Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/AOwralqNDtiJ1y2R5Uvc-L_z7WQ.roa
File: AOwralqNDtiJ1y2R5Uvc-L_z7WQ.roa (raw, json)
Hash identifier: H2Sj8Mu6NB6iyy+2YgM3P0Dri7rc6ArN0tFPr8edjH0=
Subject key identifier: 00:EC:2B:6A:5A:8D:0E:D8:89:D7:2D:91:E5:4B:DC:F8:BF:F3:ED:64
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 018CC726D63D818492E682B77CA205AD1EBA
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/AOwralqNDtiJ1y2R5Uvc-L_z7WQ.roa
Signing time: Mon 01 Jan 2024 22:31:00 +0000
ROA not before: Mon 01 Jan 2024 22:31:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198187
IP address blocks: 93.159.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:d6:3d:81:84:92:e6:82:b7:7c:a2:05:ad:1e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Jan 1 22:31:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00ec2b6a5a8d0ed889d72d91e54bdcf8bff3ed64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2e:cd:04:eb:da:e1:a4:ef:30:58:bb:e4:54:
e7:47:3f:bc:ce:87:38:8a:c3:ba:67:fc:fd:64:4f:
6f:b2:74:c2:f7:8f:63:85:a3:0a:e9:b7:49:42:83:
ee:7d:df:99:c6:68:a6:b1:02:8b:56:ad:0f:d0:14:
0b:e6:b6:19:42:89:7b:c4:1e:41:d0:9d:0c:b8:d7:
bd:ae:64:1d:fa:80:1c:9f:47:1e:56:04:66:53:51:
05:80:48:ea:a8:ef:05:a4:6b:c6:46:db:ca:a8:7b:
86:4d:f1:bb:64:4f:5d:8d:ff:3f:e5:45:a5:51:d3:
c2:33:6c:81:9d:03:8f:aa:da:6b:2f:5d:9b:e9:25:
f1:6a:dc:c4:ad:1d:36:c0:b9:fb:aa:98:27:d6:21:
8d:6d:26:0c:3d:b6:5c:19:61:fe:81:12:ad:3d:9d:
ce:34:f1:f8:75:f7:ad:a5:1d:be:50:0d:67:e7:82:
d8:7a:5f:4f:1f:43:44:8d:71:3e:b1:4c:02:48:61:
5c:60:1e:bf:f4:72:97:30:0d:62:4b:fa:a8:c4:a7:
2c:73:eb:a2:ab:da:2f:41:fd:96:86:d8:05:a3:4e:
58:1e:5d:27:23:75:13:0d:63:ec:71:a1:ea:8b:10:
53:96:b3:d1:78:c5:5b:21:b0:4b:ae:27:ed:10:85:
e2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:EC:2B:6A:5A:8D:0E:D8:89:D7:2D:91:E5:4B:DC:F8:BF:F3:ED:64
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/AOwralqNDtiJ1y2R5Uvc-L_z7WQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.186.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:88:91:aa:fc:7f:97:33:26:78:4d:fc:4e:aa:16:4b:61:f0:
80:16:f5:52:22:81:d4:44:29:ba:01:83:e9:1d:ab:ff:31:9e:
e8:dc:64:7d:60:1e:0f:9f:36:09:db:bb:8b:8f:da:88:7a:a2:
52:5c:2a:63:a6:bd:98:23:48:35:d7:2f:5f:43:24:fc:6a:2b:
a6:ea:cb:06:8d:92:a5:68:4e:ab:9e:ca:0c:a5:67:d3:73:49:
40:43:9d:2a:33:1b:fb:84:8a:d6:2d:b3:1c:07:ed:63:05:18:
82:8f:47:ce:f5:0f:67:9f:1d:99:ec:05:31:66:b3:61:52:50:
42:12:73:9e:f5:08:e5:d4:04:c8:19:e8:57:5c:50:c3:d4:af:
a5:d6:7e:2c:d8:ff:b9:8c:3d:2a:3d:3c:11:07:d6:98:16:bf:
b4:82:0e:ce:ef:9c:68:81:19:99:99:8e:da:a8:c5:71:38:38:
81:1e:8f:ef:39:4e:40:97:6d:a9:9a:bd:1f:3b:6e:9d:aa:02:
a8:97:35:b1:5f:53:ab:cd:70:73:77:9c:09:32:c1:e5:98:5b:
78:3f:d7:4d:21:77:c2:50:e6:62:c3:4a:49:40:c2:f7:f0:8c:
12:61:83:e2:22:b8:c8:f6:72:10:03:c5:88:f9:3c:bd:f7:10:
64:1f:54:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJtY9gYSS5oK3fKIFrR66MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMmE2NDZiZWQ0YzQxN2E2YjQ4MDVmOTNkNzdhN2E0NjVl
MzRiOTMwHhcNMjQwMTAxMjIzMTAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGVjMmI2YTVhOGQwZWQ4ODlkNzJkOTFlNTRiZGNmOGJmZjNlZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjC7NBOva4aTvMFi75FTnRz+8zoc4
isO6Z/z9ZE9vsnTC949jhaMK6bdJQoPufd+ZxmimsQKLVq0P0BQL5rYZQol7xB5B
0J0MuNe9rmQd+oAcn0ceVgRmU1EFgEjqqO8FpGvGRtvKqHuGTfG7ZE9djf8/5UWl
UdPCM2yBnQOPqtprL12b6SXxatzErR02wLn7qpgn1iGNbSYMPbZcGWH+gRKtPZ3O
NPH4dfetpR2+UA1n54LYel9PH0NEjXE+sUwCSGFcYB6/9HKXMA1iS/qoxKcsc+ui
q9ovQf2WhtgFo05YHl0nI3UTDWPscaHqixBTlrPReMVbIbBLriftEIXixQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADsK2pajQ7YidctkeVL3Pi/8+1kMB8GA1UdIwQY
MBaAFBIqZGvtTEF6a0gF+T13p6Rl40uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWIt
NWNiZDFmM2ZmMzlhLzEvQU93cmFscU5EdGlKMXkyUjVVdmMtTF96N1dRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWItNWNiZDFmM2ZmMzlh
LzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ+6MA0G
CSqGSIb3DQEBCwUAA4IBAQAbiJGq/H+XMyZ4TfxOqhZLYfCAFvVSIoHURCm6AYPp
Hav/MZ7o3GR9YB4PnzYJ27uLj9qIeqJSXCpjpr2YI0g11y9fQyT8aium6ssGjZKl
aE6rnsoMpWfTc0lAQ50qMxv7hIrWLbMcB+1jBRiCj0fO9Q9nnx2Z7AUxZrNhUlBC
EnOe9Qjl1ATIGehXXFDD1K+l1n4s2P+5jD0qPTwRB9aYFr+0gg7O75xogRmZmY7a
qMVxODiBHo/vOU5Al22pmr0fO26dqgKolzWxX1OrzXBzd5wJMsHlmFt4P9dNIXfC
UOZiw0pJQML38IwSYYPiIrjI9nIQA8WI+Ty99xBkH1Sr
-----END CERTIFICATE-----
Generated at Sun May 19 21:21:55 2024 by rpki-client on console-ams.rpki-client.org