Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/accEh0v6uYeJfpNkF_Um46OTkjo.roa
File: accEh0v6uYeJfpNkF_Um46OTkjo.roa (raw, json)
Hash identifier: JDAOVoTwjBSPffzRu0z9Q1QR6hEivkj9ywlPiEb0B2w=
Subject key identifier: 69:C7:04:87:4B:FA:B9:87:89:7E:93:64:17:F5:26:E3:A3:93:92:3A
Certificate issuer: /CN=19d960058a553b3f5df9fe727219037c48ab50e1
Certificate serial: 018CC5DC4F1324D20FCFB2D5A223F120E7C8
Authority key identifier: 19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/accEh0v6uYeJfpNkF_Um46OTkjo.roa
Signing time: Mon 01 Jan 2024 16:29:58 +0000
ROA not before: Mon 01 Jan 2024 16:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39383
IP address blocks: 193.84.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:4f:13:24:d2:0f:cf:b2:d5:a2:23:f1:20:e7:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19d960058a553b3f5df9fe727219037c48ab50e1
Validity
Not Before: Jan 1 16:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69c704874bfab987897e936417f526e3a393923a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:c8:22:11:84:21:5c:94:56:68:01:f0:e4:
69:8d:36:a7:11:e1:b8:c1:21:0a:d7:00:c8:a0:d9:
ac:c6:00:f7:07:63:4b:b5:61:b0:d0:85:66:8a:6f:
f4:e4:a6:db:ce:d9:af:0d:e2:0d:e9:fb:b9:54:20:
7f:11:32:8e:6d:f0:44:e6:30:93:72:4f:a8:24:22:
a4:91:f3:2e:4a:d7:91:05:fe:ef:da:ef:9d:26:08:
ef:d6:9f:67:bf:a1:c5:ff:40:56:1f:b2:3c:75:38:
d1:f7:b5:2a:d0:9a:2c:aa:9c:a7:a0:44:c6:01:51:
aa:75:d5:da:d4:39:23:a8:61:eb:50:63:5e:65:16:
ce:d4:61:00:d6:0b:a5:35:0f:63:d7:72:49:66:f2:
63:0b:14:bc:34:e7:cf:23:47:71:82:a6:af:c2:48:
95:79:27:6c:da:75:16:a7:85:26:4d:d9:f0:10:90:
87:e6:44:51:51:ea:2f:92:b8:62:7d:57:5c:f7:9b:
92:42:31:77:9d:9f:09:35:13:1b:c0:54:7f:17:a9:
46:48:2e:4f:09:cd:66:55:03:3b:d4:6f:5c:0b:9c:
ca:3e:91:d5:4f:7e:f3:a4:45:aa:4a:ee:ee:33:7c:
fb:16:3c:db:44:4d:5a:ce:c3:52:58:9a:12:26:7f:
b0:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:C7:04:87:4B:FA:B9:87:89:7E:93:64:17:F5:26:E3:A3:93:92:3A
X509v3 Authority Key Identifier:
keyid:19:D9:60:05:8A:55:3B:3F:5D:F9:FE:72:72:19:03:7C:48:AB:50:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GdlgBYpVOz9d-f5ychkDfEirUOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/accEh0v6uYeJfpNkF_Um46OTkjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bf580b-e912-4c1d-9e50-57b91e815330/1/GdlgBYpVOz9d-f5ychkDfEirUOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.64.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:7d:e8:90:12:83:ed:68:87:e1:6b:da:15:4e:fd:cd:a2:53:
