Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/4bz0k8yLLnaS-s3lG2Ed2r2VEo4.roa
File: 4bz0k8yLLnaS-s3lG2Ed2r2VEo4.roa (raw, json)
Hash identifier: MRGgHfs/mOrj+D30qQz37nd+PrI8tG9K8gHNt/9jjn8=
Subject key identifier: E1:BC:F4:93:CC:8B:2E:76:92:FA:CD:E5:1B:61:1D:DA:BD:95:12:8E
Certificate issuer: /CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
Certificate serial: 018E3BBDE73C4450BE7DFD4A33BB379F2312
Authority key identifier: 78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/4bz0k8yLLnaS-s3lG2Ed2r2VEo4.roa
Signing time: Thu 14 Mar 2024 06:54:45 +0000
ROA not before: Thu 14 Mar 2024 06:54:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 193.242.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.mft
rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3b:bd:e7:3c:44:50:be:7d:fd:4a:33:bb:37:9f:23:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78dedb8988bc8bb1a5f9e55f41726b65446c25ec
Validity
Not Before: Mar 14 06:54:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e1bcf493cc8b2e7692facde51b611ddabd95128e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:8d:5a:67:57:1c:16:73:1e:5b:c8:1d:db:
3d:4c:14:26:e1:d7:3e:49:97:02:ce:c4:03:73:a6:
e8:92:c2:6c:4e:08:aa:5b:d2:36:34:13:1b:de:53:
1f:be:3c:07:9c:a7:b2:ec:d5:c6:62:e0:82:2c:5d:
bd:56:4b:e7:25:0c:cd:85:e9:0a:5e:02:c2:e7:6e:
be:a4:47:97:f4:ff:37:57:1c:2c:18:c5:8b:96:d1:
40:13:97:db:c6:54:e0:30:20:9e:bc:7b:3c:23:79:
88:fa:e0:c3:03:01:bf:d4:5c:b0:80:e0:60:a4:ee:
34:d0:ec:42:a3:17:f7:8b:40:34:c1:e5:09:86:e5:
c3:e8:55:cc:8b:26:54:31:c0:13:d5:d9:f3:f5:80:
3b:6a:d2:c2:22:fe:e4:f2:75:6c:e9:b4:ea:43:6d:
0b:55:fa:fb:ee:3f:85:0f:9b:e5:e7:1b:84:56:23:
78:16:12:a2:da:d5:88:2d:da:b8:c9:5b:49:56:8d:
0f:c8:2e:f3:c3:01:03:17:0f:03:7e:df:dc:33:35:
cf:a5:31:eb:d7:f3:d2:91:10:02:40:3f:9c:e9:7d:
42:81:3b:4e:4d:e1:68:28:61:55:1f:73:aa:44:22:
1c:dd:66:8f:bf:be:ee:79:84:77:3e:21:85:31:0b:
3f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BC:F4:93:CC:8B:2E:76:92:FA:CD:E5:1B:61:1D:DA:BD:95:12:8E
X509v3 Authority Key Identifier:
keyid:78:DE:DB:89:88:BC:8B:B1:A5:F9:E5:5F:41:72:6B:65:44:6C:25:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eN7biYi8i7Gl-eVfQXJrZURsJew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/4bz0k8yLLnaS-s3lG2Ed2r2VEo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/081a4c-d631-4311-9bd5-a6254df526c1/1/eN7biYi8i7Gl-eVfQXJrZURsJew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.208.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:a0:70:34:63:f7:10:f1:da:9b:47:34:ab:28:57:06:47:85:
