Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/chf3gdi3tl-MS4VZ7ObA4zGCGgg.roa
File: chf3gdi3tl-MS4VZ7ObA4zGCGgg.roa (raw, json)
Hash identifier: sxJs5OhVzpeWdn6uT/lTHJ/e6+4PkKIC2xqmdYUez8g=
Subject key identifier: 72:17:F7:81:D8:B7:B6:5F:8C:4B:85:59:EC:E6:C0:E3:31:82:1A:08
Certificate issuer: /CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Certificate serial: 018CC5002D513788AE588FDC7DD04F44C78C
Authority key identifier: 2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/chf3gdi3tl-MS4VZ7ObA4zGCGgg.roa
Signing time: Mon 01 Jan 2024 12:29:32 +0000
ROA not before: Mon 01 Jan 2024 12:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42630
IP address blocks: 193.200.58.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Jun 2024 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:2d:51:37:88:ae:58:8f:dc:7d:d0:4f:44:c7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ec121e1545df3e5bb86e9188f2825fad7477f75
Validity
Not Before: Jan 1 12:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7217f781d8b7b65f8c4b8559ece6c0e331821a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9c:63:15:17:47:da:a8:65:a0:60:0f:06:b5:
e8:f8:fb:d5:1f:93:30:54:7d:43:4e:1d:37:d2:48:
99:ce:ce:4c:24:64:77:2e:bc:f8:71:ed:97:53:a3:
89:21:05:3b:29:90:8f:63:ad:61:a6:cc:b6:23:64:
59:7e:71:d2:a4:b3:86:93:ad:f9:3d:c6:7a:a8:58:
43:df:85:17:68:c2:81:c0:33:43:22:87:d0:12:41:
02:7b:30:3e:c8:38:7d:6f:66:26:9e:27:f6:a9:00:
c2:59:07:d5:82:0a:0b:b0:57:09:1c:61:ce:4b:3c:
6a:5a:18:67:78:a5:ff:9d:67:ee:cb:16:74:7f:ca:
dd:80:3a:63:49:41:51:56:bf:19:9f:ce:c9:05:82:
42:07:af:9d:c6:72:af:3a:bb:c9:b2:f3:c5:5b:44:
ea:a3:e1:c9:b4:dd:35:8c:cd:bc:d1:fb:e1:2e:fc:
d1:80:da:4e:5a:86:ea:0c:b2:4e:42:27:ab:83:79:
5d:63:0f:a9:0f:af:24:45:e7:32:a5:1f:8d:0c:ba:
a1:28:96:6f:6f:28:b6:1e:22:71:b9:a3:31:d0:b3:
50:b1:4b:ce:40:21:3b:34:fe:4d:05:ba:9a:dd:a4:
6a:6c:5f:ea:13:e4:2b:5c:77:cb:9d:b8:68:a9:ba:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:17:F7:81:D8:B7:B6:5F:8C:4B:85:59:EC:E6:C0:E3:31:82:1A:08
X509v3 Authority Key Identifier:
keyid:2E:C1:21:E1:54:5D:F3:E5:BB:86:E9:18:8F:28:25:FA:D7:47:7F:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LsEh4VRd8-W7hukYjygl-tdHf3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/chf3gdi3tl-MS4VZ7ObA4zGCGgg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1ed27c-2d8c-4080-a458-9f522a284595/1/LsEh4VRd8-W7hukYjygl-tdHf3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.58.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:db:45:37:0a:a5:5b:84:72:35:14:61:4d:19:a2:a8:25:73:
