Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/1-2WZU3fbhWcuNeWH1w1_U26ixEw.roa
File: 1-2WZU3fbhWcuNeWH1w1_U26ixEw.roa (raw, json)
Hash identifier: 60Jn8ofi9AncaegXM55YgiP31eQA55X662iACKZgITQ=
Subject key identifier: FB:65:99:53:77:DB:85:67:2E:35:E5:87:D7:0D:7F:53:6E:A2:C4:4C
Certificate issuer: /CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Certificate serial: 018CC26D252829BE5B900C8FD4F1A2A9D9BC
Authority key identifier: 1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/1-2WZU3fbhWcuNeWH1w1_U26ixEw.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1935
IP address blocks: 193.160.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:25:28:29:be:5b:90:0c:8f:d4:f1:a2:a9:d9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c0e216e5791e1b01da21bcaf330041ad72a7e6c
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb65995377db85672e35e587d70d7f536ea2c44c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b1:33:69:10:2c:ac:35:65:6e:8f:e0:ce:a4:
d8:25:bb:6d:f4:16:86:2f:8f:51:95:99:74:a6:49:
24:2c:ef:58:9b:01:ba:60:ae:2c:57:c3:8d:10:96:
cd:40:63:0d:55:01:b6:f4:fc:f8:39:df:42:32:b6:
a5:21:94:32:25:30:94:cf:88:b5:82:7e:0e:8e:73:
f5:25:d6:7f:ea:8b:ac:1c:4a:80:2e:71:e0:09:29:
ea:12:0a:d0:20:da:e0:e8:b3:70:5b:e3:da:8f:dc:
1c:c4:2b:9f:fc:38:11:26:20:37:da:32:a3:03:69:
7d:4f:a5:d1:52:13:98:5c:95:04:97:4a:1b:0c:c3:
18:a3:94:76:9d:1c:28:90:81:ef:3e:ec:a7:aa:b6:
37:10:63:c7:25:13:1f:79:b7:e4:93:25:0f:ee:b8:
e1:dc:98:89:b0:6f:c1:45:bd:a0:c2:0c:27:d4:3e:
b4:40:1e:16:48:7e:3d:a1:af:03:25:aa:cb:a6:1c:
ee:ea:3e:41:cb:97:2d:87:08:db:52:41:8f:83:5e:
d9:3f:b6:4d:89:71:c7:75:5e:1a:49:36:2f:9f:d9:
d8:ed:df:82:68:e3:d5:23:ee:81:18:eb:40:b0:41:
98:4f:1c:87:94:99:60:fc:79:dd:fa:6b:c8:d1:48:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:65:99:53:77:DB:85:67:2E:35:E5:87:D7:0D:7F:53:6E:A2:C4:4C
X509v3 Authority Key Identifier:
keyid:1C:0E:21:6E:57:91:E1:B0:1D:A2:1B:CA:F3:30:04:1A:D7:2A:7E:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HA4hbleR4bAdohvK8zAEGtcqfmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/1-2WZU3fbhWcuNeWH1w1_U26ixEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/938443-be9a-4f8b-8801-2c0fc6be1e57/1/HA4hbleR4bAdohvK8zAEGtcqfmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:75:db:8d:dc:fd:df:40:b9:15:79:ba:73:4e:63:25:f5:66:
65:46:9a:35:9c:53:04:4b:02:2c:86:5a:18:7b:ac:5e:90:cd:
d8:0d:d6:13:ff:75:cf:0b:35:26:00:8d:bf:77:36:6e:6f:d6:
f0:2b:6c:44:9d:e0:ac:3e:12:ae:39:53:de:6d:a9:87:32:ab:
03:64:d3:6a:f1:14:bb:d5:94:56:4d:78:c7:25:62:26:3a:d1:
4e:4f:03:a1:66:a5:a8:4f:6b:8a:8d:c4:ac:98:c5:00:0c:74:
b2:9a:75:c1:89:b1:aa:bb:aa:8f:a5:4b:6e:39:d4:e1:db:da:
48:4c:ce:58:7f:17:d7:74:37:c8:95:6a:2b:1e:0f:a6:c1:69:
d7:31:21:94:27:30:ef:52:cf:db:ba:4f:f1:a2:96:0b:41:60:
ce:76:e4:be:dd:9a:76:04:5b:b9:10:f5:7e:12:46:79:19:b9:
6d:5f:23:ce:4e:db:5b:04:b3:b4:c7:53:7b:ff:94:18:3d:cf:
1e:55:df:8b:4e:d5:3b:f6:8a:93:9b:67:64:5c:52:ab:6f:de:
08:3b:e5:ed:6f:eb:1e:e4:a9:26:40:27:fa:15:33:97:e0:4c:
20:4f:af:a4:bc:50:03:ad:e6:d6:00:a9:c9:00:9b:6c:a4:65:
95:3d:c4:a8
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzCbSUoKb5bkAyP1PGiqdm8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjMGUyMTZlNTc5MWUxYjAxZGEyMWJjYWYzMzAwNDFhZDcy
YTdlNmMwHhcNMjQwMTAxMDAyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjY1OTk1Mzc3ZGI4NTY3MmUzNWU1ODdkNzBkN2Y1MzZlYTJjNDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rEzaRAsrDVlbo/gzqTYJbtt9BaG
L49RlZl0pkkkLO9YmwG6YK4sV8ONEJbNQGMNVQG29Pz4Od9CMralIZQyJTCUz4i1
gn4OjnP1JdZ/6ousHEqALnHgCSnqEgrQINrg6LNwW+Paj9wcxCuf/DgRJiA32jKj
A2l9T6XRUhOYXJUEl0obDMMYo5R2nRwokIHvPuynqrY3EGPHJRMfebfkkyUP7rjh
3JiJsG/BRb2gwgwn1D60QB4WSH49oa8DJarLphzu6j5By5cthwjbUkGPg17ZP7ZN
iXHHdV4aSTYvn9nY7d+CaOPVI+6BGOtAsEGYTxyHlJlg/Hnd+mvI0Uh3SQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPtlmVN324VnLjXlh9cNf1NuosRMMB8GA1UdIwQY
MBaAFBwOIW5XkeGwHaIbyvMwBBrXKn5sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSEE0aGJsZVI0YkFkb2h2Szh6QUVHdGNxZm13LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS85Mzg0NDMtYmU5YS00ZjhiLTg4MDEt
MmMwZmM2YmUxZTU3LzEvMS0yV1pVM2ZiaFdjdU5lV0gxdzFfVTI2aXhFdy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNjkvOTM4NDQzLWJlOWEtNGY4Yi04ODAxLTJjMGZjNmJlMWU1
Ny8xL0hBNGhibGVSNGJBZG9odks4ekFFR3RjcWZtdy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMGgADAN
BgkqhkiG9w0BAQsFAAOCAQEAG3Xbjdz930C5FXm6c05jJfVmZUaaNZxTBEsCLIZa
GHusXpDN2A3WE/91zws1JgCNv3c2bm/W8CtsRJ3grD4SrjlT3m2phzKrA2TTavEU
u9WUVk14xyViJjrRTk8DoWalqE9rio3ErJjFAAx0spp1wYmxqruqj6VLbjnU4dva
SEzOWH8X13Q3yJVqKx4PpsFp1zEhlCcw71LP27pP8aKWC0Fgznbkvt2adgRbuRD1
fhJGeRm5bV8jzk7bWwSztMdTe/+UGD3PHlXfi07VO/aKk5tnZFxSq2/eCDvl7W/r
HuSpJkAn+hUzl+BMIE+vpLxQA63m1gCpyQCbbKRllT3EqA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:58 2024 by rpki-client on console-fra.rpki-client.org