Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/hjry1ajed6SkKDPGOldx3HoNtzc.roa
File: hjry1ajed6SkKDPGOldx3HoNtzc.roa (raw, json)
Hash identifier: bi7VKuuSAw41SR6qAr5GHfg7MnN25BlHnMZ2UilnM+o=
Subject key identifier: 86:3A:F2:D5:A8:DE:77:A4:A4:28:33:C6:3A:57:71:DC:7A:0D:B7:37
Certificate issuer: /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial: 018CC9BBF3E15C47E10F9BACF42896959FA1
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/hjry1ajed6SkKDPGOldx3HoNtzc.roa
Signing time: Tue 02 Jan 2024 10:33:07 +0000
ROA not before: Tue 02 Jan 2024 10:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9211
IP address blocks: 193.194.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:f3:e1:5c:47:e1:0f:9b:ac:f4:28:96:95:9f:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Validity
Not Before: Jan 2 10:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=863af2d5a8de77a4a42833c63a5771dc7a0db737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:bb:eb:1c:72:d7:8f:89:e8:05:b3:e1:2a:
06:ef:5a:31:18:6a:a7:9f:f5:58:52:f1:9c:09:f2:
78:0b:79:28:13:22:4a:84:d4:76:03:84:37:6b:c0:
1b:58:92:b0:0c:b5:03:8e:96:ac:4b:ca:a4:25:c8:
9e:b1:61:e6:69:02:80:99:b3:70:f2:b5:1d:26:22:
cd:af:1e:69:83:7b:ef:99:b6:ee:a5:31:5f:c0:b2:
d8:8a:50:0d:c2:cf:0f:03:a2:0f:ee:45:ac:b7:ce:
2e:bf:e7:15:ee:e2:65:db:15:46:d5:42:6a:d6:98:
d7:74:4f:f7:4e:88:93:40:d9:b4:ee:9e:36:aa:ad:
0b:c7:60:44:1e:fe:47:fa:eb:eb:bc:84:1a:6c:81:
ee:a5:de:55:73:a7:8d:7c:45:23:e3:2f:5f:17:af:
c0:00:4c:c1:d2:18:e5:1d:e0:2c:65:ab:25:cc:b9:
b0:81:70:6a:ae:64:69:c8:f8:f1:f1:ac:bc:17:2e:
b1:28:bd:d1:f1:c3:9a:9d:55:21:e9:1f:04:6a:22:
93:b9:df:70:4e:f6:ac:cf:5c:06:fd:fa:72:62:42:
7f:fe:19:de:d6:3d:19:94:85:7f:07:b4:39:1c:aa:
4b:6d:ad:67:d4:12:36:5c:a4:af:22:b0:51:e3:ad:
b3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3A:F2:D5:A8:DE:77:A4:A4:28:33:C6:3A:57:71:DC:7A:0D:B7:37
X509v3 Authority Key Identifier:
keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/hjry1ajed6SkKDPGOldx3HoNtzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.194.129.0/24
Signature Algorithm: sha256WithRSAEncryption
61:bf:c8:3b:33:3e:d1:73:cc:e5:a0:42:c2:85:c5:e7:57:a0:
36:19:4e:aa:96:80:27:bf:8e:fd:3f:a0:3a:49:84:19:12:08:
18:b3:50:b4:36:14:61:da:02:36:d5:49:35:7e:a3:3a:0c:b9:
99:cd:42:d7:a5:c9:7b:a3:f0:61:a7:4c:0d:b7:01:e9:37:ca:
35:01:60:7b:26:c4:7d:37:b1:6b:32:5b:2a:d0:66:af:29:8c:
39:f2:a2:a7:be:e6:c2:ac:7b:bc:7b:fb:8b:24:f7:c6:81:24:
76:e6:4b:71:b6:73:4f:dc:68:2c:26:6e:e0:00:49:cd:ae:48:
c2:1d:e1:5a:15:58:9b:b8:bd:71:fa:c8:4d:00:14:bf:35:44:
fe:64:f1:4b:74:7b:55:c7:ed:f0:2b:da:4e:68:17:7d:af:d8:
38:ab:8c:2e:d2:93:89:e5:bb:ea:30:41:bd:c8:5f:f9:eb:0b:
7f:43:fa:8e:5f:23:bd:4d:bc:68:26:53:63:76:67:18:82:6a:
44:0f:6f:96:b0:df:79:fa:b7:a6:81:04:89:93:63:4b:9b:0d:
63:26:b1:5b:18:91:b4:10:b4:75:cd:6b:1b:fa:65:31:46:98:
e1:23:ef:f4:59:be:0d:6d:f9:92:b3:1a:6f:08:44:14:92:78:
e2:bb:3b:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu/PhXEfhD5us9CiWlZ+hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhY2UxNzZhNjljY2M5Yzk5NmUxNjEwOTI1YzBiNmJkZjc2
YjIwN2MwHhcNMjQwMTAyMTAzMzA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjNhZjJkNWE4ZGU3N2E0YTQyODMzYzYzYTU3NzFkYzdhMGRiNzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwba76xxy14+J6AWz4SoG71oxGGqn
n/VYUvGcCfJ4C3koEyJKhNR2A4Q3a8AbWJKwDLUDjpasS8qkJciesWHmaQKAmbNw
8rUdJiLNrx5pg3vvmbbupTFfwLLYilANws8PA6IP7kWst84uv+cV7uJl2xVG1UJq
1pjXdE/3ToiTQNm07p42qq0Lx2BEHv5H+uvrvIQabIHupd5Vc6eNfEUj4y9fF6/A
AEzB0hjlHeAsZaslzLmwgXBqrmRpyPjx8ay8Fy6xKL3R8cOanVUh6R8EaiKTud9w
Tvasz1wG/fpyYkJ//hne1j0ZlIV/B7Q5HKpLba1n1BI2XKSvIrBR462zpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIY68tWo3nekpCgzxjpXcdx6Dbc3MB8GA1UdIwQY
MBaAFHrOF2ppzMnJluFhCSXAtr33ayB8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQt
YzYxODAzYzM0NjU3LzEvaGpyeTFhamVkNlNrS0RQR09sZHgzSG9OdHpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82YWZjYmUtNmRmMC00Zjc3LWFmMzQtYzYxODAzYzM0NjU3
LzEvZXM0WGFtbk15Y21XNFdFSkpjQzJ2ZmRySUh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcKBMA0G
CSqGSIb3DQEBCwUAA4IBAQBhv8g7Mz7Rc8zloELChcXnV6A2GU6qloAnv479P6A6
SYQZEggYs1C0NhRh2gI21Uk1fqM6DLmZzULXpcl7o/Bhp0wNtwHpN8o1AWB7JsR9
N7FrMlsq0GavKYw58qKnvubCrHu8e/uLJPfGgSR25ktxtnNP3GgsJm7gAEnNrkjC
HeFaFVibuL1x+shNABS/NUT+ZPFLdHtVx+3wK9pOaBd9r9g4q4wu0pOJ5bvqMEG9
yF/56wt/Q/qOXyO9TbxoJlNjdmcYgmpED2+WsN95+remgQSJk2NLmw1jJrFbGJG0
ELR1zWsb+mUxRpjhI+/0Wb4NbfmSsxpvCEQUknjiuzue
-----END CERTIFICATE-----
Generated at Sat Sep 28 21:03:49 2024 by rpki-client on console-ams.rpki-client.org