2f:8b:fe:68:e6:74:41:22:4e:e9:52:e7:d5:37:b1:e4:14:b0:
8e:46:52:d1:c8:33:e6:74:2b:c2:1e:ba:81:49:19:aa:12:c6:
66:b5:a2:e4:3b:4d:5e:5b:e2:8a:31:0d:87:80:00:84:10:d7:
c5:cc:16:ed:ea:c8:41:49:48:ef:ff:03:c5:e7:0e:03:04:bd:
2a:00:50:03:25:d0:ad:09:63:2d:0b:b8:95:5b:c0:fc:69:4e:
55:ae:6b:63:06:7d:ac:d8:f0:83:88:e3:c5:12:da:2d:b0:34:
20:2d:b4:57:61:98:57:f4:f8:cc:22:36:3d:07:07:a6:af:c0:
a8:9e:d4:a9:6e:48:c4:58:ec:a9:15:f9:9b:a7:91:64:6e:26:
b5:b4:4d:db:97:49:05:cc:b4:22:cf:37:46:3f:51:51:8c:a5:
08:24:bc:b1:e6:8a:0e:2e:d1:36:48:e0:c1:ff:cb:72:8e:8f:
79:fc:c7:1f:82:96:1a:a1:71:d6:01:31:61:94:d8:cd:6c:54:
7b:44:e7:19:aa:68:cb:32:09:31:10:83:67:9b:50:5e:50:17:
6b:83:d2:2c:12:58:b5:35:f6:3b:b2:30:a9:99:b1:b2:67:99:
49:27:98:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFAC1RN4iuWI/cfdBPRMeMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlYzEyMWUxNTQ1ZGYzZTViYjg2ZTkxODhmMjgyNWZhZDc0
NzdmNzUwHhcNMjQwMTAxMTIyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjE3Zjc4MWQ4YjdiNjVmOGM0Yjg1NTllY2U2YzBlMzMxODIxYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JxjFRdH2qhloGAPBrXo+PvVH5Mw
VH1DTh030kiZzs5MJGR3Lrz4ce2XU6OJIQU7KZCPY61hpsy2I2RZfnHSpLOGk635
PcZ6qFhD34UXaMKBwDNDIofQEkECezA+yDh9b2Ymnif2qQDCWQfVggoLsFcJHGHO
SzxqWhhneKX/nWfuyxZ0f8rdgDpjSUFRVr8Zn87JBYJCB6+dxnKvOrvJsvPFW0Tq
o+HJtN01jM280fvhLvzRgNpOWobqDLJOQierg3ldYw+pD68kRecypR+NDLqhKJZv
byi2HiJxuaMx0LNQsUvOQCE7NP5NBbqa3aRqbF/qE+QrXHfLnbhoqboxmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHIX94HYt7ZfjEuFWezmwOMxghoIMB8GA1UdIwQY
MBaAFC7BIeFUXfPlu4bpGI8oJfrXR391MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgt
OWY1MjJhMjg0NTk1LzEvY2hmM2dkaTN0bC1NUzRWWjdPYkE0ekdDR2dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8xZWQyN2MtMmQ4Yy00MDgwLWE0NTgtOWY1MjJhMjg0NTk1
LzEvTHNFaDRWUmQ4LVc3aHVrWWp5Z2wtdGRIZjNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcg6MA0G
CSqGSIb3DQEBCwUAA4IBAQBu20U3CqVbhHI1FGFNGaKoJXMvi/5o5nRBIk7pUufV
N7HkFLCORlLRyDPmdCvCHrqBSRmqEsZmtaLkO01eW+KKMQ2HgACEENfFzBbt6shB
SUjv/wPF5w4DBL0qAFADJdCtCWMtC7iVW8D8aU5VrmtjBn2s2PCDiOPFEtotsDQg
LbRXYZhX9PjMIjY9Bwemr8ContSpbkjEWOypFfmbp5Fkbia1tE3bl0kFzLQizzdG
P1FRjKUIJLyx5ooOLtE2SODB/8tyjo95/McfgpYaoXHWATFhlNjNbFR7ROcZqmjL
MgkxEINnm1BeUBdrg9IsEli1NfY7sjCpmbGyZ5lJJ5iV
-----END CERTIFICATE-----
Generated at Wed Jun 19 19:15:24 2024 by rpki-client on console-fra.rpki-client.org