Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/0Wv7XL5WfDc1N4pM80871SHgBFc.roa
File: 0Wv7XL5WfDc1N4pM80871SHgBFc.roa (raw, json)
Hash identifier: qBpljn3ggGBpB0bAB+5qP/kGDThBp54BDxhp0Ix7H6U=
Subject key identifier: D1:6B:FB:5C:BE:56:7C:37:35:37:8A:4C:F3:4F:3B:D5:21:E0:04:57
Certificate issuer: /CN=efa70cb849e3837451bd79af7dc7e035963e6043
Certificate serial: 018CC6B9384B2AB506D10BBC8AD7DFAE7D89
Authority key identifier: EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/0Wv7XL5WfDc1N4pM80871SHgBFc.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33911
IP address blocks: 193.202.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 16:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:38:4b:2a:b5:06:d1:0b:bc:8a:d7:df:ae:7d:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa70cb849e3837451bd79af7dc7e035963e6043
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d16bfb5cbe567c3735378a4cf34f3bd521e00457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:68:b1:f4:a8:9f:6c:51:09:c4:12:7f:e6:
75:00:f6:bd:9f:40:df:ee:1d:21:cb:b5:41:07:d9:
e2:07:73:57:72:ec:81:b5:07:44:cd:1c:30:c8:5a:
4f:88:f9:3f:50:a6:dd:cb:66:17:83:da:06:07:05:
87:ab:4d:05:06:b5:6d:3c:e2:c3:53:73:f9:8e:58:
79:49:b7:3f:7c:1b:15:8a:bc:f9:02:d8:0c:bc:a5:
99:b5:39:fc:d1:92:a3:12:63:44:53:5a:bb:06:7e:
b7:70:9b:ac:14:5f:07:11:eb:b8:1f:56:b0:30:d7:
f5:c1:65:2e:5d:a1:29:86:a5:7f:16:a6:80:05:07:
c5:68:1f:8f:33:44:1d:a5:05:73:3a:2e:2c:4b:c3:
5e:ac:61:e5:b9:5f:f3:1a:28:dc:61:e5:b5:5d:7d:
25:02:1e:59:02:e8:b6:3f:5d:3d:ef:7e:62:ae:47:
43:dc:00:bb:af:34:42:18:45:3e:78:d6:13:e6:b7:
6a:3b:92:07:83:5c:14:f3:93:f7:de:eb:3d:8c:04:
e1:c4:78:6c:7c:91:63:d3:4d:20:76:8f:61:7b:be:
9d:89:25:c5:77:a5:29:06:80:b4:88:63:fe:57:f4:
ea:b3:6e:6e:7a:16:d9:8d:11:e7:4f:d7:12:92:e6:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6B:FB:5C:BE:56:7C:37:35:37:8A:4C:F3:4F:3B:D5:21:E0:04:57
X509v3 Authority Key Identifier:
keyid:EF:A7:0C:B8:49:E3:83:74:51:BD:79:AF:7D:C7:E0:35:96:3E:60:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76cMuEnjg3RRvXmvfcfgNZY-YEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/0Wv7XL5WfDc1N4pM80871SHgBFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/692b1e-c9fe-43e0-b722-53a60480761d/1/76cMuEnjg3RRvXmvfcfgNZY-YEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.126.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e4:4e:5c:66:b8:2f:1b:da:bf:23:74:19:a2:d0:e2:63:8b:
