Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/RxvKyY-RVI4y4Y55lf1hj0l0Zas.roa
File: RxvKyY-RVI4y4Y55lf1hj0l0Zas.roa (raw, json)
Hash identifier: zFf9NTD2Oe6toXAll7Tpa7QnHa4sK4QjGazG14WkQj0=
Subject key identifier: 47:1B:CA:C9:8F:91:54:8E:32:E1:8E:79:95:FD:61:8F:49:74:65:AB
Certificate issuer: /CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Certificate serial: 018CC42562C0E7CCC749C5CDEC2412705663
Authority key identifier: CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/RxvKyY-RVI4y4Y55lf1hj0l0Zas.roa
Signing time: Mon 01 Jan 2024 08:30:33 +0000
ROA not before: Mon 01 Jan 2024 08:30:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39748
IP address blocks: 193.93.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:62:c0:e7:cc:c7:49:c5:cd:ec:24:12:70:56:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd0cc7fd8898b0f7df4b9df0b99319bcb29ec243
Validity
Not Before: Jan 1 08:30:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=471bcac98f91548e32e18e7995fd618f497465ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:1f:86:2f:70:b5:f0:b7:d4:95:60:56:4c:f2:
4f:5c:2b:3c:c4:fa:03:07:38:96:c4:03:8f:68:97:
ae:ee:a6:4a:ab:71:b3:a2:97:22:4d:f4:b4:e8:cd:
a8:1c:94:33:bf:37:51:b6:6c:fe:bb:12:8b:52:74:
4f:9e:5b:7c:f6:70:34:b8:03:84:22:10:46:94:98:
38:9d:c8:1e:94:6c:38:3b:04:18:25:a5:3e:e4:27:
c1:0d:ab:d9:a9:b1:29:3a:ac:17:ed:e0:8f:ab:79:
9b:90:0c:36:ba:66:e2:c9:06:cb:12:44:dc:e9:c2:
9c:5c:cd:9f:69:28:20:f0:7e:aa:93:d5:c8:14:14:
05:e4:ea:d4:a7:f8:10:98:45:f7:43:79:70:dc:ff:
b7:40:b2:71:90:45:6f:35:2f:5e:14:86:1b:2b:49:
6d:c2:5d:c5:46:f6:bf:57:3b:b7:25:2c:8a:a6:e6:
1b:ba:16:ab:e1:6e:e7:48:74:e4:e6:1c:2e:b5:c3:
ef:9a:df:f3:f5:5e:0a:3e:07:8d:a2:37:10:a7:fc:
6c:7b:1b:32:29:2a:45:0b:02:38:b9:83:5e:bb:81:
c4:e3:d5:38:95:d4:01:09:b6:00:52:bf:f9:65:3c:
4d:ef:6a:ff:37:10:cb:9a:38:47:48:91:7b:5e:08:
75:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:1B:CA:C9:8F:91:54:8E:32:E1:8E:79:95:FD:61:8F:49:74:65:AB
X509v3 Authority Key Identifier:
keyid:CD:0C:C7:FD:88:98:B0:F7:DF:4B:9D:F0:B9:93:19:BC:B2:9E:C2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zQzH_YiYsPffS53wuZMZvLKewkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/RxvKyY-RVI4y4Y55lf1hj0l0Zas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/299fe7-9ab7-473a-b62a-ab063938f1ce/1/zQzH_YiYsPffS53wuZMZvLKewkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.93.188.0/22
Signature Algorithm: sha256WithRSAEncryption
