Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/SGqi1LdCbx1hltfr75hZYsD3PVs.roa
File: SGqi1LdCbx1hltfr75hZYsD3PVs.roa (raw, json)
Hash identifier: QvZXlYDsctapMW9L+Dl4y3RUXAOsGF206wEzZPhWRoo=
Subject key identifier: 48:6A:A2:D4:B7:42:6F:1D:61:96:D7:EB:EF:98:59:62:C0:F7:3D:5B
Certificate issuer: /CN=670ec53068393d90db601ec295e42908525e10c2
Certificate serial: 018CC26D082EA51538FA837E07277BD542A9
Authority key identifier: 67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/SGqi1LdCbx1hltfr75hZYsD3PVs.roa
Signing time: Mon 01 Jan 2024 00:29:34 +0000
ROA not before: Mon 01 Jan 2024 00:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30781
IP address blocks: 193.0.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:08:2e:a5:15:38:fa:83:7e:07:27:7b:d5:42:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=670ec53068393d90db601ec295e42908525e10c2
Validity
Not Before: Jan 1 00:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=486aa2d4b7426f1d6196d7ebef985962c0f73d5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:74:2a:40:95:12:4e:d4:cd:0e:1b:0c:ea:08:
56:5c:95:64:11:6d:9b:12:1d:4f:ea:8c:96:dd:b8:
c3:75:e1:54:3b:69:4b:09:60:98:17:0f:b7:45:d6:
f6:6c:69:ab:b2:f0:7a:35:dc:f8:b4:57:d0:ea:c3:
20:8d:c0:e2:e5:35:04:a2:4d:c5:36:c2:a9:d7:53:
f2:fc:61:c5:1a:0c:b7:a8:b5:e2:07:48:65:34:26:
37:1d:73:9c:10:cc:d6:e4:7b:00:56:8a:2f:72:a8:
04:a1:0e:50:2a:2d:73:58:14:3c:65:81:e7:27:06:
c2:10:8f:c7:e3:00:28:28:04:52:c7:2a:ef:88:91:
19:f5:40:cc:65:fd:c6:de:76:7b:41:07:22:ab:b1:
89:6d:96:c2:45:de:98:8e:c0:29:2c:95:b7:cd:d4:
fa:ce:bd:25:b1:df:a5:c0:42:0c:97:12:ad:82:5e:
c6:4a:6e:78:0f:c4:83:0d:bd:a4:7e:02:62:f9:bd:
a6:81:4c:0f:62:46:6c:b5:26:05:eb:31:09:1d:e6:
e0:a3:72:4f:53:ea:7a:26:07:5c:a3:ff:66:fe:44:
c9:a2:38:c9:f9:27:8a:70:dc:3d:aa:7c:6f:21:4f:
6b:4f:9c:68:5d:a4:f6:75:4b:45:f9:10:72:dd:3b:
e8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6A:A2:D4:B7:42:6F:1D:61:96:D7:EB:EF:98:59:62:C0:F7:3D:5B
X509v3 Authority Key Identifier:
keyid:67:0E:C5:30:68:39:3D:90:DB:60:1E:C2:95:E4:29:08:52:5E:10:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zw7FMGg5PZDbYB7CleQpCFJeEMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/SGqi1LdCbx1hltfr75hZYsD3PVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c424d1-27fd-4f47-bb71-73d218a4903e/1/Zw7FMGg5PZDbYB7CleQpCFJeEMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.159.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:bc:61:7d:f0:31:4c:13:0b:37:b6:83:4e:ca:81:75:94:96:
92:02:f5:b3:b1:c8:2c:93:1d:57:ff:7d:12:c5:9a:50:4d:76:
02:b8:3a:3d:d7:49:86:62:f0:03:75:e5:30:52:c1:24:2a:b4:
9b:d7:ae:bc:33:40:df:69:ca:1c:e8:fc:db:60:a0:dd:4c:fd:
24:e8:56:67:66:ee:43:d3:99:99:3c:f6:b0:3c:ad:25:3d:73:
e3:fd:46:8d:00:f2:53:6a:59:de:98:5d:80:5d:b8:40:ed:80:
8e:c4:11:dc:59:ad:b1:61:8a:d2:04:c4:24:1b:a0:2c:8f:bb:
57:35:9a:eb:66:c0:fa:c4:d9:76:81:06:60:b4:3a:54:4d:2d:
fa:1b:ab:ff:19:43:8d:c2:ba:d6:3c:e2:c7:5b:2a:62:20:8d:
dc:6a:7d:62:af:63:1e:e7:87:92:b3:f0:9b:42:99:92:42:2f:
38:8b:c6:04:82:82:5f:ce:75:58:e1:dd:30:3d:1d:db:1e:be:
d0:e2:26:83:80:de:e9:bf:d4:60:e4:1a:05:0c:a9:50:6a:e9:
c4:6f:d1:de:c0:e4:4e:1b:9a:a0:ae:a8:39:ea:73:fe:dd:33:
8c:eb:45:ea:82:13:37:c8:fe:fa:42:aa:7b:21:50:6e:6e:3c:
b0:67:f5:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbQgupRU4+oN+Byd71UKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3MGVjNTMwNjgzOTNkOTBkYjYwMWVjMjk1ZTQyOTA4NTI1
ZTEwYzIwHhcNMjQwMTAxMDAyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODZhYTJkNGI3NDI2ZjFkNjE5NmQ3ZWJlZjk4NTk2MmMwZjczZDViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnQqQJUSTtTNDhsM6ghWXJVkEW2b
Eh1P6oyW3bjDdeFUO2lLCWCYFw+3Rdb2bGmrsvB6Ndz4tFfQ6sMgjcDi5TUEok3F
NsKp11Py/GHFGgy3qLXiB0hlNCY3HXOcEMzW5HsAVoovcqgEoQ5QKi1zWBQ8ZYHn
JwbCEI/H4wAoKARSxyrviJEZ9UDMZf3G3nZ7QQciq7GJbZbCRd6YjsApLJW3zdT6
zr0lsd+lwEIMlxKtgl7GSm54D8SDDb2kfgJi+b2mgUwPYkZstSYF6zEJHebgo3JP
U+p6Jgdco/9m/kTJojjJ+SeKcNw9qnxvIU9rT5xoXaT2dUtF+RBy3Tvo3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEhqotS3Qm8dYZbX6++YWWLA9z1bMB8GA1UdIwQY
MBaAFGcOxTBoOT2Q22AewpXkKQhSXhDCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEt
NzNkMjE4YTQ5MDNlLzEvU0dxaTFMZENieDFobHRmcjc1aFpZc0QzUFZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9jNDI0ZDEtMjdmZC00ZjQ3LWJiNzEtNzNkMjE4YTQ5MDNl
LzEvWnc3Rk1HZzVQWkRiWUI3Q2xlUXBDRkplRU1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQCfMA0G
CSqGSIb3DQEBCwUAA4IBAQA/vGF98DFMEws3toNOyoF1lJaSAvWzscgskx1X/30S
xZpQTXYCuDo910mGYvADdeUwUsEkKrSb1668M0Dfacoc6PzbYKDdTP0k6FZnZu5D
05mZPPawPK0lPXPj/UaNAPJTalnemF2AXbhA7YCOxBHcWa2xYYrSBMQkG6Asj7tX
NZrrZsD6xNl2gQZgtDpUTS36G6v/GUONwrrWPOLHWypiII3can1ir2Me54eSs/Cb
QpmSQi84i8YEgoJfznVY4d0wPR3bHr7Q4iaDgN7pv9Rg5BoFDKlQaunEb9HewORO
G5qgrqg56nP+3TOM60XqghM3yP76Qqp7IVBubjywZ/Vt
-----END CERTIFICATE-----
Generated at Fri Sep 20 21:13:02 2024 by rpki-client on console-ams.rpki-client.org