Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/d_-0kz4dtmk-IEet0yXsm2ww5kg.roa
File: d_-0kz4dtmk-IEet0yXsm2ww5kg.roa (raw, json)
Hash identifier: lWYjK8ht15UsDeKiO1M62oJV7xGkT0+7s+kwy9KI5wk=
Subject key identifier: 77:FF:B4:93:3E:1D:B6:69:3E:20:47:AD:D3:25:EC:9B:6C:30:E6:48
Certificate issuer: /CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Certificate serial: 018CC94BF54EE767B886698ED8BBA02BE7C9
Authority key identifier: 69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/d_-0kz4dtmk-IEet0yXsm2ww5kg.roa
Signing time: Tue 02 Jan 2024 08:30:47 +0000
ROA not before: Tue 02 Jan 2024 08:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204457
IP address blocks: 194.4.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4b:f5:4e:e7:67:b8:86:69:8e:d8:bb:a0:2b:e7:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=690bdb18899afb27fe1ff780516fcc0b93c8b80d
Validity
Not Before: Jan 2 08:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77ffb4933e1db6693e2047add325ec9b6c30e648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c4:e6:ef:61:3e:1e:77:6a:6d:0e:0e:46:b6:
3a:d8:66:40:7d:bd:8b:c3:c0:e7:1d:7a:8b:4a:b4:
57:38:2c:84:43:4d:e0:3d:bb:da:b8:b9:57:41:61:
3a:e7:dc:ae:eb:e6:46:6f:6c:9f:08:ec:c8:9f:99:
e8:51:d3:11:84:91:c6:25:e6:91:0d:b3:2d:49:d3:
ac:14:53:d8:a3:52:dc:85:93:a6:61:9c:ab:cd:8c:
6e:e3:4a:b0:10:ea:2b:45:22:50:1b:2d:d6:8d:68:
65:42:19:2a:57:e1:6d:b7:1a:f5:58:57:79:c1:32:
53:e9:8a:73:c4:14:71:c9:88:e6:66:2f:78:09:20:
19:22:55:2f:af:97:bb:16:32:6d:74:46:78:d3:a4:
7d:b7:70:5c:dd:21:cf:f6:ea:76:fd:46:38:03:70:
8a:31:c4:2d:9b:bf:16:d4:08:e0:d0:ad:bc:d9:a1:
e9:e3:29:05:21:d7:31:0c:b4:ac:6c:d6:95:ba:12:
af:0d:4e:d7:36:e7:73:d6:aa:23:bd:e6:12:57:27:
54:54:d1:12:2c:c4:fd:90:a7:d1:c7:16:d2:d4:04:
06:a8:62:01:e9:8a:89:46:f8:74:7e:2a:09:bd:94:
d1:62:21:db:a1:86:2b:05:99:ac:75:81:f8:39:49:
f7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FF:B4:93:3E:1D:B6:69:3E:20:47:AD:D3:25:EC:9B:6C:30:E6:48
X509v3 Authority Key Identifier:
keyid:69:0B:DB:18:89:9A:FB:27:FE:1F:F7:80:51:6F:CC:0B:93:C8:B8:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aQvbGIma-yf-H_eAUW_MC5PIuA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/d_-0kz4dtmk-IEet0yXsm2ww5kg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/6d8470-4861-416d-a72a-28aded8ddfab/1/aQvbGIma-yf-H_eAUW_MC5PIuA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.4.153.0/24
Signature Algorithm: sha256WithRSAEncryption