50:ef:5d:53:83:97:80:c9:76:29:e4:6e:6e:dd:9c:ec:99:2e:
46:94:b1:54:db:bb:9c:d1:a8:e5:07:a4:32:fb:66:9b:20:e0:
1e:1e:2b:68:a0:c6:24:de:20:78:9e:c8:b7:ac:60:46:bd:d7:
0e:11:ba:57:8b:ed:fc:a6:df:f6:40:c5:0b:cd:ec:06:d7:1c:
ac:a2:6b:80:e9:4b:f2:1c:d0:f5:ad:bf:09:d0:2d:bf:ad:c1:
73:8f:a4:c1:0c:e2:72:2a:83:48:fe:ed:ea:6c:55:88:0b:ab:
54:85:5c:3b:8f:97:30:d9:89:af:5b:8c:cf:0f:cb:62:52:00:
67:cf:fb:96:f3:4f:18:ab:30:de:7a:f7:6a:cd:7c:8e:9b:97:
ec:01:44:47:c7:b5:aa:9e:8d:16:7b:5f:04:ef:e0:0e:e0:1b:
e7:97:89:c2:8e:e8:2f:9e:35:62:1c:bd:d8:19:a0:b6:26:57:
fe:7f:9e:ad:ff:98:f4:ce:e3:6d:b8:b3:25:da:0e:e4:85:8e:
ef:04:15:13:e6:dd:81:84:e5:d9:89:2d:9b:56:98:f9:40:16:
3c:13:51:26:e9:33:a4:4e:68:28:ae:0f:06:96:43:d6:ea:4d:
48:55:14:12
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3E8TJNIPz7LVoiPxIOfIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5ZDk2MDA1OGE1NTNiM2Y1ZGY5ZmU3MjcyMTkwMzdjNDhh
YjUwZTEwHhcNMjQwMTAxMTYyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWM3MDQ4NzRiZmFiOTg3ODk3ZTkzNjQxN2Y1MjZlM2EzOTM5MjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszTIIhGEIVyUVmgB8ORpjTanEeG4
wSEK1wDIoNmsxgD3B2NLtWGw0IVmim/05KbbztmvDeIN6fu5VCB/ETKObfBE5jCT
ck+oJCKkkfMuSteRBf7v2u+dJgjv1p9nv6HF/0BWH7I8dTjR97Uq0JosqpynoETG
AVGqddXa1DkjqGHrUGNeZRbO1GEA1gulNQ9j13JJZvJjCxS8NOfPI0dxgqavwkiV
eSds2nUWp4UmTdnwEJCH5kRRUeovkrhifVdc95uSQjF3nZ8JNRMbwFR/F6lGSC5P
Cc1mVQM71G9cC5zKPpHVT37zpEWqSu7uM3z7FjzbRE1azsNSWJoSJn+wxQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGnHBIdL+rmHiX6TZBf1JuOjk5I6MB8GA1UdIwQY
MBaAFBnZYAWKVTs/Xfn+cnIZA3xIq1DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9iZjU4MGItZTkxMi00YzFkLTllNTAt
NTdiOTFlODE1MzMwLzEvYWNjRWgwdjZ1WWVKZnBOa0ZfVW00Nk9Ua2pvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9iZjU4MGItZTkxMi00YzFkLTllNTAtNTdiOTFlODE1MzMw
LzEvR2RsZ0JZcFZPejlkLWY1eWNoa0RmRWlyVU9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwVRAMA0G
CSqGSIb3DQEBCwUAA4IBAQBqfeiQEoPtaIfha9oVTv3NolNQ711Tg5eAyXYp5G5u
3ZzsmS5GlLFU27uc0ajlB6Qy+2abIOAeHitooMYk3iB4nsi3rGBGvdcOEbpXi+38
pt/2QMULzewG1xysomuA6UvyHND1rb8J0C2/rcFzj6TBDOJyKoNI/u3qbFWIC6tU
hVw7j5cw2YmvW4zPD8tiUgBnz/uW808YqzDeevdqzXyOm5fsAURHx7Wqno0We18E
7+AO4Bvnl4nCjugvnjViHL3YGaC2Jlf+f56t/5j0zuNtuLMl2g7khY7vBBUT5t2B
hOXZiS2bVpj5QBY8E1Em6TOkTmgorg8GlkPW6k1IVRQS
-----END CERTIFICATE-----
Generated at Thu May 23 16:26:46 2024 by rpki-client on console-fra.rpki-client.org