Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/tqzWCLxo8Ga1g23bhi5jEx1mUPQ.roa
File: tqzWCLxo8Ga1g23bhi5jEx1mUPQ.roa (raw, json)
Hash identifier: kgdYBR3R2J7BzCHmBVwhkMSu2dsdmbUjm01aISA7VR8=
Subject key identifier: B6:AC:D6:08:BC:68:F0:66:B5:83:6D:DB:86:2E:63:13:1D:66:50:F4
Certificate issuer: /CN=a29d9751f3675f51332734da68ea960260045b12
Certificate serial: 018EC820BDB4222BD3C59E9AE4EA74531D81
Authority key identifier: A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/tqzWCLxo8Ga1g23bhi5jEx1mUPQ.roa
Signing time: Wed 10 Apr 2024 13:09:32 +0000
ROA not before: Wed 10 Apr 2024 13:09:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215281
IP address blocks: 93.185.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:c8:20:bd:b4:22:2b:d3:c5:9e:9a:e4:ea:74:53:1d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a29d9751f3675f51332734da68ea960260045b12
Validity
Not Before: Apr 10 13:09:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b6acd608bc68f066b5836ddb862e63131d6650f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a5:50:67:08:8e:ed:02:ae:20:d1:5a:14:56:
71:94:03:70:12:06:a8:3d:f5:97:25:a2:9e:68:6b:
da:b8:af:d5:f6:9b:38:b5:f0:35:31:37:b6:a8:3d:
0d:b0:7e:e3:e3:08:02:f6:c3:3e:27:4c:56:a0:6b:
d5:55:7f:22:bb:74:e3:a2:4e:fe:88:5b:9a:41:77:
30:db:d2:1f:38:e4:82:51:0c:64:06:85:e7:2a:e7:
9f:a4:0f:75:55:a6:f6:f6:a9:df:cf:36:25:34:b0:
cf:db:ad:66:28:c2:22:3a:87:ff:8c:6a:27:b2:2c:
37:81:ba:94:8b:cc:e5:1c:72:8b:5a:8b:02:29:bd:
71:18:e1:13:50:02:0e:56:b6:1f:76:0b:8d:bf:bd:
69:6c:aa:03:b6:fe:72:6f:81:29:94:0a:08:ef:31:
4e:0f:9b:64:42:be:76:9c:5f:dc:5b:4f:dc:b7:1f:
09:bf:fe:42:ad:8a:f1:0d:fa:32:e7:17:6a:fe:99:
55:af:24:53:f9:76:26:74:35:7c:83:e3:a3:e5:3c:
88:34:3b:d5:15:08:87:49:0a:38:0b:9b:8f:a2:3f:
e4:7e:8f:1c:59:8b:5d:c4:47:14:0a:ae:aa:d4:53:
d7:fc:ae:c8:b7:41:fa:01:25:76:4e:8a:6e:c2:58:
df:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AC:D6:08:BC:68:F0:66:B5:83:6D:DB:86:2E:63:13:1D:66:50:F4
X509v3 Authority Key Identifier:
keyid:A2:9D:97:51:F3:67:5F:51:33:27:34:DA:68:EA:96:02:60:04:5B:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/op2XUfNnX1EzJzTaaOqWAmAEWxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/tqzWCLxo8Ga1g23bhi5jEx1mUPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/e64398-9601-4b7c-b783-079ba0570f75/1/op2XUfNnX1EzJzTaaOqWAmAEWxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.157.0/24
Signature Algorithm: sha256WithRSAEncryption
00:0b:b9:22:97:64:f4:09:b5:ce:54:42:16:c4:97:4a:3c:66:
99:82:5e:aa:50:01:83:2b:35:c3:cf:c3:01:6b:ff:ad:b2:2e:
82:7f:96:b2:ce:ca:24:f1:87:86:ad:aa:6a:6b:32:f1:e6:43:
4a:76:24:ba:9e:79:58:2d:eb:a4:e6:12:b5:ba:b9:8f:97:22:
3a:0e:05:1f:7a:bc:2c:a5:5d:b7:4d:90:0e:01:f8:91:c3:6b:
7d:17:06:2c:52:0b:06:99:fb:30:a0:ab:92:3f:59:4d:a4:41:
80:74:24:bf:8a:8d:6f:0e:ef:cd:36:92:7a:0c:57:4c:dd:6e:
39:0d:c1:4c:21:33:0d:ed:35:ab:9f:6f:15:25:cf:f1:6f:5c:
ab:7e:30:6b:e4:cf:0b:ac:df:1a:c9:cb:24:94:2c:f0:f4:15:
9a:c5:0f:82:df:b4:1b:fb:81:13:58:cf:77:b3:55:09:4e:cd:
f1:f1:71:4e:05:09:2e:c8:50:2b:d9:26:24:6b:4f:5a:f2:4f:
ca:ae:9d:f2:fe:d8:78:fc:55:03:5d:c0:bc:43:e4:26:4e:bc:
39:75:23:20:7d:77:99:47:e3:ad:39:ca:98:47:ed:ff:ac:e0:
bb:eb:85:af:2e:26:4a:22:65:02:75:2a:91:8d:07:5c:ca:8c:
96:e2:f0:9e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7IIL20IivTxZ6a5Op0Ux2BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyOWQ5NzUxZjM2NzVmNTEzMzI3MzRkYTY4ZWE5NjAyNjAw
NDViMTIwHhcNMjQwNDEwMTMwOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmFjZDYwOGJjNjhmMDY2YjU4MzZkZGI4NjJlNjMxMzFkNjY1MGY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgqVQZwiO7QKuINFaFFZxlANwEgao
PfWXJaKeaGvauK/V9ps4tfA1MTe2qD0NsH7j4wgC9sM+J0xWoGvVVX8iu3Tjok7+
iFuaQXcw29IfOOSCUQxkBoXnKuefpA91Vab29qnfzzYlNLDP261mKMIiOof/jGon
siw3gbqUi8zlHHKLWosCKb1xGOETUAIOVrYfdguNv71pbKoDtv5yb4EplAoI7zFO
D5tkQr52nF/cW0/ctx8Jv/5CrYrxDfoy5xdq/plVryRT+XYmdDV8g+Oj5TyINDvV
FQiHSQo4C5uPoj/kfo8cWYtdxEcUCq6q1FPX/K7It0H6ASV2TopuwljfcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLas1gi8aPBmtYNt24YuYxMdZlD0MB8GA1UdIwQY
MBaAFKKdl1HzZ19RMyc02mjqlgJgBFsSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3AyWFVmTm5YMUV6SnpUYWFPcVdBbUFFV3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9lNjQzOTgtOTYwMS00YjdjLWI3ODMt
MDc5YmEwNTcwZjc1LzEvdHF6V0NMeG84R2ExZzIzYmhpNWpFeDFtVVBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9lNjQzOTgtOTYwMS00YjdjLWI3ODMtMDc5YmEwNTcwZjc1
LzEvb3AyWFVmTm5YMUV6SnpUYWFPcVdBbUFFV3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXbmdMA0G
CSqGSIb3DQEBCwUAA4IBAQAAC7kil2T0CbXOVEIWxJdKPGaZgl6qUAGDKzXDz8MB
a/+tsi6Cf5ayzsok8YeGrapqazLx5kNKdiS6nnlYLeuk5hK1urmPlyI6DgUferws
pV23TZAOAfiRw2t9FwYsUgsGmfswoKuSP1lNpEGAdCS/io1vDu/NNpJ6DFdM3W45
DcFMITMN7TWrn28VJc/xb1yrfjBr5M8LrN8aycsklCzw9BWaxQ+C37Qb+4ETWM93
s1UJTs3x8XFOBQkuyFAr2SYka09a8k/Krp3y/th4/FUDXcC8Q+QmTrw5dSMgfXeZ
R+OtOcqYR+3/rOC764WvLiZKImUCdSqRjQdcyoyW4vCe
-----END CERTIFICATE-----
Generated at Mon Jun 17 02:45:12 2024 by rpki-client on console-ams.rpki-client.org