17:89:43:ef:8c:bb:71:32:6e:98:fb:5b:c0:98:d7:88:4d:64:
56:0f:fb:ce:e2:32:f5:9b:f4:53:7e:24:ed:f7:fb:02:a1:ed:
cb:02:4e:a1:79:05:bb:2d:49:47:7e:6e:1b:bb:01:9e:65:a7:
20:2e:28:a3:f7:7f:ed:b4:ea:9c:c8:34:de:30:04:9c:2e:c0:
ef:d6:2c:e0:31:7e:a3:43:74:b5:f7:1b:67:b1:01:f4:8b:ae:
0f:1a:2e:07:36:3d:34:1e:99:27:2f:e8:8e:2c:6d:70:e9:4c:
d0:5d:37:61:0e:0c:a4:6a:38:bc:22:cf:aa:21:fa:46:02:97:
00:5b:5c:b5:0b:fd:cb:0f:e1:d4:a4:a0:8f:fb:c4:8a:9f:1e:
f7:75:19:36:b9:15:bf:c7:4d:52:39:cc:e5:1b:ce:ca:09:e6:
3c:56:0d:07:10:17:3b:4d:bd:11:d3:23:83:6c:dc:62:72:f4:
a7:d5:98:73:22:61:81:8f:a8:c6:35:a6:59:f7:f8:51:2b:ba:
f3:d8:ca:d7:2d:51:e7:16:d9:b8:81:89:e3:db:63:b9:62:9d:
cc:c6:f6:52:3c:0e:fa:01:7b:d8:0e:13:d6:8d:81:3c:a1:dc:
37:6c:6d:29:46:4d:6c:eb:f8:8c:ba:72:57:ff:1b:91:7e:08:
a2:5f:f1:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJS/VO52e4hmmO2LugK+fJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5MGJkYjE4ODk5YWZiMjdmZTFmZjc4MDUxNmZjYzBiOTNj
OGI4MGQwHhcNMjQwMTAyMDgzMDQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3N2ZmYjQ5MzNlMWRiNjY5M2UyMDQ3YWRkMzI1ZWM5YjZjMzBlNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sTm72E+HndqbQ4ORrY62GZAfb2L
w8DnHXqLSrRXOCyEQ03gPbvauLlXQWE659yu6+ZGb2yfCOzIn5noUdMRhJHGJeaR
DbMtSdOsFFPYo1LchZOmYZyrzYxu40qwEOorRSJQGy3WjWhlQhkqV+Fttxr1WFd5
wTJT6YpzxBRxyYjmZi94CSAZIlUvr5e7FjJtdEZ406R9t3Bc3SHP9up2/UY4A3CK
McQtm78W1Ajg0K282aHp4ykFIdcxDLSsbNaVuhKvDU7XNudz1qojveYSVydUVNES
LMT9kKfRxxbS1AQGqGIB6YqJRvh0fioJvZTRYiHboYYrBZmsdYH4OUn3BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHf/tJM+HbZpPiBHrdMl7JtsMOZIMB8GA1UdIwQY
MBaAFGkL2xiJmvsn/h/3gFFvzAuTyLgNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS82ZDg0NzAtNDg2MS00MTZkLWE3MmEt
MjhhZGVkOGRkZmFiLzEvZF8tMGt6NGR0bWstSUVldDB5WHNtMnd3NWtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS82ZDg0NzAtNDg2MS00MTZkLWE3MmEtMjhhZGVkOGRkZmFi
LzEvYVF2YkdJbWEteWYtSF9lQVVXX01DNVBJdUEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgSZMA0G
CSqGSIb3DQEBCwUAA4IBAQAXiUPvjLtxMm6Y+1vAmNeITWRWD/vO4jL1m/RTfiTt
9/sCoe3LAk6heQW7LUlHfm4buwGeZacgLiij93/ttOqcyDTeMAScLsDv1izgMX6j
Q3S19xtnsQH0i64PGi4HNj00HpknL+iOLG1w6UzQXTdhDgykaji8Is+qIfpGApcA
W1y1C/3LD+HUpKCP+8SKnx73dRk2uRW/x01SOczlG87KCeY8Vg0HEBc7Tb0R0yOD
bNxicvSn1ZhzImGBj6jGNaZZ9/hRK7rz2MrXLVHnFtm4gYnj22O5Yp3MxvZSPA76
AXvYDhPWjYE8odw3bG0pRk1s6/iMunJX/xuRfgiiX/Ho
-----END CERTIFICATE-----
Generated at Wed May 29 09:36:33 2024 by rpki-client on console-fra.rpki-client.org