Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dz4VxSxfuciOI7iM22j7fOH67N0.roa
File: dz4VxSxfuciOI7iM22j7fOH67N0.roa (raw, json)
Hash identifier: j8i8DfE9JlJsc0FOTBt5+eBlR+pdtUc9ouNjfkD12ds=
Subject key identifier: 77:3E:15:C5:2C:5F:B9:C8:8E:23:B8:8C:DB:68:FB:7C:E1:FA:EC:DD
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019192CCD4889F792285742FF4F044E570C8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dz4VxSxfuciOI7iM22j7fOH67N0.roa
Signing time: Tue 27 Aug 2024 07:46:22 +0000
ROA not before: Tue 27 Aug 2024 07:46:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214965
IP address blocks: 194.105.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:92:cc:d4:88:9f:79:22:85:74:2f:f4:f0:44:e5:70:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Aug 27 07:46:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=773e15c52c5fb9c88e23b88cdb68fb7ce1faecdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:68:fb:d3:77:30:d7:00:5a:af:e9:70:f6:
16:d7:f9:74:c7:29:15:d5:05:2c:81:ce:d1:89:04:
ab:d6:ac:32:30:09:b8:12:d2:f8:ff:d3:57:66:cb:
e8:f0:66:00:1c:9f:2c:9b:31:6e:9a:24:54:33:8b:
1d:cd:c8:61:39:44:1e:d3:af:f1:e6:ba:8a:0c:a7:
2b:9d:fb:06:69:2c:90:49:3c:12:ad:08:87:65:2c:
8a:42:0d:88:b5:8d:0f:57:ae:20:e4:30:41:d0:da:
7f:40:80:2a:33:8a:03:f7:6f:2e:36:34:42:17:d6:
0d:2f:2e:ef:2f:59:c5:af:c1:09:04:ea:e2:bb:cd:
ea:07:16:2c:cc:b7:a6:fd:2d:36:6c:db:25:a1:7b:
82:b1:a4:88:f1:a0:7a:8e:78:53:30:ce:20:92:de:
3b:a0:3f:fe:6c:52:4a:89:b7:54:c2:8d:32:c9:aa:
b8:ab:fe:35:ea:14:97:1c:98:31:be:bc:86:ca:96:
3d:42:47:b4:d6:3d:62:64:0e:d0:a9:9c:11:3a:6d:
c8:67:54:c7:1e:e3:f7:fb:b8:3a:77:a7:15:0a:68:
98:c7:ab:8b:b8:22:16:3e:10:e4:9f:9a:51:fc:c0:
4c:ac:03:7b:7b:0f:0e:7a:bd:39:de:27:d0:3a:8a:
0a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:3E:15:C5:2C:5F:B9:C8:8E:23:B8:8C:DB:68:FB:7C:E1:FA:EC:DD
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/dz4VxSxfuciOI7iM22j7fOH67N0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.105.82.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:a4:bb:27:a1:27:e8:44:2c:94:eb:03:7f:ca:7a:2a:3c:e1:
bc:e9:4d:1a:77:81:67:09:fa:b7:82:ba:1c:9b:75:a8:7c:94:
e9:a5:04:f6:b3:99:a4:11:17:7f:20:a1:f8:b3:bb:56:37:e1:
4d:5e:6f:80:ed:2a:77:27:28:23:fc:f4:61:7e:ef:5c:be:b1:
76:ae:fa:d3:65:ab:53:30:d3:47:ac:45:79:72:55:c0:7a:2c:
32:14:b6:de:0e:b8:ee:c3:0f:1c:63:86:89:f6:ec:21:7c:a3:
ca:e7:54:9b:21:f1:a4:6a:50:9f:d4:60:f2:58:a3:1e:7d:0a:
d7:a3:db:d6:4f:0d:12:ec:55:0d:99:fa:5a:d3:e3:d4:95:65:
35:4f:d5:ba:59:e0:19:c2:5d:35:cf:7b:21:3c:66:01:06:e0:
b8:25:0a:e9:69:a6:7e:04:6b:96:f2:80:e5:b3:3b:74:85:22:
ef:0d:13:71:b9:2b:50:40:16:b2:90:a2:91:8d:92:ea:1c:ec:
00:26:a2:20:0e:0a:7b:8e:f9:4e:ee:9e:31:89:c1:9a:84:41:
85:9f:9b:fa:dd:a3:16:f0:a0:7b:a7:89:8f:ea:b3:fd:0f:10:
44:59:71:c6:d6:b2:4c:f5:17:6a:94:50:7c:15:ac:89:ca:55:
a0:94:e7:e3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGSzNSIn3kihXQv9PBE5XDIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZDMwZDhhN2UxMmZjN2JmNjJlMGMxMjFlN2NjMjI2ZGVh
NTNiOWIwHhcNMjQwODI3MDc0NjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NzNlMTVjNTJjNWZiOWM4OGUyM2I4OGNkYjY4ZmI3Y2UxZmFlY2RkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuw9o+9N3MNcAWq/pcPYW1/l0xykV
1QUsgc7RiQSr1qwyMAm4EtL4/9NXZsvo8GYAHJ8smzFumiRUM4sdzchhOUQe06/x
5rqKDKcrnfsGaSyQSTwSrQiHZSyKQg2ItY0PV64g5DBB0Np/QIAqM4oD928uNjRC
F9YNLy7vL1nFr8EJBOriu83qBxYszLem/S02bNsloXuCsaSI8aB6jnhTMM4gkt47
oD/+bFJKibdUwo0yyaq4q/416hSXHJgxvryGypY9Qke01j1iZA7QqZwROm3IZ1TH
HuP3+7g6d6cVCmiYx6uLuCIWPhDkn5pR/MBMrAN7ew8Oer053ifQOooKdwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHc+FcUsX7nIjiO4jNto+3zh+uzdMB8GA1UdIwQY
MBaAFD/TDYp+Evx79i4MEh58wibepTubMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvZHo0VnhTeGZ1Y2lPSTdpTTIyajdmT0g2N04wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvUDlNTmluNFNfSHYyTGd3U0huekNKdDZsTzVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwmlSMA0G
CSqGSIb3DQEBCwUAA4IBAQAcpLsnoSfoRCyU6wN/ynoqPOG86U0ad4FnCfq3groc
m3WofJTppQT2s5mkERd/IKH4s7tWN+FNXm+A7Sp3Jygj/PRhfu9cvrF2rvrTZatT
MNNHrEV5clXAeiwyFLbeDrjuww8cY4aJ9uwhfKPK51SbIfGkalCf1GDyWKMefQrX
o9vWTw0S7FUNmfpa0+PUlWU1T9W6WeAZwl01z3shPGYBBuC4JQrpaaZ+BGuW8oDl
szt0hSLvDRNxuStQQBaykKKRjZLqHOwAJqIgDgp7jvlO7p4xicGahEGFn5v63aMW
8KB7p4mP6rP9DxBEWXHG1rJM9RdqlFB8FayJylWglOfj
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:54:23 2024 by rpki-client on console-ams.rpki-client.org