Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/i3wlXcSZ2_ouzG5q_aD23L0jpsI.roa
File: i3wlXcSZ2_ouzG5q_aD23L0jpsI.roa (raw, json)
Hash identifier: 9re+I1Awy0rUgcI+wPmrdrmx748sxYuNwfXRkgED2HA=
Subject key identifier: 8B:7C:25:5D:C4:99:DB:FA:2E:CC:6E:6A:FD:A0:F6:DC:BD:23:A6:C2
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 018CC3B71A35DDD8D72DE50D2D6BF0A01D7C
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/i3wlXcSZ2_ouzG5q_aD23L0jpsI.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47692
IP address blocks: 193.105.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1a:35:dd:d8:d7:2d:e5:0d:2d:6b:f0:a0:1d:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b7c255dc499dbfa2ecc6e6afda0f6dcbd23a6c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:79:12:3c:84:8d:30:ef:36:b8:2c:62:f1:04:
83:7a:9b:47:fb:e9:63:5e:ce:ac:da:99:86:19:fa:
b5:22:a1:6b:e6:bd:69:bd:72:45:d1:a5:ea:bf:71:
1c:ca:f5:58:38:d5:c3:32:02:c2:fa:bc:be:cc:56:
0b:9f:06:6c:c0:d0:3e:99:29:ca:c5:9c:41:d3:df:
2e:66:a8:e6:9c:7b:f3:a3:af:49:7f:28:ea:10:89:
3a:e5:1f:6a:14:0f:61:aa:41:b5:99:6a:80:38:11:
ee:20:c6:80:97:8c:50:51:df:1d:83:af:13:7e:96:
03:49:56:7e:a8:47:be:e8:aa:02:d8:85:65:0c:d7:
6b:d9:a1:f5:02:de:53:15:fb:56:9f:cf:e8:a0:54:
ed:19:8d:b8:95:47:db:35:23:a9:9e:3c:35:4d:83:
05:c2:f6:a7:22:ec:bd:46:00:5b:bb:4c:4f:45:76:
b7:18:47:97:5b:56:f1:c6:0b:cb:29:fa:93:d6:b0:
7f:55:2d:e7:f0:79:27:9a:69:d5:24:ee:39:90:22:
02:52:d2:a9:f6:a6:8b:26:4f:4b:9d:34:1e:73:95:
6c:46:06:6f:de:71:f4:ed:16:3a:17:fe:82:b0:02:
d0:4e:08:c5:b9:67:ff:8a:10:96:6e:25:8d:9a:a5:
cb:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7C:25:5D:C4:99:DB:FA:2E:CC:6E:6A:FD:A0:F6:DC:BD:23:A6:C2
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/i3wlXcSZ2_ouzG5q_aD23L0jpsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.181.0/24
Signature Algorithm: sha256WithRSAEncryption
87:bf:81:74:fc:a2:a9:15:bb:3b:e9:78:bc:90:74:dc:bc:09:
b4:44:d9:f2:2b:69:b0:c1:01:b1:15:d5:07:63:6c:2b:6b:e1:
13:e8:9d:b6:30:a9:86:81:85:13:e0:52:ef:b7:0b:00:f9:ff:
f2:0d:54:2d:92:29:01:fb:e4:01:a6:d4:5e:5f:41:c3:cc:c1:
d8:8a:a6:f5:2b:f5:1a:56:cd:c1:56:8e:ff:ec:34:e3:af:bf:
d4:28:39:7a:79:1e:7f:a4:5c:27:c7:36:de:09:85:9d:32:f6:
ea:d5:8c:f2:a0:90:3d:45:6a:22:7b:3b:39:62:be:80:66:7e:
f2:0a:c1:eb:ad:e2:c9:2e:ea:93:7b:86:4e:ef:06:bb:bd:e1:
ac:84:db:56:f2:3a:65:2d:3e:dc:60:ee:db:72:e6:ee:64:6d:
ae:bc:94:f4:d3:76:cd:73:f7:9a:d9:87:f0:f4:b1:8c:55:fc:
ad:a6:b3:96:db:01:3e:72:f8:d6:32:3b:8e:a9:a5:3b:8c:ce:
86:c8:df:b2:1b:04:8a:c5:71:7a:5b:95:f2:70:40:eb:03:e4:
c2:04:d2:ed:60:33:10:9f:17:48:77:26:34:f4:ee:dc:b6:17:
b0:0f:a2:25:66:6a:4f:e3:68:f7:fe:a1:9d:cd:f3:d7:e1:35:
b5:41:62:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtxo13djXLeUNLWvwoB18MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlMjY0OGYxMjkwZDQ0NzFiY2RiNTBiODJiZTRlZDkzMjAw
MzA5NGQwHhcNMjQwMTAxMDYzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjdjMjU1ZGM0OTlkYmZhMmVjYzZlNmFmZGEwZjZkY2JkMjNhNmMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXkSPISNMO82uCxi8QSDeptH++lj
Xs6s2pmGGfq1IqFr5r1pvXJF0aXqv3EcyvVYONXDMgLC+ry+zFYLnwZswNA+mSnK
xZxB098uZqjmnHvzo69JfyjqEIk65R9qFA9hqkG1mWqAOBHuIMaAl4xQUd8dg68T
fpYDSVZ+qEe+6KoC2IVlDNdr2aH1At5TFftWn8/ooFTtGY24lUfbNSOpnjw1TYMF
wvanIuy9RgBbu0xPRXa3GEeXW1bxxgvLKfqT1rB/VS3n8HknmmnVJO45kCICUtKp
9qaLJk9LnTQec5VsRgZv3nH07RY6F/6CsALQTgjFuWf/ihCWbiWNmqXLWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIt8JV3Emdv6Lsxuav2g9ty9I6bCMB8GA1UdIwQY
MBaAFF4mSPEpDURxvNtQuCvk7ZMgAwlNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9iYzRjNTMtMGRiNS00ZjExLTg0ZjYt
ZjU1ZmNkZjk3ODQ2LzEvaTN3bFhjU1oyX291ekc1cV9hRDIzTDBqcHNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9iYzRjNTMtMGRiNS00ZjExLTg0ZjYtZjU1ZmNkZjk3ODQ2
LzEvWGlaSThTa05SSEc4MjFDNEstVHRreUFEQ1UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWm1MA0G
CSqGSIb3DQEBCwUAA4IBAQCHv4F0/KKpFbs76Xi8kHTcvAm0RNnyK2mwwQGxFdUH
Y2wra+ET6J22MKmGgYUT4FLvtwsA+f/yDVQtkikB++QBptReX0HDzMHYiqb1K/Ua
Vs3BVo7/7DTjr7/UKDl6eR5/pFwnxzbeCYWdMvbq1YzyoJA9RWoiezs5Yr6AZn7y
CsHrreLJLuqTe4ZO7wa7veGshNtW8jplLT7cYO7bcubuZG2uvJT003bNc/ea2Yfw
9LGMVfytprOW2wE+cvjWMjuOqaU7jM6GyN+yGwSKxXF6W5XycEDrA+TCBNLtYDMQ
nxdIdyY09O7cthewD6IlZmpP42j3/qGdzfPX4TW1QWI8
-----END CERTIFICATE-----
Generated at Wed Jun 19 18:41:37 2024 by rpki-client on console-ams.rpki-client.org