Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/T8ivG5tjgJ81gCVaL5hHtrmfHUg.roa
File: T8ivG5tjgJ81gCVaL5hHtrmfHUg.roa (raw, json)
Hash identifier: gR9WIpBAdEuNpjdxgoQQY83OS3sLGb/M7N8SJKqoki8=
Subject key identifier: 4F:C8:AF:1B:9B:63:80:9F:35:80:25:5A:2F:98:47:B6:B9:9F:1D:48
Certificate issuer: /CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Certificate serial: 018CC5DC89C7EBCD7AC57601F7D841C964A0
Authority key identifier: F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/T8ivG5tjgJ81gCVaL5hHtrmfHUg.roa
Signing time: Mon 01 Jan 2024 16:30:13 +0000
ROA not before: Mon 01 Jan 2024 16:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396426
IP address blocks: 176.111.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:89:c7:eb:cd:7a:c5:76:01:f7:d8:41:c9:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f93ac6cd2240249bba60171f086e9101cc87ca24
Validity
Not Before: Jan 1 16:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fc8af1b9b63809f3580255a2f9847b6b99f1d48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:82:ee:b6:e4:04:db:89:0e:37:77:b3:e6:36:
93:c3:df:1f:65:52:73:e3:1b:cf:34:35:ff:e6:40:
01:3a:97:17:73:0c:ad:64:18:70:1d:00:71:f6:a5:
7c:c1:86:27:87:57:9d:64:27:f1:78:72:a6:92:7d:
6a:ae:03:34:5c:34:b9:09:3d:8c:47:ef:4c:b9:2f:
a1:80:5c:39:96:c2:87:bd:7d:1e:54:d2:c3:b5:71:
89:86:83:d7:2f:81:f2:2c:d9:12:0b:5d:e6:20:29:
0e:6c:1f:9d:11:b7:08:99:b3:58:95:b4:72:a9:cb:
e6:e5:be:94:4c:85:82:c8:b1:ad:6f:44:30:de:2e:
e7:56:87:5d:c6:14:7c:86:d8:12:46:7a:05:a2:ce:
fc:88:81:52:ff:1d:7c:7d:ac:e5:03:49:ad:19:b3:
ce:8a:61:06:21:c2:18:f5:c9:49:02:d0:a7:39:2b:
de:7f:25:a3:4a:df:cb:ef:45:f1:5d:a3:00:ab:0e:
f9:c7:83:88:af:24:6b:d6:30:74:19:96:51:92:7e:
24:ec:1b:93:c6:b4:e1:c2:5d:1e:39:5c:95:f4:e1:
a2:ba:dd:39:62:ea:7b:a1:e8:d5:c1:5b:e0:4b:7e:
42:78:46:a0:5e:ee:f5:07:df:c4:58:01:c6:a7:11:
67:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C8:AF:1B:9B:63:80:9F:35:80:25:5A:2F:98:47:B6:B9:9F:1D:48
X509v3 Authority Key Identifier:
keyid:F9:3A:C6:CD:22:40:24:9B:BA:60:17:1F:08:6E:91:01:CC:87:CA:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/T8ivG5tjgJ81gCVaL5hHtrmfHUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/b03213-5e80-4931-81ce-f752d81605fb/1/1-TrGzSJAJJu6YBcfCG6RAcyHyiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.219.0/24
Signature Algorithm: sha256WithRSAEncryption
41:87:ea:0e:2b:f6:03:bd:bc:33:6d:9e:e8:20:8c:c6:92:57:
