Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/xO1jIHhKZIANUXkHJ8dzWHFSQX4.roa
File: xO1jIHhKZIANUXkHJ8dzWHFSQX4.roa (raw, json)
Hash identifier: vF8mVYFNOE2MythlsZj+Ebbj8K303pgWaM2qbsBnDdU=
Subject key identifier: C4:ED:63:20:78:4A:64:80:0D:51:79:07:27:C7:73:58:71:52:41:7E
Certificate issuer: /CN=365b4abab716ad1407a902e5176560ecc37c966d
Certificate serial: 018CC2DACEE79ABDC5149A102C0DCE782023
Authority key identifier: 36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/xO1jIHhKZIANUXkHJ8dzWHFSQX4.roa
Signing time: Mon 01 Jan 2024 02:29:28 +0000
ROA not before: Mon 01 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16019
IP address blocks: 130.193.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 10:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ce:e7:9a:bd:c5:14:9a:10:2c:0d:ce:78:20:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=365b4abab716ad1407a902e5176560ecc37c966d
Validity
Not Before: Jan 1 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c4ed6320784a64800d51790727c773587152417e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:22:c2:f4:7d:45:9c:91:5b:cf:ab:99:81:
01:9b:b7:2e:77:9a:05:0e:12:ff:94:b5:ed:53:02:
b1:4f:ab:4f:bc:7e:da:07:95:7f:4c:e9:56:96:9b:
9f:e8:42:39:e1:97:cb:08:c5:74:df:f7:5d:65:69:
ec:1f:ef:b0:3b:44:0a:11:2a:fc:86:8f:a1:c5:08:
f3:b9:50:37:b6:85:3a:a0:70:f8:77:f0:ca:df:c6:
3d:ce:e3:f3:f0:a6:3c:02:ef:27:5e:b8:b3:fa:3c:
25:38:3f:80:d2:31:6d:12:8f:ee:33:05:2a:ba:3d:
c4:d9:61:aa:35:03:c1:4e:c1:dd:23:f1:18:f6:82:
9d:76:f3:98:84:61:f6:43:75:84:98:93:84:e8:6e:
c4:d0:75:6d:b7:72:54:ee:70:69:b4:76:98:0a:56:
55:b0:44:74:a7:d4:92:d6:bc:3d:86:6a:68:a3:80:
aa:74:04:c6:23:4b:e4:40:96:ea:4e:93:93:6f:32:
36:23:ab:28:0e:09:da:de:e8:6b:f6:ae:7e:7a:4a:
e2:d5:68:d5:1c:44:92:bd:99:32:e1:02:d5:5e:99:
2a:9c:92:7c:15:97:e6:dc:1a:fe:1a:5d:57:ac:9a:
d6:a9:c2:29:87:a2:23:38:5b:84:f8:8d:5a:31:fc:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:ED:63:20:78:4A:64:80:0D:51:79:07:27:C7:73:58:71:52:41:7E
X509v3 Authority Key Identifier:
keyid:36:5B:4A:BA:B7:16:AD:14:07:A9:02:E5:17:65:60:EC:C3:7C:96:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NltKurcWrRQHqQLlF2Vg7MN8lm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/xO1jIHhKZIANUXkHJ8dzWHFSQX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e35ac1-05d1-406d-b668-36eaf7948531/1/NltKurcWrRQHqQLlF2Vg7MN8lm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.193.17.0/24
