Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/28cZ9OmPGAlw1UvwwuYM3S3pyT0.roa
File: 28cZ9OmPGAlw1UvwwuYM3S3pyT0.roa (raw, json)
Hash identifier: bRgZy67uR0Q4U/UNqcb6AvEmgxRI6fH8E1n12Ta3HhA=
Subject key identifier: DB:C7:19:F4:E9:8F:18:09:70:D5:4B:F0:C2:E6:0C:DD:2D:E9:C9:3D
Certificate issuer: /CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Certificate serial: 018CC8DF06628B7E5C1C42127CC73E8AA5CE
Authority key identifier: 0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/28cZ9OmPGAlw1UvwwuYM3S3pyT0.roa
Signing time: Tue 02 Jan 2024 06:31:48 +0000
ROA not before: Tue 02 Jan 2024 06:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59809
IP address blocks: 195.110.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 19:23:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:06:62:8b:7e:5c:1c:42:12:7c:c7:3e:8a:a5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6d8fd77dade3d3f96cb49931948c2729ada0de
Validity
Not Before: Jan 2 06:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dbc719f4e98f180970d54bf0c2e60cdd2de9c93d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c6:df:11:d9:8f:89:b1:9e:41:cb:38:0d:77:
44:5f:6a:2a:7c:c5:1b:19:34:bf:7e:e3:8b:f7:ae:
64:b0:67:41:d1:51:23:3c:7a:51:a6:3a:bc:60:21:
38:d4:5b:8b:4f:c9:66:2a:f1:b5:e9:73:d4:63:24:
d8:27:ef:de:10:12:3f:4c:cb:bd:50:42:a9:2f:3b:
80:d2:60:bc:2b:e6:40:c7:66:de:a4:57:fd:94:f2:
ec:da:35:bc:0d:06:78:42:f4:a7:7f:23:a0:d8:d5:
f6:ad:84:ce:e2:cf:27:db:a6:28:9a:a7:8c:9d:31:
ef:90:5f:c2:a8:01:75:66:01:4a:a6:fb:fe:1f:56:
86:e2:5d:6a:36:7e:ce:b7:09:57:90:58:fa:e9:81:
40:f2:98:e4:51:dd:84:d3:73:12:61:da:35:15:79:
03:48:25:7c:10:0c:01:d5:a6:d6:82:bb:4f:20:c9:
72:00:2b:31:66:c6:9e:32:00:b2:10:ae:65:41:5e:
d0:54:c4:ee:7d:31:ab:cf:7f:c3:d4:17:48:d4:a3:
2d:99:c6:30:d4:cc:de:49:8e:07:24:2f:42:35:2a:
a4:d9:f3:ff:29:2a:9a:94:fe:2f:38:73:e9:71:7c:
e0:d0:85:bb:13:be:cf:17:1d:20:c1:ad:12:c8:28:
34:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C7:19:F4:E9:8F:18:09:70:D5:4B:F0:C2:E6:0C:DD:2D:E9:C9:3D
X509v3 Authority Key Identifier:
keyid:0E:6D:8F:D7:7D:AD:E3:D3:F9:6C:B4:99:31:94:8C:27:29:AD:A0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dm2P132t49P5bLSZMZSMJymtoN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/28cZ9OmPGAlw1UvwwuYM3S3pyT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/6977cd-4343-4b4c-8cea-bd35c048b930/1/Dm2P132t49P5bLSZMZSMJymtoN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.110.190.0/24
