Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/22SVnuvj0xWyz_V6mn4eZHGW6dU.roa
File: 22SVnuvj0xWyz_V6mn4eZHGW6dU.roa (raw, json)
Hash identifier: GFiDhx58X2VSo0AdGxHCBOxI94vWMZpsJD39Xvn31xU=
Subject key identifier: DB:64:95:9E:EB:E3:D3:15:B2:CF:F5:7A:9A:7E:1E:64:71:96:E9:D5
Certificate issuer: /CN=c82206f506c826eb1057e5c269b3710e38ab696c
Certificate serial: 018CC424F90D3CC89D68EF28DDB98783B481
Authority key identifier: C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/22SVnuvj0xWyz_V6mn4eZHGW6dU.roa
Signing time: Mon 01 Jan 2024 08:30:06 +0000
ROA not before: Mon 01 Jan 2024 08:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 194.173.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f9:0d:3c:c8:9d:68:ef:28:dd:b9:87:83:b4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82206f506c826eb1057e5c269b3710e38ab696c
Validity
Not Before: Jan 1 08:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db64959eebe3d315b2cff57a9a7e1e647196e9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c7:9a:c9:03:b7:de:68:0f:fc:ce:8b:af:47:
19:cf:d1:e4:81:48:8a:54:bf:f3:3d:6c:37:82:16:
bb:aa:03:d3:38:b6:42:2b:0e:93:8d:92:80:ae:4c:
b1:c1:fb:d4:8d:79:4a:dc:6e:a8:3c:7b:af:55:a4:
d7:3f:bf:c0:ed:54:1b:7b:34:ba:91:43:bd:e5:77:
36:3f:f3:c3:28:b8:91:9a:e7:7d:a5:93:91:5d:77:
a7:d0:5d:1b:2f:d1:a5:e6:b1:17:f3:f6:ae:d5:29:
b9:19:54:27:e9:ea:23:2a:0d:a7:53:a0:0a:4a:46:
33:c5:e8:d4:73:10:c2:e6:ad:19:54:29:4a:bf:93:
b9:0f:38:b8:de:bd:db:6a:df:76:cc:18:02:62:7a:
51:6a:7e:11:52:bd:d6:34:d6:97:d7:9e:9c:62:90:
5e:39:06:52:64:e8:42:ce:08:13:8c:b3:ef:7d:cb:
5d:43:56:12:89:b7:75:f7:fc:93:c0:08:ef:a2:ef:
8f:62:a7:11:28:d0:bc:2d:a7:d4:cd:16:38:6d:78:
05:c2:bf:3a:f0:9e:e7:0b:ce:8e:5d:2b:e6:1c:40:
a9:e9:f0:81:b3:05:10:14:26:c6:a0:c0:fe:e2:d7:
d8:c5:8a:fa:0d:51:1c:f2:c3:3c:64:64:7c:87:8d:
6f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:64:95:9E:EB:E3:D3:15:B2:CF:F5:7A:9A:7E:1E:64:71:96:E9:D5
X509v3 Authority Key Identifier:
keyid:C8:22:06:F5:06:C8:26:EB:10:57:E5:C2:69:B3:71:0E:38:AB:69:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCIG9QbIJusQV-XCabNxDjiraWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/22SVnuvj0xWyz_V6mn4eZHGW6dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/29b082-d6d1-4147-af1c-61b0c7ff2e4e/1/yCIG9QbIJusQV-XCabNxDjiraWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.173.47.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:ca:3f:d3:4b:87:9e:66:a6:51:81:b1:d2:67:94:b2:de:50:
