:f5:86:55:71:4e:17:82:68:c0:3f:85:f7:
d1:9c:92:63:18:ab:49:57:e1:45:9a:8e:04:74:df:
56:cf:0b:d4:04:7b:cf:ff:a9:51:c6:e1:02:d3:f8:
5d:e3:40:77:d0:7f:28:5f:81:3c:fa:27:fd:5e:d3:
cc:f9:b5:e7:a7:2f:c5:4a:14:3e:09:63:0e:e9:d8:
e3:28:d2:e8:f7:e2:13:1a:ed:65:b3:d6:b3:f2:ad:
84:6c:c0:93:72:2f:4b:59:2b:c9:d4:3d:61:0b:9e:
57:25:68:b4:79:f1:61:52:1f:ef:4f:ed:46:38:ba:
39:bf:fb:e3:1a:6d:be:83:13:e1:2e:61:ab:cd:77:
53:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:74:B8:01:B2:68:DA:03:99:75:CC:48:5D:ED:E4:6E:56:B6:64:19
X509v3 Authority Key Identifier:
keyid:5C:80:84:DB:19:F1:13:D8:1B:64:48:39:3F:AD:1C:13:2C:58:4F:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XICE2xnxE9gbZEg5P60cEyxYT80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/2nS4AbJo2gOZdcxIXe3kbla2ZBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/67c7e8-c075-40a1-a3ff-819062a12f3d/1/XICE2xnxE9gbZEg5P60cEyxYT80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.116.7.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:1a:6e:be:1f:dc:fc:58:31:c8:c5:db:cb:34:bd:3a:b6:be:
f3:32:8f:f2:5c:7e:80:eb:e8:89:d4:32:f4:ae:71:97:c7:11:
f8:7e:fd:af:e6:11:7d:3d:4d:22:fe:61:e6:f2:cc:e1:05:9d:
4e:94:6f:36:e6:3d:dd:19:f8:c4:85:be:da:fe:89:e0:5f:03:
12:00:68:44:9f:44:2c:02:46:0a:6a:8f:43:58:40:d2:be:d4:
1c:dd:0e:e8:71:4f:3f:50:60:fc:7c:58:f6:1d:1a:73:44:b5:
0b:5e:65:cc:12:ff:79:02:f0:30:1c:11:d1:54:32:5c:b0:b2:
e0:6f:e1:2c:67:f8:6d:01:ed:28:c1:37:b6:5d:d8:7c:ae:4b:
39:8a:21:6c:95:df:93:dc:0c:85:77:04:56:ff:bd:6e:43:09:
ba:3e:d2:79:b3:a6:91:6c:e8:5c:87:6d:61:53:cc:b8:75:c3:
79:02:a4:20:4d:ed:f6:3c:9e:d1:43:b6:3f:fc:ee:f6:8d:22:
57:22:0f:76:b3:54:b0:ed:cd:37:a7:14:cd:b1:12:25:32:77:
9a:db:61:a0:86:30:bd:8b:26:22:f9:56:55:37:8c:6c:46:8d:
32:e3:b4:3c:96:39:e0:bb:6f:82:c3:b0:2b:aa:f3:b9:b3:b4:
bb:19:d3:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2ugI32k3w2/kWTEBAU9RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjODA4NGRiMTlmMTEzZDgxYjY0NDgzOTNmYWQxYzEzMmM1
ODRmY2QwHhcNMjQwMTAxMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTc0YjgwMWIyNjhkYTAzOTk3NWNjNDg1ZGVkZTQ2ZTU2YjY2NDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBiiQeR3lFf/lBTNipt1kzM9vcQu
3hnDa/u+gdaFwuZsGtOsHW3E2hyPJWHCcaTcZBtFIMTHyxyyrD8gxZXN5tbghup9
tPEZFY7/04W2M3Zclg2y8XuZMVMhyGfYbJyg3GSfLVp435aoBxdy+BjA6ObMEqg+
kk2Hqun1hlVxTheCaMA/hffRnJJjGKtJV+FFmo4EdN9WzwvUBHvP/6lRxuEC0/hd
40B30H8oX4E8+if9XtPM+bXnpy/FShQ+CWMO6djjKNLo9+ITGu1ls9az8q2EbMCT
ci9LWSvJ1D1hC55XJWi0efFhUh/vT+1GOLo5v/vjGm2+gxPhLmGrzXdTWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNp0uAGyaNoDmXXMSF3t5G5WtmQZMB8GA1UdIwQY
MBaAFFyAhNsZ8RPYG2RIOT+tHBMsWE/NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYt
ODE5MDYyYTEyZjNkLzEvMm5TNEFiSm8yZ09aZGN4SVhlM2tibGEyWkJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82N2M3ZTgtYzA3NS00MGExLWEzZmYtODE5MDYyYTEyZjNk
LzEvWElDRTJ4bnhFOWdiWkVnNVA2MGNFeXhZVDgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsHQHMA0G
CSqGSIb3DQEBCwUAA4IBAQCnGm6+H9z8WDHIxdvLNL06tr7zMo/yXH6A6+iJ1DL0
rnGXxxH4fv2v5hF9PU0i/mHm8szhBZ1OlG825j3dGfjEhb7a/ongXwMSAGhEn0Qs
AkYKao9DWEDSvtQc3Q7ocU8/UGD8fFj2HRpzRLULXmXMEv95AvAwHBHRVDJcsLLg
b+EsZ/htAe0owTe2Xdh8rks5iiFsld+T3AyFdwRW/71uQwm6PtJ5s6aRbOhch21h
U8y4dcN5AqQgTe32PJ7RQ7Y//O72jSJXIg92s1Sw7c03pxTNsRIlMnea22GghjC9
iyYi+VZVN4xsRo0y47Q8ljngu2+Cw7ArqvO5s7S7GdNr
-----END CERTIFICATE-----
Generated at Sun Oct 6 21:31:21 2024 by rpki-client on console-fra.rpki-client.org