Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/X9B5s3dk9ws-lYR3AdMTWuLZI1I.roa
File: X9B5s3dk9ws-lYR3AdMTWuLZI1I.roa (raw, json)
Hash identifier: QuBYGv59IZ1IU5hE8kl+/xD6SO+6/G7B7bjTDwVMC24=
Subject key identifier: 5F:D0:79:B3:77:64:F7:0B:3E:95:84:77:01:D3:13:5A:E2:D9:23:52
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 018CC56E1B717E838D42EEE2B1537AB308C6
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/X9B5s3dk9ws-lYR3AdMTWuLZI1I.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 196984
IP address blocks: 194.30.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:1b:71:7e:83:8d:42:ee:e2:b1:53:7a:b3:08:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5fd079b37764f70b3e95847701d3135ae2d92352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:ee:00:01:18:75:f1:6a:21:9b:05:21:aa:6b:
b6:18:8b:07:72:b4:5c:9b:9d:0b:78:28:9f:5b:eb:
33:5e:6b:15:c7:3f:db:7f:10:f4:f3:be:52:45:d7:
c7:f5:1d:c8:66:49:f0:af:dd:57:a1:b4:ad:dc:91:
31:77:18:f2:a2:c2:f8:ea:fa:3a:c1:78:de:06:d2:
e4:4e:a5:d0:e9:ae:80:30:24:1f:01:f0:52:c2:a1:
bb:ef:e5:de:98:c4:56:c3:e4:90:98:f2:ed:17:c9:
1b:bf:dc:3e:d6:4f:dc:5f:6c:66:8d:e5:89:56:92:
5e:77:de:dd:5d:6f:7c:2d:18:a3:99:de:eb:58:58:
cc:81:d9:f7:27:40:5a:be:c7:74:5a:f6:69:74:2c:
3d:68:57:5d:30:7b:0d:93:f6:0e:4e:ae:b9:0e:8f:
af:23:d2:9d:e6:48:3f:62:de:9e:32:9f:47:a3:4a:
bc:3f:1a:2b:ee:18:62:a6:e7:31:3b:66:e6:2c:db:
35:b7:26:99:f9:1a:3b:e9:b3:c5:ec:7b:56:93:f7:
cb:1b:1b:c4:1b:15:1f:30:79:d5:e1:50:ce:96:1e:
fd:e7:40:cb:5d:2a:af:8c:4b:9d:e3:20:27:b5:b5:
18:f4:8f:7b:16:1a:68:e3:9d:4f:dc:3f:d8:40:1e:
44:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D0:79:B3:77:64:F7:0B:3E:95:84:77:01:D3:13:5A:E2:D9:23:52
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/X9B5s3dk9ws-lYR3AdMTWuLZI1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.158.0/24
Signature Algorithm: sha256WithRSAEncryption
45:aa:cf:75:00:cc:c8:23:75:05:c3:49:87:28:7f:51:30:73:
7f:6c:e9:9a:11:44:44:28:6d:0b:26:18:ba:ab:c2:9c:48:c5:
5f:ad:e2:7b:83:d9:fc:66:2b:77:21:9b:90:27:28:10:7a:ee:
33:56:a0:c4:6d:c5:8c:12:b5:16:d2:46:4c:47:20:27:08:6f:
12:43:57:82:cd:ee:7d:55:17:62:02:6c:03:94:d3:6d:1c:ff:
5b:d6:ed:4d:e9:1a:b2:c1:8d:0f:3c:d6:8b:b1:78:04:0a:8c:
78:45:45:41:9a:b6:95:83:a4:9e:1e:e5:72:31:ed:17:ca:88:
30:64:e0:78:a0:6c:6f:e8:e9:d1:9d:79:f6:34:d7:44:e7:63:
78:87:8e:dd:1a:34:32:02:d5:ac:9e:6e:dc:92:6f:d6:dd:25:
30:a9:c7:8c:56:4e:ec:3c:60:9a:a7:83:95:90:d5:64:e1:08:
d0:90:00:2c:9e:b1:3d:7d:df:46:00:4f:de:ae:cb:f8:59:08:
f7:a1:74:6a:fa:cd:c4:96:d8:7e:0d:68:bd:7a:af:50:8f:45:
a7:39:4a:79:90:1a:95:87:82:12:95:9b:15:c2:4a:dc:cc:46:
48:fb:49:01:72:7c:1b:6d:23:81:f7:ee:af:90:86:7c:6f:5a:
99:15:63:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzFbhtxfoONQu7isVN6swjGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw
ZGRhOGIwHhcNMjQwMTAxMTQyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZmQwNzliMzc3NjRmNzBiM2U5NTg0NzcwMWQzMTM1YWUyZDkyMzUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu4AARh18WohmwUhqmu2GIsHcrRc
m50LeCifW+szXmsVxz/bfxD0875SRdfH9R3IZknwr91XobSt3JExdxjyosL46vo6
wXjeBtLkTqXQ6a6AMCQfAfBSwqG77+XemMRWw+SQmPLtF8kbv9w+1k/cX2xmjeWJ
VpJed97dXW98LRijmd7rWFjMgdn3J0Bavsd0WvZpdCw9aFddMHsNk/YOTq65Do+v
I9Kd5kg/Yt6eMp9Ho0q8Pxor7hhipucxO2bmLNs1tyaZ+Ro76bPF7HtWk/fLGxvE
GxUfMHnV4VDOlh7950DLXSqvjEud4yAntbUY9I97Fhpo451P3D/YQB5EjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF/QebN3ZPcLPpWEdwHTE1ri2SNSMB8GA1UdIwQY
MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt
YWUwN2YzMmU0MTAyLzEvWDlCNXMzZGs5d3MtbFlSM0FkTVRXdUxaSTFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy
LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh6eMA0G
CSqGSIb3DQEBCwUAA4IBAQBFqs91AMzII3UFw0mHKH9RMHN/bOmaEUREKG0LJhi6
q8KcSMVfreJ7g9n8Zit3IZuQJygQeu4zVqDEbcWMErUW0kZMRyAnCG8SQ1eCze59
VRdiAmwDlNNtHP9b1u1N6RqywY0PPNaLsXgECox4RUVBmraVg6SeHuVyMe0Xyogw
ZOB4oGxv6OnRnXn2NNdE52N4h47dGjQyAtWsnm7ckm/W3SUwqceMVk7sPGCap4OV
kNVk4QjQkAAsnrE9fd9GAE/ersv4WQj3oXRq+s3Elth+DWi9eq9Qj0WnOUp5kBqV
h4ISlZsVwkrczEZI+0kBcnwbbSOB9+6vkIZ8b1qZFWP1
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:12:38 2024 by rpki-client on console-fra.rpki-client.org