10:e8:22:72:79:fa:3e:b5:f7:e4:b6:d4:3a:0b:64:82:cf:b8:
50:11:b1:28:b5:cd:13:10:32:3f:69:e0:71:c9:85:69:ee:95:
63:46:30:5a:86:59:a5:5b:58:88:89:f2:0f:e0:73:ed:5c:ac:
77:e5:a8:57:30:e2:10:7c:cb:12:2b:b3:84:b9:1c:f0:1f:01:
b0:d5:6a:96:35:37:24:d0:ad:89:f9:0d:06:c1:26:6c:5a:72:
f0:5d:23:0b:2f:e4:5c:28:b2:c5:51:f9:4c:bd:72:f8:9f:0d:
3a:4f:e6:c8:5f:e5:f8:7b:c9:32:2f:a7:ac:7e:49:ae:3e:62:
62:a3:32:ae:4c:da:44:db:54:ea:0d:e5:85:3b:69:96:01:15:
44:1b:a4:16:0d:d5:6d:78:d1:9d:c2:3a:4d:2f:34:cf:9c:cb:
ca:d2:8d:95:70:77:4c:e6:41:96:4d:88:bc:72:2f:2f:2d:d8:
14:e5:f4:93:07:71:89:a6:32:62:da:84:6b:32:7b:e6:30:66:
8f:c7:f3:05:70:51:33:e6:a3:15:2a:e1:b9:f9:78:46:2d:43:
df:71:5d:55:48:a5:27:81:32:be:54:28:63:68:51:ab:6a:57:
f9:d7:46:8b:9a:32:1b:e1:a8:bf:7d:e1:64:10:3b:d7:f7:40:
f2:98:81:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJWLA58zHScXN7CQScFZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkMGNjN2ZkODg5OGIwZjdkZjRiOWRmMGI5OTMxOWJjYjI5
ZWMyNDMwHhcNMjQwMTAxMDgzMDMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NzFiY2FjOThmOTE1NDhlMzJlMThlNzk5NWZkNjE4ZjQ5NzQ2NWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoh+GL3C18LfUlWBWTPJPXCs8xPoD
BziWxAOPaJeu7qZKq3GzopciTfS06M2oHJQzvzdRtmz+uxKLUnRPnlt89nA0uAOE
IhBGlJg4ncgelGw4OwQYJaU+5CfBDavZqbEpOqwX7eCPq3mbkAw2umbiyQbLEkTc
6cKcXM2faSgg8H6qk9XIFBQF5OrUp/gQmEX3Q3lw3P+3QLJxkEVvNS9eFIYbK0lt
wl3FRva/Vzu3JSyKpuYbuhar4W7nSHTk5hwutcPvmt/z9V4KPgeNojcQp/xsexsy
KSpFCwI4uYNeu4HE49U4ldQBCbYAUr/5ZTxN72r/NxDLmjhHSJF7Xgh1TQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEcbysmPkVSOMuGOeZX9YY9JdGWrMB8GA1UdIwQY
MBaAFM0Mx/2ImLD330ud8LmTGbyynsJDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8yOTlmZTctOWFiNy00NzNhLWI2MmEt
YWIwNjM5MzhmMWNlLzEvUnh2S3lZLVJWSTR5NFk1NWxmMWhqMGwwWmFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8yOTlmZTctOWFiNy00NzNhLWI2MmEtYWIwNjM5MzhmMWNl
LzEvelF6SF9ZaVlzUGZmUzUzd3VaTVp2TEtld2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwV28MA0G
CSqGSIb3DQEBCwUAA4IBAQAQ6CJyefo+tffkttQ6C2SCz7hQEbEotc0TEDI/aeBx
yYVp7pVjRjBahlmlW1iIifIP4HPtXKx35ahXMOIQfMsSK7OEuRzwHwGw1WqWNTck
0K2J+Q0GwSZsWnLwXSMLL+RcKLLFUflMvXL4nw06T+bIX+X4e8kyL6esfkmuPmJi
ozKuTNpE21TqDeWFO2mWARVEG6QWDdVteNGdwjpNLzTPnMvK0o2VcHdM5kGWTYi8
ci8vLdgU5fSTB3GJpjJi2oRrMnvmMGaPx/MFcFEz5qMVKuG5+XhGLUPfcV1VSKUn
gTK+VChjaFGralf510aLmjIb4ai/feFkEDvX90DymIG+
-----END CERTIFICATE-----
Generated at Sat Jun 8 06:28:58 2024 by rpki-client on console-ams.rpki-client.org