Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/8I1BY2okATe8r-BTYrDN0_RMJvU.roa
File: 8I1BY2okATe8r-BTYrDN0_RMJvU.roa (raw, json)
Hash identifier: ZbJevq7jewI+co+8U01BQ1bwgN/Ezt/vQQXgooJ6VLc=
Subject key identifier: F0:8D:41:63:6A:24:01:37:BC:AF:E0:53:62:B0:CD:D3:F4:4C:26:F5
Certificate issuer: /CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Certificate serial: 018CC80128E65DBC37D61E253406150BEB08
Authority key identifier: C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/8I1BY2okATe8r-BTYrDN0_RMJvU.roa
Signing time: Tue 02 Jan 2024 02:29:28 +0000
ROA not before: Tue 02 Jan 2024 02:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43528
IP address blocks: 193.201.192.0/22 maxlen: 27
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jul 2024 01:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:28:e6:5d:bc:37:d6:1e:25:34:06:15:0b:eb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b1d7c3b4ee8723336a658539aa7346f23d6772
Validity
Not Before: Jan 2 02:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f08d41636a240137bcafe05362b0cdd3f44c26f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8d:eb:2c:cd:a2:80:3a:3a:92:e8:25:09:08:
bb:63:fc:c0:6a:a3:a2:f0:f2:7a:b7:5d:76:3d:64:
f0:9c:6d:20:bf:49:a3:05:37:f2:85:37:96:80:25:
ff:49:e5:ba:28:96:f7:e8:54:dc:c6:aa:a9:96:63:
4f:94:f2:24:c0:2a:2d:5c:2b:14:84:f8:d0:9f:a3:
7a:63:c9:49:bb:4f:83:85:1c:dd:c2:a8:75:d5:3c:
a0:02:de:63:90:fd:7a:96:4b:0f:a4:20:8f:98:dd:
31:90:6d:ae:38:29:4c:4f:7f:85:72:9b:f9:d0:f7:
e5:ae:c3:f2:f5:ba:65:82:18:8d:6d:7a:7a:4e:4e:
e4:ab:39:71:8f:97:84:32:c3:22:d8:81:14:50:d8:
78:c3:41:76:90:a2:eb:eb:df:23:e1:c6:21:ee:09:
45:c8:9a:9c:4a:c6:8e:88:fe:55:fd:3e:08:e7:63:
8a:78:b7:94:81:25:4e:cf:55:c0:12:0c:a2:21:72:
bd:e0:1c:44:fd:6b:f7:49:dc:d4:5e:3e:61:fb:9f:
85:9a:ad:b6:ac:78:de:34:c5:fa:02:61:29:f3:a2:
2c:ac:ca:61:ec:3c:29:48:f6:3b:f1:aa:5c:46:5a:
e2:1e:12:81:e9:0e:33:56:6c:72:b4:4f:81:4f:78:
b6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8D:41:63:6A:24:01:37:BC:AF:E0:53:62:B0:CD:D3:F4:4C:26:F5
X509v3 Authority Key Identifier:
keyid:C9:B1:D7:C3:B4:EE:87:23:33:6A:65:85:39:AA:73:46:F2:3D:67:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybHXw7TuhyMzamWFOapzRvI9Z3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/8I1BY2okATe8r-BTYrDN0_RMJvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e094bd-091c-433b-bf58-164cc6a4ed1e/1/ybHXw7TuhyMzamWFOapzRvI9Z3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.192.0/22
Signature Algorithm: sha256WithRSAEncryption
