Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/ECb4lSfCwqkH_UTQxvJX6ZFZoJU.roa
File: ECb4lSfCwqkH_UTQxvJX6ZFZoJU.roa (raw, json)
Hash identifier: m4rZzYpcdpCfrGYMVx+p8glnlMfh3U7tKDGfyvWdqAY=
Subject key identifier: 10:26:F8:95:27:C2:C2:A9:07:FD:44:D0:C6:F2:57:E9:91:59:A0:95
Certificate issuer: /CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Certificate serial: 018CC2DAE47A99D7C8BC2F400AE4E5134CEE
Authority key identifier: 28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/ECb4lSfCwqkH_UTQxvJX6ZFZoJU.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31500
IP address blocks: 194.110.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e4:7a:99:d7:c8:bc:2f:40:0a:e4:e5:13:4c:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2829eb664506b86bfa1f702f6b1ffb484cc2cb12
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1026f89527c2c2a907fd44d0c6f257e99159a095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:28:ab:94:7e:88:7a:de:05:ba:fb:02:ca:d8:
aa:0a:10:6d:9f:9b:38:13:fa:e7:54:6f:8f:1c:79:
cd:ee:82:04:0c:17:4f:d1:16:9b:20:02:c3:80:4b:
6c:d8:3d:59:9e:62:53:47:f1:cf:50:e2:fc:c1:de:
de:1a:a2:ef:90:fe:b6:07:13:dc:b1:13:be:ae:4c:
19:94:9e:ac:b1:0a:5e:15:b8:ed:2a:1d:b6:ca:a2:
86:be:49:10:bc:d2:e1:43:f1:94:69:6a:fe:e4:49:
39:77:09:79:a5:64:d4:0e:20:fe:e0:26:1b:34:f1:
55:62:95:a8:c6:4d:5c:0b:36:ac:4b:23:73:de:a6:
78:4b:f3:bc:5f:b9:89:ce:d1:13:b9:43:3d:27:e3:
9b:88:17:3c:01:81:a4:cc:72:a9:c1:04:01:6e:f7:
bb:46:c8:55:b9:59:a6:47:aa:a6:16:25:f5:b3:2c:
ef:7b:b8:9d:b6:8e:f0:b6:b1:ba:04:d8:73:e7:45:
4d:dc:19:fb:dc:b4:08:c2:b4:53:af:13:3d:30:d6:
d6:80:b5:0d:43:fc:bc:f1:73:6d:df:92:e5:b7:17:
20:79:c2:36:11:08:b9:60:9d:72:02:a4:7b:5a:fa:
d6:07:7c:99:63:64:cb:42:79:5d:ad:fe:8a:7b:74:
25:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:26:F8:95:27:C2:C2:A9:07:FD:44:D0:C6:F2:57:E9:91:59:A0:95
X509v3 Authority Key Identifier:
keyid:28:29:EB:66:45:06:B8:6B:FA:1F:70:2F:6B:1F:FB:48:4C:C2:CB:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCnrZkUGuGv6H3Avax_7SEzCyxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/ECb4lSfCwqkH_UTQxvJX6ZFZoJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/e09b24-8aa8-40e6-842c-2f9ec538cc1d/1/KCnrZkUGuGv6H3Avax_7SEzCyxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.66.0/24
Signature Algorithm: sha256WithRSAEncryption
47:d0:f5:64:be:5b:ba:c4:bb:07:47:48:dc:e7:d4:df:42:49:
1a:5a:ad:36:c9:48:8b:96:e2:af:9c:d0:e3:8a:e7:06:f5:f6:
