Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/eFEGlNJ0vsnEy5jfR3N0NR6gXCw.roa
File: eFEGlNJ0vsnEy5jfR3N0NR6gXCw.roa (raw, json)
Hash identifier: MNJcZBOgz8ZnJUQAAiPI5CUpfhTs+UTIo3TKDZ0vvkU=
Subject key identifier: 78:51:06:94:D2:74:BE:C9:C4:CB:98:DF:47:73:74:35:1E:A0:5C:2C
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 018CC2DB5674DF91C0D1D0AFD176A0C69E1C
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/eFEGlNJ0vsnEy5jfR3N0NR6gXCw.roa
Signing time: Mon 01 Jan 2024 02:30:03 +0000
ROA not before: Mon 01 Jan 2024 02:30:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23454
IP address blocks: 193.108.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:56:74:df:91:c0:d1:d0:af:d1:76:a0:c6:9e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 1 02:30:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=78510694d274bec9c4cb98df477374351ea05c2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:98:a0:23:bb:1e:18:5b:7d:67:56:ef:c3:2b:
b6:08:96:6f:de:37:9d:42:f2:27:ff:db:3d:df:c1:
5e:11:3b:a5:fc:f6:df:c2:7e:31:b4:4e:c0:f1:49:
ab:2b:e9:77:c3:75:fe:09:42:6b:b5:e9:18:0c:2f:
5e:b5:a7:8a:30:59:1b:bb:c5:f1:0a:62:2d:ca:f3:
57:2d:f3:69:08:b8:d0:fe:4d:19:ab:76:fe:96:a5:
d5:24:25:74:45:3b:97:f9:8d:ad:fc:2e:e6:4a:b0:
9b:9d:05:d6:52:ef:27:65:94:75:cc:87:cb:a7:2f:
b0:3f:02:53:dc:a6:b7:24:d2:86:0d:98:3c:ae:44:
94:e1:63:af:6d:6f:ce:33:73:60:10:87:c5:41:f1:
b0:95:66:23:2d:70:1a:89:dd:cf:12:b3:d1:16:0f:
70:b2:a1:46:43:b1:aa:7f:e3:9a:e5:d9:4c:f4:ce:
e7:a2:dd:6c:d3:67:62:52:23:33:b6:ad:b0:3e:9a:
43:b8:c2:71:5f:5c:e4:cf:ca:e8:16:11:13:80:59:
42:2b:03:65:ce:28:5f:68:61:f1:64:16:88:3f:09:
64:c1:75:21:bd:c1:f1:4a:5b:e4:f1:28:0b:68:b9:
c2:4f:0b:36:e1:6f:05:55:32:3d:08:d7:f3:29:22:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:51:06:94:D2:74:BE:C9:C4:CB:98:DF:47:73:74:35:1E:A0:5C:2C
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/eFEGlNJ0vsnEy5jfR3N0NR6gXCw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.92.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:cb:ec:aa:2d:ff:6c:58:43:4b:b0:31:46:2b:56:9f:de:9d:
71:8a:6c:63:55:5b:87:c3:57:08:5f:4d:09:8e:10:e1:bc:1e:
fb:0b:4a:43:57:76:29:44:a2:37:9f:51:61:aa:53:d3:d9:56:
23:21:55:29:87:04:50:52:00:e2:7e:e5:2d:f5:a3:bb:ff:78:
d8:49:fb:fa:20:bc:e5:bd:c9:2d:0b:9b:56:78:b0:83:76:a5:
0f:c2:42:a7:da:64:ed:e1:11:da:6c:66:ae:a7:7a:9b:f9:31:
dc:cc:0d:ba:64:4c:e0:06:04:aa:d5:a6:2e:93:c5:1f:14:c6:
61:27:72:2d:71:43:8c:60:53:b9:06:06:dc:b7:35:ab:71:6c:
df:83:2a:58:36:df:ad:05:fa:2a:40:5b:73:ad:a7:69:7b:1b:
fb:1f:7d:59:95:09:a0:fe:4f:08:6e:3e:e2:3e:18:f7:e7:64:
fb:9d:1e:96:34:e9:cd:d2:9d:7e:ba:b9:fd:cf:8f:c6:14:6d:
6f:d8:e6:3f:38:94:bd:1c:e6:04:a9:2a:f5:ed:53:3a:84:17:
11:8f:4f:4b:4b:62:c6:f1:82:0e:5d:51:85:b9:e9:87:4b:30:
f7:ca:70:9d:40:d7:54:7d:db:09:4e:06:52:8b:35:e0:12:c8:
cf:14:30:65
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC21Z035HA0dCv0Xagxp4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjQwMTAxMDIzMDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ODUxMDY5NGQyNzRiZWM5YzRjYjk4ZGY0NzczNzQzNTFlYTA1YzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypigI7seGFt9Z1bvwyu2CJZv3jed
QvIn/9s938FeETul/Pbfwn4xtE7A8UmrK+l3w3X+CUJrtekYDC9etaeKMFkbu8Xx
CmItyvNXLfNpCLjQ/k0Zq3b+lqXVJCV0RTuX+Y2t/C7mSrCbnQXWUu8nZZR1zIfL
py+wPwJT3Ka3JNKGDZg8rkSU4WOvbW/OM3NgEIfFQfGwlWYjLXAaid3PErPRFg9w
sqFGQ7Gqf+Oa5dlM9M7not1s02diUiMztq2wPppDuMJxX1zkz8roFhETgFlCKwNl
zihfaGHxZBaIPwlkwXUhvcHxSlvk8SgLaLnCTws24W8FVTI9CNfzKSIdVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHhRBpTSdL7JxMuY30dzdDUeoFwsMB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvZUZFR2xOSjB2c25FeTVqZlIzTjBOUjZnWEN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWxcMA0G
CSqGSIb3DQEBCwUAA4IBAQA8y+yqLf9sWENLsDFGK1af3p1ximxjVVuHw1cIX00J
jhDhvB77C0pDV3YpRKI3n1FhqlPT2VYjIVUphwRQUgDifuUt9aO7/3jYSfv6ILzl
vcktC5tWeLCDdqUPwkKn2mTt4RHabGaup3qb+THczA26ZEzgBgSq1aYuk8UfFMZh
J3ItcUOMYFO5BgbctzWrcWzfgypYNt+tBfoqQFtzradpexv7H31ZlQmg/k8Ibj7i
Phj352T7nR6WNOnN0p1+urn9z4/GFG1v2OY/OJS9HOYEqSr17VM6hBcRj09LS2LG
8YIOXVGFuemHSzD3ynCdQNdUfdsJTgZSizXgEsjPFDBl
-----END CERTIFICATE-----
Generated at Sun May 19 15:06:14 2024 by rpki-client on console-ams.rpki-client.org