Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/jh13wdd1KqnEAZstO3z_qVn3s1o.roa
File: jh13wdd1KqnEAZstO3z_qVn3s1o.roa (raw, json)
Hash identifier: vHdG28IRyaWWsXlXnwpyhbZmOfNdvMrfSVWbaYatItc=
Subject key identifier: 8E:1D:77:C1:D7:75:2A:A9:C4:01:9B:2D:3B:7C:FF:A9:59:F7:B3:5A
Certificate issuer: /CN=b7848cd2393c1783657a05777ab315e398ebb23f
Certificate serial: 018CC3B7364D477304754F738634FB8ADADF
Authority key identifier: B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/jh13wdd1KqnEAZstO3z_qVn3s1o.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29559
IP address blocks: 195.177.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:36:4d:47:73:04:75:4f:73:86:34:fb:8a:da:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7848cd2393c1783657a05777ab315e398ebb23f
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8e1d77c1d7752aa9c4019b2d3b7cffa959f7b35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7d:a4:2a:71:7c:72:25:ff:3f:2c:75:3e:89:
b4:ec:2b:9a:ae:23:55:8f:7f:64:15:be:b7:a9:ab:
98:c1:83:68:f4:ee:a0:98:ce:1f:0d:1e:57:b1:10:
40:b8:21:72:70:2e:2f:09:a8:10:f7:d9:83:56:aa:
e7:66:a4:69:9f:b5:5f:2a:f1:8a:4b:60:cd:5a:1e:
d9:d3:76:f2:3a:c6:0b:5e:55:86:31:6a:4b:a3:6a:
7d:46:9e:ab:10:58:c4:cf:72:0d:9e:d1:dc:d0:8c:
68:f1:05:75:0b:9a:72:83:e0:c4:e2:5b:da:1c:8c:
51:28:17:6b:2b:e6:1e:50:86:8d:a5:a7:ef:16:09:
1b:8e:2f:09:74:b4:c1:2c:2a:92:39:a0:8c:42:be:
08:ff:e6:22:21:29:ca:88:ca:86:d7:0e:8d:42:0a:
e0:8a:4c:24:c9:49:4e:dc:10:87:27:04:ad:a8:e6:
61:5a:54:81:5f:7e:10:fc:21:4e:1f:10:44:32:fa:
16:7e:b6:2b:03:cc:49:40:8a:f6:2c:1a:10:73:eb:
fc:d9:fb:9b:45:c8:d6:67:f2:40:27:e9:b4:1c:1e:
b9:4e:ff:28:b5:12:f0:99:51:3a:a7:93:03:e0:a6:
85:9a:7b:f3:d6:37:e5:0d:97:29:ba:61:33:8e:fa:
f7:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:1D:77:C1:D7:75:2A:A9:C4:01:9B:2D:3B:7C:FF:A9:59:F7:B3:5A
X509v3 Authority Key Identifier:
keyid:B7:84:8C:D2:39:3C:17:83:65:7A:05:77:7A:B3:15:E3:98:EB:B2:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4SM0jk8F4NlegV3erMV45jrsj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/jh13wdd1KqnEAZstO3z_qVn3s1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/8b5dbf-458d-4326-9302-5aaac2cb0df1/1/t4SM0jk8F4NlegV3erMV45jrsj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.177.208.0/23
Signature Algorithm: sha256WithRSAEncryption
35:fa:03:32:e0:f3:d0:98:c7:30:7b:6a:7c:15:2e:76:7b:32:
89:c4:76:f5:13:74:3d:a4:f9:a6:30:16:6d:a6:a4:59:b4:f0:
c3:4f:4e:b9:07:91:13:0c:dd:db:fb:45:da:65:8e:b2:69:2c:
07:25:c8:49:d8:fe:39:61:61:aa:3f:5a:72:83:0d:72:e5:5b:
75:9d:df:aa:7b:c3:4c:a6:ac:8b:68:b3:6f:89:ca:d0:8e:a0:
4e:1b:32:a6:01:10:75:76:93:36:4c:21:f3:d4:d4:4d:29:9a:
92:b0:4b:83:c7:be:bd:ef:35:96:ff:1a:f8:88:93:12:bd:c2:
d3:9a:51:e1:d1:68:a9:ff:cf:00:1d:77:bd:2d:9c:79:49:51:
23:ad:00:8b:d1:20:81:5a:5d:c0:cf:71:e6:97:3d:45:4b:c5:
cf:0c:5c:4f:73:47:0d:65:55:10:7b:b6:0c:68:fc:7a:df:3c:
96:00:a8:db:4b:c5:b8:c9:a1:0b:ca:41:cb:f7:e1:d5:b0:9d:
49:53:84:e8:ad:05:0d:39:60:94:b4:3c:7b:28:45:51:6e:0f:
fb:d8:af:69:a9:c1:cb:df:27:d5:2f:5d:1c:e6:64:07:02:32:
ba:40:41:1b:89:4d:f3:0f:09:68:fe:27:c9:f4:83:e6:9b:21:
91:b8:40:aa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtzZNR3MEdU9zhjT7itrfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3ODQ4Y2QyMzkzYzE3ODM2NTdhMDU3NzdhYjMxNWUzOThl
YmIyM2YwHhcNMjQwMTAxMDYzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZTFkNzdjMWQ3NzUyYWE5YzQwMTliMmQzYjdjZmZhOTU5ZjdiMzVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgH2kKnF8ciX/Pyx1Pom07CuariNV
j39kFb63qauYwYNo9O6gmM4fDR5XsRBAuCFycC4vCagQ99mDVqrnZqRpn7VfKvGK
S2DNWh7Z03byOsYLXlWGMWpLo2p9Rp6rEFjEz3INntHc0Ixo8QV1C5pyg+DE4lva
HIxRKBdrK+YeUIaNpafvFgkbji8JdLTBLCqSOaCMQr4I/+YiISnKiMqG1w6NQgrg
ikwkyUlO3BCHJwStqOZhWlSBX34Q/CFOHxBEMvoWfrYrA8xJQIr2LBoQc+v82fub
RcjWZ/JAJ+m0HB65Tv8otRLwmVE6p5MD4KaFmnvz1jflDZcpumEzjvr3dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI4dd8HXdSqpxAGbLTt8/6lZ97NaMB8GA1UdIwQY
MBaAFLeEjNI5PBeDZXoFd3qzFeOY67I/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny84YjVkYmYtNDU4ZC00MzI2LTkzMDIt
NWFhYWMyY2IwZGYxLzEvamgxM3dkZDFLcW5FQVpzdE8zel9xVm4zczFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny84YjVkYmYtNDU4ZC00MzI2LTkzMDItNWFhYWMyY2IwZGYx
LzEvdDRTTTBqazhGNE5sZWdWM2VyTVY0NWpyc2o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBw7HQMA0G
CSqGSIb3DQEBCwUAA4IBAQA1+gMy4PPQmMcwe2p8FS52ezKJxHb1E3Q9pPmmMBZt
pqRZtPDDT065B5ETDN3b+0XaZY6yaSwHJchJ2P45YWGqP1pygw1y5Vt1nd+qe8NM
pqyLaLNvicrQjqBOGzKmARB1dpM2TCHz1NRNKZqSsEuDx7697zWW/xr4iJMSvcLT
mlHh0Wip/88AHXe9LZx5SVEjrQCL0SCBWl3Az3Hmlz1FS8XPDFxPc0cNZVUQe7YM
aPx63zyWAKjbS8W4yaELykHL9+HVsJ1JU4TorQUNOWCUtDx7KEVRbg/72K9pqcHL
3yfVL10c5mQHAjK6QEEbiU3zDwlo/ifJ9IPmmyGRuECq
-----END CERTIFICATE-----
Generated at Sat Jun 8 05:30:50 2024 by rpki-client on console-fra.rpki-client.org