Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/gj0rhPuRH8j5fxrYyL6X73wIg54.roa
File: gj0rhPuRH8j5fxrYyL6X73wIg54.roa (raw, json)
Hash identifier: EtGZJw9ZMgo1oqImeB6LRjLqkkL8+NBOTpHvq4nhE1U=
Subject key identifier: 82:3D:2B:84:FB:91:1F:C8:F9:7F:1A:D8:C8:BE:97:EF:7C:08:83:9E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 018CC42509FA05845F6D40F05FFE4F719B51
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/gj0rhPuRH8j5fxrYyL6X73wIg54.roa
Signing time: Mon 01 Jan 2024 08:30:10 +0000
ROA not before: Mon 01 Jan 2024 08:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.9.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 07:04:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:09:fa:05:84:5f:6d:40:f0:5f:fe:4f:71:9b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Jan 1 08:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=823d2b84fb911fc8f97f1ad8c8be97ef7c08839e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:77:fe:80:84:38:e6:ea:f6:39:1b:f7:4d:40:
29:33:66:7e:03:5b:f6:f2:9f:d2:e9:e5:c5:e5:fc:
5f:67:b8:de:e8:62:49:98:d5:14:e4:cf:08:c8:67:
fc:db:c6:f3:2b:b8:ce:a8:e8:39:fc:a4:d0:cc:1a:
f8:76:79:27:f8:0c:ea:9e:03:c3:11:a2:28:75:41:
a7:fa:2e:42:af:13:3c:cb:11:af:c4:84:55:db:a1:
75:73:dd:b6:b6:11:da:0b:70:66:2a:4f:c9:6a:e6:
fd:18:da:b9:15:63:ec:e6:10:77:d8:19:41:3a:ca:
01:9a:bf:06:6c:e9:20:82:bf:93:14:31:41:2e:6a:
13:f3:73:70:5f:07:09:8f:8f:59:09:cb:56:e2:d1:
33:ba:92:bc:a0:c5:06:19:9b:6c:3e:9a:9f:6e:d9:
88:ce:0d:44:c3:9e:36:5a:b7:b5:aa:ab:92:16:b1:
42:6b:10:32:83:e6:c1:4f:c9:fb:25:a9:b1:af:fe:
08:f6:d8:96:6e:33:68:f4:94:fa:0e:f2:d8:9c:f2:
82:d7:99:ed:5a:16:2c:6a:1d:ca:06:18:95:95:f6:
40:5b:50:50:6f:0f:c6:d3:0a:fa:29:d3:c7:51:a5:
c8:2f:7b:f4:d1:4a:ce:73:14:99:10:63:75:4b:48:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3D:2B:84:FB:91:1F:C8:F9:7F:1A:D8:C8:BE:97:EF:7C:08:83:9E
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/gj0rhPuRH8j5fxrYyL6X73wIg54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.9.122.0/24
Signature Algorithm: sha256WithRSAEncryption
52:df:63:f6:a8:5c:a5:e0:5c:68:46:69:fe:f4:af:75:ba:29:
57:79:e3:da:98:e3:5f:d0:f8:bd:1f:0f:d1:f1:78:ef:7d:f3:
12:36:15:15:e1:6d:0f:c3:1d:bc:64:7a:a4:74:f0:20:11:18:
7e:30:43:14:b6:6b:2a:be:80:ea:34:56:94:c8:f5:ec:c3:15:
4f:49:03:69:2a:e3:aa:11:3a:c3:2f:1b:99:13:f1:86:3a:59:
4f:cd:37:04:db:85:0c:03:15:bb:f7:8b:dc:57:3d:b7:e2:8f:
d3:fa:f9:34:95:d0:58:9f:0f:6a:3c:c0:f6:1c:54:6b:64:a1:
5d:38:c1:5a:f1:5a:2c:4e:7c:43:ef:7e:49:09:83:05:3f:71:
37:61:2e:86:3c:58:ad:bd:15:30:ea:58:bc:f3:e9:9a:df:a6:
ee:79:c9:5d:0c:a3:bf:fe:32:1c:47:ea:f1:4b:71:e4:2c:91:
8a:34:43:2e:e2:17:91:3a:66:4e:ce:bd:5e:fd:bd:03:04:cc:
0c:ab:4e:c1:cd:17:13:c9:ba:b7:85:44:0b:16:32:ab:7a:d7:
4a:18:cd:0f:24:c9:4e:d0:f0:3c:a8:62:50:6e:d8:02:4e:5a:
52:fd:42:c3:df:cf:47:b2:23:76:9e:8b:4e:ba:e8:01:df:97:
88:cc:7b:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJQn6BYRfbUDwX/5PcZtRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjODY2NjJiNzUyYzhhM2JlNzJlODU0NDM5NGZmOTI2ZjY4
ZmJmN2UwHhcNMjQwMTAxMDgzMDEwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjNkMmI4NGZiOTExZmM4Zjk3ZjFhZDhjOGJlOTdlZjdjMDg4MzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3f+gIQ45ur2ORv3TUApM2Z+A1v2
8p/S6eXF5fxfZ7je6GJJmNUU5M8IyGf828bzK7jOqOg5/KTQzBr4dnkn+AzqngPD
EaIodUGn+i5CrxM8yxGvxIRV26F1c922thHaC3BmKk/Jaub9GNq5FWPs5hB32BlB
OsoBmr8GbOkggr+TFDFBLmoT83NwXwcJj49ZCctW4tEzupK8oMUGGZtsPpqfbtmI
zg1Ew542Wre1qquSFrFCaxAyg+bBT8n7Jamxr/4I9tiWbjNo9JT6DvLYnPKC15nt
WhYsah3KBhiVlfZAW1BQbw/G0wr6KdPHUaXIL3v00UrOcxSZEGN1S0iHyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFII9K4T7kR/I+X8a2Mi+l+98CIOeMB8GA1UdIwQY
MBaAFAyGZit1LIo75y6FRDlP+Sb2j79+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5Yjgt
MWNjYzljMjk1ZThlLzEvZ2owcmhQdVJIOGo1ZnhyWXlMNlg3M3dJZzU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My8wOWM0YjItNDZhOS00Zjg4LTk5YjgtMWNjYzljMjk1ZThl
LzEvRElabUszVXNpanZuTG9WRU9VXzVKdmFQdjM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQl6MA0G
CSqGSIb3DQEBCwUAA4IBAQBS32P2qFyl4FxoRmn+9K91uilXeePamONf0Pi9Hw/R
8XjvffMSNhUV4W0Pwx28ZHqkdPAgERh+MEMUtmsqvoDqNFaUyPXswxVPSQNpKuOq
ETrDLxuZE/GGOllPzTcE24UMAxW794vcVz234o/T+vk0ldBYnw9qPMD2HFRrZKFd
OMFa8VosTnxD735JCYMFP3E3YS6GPFitvRUw6li88+ma36buecldDKO//jIcR+rx
S3HkLJGKNEMu4heROmZOzr1e/b0DBMwMq07BzRcTybq3hUQLFjKretdKGM0PJMlO
0PA8qGJQbtgCTlpS/ULD389HsiN2notOuugB35eIzHsF
-----END CERTIFICATE-----
Generated at Thu May 2 10:41:21 2024 by rpki-client on console-ams.rpki-client.org