b7:f5:5d:c0:83:6e:f6:76:82:cd:ad:3f:44:0b:29:c5:1d:cd:
d4:32:5f:bd:71:68:41:00:78:d1:b3:86:1d:16:71:53:de:b4:
52:c3:dd:25:d4:e1:a9:c8:35:ac:4f:18:36:3c:ea:f3:86:19:
b1:f6:bb:89:3d:2a:52:4f:9d:59:98:3b:de:e9:e7:b5:f6:7f:
94:17:a6:33:d0:79:da:49:8f:72:12:07:87:e9:9e:38:e4:45:
09:20:7e:b6:1f:a0:8c:88:69:96:28:42:11:9c:bc:47:64:8e:
de:90:1c:0d:7b:1f:47:7f:23:0b:46:4a:ee:f9:e5:dc:97:db:
13:ee:b5:7e:16:30:98:7c:19:8b:4a:e7:0b:ec:2c:e8:79:e7:
68:f8:c9:e9:45:47:64:0d:9f:01:88:52:e9:f2:93:8f:00:5b:
d0:21:ab:f5:96:91:13:8c:d3:07:bc:ac:b6:ba:20:9a:63:62:
db:80:d3:7e:4e:28:ae:45:d3:41:e4:54:b6:cd:19:9b:d7:08:
20:d3:60:3a:99:32:72:5c:05:7e:66:be:fa:5c:23:d4:ed:58:
f7:31:2f:3a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2uR6mdfIvC9ACuTlE0zuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4MjllYjY2NDUwNmI4NmJmYTFmNzAyZjZiMWZmYjQ4NGNj
MmNiMTIwHhcNMjQwMTAxMDIyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDI2Zjg5NTI3YzJjMmE5MDdmZDQ0ZDBjNmYyNTdlOTkxNTlhMDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhiirlH6Iet4FuvsCytiqChBtn5s4
E/rnVG+PHHnN7oIEDBdP0RabIALDgEts2D1ZnmJTR/HPUOL8wd7eGqLvkP62BxPc
sRO+rkwZlJ6ssQpeFbjtKh22yqKGvkkQvNLhQ/GUaWr+5Ek5dwl5pWTUDiD+4CYb
NPFVYpWoxk1cCzasSyNz3qZ4S/O8X7mJztETuUM9J+ObiBc8AYGkzHKpwQQBbve7
RshVuVmmR6qmFiX1syzve7idto7wtrG6BNhz50VN3Bn73LQIwrRTrxM9MNbWgLUN
Q/y88XNt35LltxcgecI2EQi5YJ1yAqR7WvrWB3yZY2TLQnldrf6Ke3QlDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBAm+JUnwsKpB/1E0MbyV+mRWaCVMB8GA1UdIwQY
MBaAFCgp62ZFBrhr+h9wL2sf+0hMwssSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0NuclprVUd1R3Y2SDNBdmF4XzdTRXpDeXhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9lMDliMjQtOGFhOC00MGU2LTg0MmMt
MmY5ZWM1MzhjYzFkLzEvRUNiNGxTZkN3cWtIX1VUUXh2Slg2WkZab0pVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9lMDliMjQtOGFhOC00MGU2LTg0MmMtMmY5ZWM1MzhjYzFk
LzEvS0NuclprVUd1R3Y2SDNBdmF4XzdTRXpDeXhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwm5CMA0G
CSqGSIb3DQEBCwUAA4IBAQBH0PVkvlu6xLsHR0jc59TfQkkaWq02yUiLluKvnNDj
iucG9fa39V3Ag272doLNrT9ECynFHc3UMl+9cWhBAHjRs4YdFnFT3rRSw90l1OGp
yDWsTxg2POrzhhmx9ruJPSpST51ZmDve6ee19n+UF6Yz0HnaSY9yEgeH6Z445EUJ
IH62H6CMiGmWKEIRnLxHZI7ekBwNex9HfyMLRkru+eXcl9sT7rV+FjCYfBmLSucL
7Czoeedo+MnpRUdkDZ8BiFLp8pOPAFvQIav1lpETjNMHvKy2uiCaY2LbgNN+Tiiu
RdNB5FS2zRmb1wgg02A6mTJyXAV+Zr76XCPU7Vj3MS86
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:29:23 2024 by rpki-client on console-ams.rpki-client.org