Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/D1xMX8C1CKLzujXAschFsmUrxzk.roa
File: D1xMX8C1CKLzujXAschFsmUrxzk.roa (raw, json)
Hash identifier: 00YVhyFzzjpSuYJXqH8kjUxkd2rtiHm1oTL4OgMBCDs=
Subject key identifier: 0F:5C:4C:5F:C0:B5:08:A2:F3:BA:35:C0:B1:C8:45:B2:65:2B:C7:39
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 01904549AE80EC3536B48263C2FE3D9141C6
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/D1xMX8C1CKLzujXAschFsmUrxzk.roa
Signing time: Sun 23 Jun 2024 13:29:34 +0000
ROA not before: Sun 23 Jun 2024 13:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212762
IP address blocks: 109.176.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:45:49:ae:80:ec:35:36:b4:82:63:c2:fe:3d:91:41:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 23 13:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f5c4c5fc0b508a2f3ba35c0b1c845b2652bc739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6f:b0:0c:54:84:43:9d:59:75:39:d5:c4:c4:
db:cc:92:ca:d1:0c:63:bb:1b:ad:c5:d9:cc:20:80:
74:4d:23:2b:bb:4f:2c:9d:ac:64:2f:c0:7c:7b:3f:
ba:8f:c9:74:3e:ef:05:31:86:e0:a8:09:76:f6:a2:
a8:d5:3d:61:da:6a:cd:30:44:55:ce:c6:19:84:6f:
20:5a:10:fd:68:5c:c5:b5:ee:74:e2:2f:78:99:13:
b5:38:32:e3:71:05:b6:69:16:43:6f:3e:57:96:53:
23:0c:82:ca:e8:55:c8:30:6f:0a:aa:f7:e6:d5:e1:
fa:2b:17:55:c6:75:e0:5f:88:f0:eb:4c:a2:90:c7:
c2:a4:bb:da:5a:6c:ef:1e:78:d2:57:d3:18:8c:44:
10:ee:72:29:60:b4:ef:24:52:88:d7:7b:ac:85:e7:
e5:68:d5:7b:17:e7:3a:de:93:e8:d7:ec:be:5a:97:
5c:74:f4:f5:4c:a2:ab:7a:d5:dc:48:c5:d9:6c:5c:
aa:4e:5a:7b:7a:6c:f0:39:2f:a1:c6:68:dd:d8:b3:
35:81:7d:58:28:b7:1a:0d:29:99:a1:f6:60:91:a8:
45:c6:a4:d5:04:9e:c6:6c:92:ea:ec:6a:d7:ea:34:
16:6b:ec:80:26:00:9f:8f:d4:c0:8f:93:e8:11:ff:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:4C:5F:C0:B5:08:A2:F3:BA:35:C0:B1:C8:45:B2:65:2B:C7:39
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/D1xMX8C1CKLzujXAschFsmUrxzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.202.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1c:10:1c:b8:d9:e2:15:1a:e1:a9:b7:15:32:29:cb:d6:7f:
19:82:c5:e2:70:86:59:65:9c:47:41:c3:b6:02:c3:94:5b:62:
9a:03:b3:c6:e4:32:08:28:0d:31:e6:ed:7e:0d:00:ff:8f:9d:
19:91:71:bc:53:ce:7c:e2:f3:f1:67:38:a5:41:ea:83:81:a6:
f0:d1:dc:23:ec:de:d3:13:99:cb:86:f1:8d:ee:d3:f6:81:11:
88:31:4c:15:cd:f2:87:54:34:78:dd:66:fd:94:27:74:19:da:
4c:bc:b7:e5:2f:17:2c:84:5d:8e:30:95:50:d8:14:15:35:34:
71:df:26:e9:cd:68:87:73:16:6a:2d:ee:a2:7f:6a:de:c4:32:
ec:5f:13:0b:e0:77:0b:7c:bf:9b:08:ad:c3:88:b1:25:e8:b7:
67:66:2d:76:d9:34:3d:3a:1b:a7:ea:ed:63:f3:52:78:cb:09:
c4:4b:24:15:be:1f:d9:f5:70:c9:a9:78:c2:ee:d4:41:6d:0d:
78:49:45:91:8d:de:7f:df:81:31:cd:06:68:a1:28:32:9b:f7:
32:9d:a0:6b:2f:1d:9d:f0:b8:c2:cb:44:c7:2a:ae:cb:b4:6b:
c3:d2:87:64:b4:1b:ea:dd:3b:b4:ff:6c:1b:ce:83:3b:b3:ad:
d5:42:e1:51
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBFSa6A7DU2tIJjwv49kUHGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwNjIzMTMyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZjVjNGM1ZmMwYjUwOGEyZjNiYTM1YzBiMWM4NDViMjY1MmJjNzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzW+wDFSEQ51ZdTnVxMTbzJLK0Qxj
uxutxdnMIIB0TSMru08snaxkL8B8ez+6j8l0Pu8FMYbgqAl29qKo1T1h2mrNMERV
zsYZhG8gWhD9aFzFte504i94mRO1ODLjcQW2aRZDbz5XllMjDILK6FXIMG8Kqvfm
1eH6KxdVxnXgX4jw60yikMfCpLvaWmzvHnjSV9MYjEQQ7nIpYLTvJFKI13ushefl
aNV7F+c63pPo1+y+WpdcdPT1TKKretXcSMXZbFyqTlp7emzwOS+hxmjd2LM1gX1Y
KLcaDSmZofZgkahFxqTVBJ7GbJLq7GrX6jQWa+yAJgCfj9TAj5PoEf8RLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA9cTF/AtQii87o1wLHIRbJlK8c5MB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvRDF4TVg4QzFDS0x6dWpYQXNjaEZzbVVyeHprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbbDKMA0G
CSqGSIb3DQEBCwUAA4IBAQAVHBAcuNniFRrhqbcVMinL1n8ZgsXicIZZZZxHQcO2
AsOUW2KaA7PG5DIIKA0x5u1+DQD/j50ZkXG8U8584vPxZzilQeqDgabw0dwj7N7T
E5nLhvGN7tP2gRGIMUwVzfKHVDR43Wb9lCd0GdpMvLflLxcshF2OMJVQ2BQVNTRx
3ybpzWiHcxZqLe6if2rexDLsXxML4HcLfL+bCK3DiLEl6LdnZi122TQ9Ohun6u1j
81J4ywnESyQVvh/Z9XDJqXjC7tRBbQ14SUWRjd5/34ExzQZooSgym/cynaBrLx2d
8LjCy0THKq7LtGvD0odktBvq3Tu0/2wbzoM7s63VQuFR
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:57:15 2024 by rpki-client on console-fra.rpki-client.org