Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/oCfvhXjH4NipzDIBFh4KQdLb3Tw.roa
File: oCfvhXjH4NipzDIBFh4KQdLb3Tw.roa (raw, json)
Hash identifier: y4A6ffLbn2IvP4SwmojmM/K9THbMyw6pUCNLlcfgujY=
Subject key identifier: A0:27:EF:85:78:C7:E0:D8:A9:CC:32:01:16:1E:0A:41:D2:DB:DD:3C
Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial: 018CC726EF283297127C80C27057DC183A16
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/oCfvhXjH4NipzDIBFh4KQdLb3Tw.roa
Signing time: Mon 01 Jan 2024 22:31:06 +0000
ROA not before: Mon 01 Jan 2024 22:31:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31129
IP address blocks: 193.23.51.0/24 maxlen: 24
91.211.252.0/22 maxlen: 24
91.211.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:ef:28:32:97:12:7c:80:c2:70:57:dc:18:3a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Validity
Not Before: Jan 1 22:31:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a027ef8578c7e0d8a9cc3201161e0a41d2dbdd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:73:e8:a7:e9:84:d1:c0:9a:6c:df:6c:0a:
57:ca:79:7c:d4:0c:02:0b:c9:2c:63:29:33:14:d7:
7c:dd:ad:cd:e1:02:45:20:98:9e:ff:4f:6f:59:fa:
0c:ce:83:cc:56:94:26:d8:54:c8:05:c6:8b:b8:9e:
2b:19:95:79:c0:74:ff:f8:db:e3:e9:ee:91:4c:63:
d1:f7:4c:fe:7c:1f:94:b5:b2:15:0b:6f:a3:ad:f8:
79:eb:4a:39:c4:b9:e3:a7:ab:9f:08:91:ca:85:c2:
4b:fe:8e:1d:db:d8:57:18:2b:ec:6f:b7:dc:a3:0e:
ff:fa:75:d7:77:64:44:ef:00:26:d6:22:3f:5c:04:
0d:3c:c4:23:74:83:96:c3:08:e4:02:fc:39:f4:29:
d6:4a:2c:e7:7e:19:d7:bc:f9:eb:27:c5:95:89:53:
97:b2:e6:72:e9:48:85:09:5b:b8:d5:39:46:b5:03:
e8:0d:42:ab:e9:dc:13:2d:58:77:22:b6:b0:eb:0f:
25:22:bd:ad:0f:aa:88:81:de:25:50:ba:4a:c5:f0:
30:83:2e:86:77:14:de:4c:51:75:76:54:f4:34:6f:
9a:bc:40:52:d2:4d:71:8f:1b:30:0b:19:cb:87:62:
d0:62:b0:4b:77:e8:f3:55:84:cb:35:37:43:5f:ff:
c4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:27:EF:85:78:C7:E0:D8:A9:CC:32:01:16:1E:0A:41:D2:DB:DD:3C
X509v3 Authority Key Identifier:
keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/oCfvhXjH4NipzDIBFh4KQdLb3Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.252.0/22
193.23.51.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:b2:d8:8b:17:55:be:f8:05:72:24:09:51:7f:fc:9e:1b:78:
f6:09:21:c0:e3:46:59:ab:31:3f:ea:3e:7e:57:80:23:d4:95:
52:54:c0:8c:fe:6c:b4:79:72:10:c9:80:ef:19:c9:cd:fb:20:
7d:22:e5:91:71:5b:c7:4c:2e:30:71:6f:e8:35:c7:0a:fb:18:
ca:2b:33:88:68:d9:92:6b:b3:ee:9f:31:21:99:c0:c8:63:07:
34:01:b3:35:76:b3:ca:65:9d:d5:ae:58:e1:92:8b:b5:91:d3:
26:cd:71:ae:70:01:84:a2:c1:95:d2:01:e7:aa:c7:6c:bf:52:
3c:6e:cf:bb:62:ff:3d:22:31:7e:9e:c0:9d:39:09:0e:12:ea:
cb:b8:78:b7:19:84:b7:6b:54:94:21:8f:d7:c6:7f:6b:14:48:
b3:a4:25:54:38:73:43:d2:f1:93:85:48:32:df:4e:8a:ab:73:
44:d2:fa:22:43:5d:01:7f:18:34:39:92:7a:45:db:b9:c2:82:
74:4c:8b:d1:d7:36:b1:09:44:36:13:06:7d:ce:de:10:5a:bc:
07:e0:03:56:eb:80:36:41:a9:e2:6e:18:b8:38:57:4d:9d:06:
b4:2c:f7:e2:7a:61:a9:87:a1:68:22:52:9b:e5:6c:93:9a:4e:
a4:d8:c8:78
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHJu8oMpcSfIDCcFfcGDoWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZmIwMTE1YzRhY2RkZDFiNGFkYzQwNzM3ODA3MjZhY2Zj
MDFhZjkwHhcNMjQwMTAxMjIzMTA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMDI3ZWY4NTc4YzdlMGQ4YTljYzMyMDExNjFlMGE0MWQyZGJkZDNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+1z6KfphNHAmmzfbApXynl81AwC
C8ksYykzFNd83a3N4QJFIJie/09vWfoMzoPMVpQm2FTIBcaLuJ4rGZV5wHT/+Nvj
6e6RTGPR90z+fB+UtbIVC2+jrfh560o5xLnjp6ufCJHKhcJL/o4d29hXGCvsb7fc
ow7/+nXXd2RE7wAm1iI/XAQNPMQjdIOWwwjkAvw59CnWSiznfhnXvPnrJ8WViVOX
suZy6UiFCVu41TlGtQPoDUKr6dwTLVh3Iraw6w8lIr2tD6qIgd4lULpKxfAwgy6G
dxTeTFF1dlT0NG+avEBS0k1xjxswCxnLh2LQYrBLd+jzVYTLNTdDX//EbwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKAn74V4x+DYqcwyARYeCkHS2908MB8GA1UdIwQY
MBaAFH/7ARXErN3RtK3EBzeAcmrPwBr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYt
Y2JlMDIwNjY1ZWZlLzEvb0NmdmhYakg0TmlwekRJQkZoNEtRZExiM1R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS81MjY4ZmMtY2ZlZS00YWE4LTk3YmYtY2JlMDIwNjY1ZWZl
LzEvZl9zQkZjU3MzZEcwcmNRSE40Qnlhc19BR3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9P8AwQA
wRczMA0GCSqGSIb3DQEBCwUAA4IBAQCKstiLF1W++AVyJAlRf/yeG3j2CSHA40ZZ
qzE/6j5+V4Aj1JVSVMCM/my0eXIQyYDvGcnN+yB9IuWRcVvHTC4wcW/oNccK+xjK
KzOIaNmSa7PunzEhmcDIYwc0AbM1drPKZZ3Vrljhkou1kdMmzXGucAGEosGV0gHn
qsdsv1I8bs+7Yv89IjF+nsCdOQkOEurLuHi3GYS3a1SUIY/Xxn9rFEizpCVUOHND
0vGThUgy306Kq3NE0voiQ10Bfxg0OZJ6Rdu5woJ0TIvR1zaxCUQ2EwZ9zt4QWrwH
4ANW64A2Qanibhi4OFdNnQa0LPfiemGph6FoIlKb5WyTmk6k2Mh4
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:43:27 2024 by rpki-client on console-fra.rpki-client.org