97:0d:01:84:91:15:9c:94:b9:1c:75:b7:69:2d:4b:0e:d7:bf:
f7:02:ff:01:77:95:b4:80:8a:ad:4e:45:44:d7:27:58:c5:97:
f5:6d:dc:45:78:5f:3a:f2:57:83:e2:c8:05:a0:05:ca:fc:27:
11:85:71:c2:05:78:64:1f:78:12:0c:a7:af:85:e2:bc:1d:f6:
27:f6:5a:e2:68:27:d3:f8:8a:de:9f:cc:f3:04:36:28:df:fa:
06:e1:41:55:ca:70:ef:d6:b1:11:b0:5f:68:43:a7:ea:90:a0:
ea:f9:79:2d:ed:48:90:a8:dc:28:26:ce:1c:8d:c6:bf:23:c8:
a4:fd:14:b7:15:bb:dd:87:6c:be:ae:9d:cc:10:7a:94:66:32:
f5:89:84:d6:ff:82:29:1a:90:f1:bd:8a:f4:1a:6e:c8:ba:a6:
f2:1d:56:66:02:c6:be:73:36:9f:2c:b4:ff:fe:f3:50:0b:e4:
92:28:5d:b8:e0:18:d1:1b:d6:92:5d:2e:de:26:90:52:95:f8:
92:ef:0f:33:70:3b:1d:fe:81:99:ed:77:af:ce:59:a5:28:d7:
3f:f7:58:dd:6b:5c:31:2f:8d:50:77:23:c1:84:d0:19:49:46:
92:0a:b9:2a:17:2c:48:41:d6:52:2d:5a:5e:83:61:ef:76:54:
d8:5d:68:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIASjmXbw31h4lNAYVC+sIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YjFkN2MzYjRlZTg3MjMzMzZhNjU4NTM5YWE3MzQ2ZjIz
ZDY3NzIwHhcNMjQwMTAyMDIyOTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDhkNDE2MzZhMjQwMTM3YmNhZmUwNTM2MmIwY2RkM2Y0NGMyNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi43rLM2igDo6kuglCQi7Y/zAaqOi
8PJ6t112PWTwnG0gv0mjBTfyhTeWgCX/SeW6KJb36FTcxqqplmNPlPIkwCotXCsU
hPjQn6N6Y8lJu0+DhRzdwqh11TygAt5jkP16lksPpCCPmN0xkG2uOClMT3+Fcpv5
0PflrsPy9bplghiNbXp6Tk7kqzlxj5eEMsMi2IEUUNh4w0F2kKLr698j4cYh7glF
yJqcSsaOiP5V/T4I52OKeLeUgSVOz1XAEgyiIXK94BxE/Wv3SdzUXj5h+5+Fmq22
rHjeNMX6AmEp86IsrMph7DwpSPY78apcRlriHhKB6Q4zVmxytE+BT3i2rQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPCNQWNqJAE3vK/gU2KwzdP0TCb1MB8GA1UdIwQY
MBaAFMmx18O07ocjM2plhTmqc0byPWdyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWJIWHc3VHVoeU16YW1XRk9hcHpSdkk5WjNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lMDk0YmQtMDkxYy00MzNiLWJmNTgt
MTY0Y2M2YTRlZDFlLzEvOEkxQlkyb2tBVGU4ci1CVFlyRE4wX1JNSnZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lMDk0YmQtMDkxYy00MzNiLWJmNTgtMTY0Y2M2YTRlZDFl
LzEveWJIWHc3VHVoeU16YW1XRk9hcHpSdkk5WjNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwcnAMA0G
CSqGSIb3DQEBCwUAA4IBAQCXDQGEkRWclLkcdbdpLUsO17/3Av8Bd5W0gIqtTkVE
1ydYxZf1bdxFeF868leD4sgFoAXK/CcRhXHCBXhkH3gSDKevheK8HfYn9lriaCfT
+Iren8zzBDYo3/oG4UFVynDv1rERsF9oQ6fqkKDq+Xkt7UiQqNwoJs4cjca/I8ik
/RS3Fbvdh2y+rp3MEHqUZjL1iYTW/4IpGpDxvYr0Gm7IuqbyHVZmAsa+czafLLT/
/vNQC+SSKF244BjRG9aSXS7eJpBSlfiS7w8zcDsd/oGZ7XevzlmlKNc/91jda1wx
L41QdyPBhNAZSUaSCrkqFyxIQdZSLVpeg2HvdlTYXWiU
-----END CERTIFICATE-----
Generated at Mon Jul 8 04:28:12 2024 by rpki-client on console-ams.rpki-client.org