Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/rxBX3hreWRBP_Pdaw4fHOY_onkU.roa
File: rxBX3hreWRBP_Pdaw4fHOY_onkU.roa (raw, json)
Hash identifier: MM1mq7pEFWPBiaQCyF5ZAYI33l5PJWOouy6uz87UNbY=
Subject key identifier: AF:10:57:DE:1A:DE:59:10:4F:FC:F7:5A:C3:87:C7:39:8F:E8:9E:45
Certificate issuer: /CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Certificate serial: 018FDCF30EE7A2C8AA35A0B52CC5EB2711B8
Authority key identifier: 8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/rxBX3hreWRBP_Pdaw4fHOY_onkU.roa
Signing time: Mon 03 Jun 2024 07:14:27 +0000
ROA not before: Mon 03 Jun 2024 07:14:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210753
IP address blocks: 193.3.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dc:f3:0e:e7:a2:c8:aa:35:a0:b5:2c:c5:eb:27:11:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f0a2bb8813b74d78283b1728fdb9bbc5d57845d
Validity
Not Before: Jun 3 07:14:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af1057de1ade59104ffcf75ac387c7398fe89e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:26:e0:cc:1e:1a:e8:fe:44:6d:73:ac:81:
73:71:2f:21:f8:aa:c7:a5:8b:c7:04:4d:bc:fe:5c:
32:3f:12:4e:7c:b1:6a:0e:c3:a3:9e:d1:6b:9f:72:
17:26:c9:f1:8c:1e:c6:4b:b5:1c:de:b7:82:e7:8f:
74:9b:62:e6:d7:69:b9:db:52:ae:01:8b:56:e6:39:
95:d4:5f:e3:b5:fa:d7:e2:93:ca:b8:22:84:75:d1:
e4:63:14:82:0b:4c:1a:62:c7:28:a5:bf:6b:b4:bd:
52:6f:ea:d6:fd:7f:75:7a:29:4a:02:a1:f9:7d:2e:
fe:49:80:af:35:1b:88:91:68:73:d7:3a:b0:b3:4b:
3f:42:80:b7:c4:4f:a3:38:62:c7:17:7b:ca:7a:82:
67:ba:ea:4f:66:dc:24:33:de:98:cd:bc:47:0c:c7:
13:cf:43:e1:02:c4:f0:37:a5:a2:9a:0a:e1:0b:27:
82:aa:56:45:d1:3b:7d:97:2f:50:fc:82:b5:5f:17:
c1:4a:2f:23:37:43:6d:54:14:fe:1e:4b:cf:99:a7:
23:66:44:24:58:85:1a:f7:ff:72:78:75:ab:63:81:
4c:8d:30:3b:9a:3a:e6:62:e5:f1:64:80:a7:98:58:
e4:66:60:12:1f:a4:70:8e:11:14:c7:29:a9:de:32:
98:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:10:57:DE:1A:DE:59:10:4F:FC:F7:5A:C3:87:C7:39:8F:E8:9E:45
X509v3 Authority Key Identifier:
keyid:8F:0A:2B:B8:81:3B:74:D7:82:83:B1:72:8F:DB:9B:BC:5D:57:84:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jworuIE7dNeCg7Fyj9ubvF1XhF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/rxBX3hreWRBP_Pdaw4fHOY_onkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/742340-8cf8-4460-85cc-aa2b3bea08bf/1/jworuIE7dNeCg7Fyj9ubvF1XhF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.3.17.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:d9:b3:98:fb:a1:79:d1:ff:19:e8:15:e4:a2:f5:ad:f9:76:
