Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/d4g2CMfOesXTJ0JvWmzOGDh8mdc.roa
File: d4g2CMfOesXTJ0JvWmzOGDh8mdc.roa (raw, json)
Hash identifier: Nxu3IGAHcFFubg7sVCJfgI7hmeWFCqQy9MAlrxL8bvM=
Subject key identifier: 77:88:36:08:C7:CE:7A:C5:D3:27:42:6F:5A:6C:CE:18:38:7C:99:D7
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 018CC26D2C4B98906522DAEC98C7A8CC14D1
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/d4g2CMfOesXTJ0JvWmzOGDh8mdc.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 194.104.85.0/24 maxlen: 24
194.104.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2c:4b:98:90:65:22:da:ec:98:c7:a8:cc:14:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=77883608c7ce7ac5d327426f5a6cce18387c99d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:86:d6:e2:c1:15:bf:cf:2c:9e:1c:39:00:
08:9a:a2:eb:31:0c:9c:1c:25:2c:88:35:22:d4:8f:
51:6a:6c:20:43:d5:03:46:08:b0:fc:cc:07:d1:10:
a6:1b:a6:98:cb:55:82:e2:fb:6c:1a:fc:eb:46:9d:
d7:76:1b:39:48:af:42:a6:ee:9f:56:b7:fd:53:0f:
7c:3e:26:24:df:83:1a:d7:cc:e6:a0:7e:80:d4:69:
0c:a3:c6:0b:c8:7b:d5:c0:8d:72:ba:8f:df:f1:cc:
4d:8c:b9:91:bb:74:af:4e:53:80:9d:15:79:24:f9:
f5:ad:ff:d9:f5:44:8d:bb:c9:66:42:ea:30:06:83:
01:9c:65:07:59:d3:ee:09:f0:16:41:1f:84:25:b6:
17:3f:5a:f6:a8:00:fe:f1:4b:91:67:96:e1:2a:5a:
4e:1b:2f:17:ec:ab:ad:44:03:d7:e7:50:48:c5:a6:
bb:f6:11:a5:33:74:48:e0:38:45:3a:f7:db:49:b1:
01:76:b0:5d:a2:c9:b1:a5:98:8a:79:f5:4e:c9:ff:
e9:23:3e:75:6d:9c:22:12:db:c2:f2:95:a0:39:8c:
1d:87:8a:7b:ad:00:13:21:a6:50:6a:4c:8c:9b:17:
12:aa:6a:da:e2:2b:ce:e6:02:cc:4e:a5:05:38:7b:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:88:36:08:C7:CE:7A:C5:D3:27:42:6F:5A:6C:CE:18:38:7C:99:D7
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/d4g2CMfOesXTJ0JvWmzOGDh8mdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.104.1.0/24
194.104.85.0/24
Signature Algorithm: sha256WithRSAEncryption
02:5a:07:1b:48:2d:79:e6:29:b0:63:f0:ca:de:4e:33:6d:b0:
81:7b:1d:c6:c1:cb:ac:c0:f4:7a:6b:a9:da:fe:48:14:e5:35:
ee:75:5f:d6:eb:79:c4:a2:9f:2b:82:e4:59:8c:6a:de:02:75:
5a:e4:21:ff:a5:51:8e:8f:f5:ea:a4:cd:a4:cd:46:db:c5:a3:
72:2c:e5:43:b0:b3:21:1b:a3:d9:43:e9:af:fe:5d:85:e9:c7:
5d:c1:ea:bc:c0:9c:28:56:37:88:79:38:3c:60:3c:04:11:c6:
72:64:bb:be:24:46:57:c1:1e:61:f3:c4:26:e8:9e:43:fc:d4:
17:58:63:fd:e4:fe:10:1f:01:fb:cc:7f:1b:81:82:99:7c:98:
f4:cd:43:e8:b2:4c:1f:1d:cb:4d:2d:ff:20:76:5f:a8:b3:f2:
91:31:b5:81:6f:f4:d8:86:c5:1e:1b:5e:f1:62:f8:bb:c9:c7:
81:28:ce:21:3c:88:49:cf:c7:06:4c:87:a0:a7:ee:4e:df:96:
07:04:ea:48:8f:9c:84:19:6f:b4:78:67:ef:79:ce:46:b8:19:
6d:d9:fc:34:2b:ab:ac:0e:12:77:70:e4:f0:af:f2:dc:2c:57:
5f:e4:78:13:f1:a2:11:b0:7b:d2:ee:8d:66:0f:7b:d5:3c:61:
9b:6c:42:e7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzCbSxLmJBlItrsmMeozBTRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYzY5NjQ2NDU3YThiZjhlZjk1NjliOWI0MjdlOWYyYzQ2
MmU1NmUwHhcNMjQwMTAxMDAyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3Nzg4MzYwOGM3Y2U3YWM1ZDMyNzQyNmY1YTZjY2UxODM4N2M5OWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnWGG1uLBFb/PLJ4cOQAImqLrMQyc
HCUsiDUi1I9RamwgQ9UDRgiw/MwH0RCmG6aYy1WC4vtsGvzrRp3Xdhs5SK9Cpu6f
Vrf9Uw98PiYk34Ma18zmoH6A1GkMo8YLyHvVwI1yuo/f8cxNjLmRu3SvTlOAnRV5
JPn1rf/Z9USNu8lmQuowBoMBnGUHWdPuCfAWQR+EJbYXP1r2qAD+8UuRZ5bhKlpO
Gy8X7KutRAPX51BIxaa79hGlM3RI4DhFOvfbSbEBdrBdosmxpZiKefVOyf/pIz51
bZwiEtvC8pWgOYwdh4p7rQATIaZQakyMmxcSqmra4ivO5gLMTqUFOHvCiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHeINgjHznrF0ydCb1pszhg4fJnXMB8GA1UdIwQY
MBaAFI/GlkZFeov475VpubQn6fLEYuVuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTkt
YjBiMzVhMzRlMzg4LzEvZDRnMkNNZk9lc1hUSjBKdldtek9HRGg4bWRjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny85ZmFiNWMtZTEzOC00ZWY2LTg3OTktYjBiMzVhMzRlMzg4
LzEvajhhV1JrVjZpX2p2bFdtNXRDZnA4c1JpNVc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwmgBAwQA
wmhVMA0GCSqGSIb3DQEBCwUAA4IBAQACWgcbSC155imwY/DK3k4zbbCBex3Gwcus
wPR6a6na/kgU5TXudV/W63nEop8rguRZjGreAnVa5CH/pVGOj/XqpM2kzUbbxaNy
LOVDsLMhG6PZQ+mv/l2F6cddweq8wJwoVjeIeTg8YDwEEcZyZLu+JEZXwR5h88Qm
6J5D/NQXWGP95P4QHwH7zH8bgYKZfJj0zUPoskwfHctNLf8gdl+os/KRMbWBb/TY
hsUeG17xYvi7yceBKM4hPIhJz8cGTIegp+5O35YHBOpIj5yEGW+0eGfvec5GuBlt
2fw0K6usDhJ3cOTwr/LcLFdf5HgT8aIRsHvS7o1mD3vVPGGbbELn
-----END CERTIFICATE-----
Generated at Fri May 10 01:20:10 2024 by rpki-client on console-fra.rpki-client.org