Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/XdO2970itZEX9wGcRk6f70U2daM.roa
File: XdO2970itZEX9wGcRk6f70U2daM.roa (raw, json)
Hash identifier: Gvn5pfJhkSbB7iolsqaYfDXvDMqEgEAA1sL3P7q/Dhc=
Subject key identifier: 5D:D3:B6:F7:BD:22:B5:91:17:F7:01:9C:46:4E:9F:EF:45:36:75:A3
Certificate issuer: /CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Certificate serial: 018CC5DC5525B965047044921738F447544F
Authority key identifier: FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/XdO2970itZEX9wGcRk6f70U2daM.roa
Signing time: Mon 01 Jan 2024 16:30:00 +0000
ROA not before: Mon 01 Jan 2024 16:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198717
IP address blocks: 37.233.96.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:55:25:b9:65:04:70:44:92:17:38:f4:47:54:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa9b89f367d4fb950287701f62d4a039b7f6cb20
Validity
Not Before: Jan 1 16:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5dd3b6f7bd22b59117f7019c464e9fef453675a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:dc:e8:00:5a:13:66:15:28:de:f2:9b:73:ce:
40:5c:58:e9:83:a4:be:ba:4d:1d:b2:ea:c3:dd:ea:
1b:94:98:01:07:f0:31:48:03:88:9a:25:65:54:e8:
a1:45:cd:32:1b:b2:f3:fb:b0:4b:bb:c5:6e:ee:fe:
58:b4:c5:21:5a:02:3c:27:cb:67:4d:c0:32:bc:0a:
61:d4:38:2e:74:6b:64:6b:9e:28:76:94:3b:cc:78:
54:d7:cf:07:bd:be:c5:3e:71:b3:c7:32:47:fc:56:
8e:41:3c:87:2e:11:26:51:dd:62:ae:aa:26:10:c3:
1f:00:00:c5:f1:e3:ad:e4:b9:ed:2d:72:2c:0b:38:
fa:ca:52:ef:35:f8:54:6f:f4:89:88:c3:75:f5:c9:
2b:74:49:5e:09:e0:19:54:4d:bf:4c:f8:c8:a9:98:
4b:6d:66:bc:aa:6a:5c:61:03:85:d3:8b:6c:94:11:
81:ed:4b:3c:fe:a0:28:cf:8b:43:d7:9a:fe:ac:84:
dc:0d:41:58:44:a6:60:b7:d2:fe:b6:50:a6:1f:2f:
f7:89:5d:3c:2d:d3:bd:7c:37:68:e2:86:40:8e:2e:
4e:7d:38:ad:e7:eb:66:23:d1:94:a5:fb:15:6b:c4:
d8:00:ee:d4:c0:54:3d:80:d0:00:7d:d9:e2:a0:2d:
fc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D3:B6:F7:BD:22:B5:91:17:F7:01:9C:46:4E:9F:EF:45:36:75:A3
X509v3 Authority Key Identifier:
keyid:FA:9B:89:F3:67:D4:FB:95:02:87:70:1F:62:D4:A0:39:B7:F6:CB:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-puJ82fU-5UCh3AfYtSgObf2yyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/XdO2970itZEX9wGcRk6f70U2daM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/98933a-7581-4979-9121-0e1a68c7563b/1/1-puJ82fU-5UCh3AfYtSgObf2yyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.233.96.0/20
Signature Algorithm: sha256WithRSAEncryption
08:2d:6f:a5:19:70:18:f8:b6:60:1b:21:43:fb:a7:1f:de:3f:
7d:27:21:f4:6e:24:bd:2b:cc:2b:d5:f2:d5:30:e0:ff:15:20:
b4:bb:c8:ed:bf:e3:28:0c:f2:5f:77:79:67:22:11:05:bc:55:
fa:d3:84:43:d9:1c:85:a0:36:25:81:f9:04:ce:65:0a:87:10:
91:e4:b9:71:d5:9e:13:30:bc:80:4c:8c:94:6b:12:3d:93:3e:
d8:28:b2:4e:ce:26:b0:59:b6:8d:5e:5f:9d:b4:c1:7f:79:da:
df:46:a4:52:f2:3f:51:60:a8:74:b4:7a:5d:53:97:6d:28:ab:
ec:83:d0:59:57:6b:52:8e:52:37:76:b5:44:88:67:f0:7a:00:
17:83:9e:75:5e:96:bb:d8:df:75:91:3a:1e:75:ef:e1:7d:20:
96:6a:27:bf:c9:26:9f:23:85:43:8b:a7:be:58:fb:9b:63:e7:
b2:15:59:73:34:a4:a9:0a:8f:f7:a3:5d:a4:77:0a:af:6a:d7:
f8:3b:21:94:63:2b:a3:12:b7:24:26:8f:8a:74:05:23:be:f2:
88:c0:15:6e:a3:2f:9d:c5:0b:44:5f:68:a5:14:9f:78:ae:09:
a0:73:fb:87:a2:0e:54:ef:eb:bc:b2:0f:8f:60:45:fd:48:a3:
6f:65:7e:d8
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzF3FUluWUEcESSFzj0R1RPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhOWI4OWYzNjdkNGZiOTUwMjg3NzAxZjYyZDRhMDM5Yjdm
NmNiMjAwHhcNMjQwMTAxMTYzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZGQzYjZmN2JkMjJiNTkxMTdmNzAxOWM0NjRlOWZlZjQ1MzY3NWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhtzoAFoTZhUo3vKbc85AXFjpg6S+
uk0dsurD3eoblJgBB/AxSAOImiVlVOihRc0yG7Lz+7BLu8Vu7v5YtMUhWgI8J8tn
TcAyvAph1DgudGtka54odpQ7zHhU188Hvb7FPnGzxzJH/FaOQTyHLhEmUd1irqom
EMMfAADF8eOt5LntLXIsCzj6ylLvNfhUb/SJiMN19ckrdEleCeAZVE2/TPjIqZhL
bWa8qmpcYQOF04tslBGB7Us8/qAoz4tD15r+rITcDUFYRKZgt9L+tlCmHy/3iV08
LdO9fDdo4oZAji5OfTit5+tmI9GUpfsVa8TYAO7UwFQ9gNAAfdnioC38pQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFF3Ttve9IrWRF/cBnEZOn+9FNnWjMB8GA1UdIwQY
MBaAFPqbifNn1PuVAodwH2LUoDm39ssgMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1wdUo4MmZVLTVVQ2gzQWZZdFNnT2JmMnl5QS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjUvOTg5MzNhLTc1ODEtNDk3OS05MTIx
LTBlMWE2OGM3NTYzYi8xL1hkTzI5NzBpdFpFWDl3R2NSazZmNzBVMmRhTS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjUvOTg5MzNhLTc1ODEtNDk3OS05MTIxLTBlMWE2OGM3NTYz
Yi8xLzEtcHVKODJmVS01VUNoM0FmWXRTZ09iZjJ5eUEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAQl6WAw
DQYJKoZIhvcNAQELBQADggEBAAgtb6UZcBj4tmAbIUP7px/eP30nIfRuJL0rzCvV
8tUw4P8VILS7yO2/4ygM8l93eWciEQW8VfrThEPZHIWgNiWB+QTOZQqHEJHkuXHV
nhMwvIBMjJRrEj2TPtgosk7OJrBZto1eX520wX952t9GpFLyP1FgqHS0el1Tl20o
q+yD0FlXa1KOUjd2tUSIZ/B6ABeDnnVelrvY33WROh517+F9IJZqJ7/JJp8jhUOL
p75Y+5tj57IVWXM0pKkKj/ejXaR3Cq9q1/g7IZRjK6MStyQmj4p0BSO+8ojAFW6j
L53FC0RfaKUUn3iuCaBz+4eiDlTv67yyD49gRf1Io29lftg=
-----END CERTIFICATE-----
Generated at Sun May 19 15:03:57 2024 by rpki-client on console-ams.rpki-client.org