3d:18:41:42:68:31:0c:53:5a:a3:fd:05:15:b6:d4:7c:de:80:
94:9e:e8:df:f9:ba:2b:ee:65:d8:a7:6f:5a:04:cb:15:81:f4:
f7:15:04:87:a7:e7:38:e4:25:21:e5:c0:54:7f:34:00:f1:68:
20:5c:68:f5:97:f1:5c:77:fb:27:d7:65:7c:53:39:33:e7:06:
cc:c4:9c:da:a1:ff:c6:d3:1b:62:8c:59:3c:b2:6b:bb:ad:cd:
fe:e4:e7:f0:8f:a9:d0:c7:33:37:90:32:77:74:ad:f7:22:25:
7a:f9:1b:8b:99:06:0e:2b:b4:cf:aa:63:d2:80:c6:b8:70:5a:
95:6b:6b:01:21:71:f2:37:c9:ff:e7:8c:73:a2:86:bb:c9:11:
a4:46:81:ee:e8:a6:bc:6a:06:51:3c:59:08:a0:65:fe:1d:2a:
44:a9:3f:f5:3b:b9:67:4d:d4:bf:33:0a:68:57:c0:82:18:f7:
a3:74:9a:22:2f:f6:bd:3e:41:56:92:03:97:e2:2f:8e:8b:cf:
40:91:dc:1a:8f:48:9e:21:a7:9f:57:7f:6e:49:bf:d2:a3:4f:
48:57:61:7b:21:6e:a1:07:4f:58:d9:4c:c0:73:36:4b:85:8f:
c1:ef:bf:4c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJPkNPMidaO8o3bmHg7SBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4MjIwNmY1MDZjODI2ZWIxMDU3ZTVjMjY5YjM3MTBlMzhh
YjY5NmMwHhcNMjQwMTAxMDgzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYjY0OTU5ZWViZTNkMzE1YjJjZmY1N2E5YTdlMWU2NDcxOTZlOWQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnceayQO33mgP/M6Lr0cZz9HkgUiK
VL/zPWw3gha7qgPTOLZCKw6TjZKArkyxwfvUjXlK3G6oPHuvVaTXP7/A7VQbezS6
kUO95Xc2P/PDKLiRmud9pZORXXen0F0bL9Gl5rEX8/au1Sm5GVQn6eojKg2nU6AK
SkYzxejUcxDC5q0ZVClKv5O5Dzi43r3bat92zBgCYnpRan4RUr3WNNaX156cYpBe
OQZSZOhCzggTjLPvfctdQ1YSibd19/yTwAjvou+PYqcRKNC8LafUzRY4bXgFwr86
8J7nC86OXSvmHECp6fCBswUQFCbGoMD+4tfYxYr6DVEc8sM8ZGR8h41vLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNtklZ7r49MVss/1epp+HmRxlunVMB8GA1UdIwQY
MBaAFMgiBvUGyCbrEFflwmmzcQ44q2lsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS8yOWIwODItZDZkMS00MTQ3LWFmMWMt
NjFiMGM3ZmYyZTRlLzEvMjJTVm51dmoweFd5el9WNm1uNGVaSEdXNmRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS8yOWIwODItZDZkMS00MTQ3LWFmMWMtNjFiMGM3ZmYyZTRl
LzEveUNJRzlRYklKdXNRVi1YQ2FiTnhEamlyYVd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwq0vMA0G
CSqGSIb3DQEBCwUAA4IBAQChyj/TS4eeZqZRgbHSZ5Sy3lA9GEFCaDEMU1qj/QUV
ttR83oCUnujf+bor7mXYp29aBMsVgfT3FQSHp+c45CUh5cBUfzQA8WggXGj1l/Fc
d/sn12V8Uzkz5wbMxJzaof/G0xtijFk8smu7rc3+5Ofwj6nQxzM3kDJ3dK33IiV6
+RuLmQYOK7TPqmPSgMa4cFqVa2sBIXHyN8n/54xzooa7yRGkRoHu6Ka8agZRPFkI
oGX+HSpEqT/1O7lnTdS/MwpoV8CCGPejdJoiL/a9PkFWkgOX4i+Oi89Akdwaj0ie
IaefV39uSb/So09IV2F7IW6hB09Y2UzAczZLhY/B779M
-----END CERTIFICATE-----
Generated at Sat Jun 8 03:30:02 2024 by rpki-client on console-ams.rpki-client.org