Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/tPim4UxpY4Q8BNjVQNkSmBkw95w.roa
File: tPim4UxpY4Q8BNjVQNkSmBkw95w.roa (raw, json)
Hash identifier: q+jTqMT1EX4hA3VzC3Pp9JTx5FTeqN9y7YvlKoA8xzo=
Subject key identifier: B4:F8:A6:E1:4C:69:63:84:3C:04:D8:D5:40:D9:12:98:19:30:F7:9C
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 018CC7272B6F3B2F60D4B5926F9EC6910F27
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/tPim4UxpY4Q8BNjVQNkSmBkw95w.roa
Signing time: Mon 01 Jan 2024 22:31:22 +0000
ROA not before: Mon 01 Jan 2024 22:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44400
IP address blocks: 93.126.9.0/24 maxlen: 24
93.126.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2b:6f:3b:2f:60:d4:b5:92:6f:9e:c6:91:0f:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 1 22:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4f8a6e14c6963843c04d8d540d912981930f79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f9:86:8e:79:3d:38:f8:6f:95:a8:3f:f3:5d:
02:02:c3:ad:c9:d8:97:bb:74:f7:5b:57:35:a0:5a:
0c:0c:3f:a0:dc:61:6f:b4:e9:ef:e2:75:a6:e3:c7:
73:91:dc:6b:d9:d4:f0:4a:e9:de:7d:53:2b:f6:5a:
a1:ae:ea:71:33:f4:8c:9c:3e:70:d3:65:2e:bf:5c:
e0:44:1a:73:fd:11:8b:63:8c:5f:7b:ad:f2:ab:35:
f5:20:47:5b:be:ba:83:f9:df:19:8c:3b:06:cf:0c:
57:53:35:18:cb:0c:7d:dd:fd:a6:03:6e:7d:71:86:
fd:9d:05:f7:9d:34:c3:23:9a:07:69:e4:0d:84:7d:
01:d9:85:88:8f:62:ac:67:2d:99:15:b1:10:26:de:
4d:eb:d5:64:a5:5f:2e:d3:4a:fd:5e:3f:4e:53:25:
65:e4:59:7a:ff:32:eb:15:3d:f7:f2:f0:8d:6e:54:
c9:ec:44:cf:3a:37:1e:5f:73:a4:44:53:4c:a4:09:
11:c6:ed:e1:6c:55:6d:1a:54:f1:77:e7:c3:e9:aa:
ec:0d:6d:8b:b4:71:0f:e9:62:fe:3e:5e:21:55:7d:
83:9f:5a:ab:d4:7e:f7:63:29:36:72:81:77:ce:f1:
5a:fc:6b:50:4b:b2:6b:45:f3:23:e1:84:4c:6e:eb:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:F8:A6:E1:4C:69:63:84:3C:04:D8:D5:40:D9:12:98:19:30:F7:9C
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/tPim4UxpY4Q8BNjVQNkSmBkw95w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.9.0-93.126.10.255
Signature Algorithm: sha256WithRSAEncryption
46:09:a6:f7:ed:0a:a4:63:16:0d:b6:70:ea:4f:2e:fa:8a:da:
ad:13:97:31:48:5f:e9:38:1c:9a:8d:24:6f:99:91:91:78:fc:
a5:a6:f6:45:23:81:07:c5:8b:c4:ba:e8:22:1b:8f:25:ae:77:
e1:cb:07:07:be:ba:93:45:5f:3c:83:28:be:bd:4e:59:6c:8a:
ad:26:c1:ad:66:c9:f1:f7:ab:fc:c8:e7:fd:77:40:8a:73:c5:
f9:23:d8:6e:69:fa:ee:29:8c:99:f2:3c:cd:6e:9f:1c:3a:fc:
5d:65:de:d5:69:ae:20:bb:90:1f:11:63:b1:8a:dc:25:1b:be:
2a:2e:42:a9:ad:22:0a:07:9e:ae:d1:bc:c8:d8:3d:e6:d5:9f:
c9:53:6f:c9:2e:32:56:b7:e3:e1:1e:99:60:e1:24:50:f3:fe:
21:96:32:a7:9a:c9:c2:1a:5a:e8:73:5e:1e:88:97:e9:20:b9:
38:6d:b5:8e:b9:55:50:2d:d0:0b:d9:00:07:65:31:35:cc:e2:
19:4a:43:7d:05:c9:bc:95:eb:f7:06:67:e7:a6:06:70:ff:d9:
2f:47:ea:43:72:b2:91:87:ab:48:bf:f1:bd:33:02:46:0a:14:
11:6e:c7:1d:09:38:ac:1d:9b:88:5e:7b:3c:d6:e4:7a:82:be:
00:f0:cd:1d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzHJytvOy9g1LWSb57GkQ8nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNTNhY2NiOTRlMTBjZjhjMmMyOTY3OTA2N2VlMzkwOTlm
NDA0ZDMwHhcNMjQwMTAxMjIzMTIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNGY4YTZlMTRjNjk2Mzg0M2MwNGQ4ZDU0MGQ5MTI5ODE5MzBmNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPmGjnk9OPhvlag/810CAsOtydiX
u3T3W1c1oFoMDD+g3GFvtOnv4nWm48dzkdxr2dTwSunefVMr9lqhrupxM/SMnD5w
02Uuv1zgRBpz/RGLY4xfe63yqzX1IEdbvrqD+d8ZjDsGzwxXUzUYywx93f2mA259
cYb9nQX3nTTDI5oHaeQNhH0B2YWIj2KsZy2ZFbEQJt5N69VkpV8u00r9Xj9OUyVl
5Fl6/zLrFT338vCNblTJ7ETPOjceX3OkRFNMpAkRxu3hbFVtGlTxd+fD6arsDW2L
tHEP6WL+Pl4hVX2Dn1qr1H73Yyk2coF3zvFa/GtQS7JrRfMj4YRMbusGcwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFLT4puFMaWOEPATY1UDZEpgZMPecMB8GA1UdIwQY
MBaAFINTrMuU4Qz4wsKWeQZ+45CZ9ATTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEt
NmMzOTUwMTk0MzcwLzEvdFBpbTRVeHBZNFE4Qk5qVlFOa1NtQmt3OTV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy85OTM3NzItNWZiYS00MGJmLWI3MjEtNmMzOTUwMTk0Mzcw
LzEvZzFPc3k1VGhEUGpDd3BaNUJuN2prSm4wQk5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABdfgkD
BABdfgowDQYJKoZIhvcNAQELBQADggEBAEYJpvftCqRjFg22cOpPLvqK2q0TlzFI
X+k4HJqNJG+ZkZF4/KWm9kUjgQfFi8S66CIbjyWud+HLBwe+upNFXzyDKL69Tlls
iq0mwa1myfH3q/zI5/13QIpzxfkj2G5p+u4pjJnyPM1unxw6/F1l3tVpriC7kB8R
Y7GK3CUbviouQqmtIgoHnq7RvMjYPebVn8lTb8kuMla34+EemWDhJFDz/iGWMqea
ycIaWuhzXh6Il+kguThttY65VVAt0AvZAAdlMTXM4hlKQ30FybyV6/cGZ+emBnD/
2S9H6kNyspGHq0i/8b0zAkYKFBFuxx0JOKwdm4heezzW5HqCvgDwzR0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:13:22 2024 by rpki-client on console-ams.rpki-client.org