Signature Algorithm: sha256WithRSAEncryption
01:04:05:a4:e8:73:ce:15:4f:91:c5:a5:62:7b:52:08:12:4f:
d4:11:8e:fe:7b:92:00:32:dd:d7:2b:dd:b0:7c:89:ad:52:c0:
30:8b:0c:c1:44:cf:f1:c4:07:35:dd:9b:1c:70:a7:5a:90:6f:
13:6a:57:da:b8:3b:23:bb:1c:c6:71:6c:79:ea:b1:d2:a5:e7:
04:e5:f7:d0:ec:9a:c9:fc:fe:2a:24:ff:b1:cd:b0:a3:8d:69:
8d:fd:9b:15:24:a1:56:b7:d6:61:98:d3:3f:84:7e:a0:92:1e:
be:a4:bb:c7:59:dd:c3:2c:77:23:e9:d5:78:dc:b2:23:d3:c6:
06:90:ba:ce:c1:8d:40:ea:5e:22:d5:1d:56:ac:df:9a:4f:b0:
b2:be:9f:c8:de:ad:88:31:3a:3b:f3:0f:76:e5:fe:95:50:73:
fe:14:27:8f:fe:0b:61:07:45:a2:e0:fa:3b:3e:e1:7b:e8:8d:
1f:d4:c4:ac:b6:12:5d:10:43:b4:d2:81:76:98:0c:79:50:d8:
76:1b:48:a5:97:4e:66:4d:0b:da:cc:2e:4a:e6:8e:79:65:21:
a9:9f:85:b8:cf:59:39:89:60:32:db:4b:c1:06:ae:3c:2c:f4:
05:a3:c1:db:05:4d:63:a9:de:58:77:ee:ef:a3:33:75:ed:73:
c7:03:2a:a3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3wZii35cHEISfMc+iqXOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmQ4ZmQ3N2RhZGUzZDNmOTZjYjQ5OTMxOTQ4YzI3Mjlh
ZGEwZGUwHhcNMjQwMTAyMDYzMTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYmM3MTlmNGU5OGYxODA5NzBkNTRiZjBjMmU2MGNkZDJkZTljOTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksbfEdmPibGeQcs4DXdEX2oqfMUb
GTS/fuOL965ksGdB0VEjPHpRpjq8YCE41FuLT8lmKvG16XPUYyTYJ+/eEBI/TMu9
UEKpLzuA0mC8K+ZAx2bepFf9lPLs2jW8DQZ4QvSnfyOg2NX2rYTO4s8n26YomqeM
nTHvkF/CqAF1ZgFKpvv+H1aG4l1qNn7OtwlXkFj66YFA8pjkUd2E03MSYdo1FXkD
SCV8EAwB1abWgrtPIMlyACsxZsaeMgCyEK5lQV7QVMTufTGrz3/D1BdI1KMtmcYw
1MzeSY4HJC9CNSqk2fP/KSqalP4vOHPpcXzg0IW7E77PFx0gwa0SyCg01QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNvHGfTpjxgJcNVL8MLmDN0t6ck9MB8GA1UdIwQY
MBaAFA5tj9d9rePT+Wy0mTGUjCcpraDeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi82OTc3Y2QtNDM0My00YjRjLThjZWEt
YmQzNWMwNDhiOTMwLzEvMjhjWjlPbVBHQWx3MVV2d3d1WU0zUzNweVQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi82OTc3Y2QtNDM0My00YjRjLThjZWEtYmQzNWMwNDhiOTMw
LzEvRG0yUDEzMnQ0OVA1YkxTWk1aU01KeW10b040LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw26+MA0G
CSqGSIb3DQEBCwUAA4IBAQABBAWk6HPOFU+RxaVie1IIEk/UEY7+e5IAMt3XK92w
fImtUsAwiwzBRM/xxAc13ZsccKdakG8TalfauDsjuxzGcWx56rHSpecE5ffQ7JrJ
/P4qJP+xzbCjjWmN/ZsVJKFWt9ZhmNM/hH6gkh6+pLvHWd3DLHcj6dV43LIj08YG
kLrOwY1A6l4i1R1WrN+aT7Cyvp/I3q2IMTo78w925f6VUHP+FCeP/gthB0Wi4Po7
PuF76I0f1MSsthJdEEO00oF2mAx5UNh2G0ill05mTQvazC5K5o55ZSGpn4W4z1k5
iWAy20vBBq48LPQFo8HbBU1jqd5Yd+7vozN17XPHAyqj
-----END CERTIFICATE-----
Generated at Fri May 17 01:14:21 2024 by rpki-client on console-ams.rpki-client.org