Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/afnDZZuT-Tlz8d05Srqkp7ZHVCQ.roa
File: afnDZZuT-Tlz8d05Srqkp7ZHVCQ.roa (raw, json)
Hash identifier: D63ElVvs/RJaXGSeR7xzMM52uPgBYgpyAgjLN7GLlY4=
Subject key identifier: 69:F9:C3:65:9B:93:F9:39:73:F1:DD:39:4A:BA:A4:A7:B6:47:54:24
Certificate issuer: /CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Certificate serial: 018CC424B0254CCC423E84BE2194C86E25A6
Authority key identifier: 9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/afnDZZuT-Tlz8d05Srqkp7ZHVCQ.roa
Signing time: Mon 01 Jan 2024 08:29:47 +0000
ROA not before: Mon 01 Jan 2024 08:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31606
IP address blocks: 193.22.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:b0:25:4c:cc:42:3e:84:be:21:94:c8:6e:25:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0e2b9e69f562df14cf772bde05f7dacde25961
Validity
Not Before: Jan 1 08:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69f9c3659b93f93973f1dd394abaa4a7b6475424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5c:31:c8:a0:f1:27:21:b3:d9:69:4b:0a:f6:
32:1e:84:a5:96:f1:b8:ac:89:2d:e8:6e:da:cf:ef:
11:ca:a4:cd:df:e7:70:da:26:2a:5b:67:1b:49:c6:
c1:f6:85:bd:7d:77:aa:eb:f4:d1:a8:4d:54:c7:61:
64:35:07:5b:c5:8b:9c:e5:3c:ed:ae:36:d0:51:a9:
10:96:f7:93:37:7a:22:44:a5:6e:b4:95:a1:c2:6a:
ee:1a:2e:ca:a9:49:b0:01:0c:5d:00:d8:6c:68:d1:
91:1a:27:c6:cd:e8:db:3e:03:7a:52:e7:58:ca:21:
21:28:4b:c4:c0:a7:e8:3f:00:c8:b8:8a:50:bb:44:
30:92:e5:20:86:bb:ea:0f:a2:67:db:0b:fd:19:4e:
da:ac:c6:38:5f:d7:06:4a:cd:e9:cb:8e:e3:08:84:
0b:de:2c:7a:4c:6f:4f:75:73:33:9c:fe:d7:f2:cd:
62:79:9b:1e:5f:06:e0:6b:00:93:65:a7:33:e4:3f:
e8:56:d8:d1:a2:af:ea:cc:b6:a3:be:fc:0e:94:d7:
14:e0:e5:94:5e:7e:b3:cd:44:ff:5d:ad:23:6f:bc:
be:a3:65:af:b7:a8:f7:09:b9:4e:1e:0b:6d:6a:53:
04:b5:1a:29:a3:38:96:ba:c3:b3:fd:ca:6a:3d:1a:
4c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F9:C3:65:9B:93:F9:39:73:F1:DD:39:4A:BA:A4:A7:B6:47:54:24
X509v3 Authority Key Identifier:
keyid:9D:0E:2B:9E:69:F5:62:DF:14:CF:77:2B:DE:05:F7:DA:CD:E2:59:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/afnDZZuT-Tlz8d05Srqkp7ZHVCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/25be2f-92eb-4cde-a247-d8dc34036ce7/1/nQ4rnmn1Yt8Uz3cr3gX32s3iWWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.22.93.0/24
Signature Algorithm: sha256WithRSAEncryption
12:3d:84:b0:e3:1b:f6:f3:7a:ef:bc:a3:e1:f7:70:2e:c0:da:
ab:67:48:0d:cd:cf:73:6c:37:cb:ca:0e:c1:e2:0e:0f:8b:46:
73:52:51:4f:29:3d:4a:46:2a:9d:d1:6e:ec:52:fd:98:9f:db:
ed:12:98:eb:65:9f:84:7c:dd:11:c6:10:8c:82:13:83:84:c1:
62:1a:4e:15:ac:1b:7d:ae:48:86:ad:a1:e7:96:67:19:93:1c:
a4:67:60:19:86:c7:7d:60:a3:a7:a1:15:13:20:2c:79:8b:9c:
c1:30:72:88:86:86:68:4e:bd:b5:cd:dc:47:f4:d5:8f:87:89:
72:c7:3e:d9:b7:ea:d7:40:4c:0b:93:e5:fd:12:4d:78:39:a7:
3a:a7:88:59:84:ce:41:96:fb:2c:8f:8e:94:09:87:17:83:58:
ce:d4:e2:42:45:2d:32:b4:8b:e7:dd:51:4f:7d:06:3b:30:b0:
37:83:d7:19:4a:be:6a:8e:68:b1:87:97:21:4d:e6:d0:12:82:
95:2c:66:82:1d:07:a2:55:23:4f:46:de:f1:7c:14:e1:5b:f9:
9c:cb:ac:f8:4f:7a:e6:f7:21:62:21:a1:9a:6b:8a:6e:8f:8a:
ba:95:77:75:30:ab:37:6f:d6:f2:b2:8a:c1:9b:c6:4a:3f:a0:
f9:92:9d:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJLAlTMxCPoS+IZTIbiWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMGUyYjllNjlmNTYyZGYxNGNmNzcyYmRlMDVmN2RhY2Rl
MjU5NjEwHhcNMjQwMTAxMDgyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWY5YzM2NTliOTNmOTM5NzNmMWRkMzk0YWJhYTRhN2I2NDc1NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArVwxyKDxJyGz2WlLCvYyHoSllvG4
rIkt6G7az+8RyqTN3+dw2iYqW2cbScbB9oW9fXeq6/TRqE1Ux2FkNQdbxYuc5Tzt
rjbQUakQlveTN3oiRKVutJWhwmruGi7KqUmwAQxdANhsaNGRGifGzejbPgN6UudY
yiEhKEvEwKfoPwDIuIpQu0QwkuUghrvqD6Jn2wv9GU7arMY4X9cGSs3py47jCIQL
3ix6TG9PdXMznP7X8s1ieZseXwbgawCTZacz5D/oVtjRoq/qzLajvvwOlNcU4OWU
Xn6zzUT/Xa0jb7y+o2Wvt6j3CblOHgttalMEtRopoziWusOz/cpqPRpMoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGn5w2Wbk/k5c/HdOUq6pKe2R1QkMB8GA1UdIwQY
MBaAFJ0OK55p9WLfFM93K94F99rN4llhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8yNWJlMmYtOTJlYi00Y2RlLWEyNDct
ZDhkYzM0MDM2Y2U3LzEvYWZuRFpadVQtVGx6OGQwNVNycWtwN1pIVkNRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8yNWJlMmYtOTJlYi00Y2RlLWEyNDctZDhkYzM0MDM2Y2U3
LzEvblE0cm5tbjFZdDhVejNjcjNnWDMyczNpV1dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwRZdMA0G
CSqGSIb3DQEBCwUAA4IBAQASPYSw4xv283rvvKPh93AuwNqrZ0gNzc9zbDfLyg7B
4g4Pi0ZzUlFPKT1KRiqd0W7sUv2Yn9vtEpjrZZ+EfN0RxhCMghODhMFiGk4VrBt9
rkiGraHnlmcZkxykZ2AZhsd9YKOnoRUTICx5i5zBMHKIhoZoTr21zdxH9NWPh4ly
xz7Zt+rXQEwLk+X9Ek14Oac6p4hZhM5Blvssj46UCYcXg1jO1OJCRS0ytIvn3VFP
fQY7MLA3g9cZSr5qjmixh5chTebQEoKVLGaCHQeiVSNPRt7xfBThW/mcy6z4T3rm
9yFiIaGaa4puj4q6lXd1MKs3b9bysorBm8ZKP6D5kp1L
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:30:56 2024 by rpki-client on console-ams.rpki-client.org