Signature Algorithm: sha256WithRSAEncryption
52:17:37:f8:b2:ed:d9:f7:dd:0a:8f:f0:bb:81:25:4e:c2:6f:
fb:45:fe:b2:37:20:9d:5e:7a:2f:8d:86:24:a2:6e:b5:e4:65:
bf:f2:42:64:4a:2d:ba:aa:e1:b4:47:aa:63:ce:0b:5e:18:69:
41:85:d7:dd:73:47:11:aa:5c:13:a4:fe:2c:d2:27:38:11:5a:
e1:8f:40:60:58:a8:d6:49:0e:35:4d:eb:63:c0:63:a8:21:94:
56:16:fa:4e:2a:9c:18:88:58:fc:61:85:4f:11:ad:c1:cb:69:
9a:ba:4e:64:15:64:7c:3c:f5:20:51:9a:eb:77:99:78:bf:3b:
eb:e1:83:1e:00:70:a2:29:8b:3b:73:41:02:ac:87:ba:fa:bd:
e2:ca:cc:cf:8b:c0:8f:96:e4:29:b2:79:69:ae:59:f4:c6:72:
60:0a:36:b1:d5:8d:54:d2:7c:4f:bc:44:52:fd:73:04:c6:d8:
4f:04:60:8f:00:ce:45:32:f3:f9:a1:e5:5b:a0:94:ce:20:da:
a5:eb:4a:83:15:7c:f7:f3:c4:15:c1:17:61:d8:6d:1b:77:3b:
ac:54:4d:26:ad:c0:29:89:a5:0a:59:36:13:ad:7b:3d:51:8b:
4a:c9:9e:ef:88:e5:32:b1:ae:d8:45:be:1f:17:53:b9:9a:a1:
a1:37:1c:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2s7nmr3FFJoQLA3OeCAjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NWI0YWJhYjcxNmFkMTQwN2E5MDJlNTE3NjU2MGVjYzM3
Yzk2NmQwHhcNMjQwMTAxMDIyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNGVkNjMyMDc4NGE2NDgwMGQ1MTc5MDcyN2M3NzM1ODcxNTI0MTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG8iwvR9RZyRW8+rmYEBm7cud5oF
DhL/lLXtUwKxT6tPvH7aB5V/TOlWlpuf6EI54ZfLCMV03/ddZWnsH++wO0QKESr8
ho+hxQjzuVA3toU6oHD4d/DK38Y9zuPz8KY8Au8nXriz+jwlOD+A0jFtEo/uMwUq
uj3E2WGqNQPBTsHdI/EY9oKddvOYhGH2Q3WEmJOE6G7E0HVtt3JU7nBptHaYClZV
sER0p9SS1rw9hmpoo4CqdATGI0vkQJbqTpOTbzI2I6soDgna3uhr9q5+ekri1WjV
HESSvZky4QLVXpkqnJJ8FZfm3Br+Gl1XrJrWqcIph6IjOFuE+I1aMfwDIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMTtYyB4SmSADVF5ByfHc1hxUkF+MB8GA1UdIwQY
MBaAFDZbSrq3Fq0UB6kC5RdlYOzDfJZtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2Njgt
MzZlYWY3OTQ4NTMxLzEveE8xaklIaEtaSUFOVVhrSEo4ZHpXSEZTUVg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lMzVhYzEtMDVkMS00MDZkLWI2NjgtMzZlYWY3OTQ4NTMx
LzEvTmx0S3VyY1dyUlFIcVFMbEYyVmc3TU44bG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgsERMA0G
CSqGSIb3DQEBCwUAA4IBAQBSFzf4su3Z990Kj/C7gSVOwm/7Rf6yNyCdXnovjYYk
om615GW/8kJkSi26quG0R6pjzgteGGlBhdfdc0cRqlwTpP4s0ic4EVrhj0BgWKjW
SQ41TetjwGOoIZRWFvpOKpwYiFj8YYVPEa3By2mauk5kFWR8PPUgUZrrd5l4vzvr
4YMeAHCiKYs7c0ECrIe6+r3iyszPi8CPluQpsnlprln0xnJgCjax1Y1U0nxPvERS
/XMExthPBGCPAM5FMvP5oeVboJTOINql60qDFXz388QVwRdh2G0bdzusVE0mrcAp
iaUKWTYTrXs9UYtKyZ7viOUysa7YRb4fF1O5mqGhNxyq
-----END CERTIFICATE-----
Generated at Mon Jun 17 19:16:39 2024 by rpki-client on console-ams.rpki-client.org