6e:b6:3b:71:70:14:55:0b:ef:3e:c1:d9:ed:88:10:56:45:c5:
6a:4e:51:68:6a:cc:6b:30:3a:37:09:12:c0:47:f8:37:f9:2d:
6a:d1:bd:3c:1a:42:88:0a:25:cb:49:ad:c0:fe:31:93:06:2d:
22:89:59:88:4d:65:d4:d5:42:47:ab:e4:fc:d6:8d:cf:31:7e:
36:9a:62:f0:19:b1:65:8f:95:e8:59:0f:3b:ee:25:1b:6a:55:
5d:1d:a0:9e:7d:17:e1:23:e5:7a:aa:16:f3:15:18:a9:78:ed:
fe:00:c3:46:22:41:9d:8d:0d:75:a5:12:ad:f4:3c:61:09:be:
53:15:fa:94:e6:f9:55:72:35:d4:3e:8f:92:5a:5d:9f:1e:e7:
42:52:c9:4c:29:16:4d:91:36:88:54:e8:25:16:d2:42:d2:8d:
fc:34:22:b9:13:88:42:ea:62:0c:ca:f7:84:9e:28:66:aa:ff:
98:27:73:97:30:f1:ac:5f:c1:f4:44:e6:1a:90:68:71:9a:3c:
9d:32:36:8e:9d:f3:25:a0:1e:28:a9:58:2a:41:13:1d:76:93:
c7:83:29:7c:ee:4f:f4:d3:d6:21:bd:e3:6d:20:aa:17:5c:55:
28:ac:17:01
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY/c8w7nosiqNaC1LMXrJxG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMGEyYmI4ODEzYjc0ZDc4MjgzYjE3MjhmZGI5YmJjNWQ1
Nzg0NWQwHhcNMjQwNjAzMDcxNDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjEwNTdkZTFhZGU1OTEwNGZmY2Y3NWFjMzg3YzczOThmZTg5ZTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOAm4MweGuj+RG1zrIFzcS8h+KrH
pYvHBE28/lwyPxJOfLFqDsOjntFrn3IXJsnxjB7GS7Uc3reC5490m2Lm12m521Ku
AYtW5jmV1F/jtfrX4pPKuCKEddHkYxSCC0waYscopb9rtL1Sb+rW/X91eilKAqH5
fS7+SYCvNRuIkWhz1zqws0s/QoC3xE+jOGLHF3vKeoJnuupPZtwkM96YzbxHDMcT
z0PhAsTwN6WimgrhCyeCqlZF0Tt9ly9Q/IK1XxfBSi8jN0NtVBT+HkvPmacjZkQk
WIUa9/9yeHWrY4FMjTA7mjrmYuXxZICnmFjkZmASH6RwjhEUxymp3jKYwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK8QV94a3lkQT/z3WsOHxzmP6J5FMB8GA1UdIwQY
MBaAFI8KK7iBO3TXgoOxco/bm7xdV4RdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83NDIzNDAtOGNmOC00NDYwLTg1Y2Mt
YWEyYjNiZWEwOGJmLzEvcnhCWDNocmVXUkJQX1BkYXc0ZkhPWV9vbmtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny83NDIzNDAtOGNmOC00NDYwLTg1Y2MtYWEyYjNiZWEwOGJm
LzEvandvcnVJRTdkTmVDZzdGeWo5dWJ2RjFYaEYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQMRMA0G
CSqGSIb3DQEBCwUAA4IBAQCn2bOY+6F50f8Z6BXkovWt+XZutjtxcBRVC+8+wdnt
iBBWRcVqTlFoasxrMDo3CRLAR/g3+S1q0b08GkKICiXLSa3A/jGTBi0iiVmITWXU
1UJHq+T81o3PMX42mmLwGbFlj5XoWQ877iUbalVdHaCefRfhI+V6qhbzFRipeO3+
AMNGIkGdjQ11pRKt9DxhCb5TFfqU5vlVcjXUPo+SWl2fHudCUslMKRZNkTaIVOgl
FtJC0o38NCK5E4hC6mIMyveEnihmqv+YJ3OXMPGsX8H0ROYakGhxmjydMjaOnfMl
oB4oqVgqQRMddpPHgyl87k/009YhveNtIKoXXFUorBcB
-----END CERTIFICATE-----
Generated at Wed Sep 18 23:25:21 2024 by rpki-client on console-ams.rpki-client.org