14:e5:35:df:8a:15:4d:d5:1b:45:29:a5:6b:47:8c:6c:d1:43:
b3:c1:98:f4:6c:b2:6f:80:9b:cb:ec:ea:1b:44:80:7f:0e:90:
08:08:7e:87:09:9f:6a:bf:b5:19:8b:db:0c:b2:ff:6e:df:8e:
0f:50:ae:69:f3:ff:a7:fe:87:03:4b:0b:93:2a:39:6c:e8:43:
2e:75:31:39:48:df:4c:ac:94:2e:4a:8d:2d:7e:ac:d1:67:9a:
53:fe:0f:96:e8:33:b3:af:b9:7e:3f:17:36:02:41:33:e4:94:
92:e8:90:50:24:93:b6:dc:a5:39:59:2e:63:5c:ae:a0:ea:1e:
75:1b:c6:73:16:62:5a:05:0d:ad:0f:aa:1f:e4:e0:1d:54:f6:
03:ab:b9:db:31:e2:04:62:47:1f:10:c0:83:65:e5:c7:83:c8:
27:b4:3b:86:1a:25:d1:41:a1:aa:61:eb:ad:bb:fb:42:95:5d:
24:66:04:50:56:88:1a:dd:00:98:64:69:e7:46:3c:ad:ba:e9:
f3:27:af:93:f8:43:d0:6e:0e:d2:4f:dd:24:52:2d:bc:5d:56:
b0:e5:dc:fc:cc:27:b8:00:9f:b7:27:7d:0c:5f:21:56:bc:4a:
19:09:53:83
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzF3InH6816xXYB99hByWSgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5M2FjNmNkMjI0MDI0OWJiYTYwMTcxZjA4NmU5MTAxY2M4
N2NhMjQwHhcNMjQwMTAxMTYzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmM4YWYxYjliNjM4MDlmMzU4MDI1NWEyZjk4NDdiNmI5OWYxZDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoLutuQE24kON3ez5jaTw98fZVJz
4xvPNDX/5kABOpcXcwytZBhwHQBx9qV8wYYnh1edZCfxeHKmkn1qrgM0XDS5CT2M
R+9MuS+hgFw5lsKHvX0eVNLDtXGJhoPXL4HyLNkSC13mICkObB+dEbcImbNYlbRy
qcvm5b6UTIWCyLGtb0Qw3i7nVoddxhR8htgSRnoFos78iIFS/x18fazlA0mtGbPO
imEGIcIY9clJAtCnOSvefyWjSt/L70XxXaMAqw75x4OIryRr1jB0GZZRkn4k7BuT
xrThwl0eOVyV9OGiut05Yup7oejVwVvgS35CeEagXu71B9/EWAHGpxFntQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFE/IrxubY4CfNYAlWi+YR7a5nx1IMB8GA1UdIwQY
MBaAFPk6xs0iQCSbumAXHwhukQHMh8okMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Uckd6U0pBSkp1NllCY2ZDRzZSQWN5SHlpUS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNl
LWY3NTJkODE2MDVmYi8xL1Q4aXZHNXRqZ0o4MWdDVmFMNWhIdHJtZkhVZy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOTgvYjAzMjEzLTVlODAtNDkzMS04MWNlLWY3NTJkODE2MDVm
Yi8xLzEtVHJHelNKQUpKdTZZQmNmQ0c2UkFjeUh5aVEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACwb9sw
DQYJKoZIhvcNAQELBQADggEBAEGH6g4r9gO9vDNtnuggjMaSVxTlNd+KFU3VG0Up
pWtHjGzRQ7PBmPRssm+Am8vs6htEgH8OkAgIfocJn2q/tRmL2wyy/27fjg9Qrmnz
/6f+hwNLC5MqOWzoQy51MTlI30yslC5KjS1+rNFnmlP+D5boM7OvuX4/FzYCQTPk
lJLokFAkk7bcpTlZLmNcrqDqHnUbxnMWYloFDa0Pqh/k4B1U9gOrudsx4gRiRx8Q
wINl5ceDyCe0O4YaJdFBoaph6627+0KVXSRmBFBWiBrdAJhkaedGPK266fMnr5P4
Q9BuDtJP3SRSLbxdVrDl3PzMJ7gAn7cnfQxfIVa8ShkJU4M=
-----END CERTIFICATE-----
Generated at Wed May 15 18:36:05 2024 by rpki-client on console-fra.rpki-client.org