Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/P9YIwde2iT2lSEjP_4Zq7kl0hLA.roa
File: P9YIwde2iT2lSEjP_4Zq7kl0hLA.roa (raw, json)
Hash identifier: 8x2zJf4U8uYhMZ2NrsGp7Cze3AkyAq3m3q9aMSPID+k=
Subject key identifier: 3F:D6:08:C1:D7:B6:89:3D:A5:48:48:CF:FF:86:6A:EE:49:74:84:B0
Certificate issuer: /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial: 018CC26D0C63D72DF1FCE89E9403BC6E34B9
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/P9YIwde2iT2lSEjP_4Zq7kl0hLA.roa
Signing time: Mon 01 Jan 2024 00:29:35 +0000
ROA not before: Mon 01 Jan 2024 00:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51107
IP address blocks: 193.46.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.mft
rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:0c:63:d7:2d:f1:fc:e8:9e:94:03:bc:6e:34:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Validity
Not Before: Jan 1 00:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3fd608c1d7b6893da54848cfff866aee497484b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b5:d4:2d:d3:2a:f0:66:c8:7f:c6:30:1c:20:
49:14:64:af:64:84:94:55:58:ad:1f:b6:68:d4:4b:
8f:17:30:a3:aa:19:3c:cf:53:cb:32:7e:8e:74:80:
17:45:28:ec:f1:a1:d3:07:d9:6f:08:4c:82:3a:89:
dd:61:71:83:39:11:ba:11:ef:81:31:87:7c:02:cc:
27:ac:88:26:27:bf:b8:b2:ad:a6:84:b0:c3:b2:ad:
e0:de:5f:c7:f5:3b:3b:1e:53:86:1a:f2:b5:c1:b1:
5b:ea:e6:53:a8:29:9f:ac:1b:38:72:ab:a4:19:1b:
03:cd:87:41:9e:25:aa:26:9c:69:0e:73:dc:9f:3b:
bc:4f:12:ab:24:73:df:ee:3a:be:4e:94:ba:2d:2c:
1a:39:fe:f9:2e:6c:77:e2:04:63:41:3a:25:9f:74:
fb:a0:ba:28:4a:82:f7:41:7b:db:9f:6b:8e:14:38:
1b:32:d1:f4:01:be:87:88:a8:d5:46:ac:19:d8:ae:
86:16:fa:6e:61:61:d0:5a:10:78:15:e5:8e:7a:5c:
c0:b8:80:2b:70:8c:c7:a6:9a:97:f7:52:cd:a8:1d:
df:1f:74:99:c7:ac:2f:83:57:3f:bf:9b:ad:82:6a:
c2:7a:f9:2c:41:49:4e:ec:59:7f:43:26:b7:5b:ed:
8e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D6:08:C1:D7:B6:89:3D:A5:48:48:CF:FF:86:6A:EE:49:74:84:B0
X509v3 Authority Key Identifier:
keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/P9YIwde2iT2lSEjP_4Zq7kl0hLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.84.0/24
Signature Algorithm: sha256WithRSAEncryption
04:c7:04:de:db:55:22:2a:0a:8a:34:74:7a:08:2e:5b:bb:f5:
ca:3b:75:96:c0:43:a2:e4:f2:e4:e6:60:79:cf:31:26:91:15:
4d:0e:e7:37:98:8e:bf:69:ed:1d:d0:86:c4:08:31:6b:d9:13:
a8:70:77:02:f3:27:76:c3:f6:18:cc:e8:92:ca:1e:3a:11:d1:
41:33:ee:83:6b:11:62:61:60:76:f0:9a:89:1b:10:d7:31:db:
6b:80:81:67:0a:3e:de:d6:3d:f3:5e:29:c7:5f:d0:5c:c4:fb:
a0:a7:96:9e:0e:31:fe:70:5c:f2:45:b1:a1:f5:a4:05:a8:49:
f0:33:c3:0f:e0:c2:d7:1b:5a:fd:80:ce:49:90:7f:bc:fb:88:
02:06:e4:80:7c:f2:74:0e:66:03:b6:15:13:80:3d:58:ab:a9:
f3:03:45:e3:9e:d5:80:3a:d4:f8:4b:69:3d:6a:14:45:d4:b2:
1f:74:10:59:70:f0:91:3e:38:08:28:45:c5:2e:62:ef:c2:29:
53:bd:bd:42:9c:6f:59:3c:b0:1c:1e:19:ef:53:3a:c2:f2:86:
af:7f:f0:3b:0d:aa:c7:57:99:43:ae:09:fe:e3:b2:fb:af:f0:
44:40:36:71:89:83:3e:75:e9:50:c8:c1:e9:63:4b:dc:5b:2f:
ae:81:03:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbQxj1y3x/OielAO8bjS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjA4NTQ1Y2E3MWM1NDk3ZjlhNDQ3OTVhMWMwY2E4YzRk
YmE5NjEwHhcNMjQwMTAxMDAyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZmQ2MDhjMWQ3YjY4OTNkYTU0ODQ4Y2ZmZjg2NmFlZTQ5NzQ4NGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA27XULdMq8GbIf8YwHCBJFGSvZISU
VVitH7Zo1EuPFzCjqhk8z1PLMn6OdIAXRSjs8aHTB9lvCEyCOondYXGDORG6Ee+B
MYd8AswnrIgmJ7+4sq2mhLDDsq3g3l/H9Ts7HlOGGvK1wbFb6uZTqCmfrBs4cquk
GRsDzYdBniWqJpxpDnPcnzu8TxKrJHPf7jq+TpS6LSwaOf75Lmx34gRjQToln3T7
oLooSoL3QXvbn2uOFDgbMtH0Ab6HiKjVRqwZ2K6GFvpuYWHQWhB4FeWOelzAuIAr
cIzHppqX91LNqB3fH3SZx6wvg1c/v5utgmrCevksQUlO7Fl/Qya3W+2OWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD/WCMHXtok9pUhIz/+Gau5JdISwMB8GA1UdIwQY
MBaAFC8ghUXKccVJf5pEeVocDKjE26lhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHlDRlJjcHh4VWxfbWtSNVdod01xTVRicVdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8wZmVmY2QtMzYzYi00ODA2LWI5NGMt
ZGE4NWRlMTY2ODNmLzEvUDlZSXdkZTJpVDJsU0VqUF80WnE3a2wwaExBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8wZmVmY2QtMzYzYi00ODA2LWI5NGMtZGE4NWRlMTY2ODNm
LzEvTHlDRlJjcHh4VWxfbWtSNVdod01xTVRicVdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwS5UMA0G
CSqGSIb3DQEBCwUAA4IBAQAExwTe21UiKgqKNHR6CC5bu/XKO3WWwEOi5PLk5mB5
zzEmkRVNDuc3mI6/ae0d0IbECDFr2ROocHcC8yd2w/YYzOiSyh46EdFBM+6DaxFi
YWB28JqJGxDXMdtrgIFnCj7e1j3zXinHX9BcxPugp5aeDjH+cFzyRbGh9aQFqEnw
M8MP4MLXG1r9gM5JkH+8+4gCBuSAfPJ0DmYDthUTgD1Yq6nzA0XjntWAOtT4S2k9
ahRF1LIfdBBZcPCRPjgIKEXFLmLvwilTvb1CnG9ZPLAcHhnvUzrC8oavf/A7DarH
V5lDrgn+47L7r/BEQDZxiYM+delQyMHpY0vcWy+ugQN1
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:26:04 2024 by rpki-client on console-ams.rpki-client.org