Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/acpHH_CaNcRdqw7JD1HuBSlb_jE.roa
File: acpHH_CaNcRdqw7JD1HuBSlb_jE.roa (raw, json)
Hash identifier: Wxjj/iVVVmCvZCfA0I7IDXleX19TKp07yCUTpeGLxQk=
Subject key identifier: 69:CA:47:1F:F0:9A:35:C4:5D:AB:0E:C9:0F:51:EE:05:29:5B:FE:31
Certificate issuer: /CN=98907806ddacb48430bdd0254898019e413a2bde
Certificate serial: 019421442C86958C8F9BE985FD892781CDA7
Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/acpHH_CaNcRdqw7JD1HuBSlb_jE.roa
Signing time: Wed 01 Jan 2025 09:48:23 +0000
ROA not before: Wed 01 Jan 2025 09:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 193.239.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2c:86:95:8c:8f:9b:e9:85:fd:89:27:81:cd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde
Validity
Not Before: Jan 1 09:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=69ca471ff09a35c45dab0ec90f51ee05295bfe31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c2:27:ee:45:3f:37:b4:c3:27:01:67:ec:43:
45:39:5f:6c:bc:29:35:43:a7:03:37:31:eb:95:c1:
33:9e:4e:88:28:1e:b8:63:75:a3:b4:81:b5:f7:59:
e0:67:68:ad:f4:09:fe:02:64:f2:c1:7e:29:c4:7f:
dc:08:11:87:30:1e:90:1d:cc:a4:12:c1:b6:5b:63:
2f:c9:51:60:80:36:4c:2e:0f:be:e9:d4:27:4c:58:
84:54:c7:87:ea:40:09:0d:1c:5b:15:e5:28:47:99:
21:7f:06:c0:6f:6f:74:1e:7a:e8:4a:cc:76:80:b4:
e9:af:2d:35:9c:e9:76:b4:25:b8:02:74:c8:c8:e7:
f8:7f:4f:df:79:82:a7:aa:81:a0:09:04:2e:0f:bf:
39:ca:7a:e1:93:8a:db:85:8a:21:fe:07:a5:88:81:
8a:29:ad:bf:a0:b8:ed:86:c1:7c:fc:a2:e7:e9:4d:
6a:f9:7b:7b:00:da:21:8d:26:7e:c3:31:5f:0e:90:
d2:aa:d3:be:b6:c3:a3:5c:c0:3b:ef:4a:13:4a:84:
7f:d5:1c:57:86:37:ae:a0:63:f6:ae:2e:d6:fc:9b:
a6:43:fc:a9:ac:c5:22:1f:9b:c1:89:a5:a4:d8:5e:
d7:8a:92:44:b9:36:c8:87:6e:06:b4:af:d5:6d:c9:
e1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:CA:47:1F:F0:9A:35:C4:5D:AB:0E:C9:0F:51:EE:05:29:5B:FE:31
X509v3 Authority Key Identifier:
keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/acpHH_CaNcRdqw7JD1HuBSlb_jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.200.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:fd:4a:94:af:12:21:1a:f7:f7:b3:e2:36:25:de:bc:76:86:
7e:5a:8a:f4:96:d1:fc:0d:9c:c7:2d:5f:77:0c:c7:ad:9a:c4:
83:e3:67:ac:d0:29:87:bd:e5:0b:7d:21:d8:ec:61:34:68:f6:
20:8a:d3:af:cf:9d:7f:fb:ce:09:21:7a:95:fc:de:39:27:9d:
df:8c:76:e0:dd:75:c6:ac:10:f2:65:2d:ca:d1:17:bb:e0:ee:
61:84:82:dd:7f:90:a2:59:38:f2:0c:52:d3:a3:08:09:9e:fa:
bf:c9:5e:80:cd:7d:90:bf:e9:a6:b9:fd:20:1f:f7:c2:a5:cc:
95:54:e0:7e:2d:fa:ae:6c:66:59:e2:f9:b3:cd:a4:fc:92:eb:
59:d2:90:9a:41:ab:ed:a0:c3:77:e7:78:53:f2:f7:49:e7:9f:
05:fd:39:90:20:86:2c:af:02:f0:03:5f:1a:fa:ca:65:18:7a:
f9:5c:88:3f:91:d0:b2:b6:06:65:63:fd:49:42:96:ad:de:ab:
ed:17:71:2f:b7:c0:11:58:36:8d:1b:53:d5:f9:22:fc:47:b5:
cd:7d:5d:5f:50:c0:3f:92:23:93:ed:74:a9:f4:d1:77:2e:d3:
17:1b:ae:c0:7f:60:58:a4:d1:07:13:fc:0f:3b:33:0f:5e:ba:
72:0c:38:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRCyGlYyPm+mF/Ykngc2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4OTA3ODA2ZGRhY2I0ODQzMGJkZDAyNTQ4OTgwMTllNDEz
YTJiZGUwHhcNMjUwMTAxMDk0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWNhNDcxZmYwOWEzNWM0NWRhYjBlYzkwZjUxZWUwNTI5NWJmZTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcIn7kU/N7TDJwFn7ENFOV9svCk1
Q6cDNzHrlcEznk6IKB64Y3WjtIG191ngZ2it9An+AmTywX4pxH/cCBGHMB6QHcyk
EsG2W2MvyVFggDZMLg++6dQnTFiEVMeH6kAJDRxbFeUoR5khfwbAb290HnroSsx2
gLTpry01nOl2tCW4AnTIyOf4f0/feYKnqoGgCQQuD785ynrhk4rbhYoh/geliIGK
Ka2/oLjthsF8/KLn6U1q+Xt7ANohjSZ+wzFfDpDSqtO+tsOjXMA770oTSoR/1RxX
hjeuoGP2ri7W/JumQ/yprMUiH5vBiaWk2F7XipJEuTbIh24GtK/VbcnhPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGnKRx/wmjXEXasOyQ9R7gUpW/4xMB8GA1UdIwQY
MBaAFJiQeAbdrLSEML3QJUiYAZ5BOiveMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMt
MTI2NzRlNjYxZTEzLzEvYWNwSEhfQ2FOY1JkcXc3SkQxSHVCU2xiX2pFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zZTNiMTctODRjOS00NDcyLWJkMzMtMTI2NzRlNjYxZTEz
LzEvbUpCNEJ0MnN0SVF3dmRBbFNKZ0Jua0U2Szk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwe/IMA0G
CSqGSIb3DQEBCwUAA4IBAQBq/UqUrxIhGvf3s+I2Jd68doZ+Wor0ltH8DZzHLV93
DMetmsSD42es0CmHveULfSHY7GE0aPYgitOvz51/+84JIXqV/N45J53fjHbg3XXG
rBDyZS3K0Re74O5hhILdf5CiWTjyDFLTowgJnvq/yV6AzX2Qv+mmuf0gH/fCpcyV
VOB+LfqubGZZ4vmzzaT8kutZ0pCaQavtoMN353hT8vdJ558F/TmQIIYsrwLwA18a
+splGHr5XIg/kdCytgZlY/1JQpat3qvtF3Evt8ARWDaNG1PV+SL8R7XNfV1fUMA/
kiOT7XSp9NF3LtMXG67Af2BYpNEHE/wPOzMPXrpyDDjk
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:44:43 2025 by rpki-client