Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/XAvMo6I_DhMbgLrZcYhwv5p3EIQ.roa
File: XAvMo6I_DhMbgLrZcYhwv5p3EIQ.roa (raw, json)
Hash identifier: zV484u1O+8m2nh8UNbMuX7p4my9l624vf6S9XpVIxrI=
Subject key identifier: 5C:0B:CC:A3:A2:3F:0E:13:1B:80:BA:D9:71:88:70:BF:9A:77:10:84
Certificate issuer: /CN=afa929be73491acd99d590372a52b815fa1f23f5
Certificate serial: 018CC2DB09DFD21100595696DDE10019D9AA
Authority key identifier: AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/XAvMo6I_DhMbgLrZcYhwv5p3EIQ.roa
Signing time: Mon 01 Jan 2024 02:29:43 +0000
ROA not before: Mon 01 Jan 2024 02:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48437
IP address blocks: 94.232.176.0/21 maxlen: 21
178.54.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:09:df:d2:11:00:59:56:96:dd:e1:00:19:d9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa929be73491acd99d590372a52b815fa1f23f5
Validity
Not Before: Jan 1 02:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c0bcca3a23f0e131b80bad9718870bf9a771084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fb:a7:29:9e:f4:27:94:f8:d0:26:20:30:f5:
7d:69:29:77:97:dc:a8:e7:ec:b7:71:7d:25:f6:04:
13:99:da:1d:30:49:73:ac:95:22:53:8c:50:2b:f9:
88:bd:dd:96:18:c1:df:2e:f0:dc:f7:eb:0f:f2:d0:
e6:bc:40:f0:1b:60:5e:48:bf:6a:5e:1e:f0:8e:7f:
2f:2a:aa:26:98:e0:77:fd:40:07:51:6b:95:ca:bd:
a9:4d:c5:02:d6:f5:05:2e:63:0a:db:55:58:42:2f:
d5:8a:a3:ed:44:66:d8:f4:18:e6:0b:3f:4e:81:3d:
41:7a:18:4e:5b:3c:4b:0b:05:30:9b:3c:61:e2:3f:
d0:71:bc:67:35:b9:9d:18:07:9e:66:80:b3:20:12:
ce:9c:ae:5e:67:65:9d:28:f6:f1:12:d1:8f:e4:bc:
b4:b2:2f:6b:af:c2:3b:3e:20:2f:68:17:47:be:d8:
8d:e3:93:38:29:11:41:b0:74:29:6a:73:63:50:aa:
68:c7:ff:33:0b:eb:83:42:fb:40:52:01:2d:af:3d:
18:68:32:23:4d:f8:23:a3:26:5e:d8:d2:ce:c8:0f:
e1:7a:ea:40:11:4c:b6:92:9c:34:e5:2d:b6:82:9a:
7b:df:61:89:78:f0:78:b8:32:d5:67:1e:b0:16:1a:
27:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0B:CC:A3:A2:3F:0E:13:1B:80:BA:D9:71:88:70:BF:9A:77:10:84
X509v3 Authority Key Identifier:
keyid:AF:A9:29:BE:73:49:1A:CD:99:D5:90:37:2A:52:B8:15:FA:1F:23:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/XAvMo6I_DhMbgLrZcYhwv5p3EIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/2694f8-fa1f-4c81-8312-3b6f1bdf412a/1/r6kpvnNJGs2Z1ZA3KlK4FfofI_U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.232.176.0/21
178.54.128.0/17
Signature Algorithm: sha256WithRSAEncryption