99:d0:35:f1:15:1e:77:9b:e8:17:94:e1:b9:a0:f4:68:29:62:
6f:59:d1:96:55:7e:3a:5a:68:19:4f:25:05:cc:29:08:51:35:
3b:f3:a5:e5:01:5a:2d:21:f8:86:b8:11:89:38:16:3b:69:19:
94:7c:fe:02:e0:88:de:2a:9e:98:30:4d:8a:b0:30:9f:3d:47:
56:a2:4b:02:f5:6e:09:ed:ba:be:22:e1:a5:c1:7e:d1:2b:cb:
3b:a5:6e:73:50:e2:20:eb:2c:b7:87:e1:49:39:76:1d:f5:bf:
18:c9:32:65:8f:58:0c:38:04:d7:f9:c0:0b:7e:93:c4:99:27:
d9:41:b5:2e:63:74:5b:c4:8a:fe:e9:14:fa:ae:4a:13:8b:4f:
2a:55:d3:ac:52:9c:10:20:63:b1:33:e7:41:88:a6:2c:10:c7:
9c:00:3b:35:c7:8a:b4:19:05:74:de:f5:1b:b1:72:48:92:0c:
1a:5b:d6:08:59:5d:fd:93:61:e3:7b:ca:30:7e:45:29:23:19:
bd:7a:26:87:80:00:b8:36:27:df:ec:e3:80:58:76:94:05:84:
37:bd:c9:26:ba:cc:2b:a0:76:29:f2:d9:62:01:c2:04:2e:9a:
a8:10:cb:11
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY47vec8RFC+ff1KM7s3nyMSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4ZGVkYjg5ODhiYzhiYjFhNWY5ZTU1ZjQxNzI2YjY1NDQ2
YzI1ZWMwHhcNMjQwMzE0MDY1NDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMWJjZjQ5M2NjOGIyZTc2OTJmYWNkZTUxYjYxMWRkYWJkOTUxMjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMiNWmdXHBZzHlvIHds9TBQm4dc+
SZcCzsQDc6boksJsTgiqW9I2NBMb3lMfvjwHnKey7NXGYuCCLF29VkvnJQzNhekK
XgLC526+pEeX9P83VxwsGMWLltFAE5fbxlTgMCCevHs8I3mI+uDDAwG/1FywgOBg
pO400OxCoxf3i0A0weUJhuXD6FXMiyZUMcAT1dnz9YA7atLCIv7k8nVs6bTqQ20L
Vfr77j+FD5vl5xuEViN4FhKi2tWILdq4yVtJVo0PyC7zwwEDFw8Dft/cMzXPpTHr
1/PSkRACQD+c6X1CgTtOTeFoKGFVH3OqRCIc3WaPv77ueYR3PiGFMQs/5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOG89JPMiy52kvrN5RthHdq9lRKOMB8GA1UdIwQY
MBaAFHje24mIvIuxpfnlX0Fya2VEbCXsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZU43YmlZaThpN0dsLWVWZlFYSnJaVVJzSmV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8wODFhNGMtZDYzMS00MzExLTliZDUt
YTYyNTRkZjUyNmMxLzEvNGJ6MGs4eUxMbmFTLXMzbEcyRWQycjJWRW80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8wODFhNGMtZDYzMS00MzExLTliZDUtYTYyNTRkZjUyNmMx
LzEvZU43YmlZaThpN0dsLWVWZlFYSnJaVVJzSmV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwfLQMA0G
CSqGSIb3DQEBCwUAA4IBAQCjoHA0Y/cQ8dqbRzSrKFcGR4WZ0DXxFR53m+gXlOG5
oPRoKWJvWdGWVX46WmgZTyUFzCkIUTU786XlAVotIfiGuBGJOBY7aRmUfP4C4Ije
Kp6YME2KsDCfPUdWoksC9W4J7bq+IuGlwX7RK8s7pW5zUOIg6yy3h+FJOXYd9b8Y
yTJlj1gMOATX+cALfpPEmSfZQbUuY3RbxIr+6RT6rkoTi08qVdOsUpwQIGOxM+dB
iKYsEMecADs1x4q0GQV03vUbsXJIkgwaW9YIWV39k2Hje8owfkUpIxm9eiaHgAC4
Niff7OOAWHaUBYQ3vckmuswroHYp8tliAcIELpqoEMsR
-----END CERTIFICATE-----
Generated at Mon May 20 15:26:43 2024 by rpki-client on console-ams.rpki-client.org