ac:23:05:e0:4d:11:54:11:ef:06:5a:c4:2e:62:c1:ef:9d:16:
13:a6:e6:a8:94:19:d4:ef:86:cb:6a:85:72:fa:c0:6e:5a:a7:
f8:d6:a8:c1:b9:1e:23:57:36:18:d8:28:73:f9:c6:ff:ae:df:
f3:6f:8d:8d:f5:a9:06:50:f3:b0:96:4c:98:a5:60:e5:dc:34:
90:d1:f4:e8:f6:d5:ad:77:56:a0:90:21:7f:e6:4f:a2:8e:c5:
b7:dc:70:6e:4e:d8:97:46:a5:d4:52:62:88:e1:9c:f2:c7:dd:
05:3f:aa:19:71:62:52:dd:bb:a1:6e:f9:1c:b0:35:7b:bc:32:
7a:ba:1b:d9:bb:65:b2:22:72:0e:42:6d:01:89:63:1d:96:f9:
30:bf:36:6a:36:c1:20:9a:a1:b2:9d:e1:74:38:b8:e5:6a:e4:
bc:67:7e:46:3b:56:be:58:53:13:42:d6:b8:cf:96:a9:ed:06:
a2:b1:ff:18:c8:17:ad:06:56:6c:61:3d:f8:56:58:54:9c:04:
1c:05:b1:18:c9:15:d7:5f:3d:63:c9:82:b9:f4:ba:57:78:b3:
85:9b:3b:cf:b1:b2:5f:ab:e3:dc:39:5e:d1:01:57:cd:05:c1:
2a:9c:3a:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuThLKrUG0Qu8itffrn2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTcwY2I4NDllMzgzNzQ1MWJkNzlhZjdkYzdlMDM1OTYz
ZTYwNDMwHhcNMjQwMTAxMjAzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTZiZmI1Y2JlNTY3YzM3MzUzNzhhNGNmMzRmM2JkNTIxZTAwNDU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwARosfSon2xRCcQSf+Z1APa9n0Df
7h0hy7VBB9niB3NXcuyBtQdEzRwwyFpPiPk/UKbdy2YXg9oGBwWHq00FBrVtPOLD
U3P5jlh5Sbc/fBsVirz5AtgMvKWZtTn80ZKjEmNEU1q7Bn63cJusFF8HEeu4H1aw
MNf1wWUuXaEphqV/FqaABQfFaB+PM0QdpQVzOi4sS8NerGHluV/zGijcYeW1XX0l
Ah5ZAui2P109735irkdD3AC7rzRCGEU+eNYT5rdqO5IHg1wU85P33us9jAThxHhs
fJFj000gdo9he76diSXFd6UpBoC0iGP+V/Tqs25uehbZjRHnT9cSkubjZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNFr+1y+Vnw3NTeKTPNPO9Uh4ARXMB8GA1UdIwQY
MBaAFO+nDLhJ44N0Ub15r33H4DWWPmBDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjIt
NTNhNjA0ODA3NjFkLzEvMFd2N1hMNVdmRGMxTjRwTTgwODcxU0hnQkZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82OTJiMWUtYzlmZS00M2UwLWI3MjItNTNhNjA0ODA3NjFk
LzEvNzZjTXVFbmpnM1JSdlhtdmZjZmdOWlktWUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcp+MA0G
CSqGSIb3DQEBCwUAA4IBAQB+5E5cZrgvG9q/I3QZotDiY4usIwXgTRFUEe8GWsQu
YsHvnRYTpuaolBnU74bLaoVy+sBuWqf41qjBuR4jVzYY2Chz+cb/rt/zb42N9akG
UPOwlkyYpWDl3DSQ0fTo9tWtd1agkCF/5k+ijsW33HBuTtiXRqXUUmKI4Zzyx90F
P6oZcWJS3buhbvkcsDV7vDJ6uhvZu2WyInIOQm0BiWMdlvkwvzZqNsEgmqGyneF0
OLjlauS8Z35GO1a+WFMTQta4z5ap7Qaisf8YyBetBlZsYT34VlhUnAQcBbEYyRXX
Xz1jyYK59LpXeLOFmzvPsbJfq+PcOV7RAVfNBcEqnDqP
-----END CERTIFICATE-----
Generated at Thu May 23 22:38:29 2024 by rpki-client on console-ams.rpki-client.org