49:e9:f2:9a:27:55:f9:ec:b2:f6:74:28:54:ce:73:30:5d:8c:
1e:c2:88:4c:9f:de:4f:29:6c:aa:a2:e6:ea:d7:72:f4:76:fd:
b1:0d:7e:08:67:5e:0d:68:6b:dc:aa:47:04:c1:bf:12:5d:af:
24:dc:1c:e8:3d:79:4a:20:0f:4d:bb:c5:91:27:7d:bb:f7:3b:
be:de:51:b4:41:73:14:aa:56:2f:d5:d9:88:ae:df:68:fe:24:
74:2b:01:49:a4:ec:6a:0c:9f:6b:33:b9:f5:22:da:14:54:0d:
92:4f:23:be:f7:e6:04:2b:79:87:12:71:d5:1a:c3:03:9d:f3:
a5:11:f3:0e:9e:98:58:35:a3:67:54:79:f6:66:03:c6:40:12:
13:47:47:f7:3f:f3:26:df:7e:7d:cd:6c:d4:42:24:5a:d6:2d:
9e:1c:49:85:4b:8c:2f:00:a0:9f:db:53:ef:a6:ad:98:c7:f8:
26:86:f7:57:bb:56:26:fe:bb:fc:1c:cf:66:65:ee:1b:f4:3b:
02:67:8c:3e:31:49:d1:3c:d9:ad:45:fd:56:19:79:14:2b:70:
9b:08:4d:ab:d6:d2:fa:36:47:2e:e3:41:9c:d2:e8:5b:c8:96:
e5:04:c6:cf:5d:64:aa:16:f5:4c:07:79:43:af:9c:d3:a7:a0:
f5:be:bf:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzC2wnf0hEAWVaW3eEAGdmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTkyOWJlNzM0OTFhY2Q5OWQ1OTAzNzJhNTJiODE1ZmEx
ZjIzZjUwHhcNMjQwMTAxMDIyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1YzBiY2NhM2EyM2YwZTEzMWI4MGJhZDk3MTg4NzBiZjlhNzcxMDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvunKZ70J5T40CYgMPV9aSl3l9yo
5+y3cX0l9gQTmdodMElzrJUiU4xQK/mIvd2WGMHfLvDc9+sP8tDmvEDwG2BeSL9q
Xh7wjn8vKqommOB3/UAHUWuVyr2pTcUC1vUFLmMK21VYQi/ViqPtRGbY9BjmCz9O
gT1BehhOWzxLCwUwmzxh4j/QcbxnNbmdGAeeZoCzIBLOnK5eZ2WdKPbxEtGP5Ly0
si9rr8I7PiAvaBdHvtiN45M4KRFBsHQpanNjUKpox/8zC+uDQvtAUgEtrz0YaDIj
TfgjoyZe2NLOyA/heupAEUy2kpw05S22gpp732GJePB4uDLVZx6wFhon7wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFwLzKOiPw4TG4C62XGIcL+adxCEMB8GA1UdIwQY
MBaAFK+pKb5zSRrNmdWQNypSuBX6HyP1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTIt
M2I2ZjFiZGY0MTJhLzEvWEF2TW82SV9EaE1iZ0xyWmNZaHd2NXAzRUlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8yNjk0ZjgtZmExZi00YzgxLTgzMTItM2I2ZjFiZGY0MTJh
LzEvcjZrcHZuTkpHczJaMVpBM0tsSzRGZm9mSV9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDXuiwAwQH
sjaAMA0GCSqGSIb3DQEBCwUAA4IBAQBJ6fKaJ1X57LL2dChUznMwXYwewohMn95P
KWyqoubq13L0dv2xDX4IZ14NaGvcqkcEwb8SXa8k3BzoPXlKIA9Nu8WRJ3279zu+
3lG0QXMUqlYv1dmIrt9o/iR0KwFJpOxqDJ9rM7n1ItoUVA2STyO+9+YEK3mHEnHV
GsMDnfOlEfMOnphYNaNnVHn2ZgPGQBITR0f3P/Mm3359zWzUQiRa1i2eHEmFS4wv
AKCf21Pvpq2Yx/gmhvdXu1Ym/rv8HM9mZe4b9DsCZ4w+MUnRPNmtRf1WGXkUK3Cb
CE2r1tL6Nkcu40Gc0uhbyJblBMbPXWSqFvVMB3lDr5zTp6D1vr+d
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:41:47 2024 by rpki-client on console-fra.rpki-client.org