Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/AH-SsE-eyv33m8A6nKC900r1Whg.roa
File: AH-SsE-eyv33m8A6nKC900r1Whg.roa (raw, json)
Hash identifier: zrEIjErxAmK6cpDPI0IbAc7DqdzjiGcCtWkiP2C//fg=
Subject key identifier: 00:7F:92:B0:4F:9E:CA:FD:F7:9B:C0:3A:9C:A0:BD:D3:4A:F5:5A:18
Certificate issuer: /CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Certificate serial: 0192484D26F5857BCF23093F7F196A819A46
Authority key identifier: DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/AH-SsE-eyv33m8A6nKC900r1Whg.roa
Signing time: Tue 01 Oct 2024 13:37:48 +0000
ROA not before: Tue 01 Oct 2024 13:37:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 193.176.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:48:4d:26:f5:85:7b:cf:23:09:3f:7f:19:6a:81:9a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc030af8c7538b9c5af852f1c42a175aaf46f7e0
Validity
Not Before: Oct 1 13:37:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=007f92b04f9ecafdf79bc03a9ca0bdd34af55a18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:1a:97:37:22:09:84:60:17:33:fb:d5:f1:
52:a3:73:0d:8c:d1:9b:72:4e:c0:26:1b:78:c4:07:
10:7c:5b:5f:b1:5d:ad:49:d9:e3:ed:1e:9a:4a:73:
b5:2e:99:b1:b1:36:7c:e8:f6:f7:4d:8a:51:4c:8a:
b5:d8:64:7f:bc:a0:ea:13:4a:25:6c:43:6f:00:07:
e7:86:f7:ca:45:34:91:dd:de:23:18:d0:ad:b9:7d:
4a:7c:83:a6:25:a8:ff:13:76:83:79:90:47:0a:1a:
57:c9:c0:26:c5:cf:fc:b6:78:c5:0b:6c:56:9a:0b:
4b:80:83:77:33:7e:68:23:73:71:0d:f2:ff:73:2f:
96:73:14:79:d7:a1:42:62:ef:2b:56:33:13:4c:38:
97:cd:6d:f1:9b:a3:11:04:e4:59:0d:2e:69:92:7c:
cb:65:cf:4b:24:6b:5d:41:2b:eb:66:43:49:42:48:
73:1e:70:85:8e:d4:02:c6:b1:63:31:0c:fa:e2:11:
9b:ea:2d:3d:5b:9f:30:ac:8d:0c:e3:8f:da:dd:c8:
f9:6c:45:4c:02:1a:e6:89:31:e8:10:87:2a:e8:4b:
f8:7c:b2:08:e3:a4:e8:0e:46:13:45:b9:78:20:df:
fe:a8:47:2e:b7:3f:b0:58:57:d5:d4:be:bd:5c:5e:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7F:92:B0:4F:9E:CA:FD:F7:9B:C0:3A:9C:A0:BD:D3:4A:F5:5A:18
X509v3 Authority Key Identifier:
keyid:DC:03:0A:F8:C7:53:8B:9C:5A:F8:52:F1:C4:2A:17:5A:AF:46:F7:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AMK-MdTi5xa-FLxxCoXWq9G9-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/AH-SsE-eyv33m8A6nKC900r1Whg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8f5e75-1334-4fb0-9f6a-bddc18c7a3f3/1/3AMK-MdTi5xa-FLxxCoXWq9G9-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:0d:60:7b:38:71:e1:ea:ea:82:bc:69:3e:8f:e1:2e:bd:f5:
ba:97:b6:33:0a:39:89:68:aa:f2:39:13:38:69:38:5f:4b:4c:
7a:b1:36:4d:1c:bb:0c:57:3c:5b:d8:bc:49:98:1e:db:e1:c2:
c7:b3:45:62:59:4c:d0:d3:64:f4:af:14:99:f6:67:2b:df:45:
c7:52:20:3d:45:49:60:da:76:61:c0:63:42:6b:e5:20:1b:16:
07:dc:7d:63:86:6b:d7:72:b7:d3:8b:5d:5f:08:3f:5c:ba:2e:
6b:64:8d:eb:a0:8e:9d:42:fe:ac:39:07:5d:a2:4b:f1:c4:30:
53:ec:46:18:38:a4:48:e9:1f:3e:49:88:59:50:73:32:33:fc:
f0:b7:57:75:ba:9b:d7:91:f7:8d:dc:23:1c:38:71:9f:bb:95:
43:d0:ae:9e:4e:35:a2:a4:cf:86:36:08:30:26:13:c4:8d:5c:
0f:8c:44:62:73:8a:bc:0e:32:e4:9f:c7:d1:a6:90:37:04:a4:
8a:e6:dd:27:d7:b7:33:73:93:a1:69:55:42:64:2d:2e:a1:ad:
e0:e5:e7:7c:76:a4:d4:3a:3e:fa:39:32:f5:6a:5a:ea:36:36:
d9:d2:0f:fc:14:22:f7:ac:91:cc:d6:81:a1:fc:5e:fa:73:1e:
f6:95:55:57
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJITSb1hXvPIwk/fxlqgZpGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjMDMwYWY4Yzc1MzhiOWM1YWY4NTJmMWM0MmExNzVhYWY0
NmY3ZTAwHhcNMjQxMDAxMTMzNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMDdmOTJiMDRmOWVjYWZkZjc5YmMwM2E5Y2EwYmRkMzRhZjU1YTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncYalzciCYRgFzP71fFSo3MNjNGb
ck7AJht4xAcQfFtfsV2tSdnj7R6aSnO1LpmxsTZ86Pb3TYpRTIq12GR/vKDqE0ol
bENvAAfnhvfKRTSR3d4jGNCtuX1KfIOmJaj/E3aDeZBHChpXycAmxc/8tnjFC2xW
mgtLgIN3M35oI3NxDfL/cy+WcxR516FCYu8rVjMTTDiXzW3xm6MRBORZDS5pknzL
Zc9LJGtdQSvrZkNJQkhzHnCFjtQCxrFjMQz64hGb6i09W58wrI0M44/a3cj5bEVM
AhrmiTHoEIcq6Ev4fLII46ToDkYTRbl4IN/+qEcutz+wWFfV1L69XF7jzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAB/krBPnsr995vAOpygvdNK9VoYMB8GA1UdIwQY
MBaAFNwDCvjHU4ucWvhS8cQqF1qvRvfgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEt
YmRkYzE4YzdhM2YzLzEvQUgtU3NFLWV5djMzbThBNm5LQzkwMHIxV2hnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My84ZjVlNzUtMTMzNC00ZmIwLTlmNmEtYmRkYzE4YzdhM2Yz
LzEvM0FNSy1NZFRpNXhhLUZMeHhDb1hXcTlHOS1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbD9MA0G
CSqGSIb3DQEBCwUAA4IBAQBaDWB7OHHh6uqCvGk+j+EuvfW6l7YzCjmJaKryORM4
aThfS0x6sTZNHLsMVzxb2LxJmB7b4cLHs0ViWUzQ02T0rxSZ9mcr30XHUiA9RUlg
2nZhwGNCa+UgGxYH3H1jhmvXcrfTi11fCD9cui5rZI3roI6dQv6sOQddokvxxDBT
7EYYOKRI6R8+SYhZUHMyM/zwt1d1upvXkfeN3CMcOHGfu5VD0K6eTjWipM+GNggw
JhPEjVwPjERic4q8DjLkn8fRppA3BKSK5t0n17czc5OhaVVCZC0uoa3g5ed8dqTU
Oj76OTL1alrqNjbZ0g/8FCL3rJHM1oGh/F76cx72lVVX
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:52 2024 by rpki-client on console-fra.rpki-client.org