Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/I9DY8VT-KAurtxLIX6CQIadJ_B0.roa
File: I9DY8VT-KAurtxLIX6CQIadJ_B0.roa (raw, json)
Hash identifier: mxxcv2uCMotRHKPk9FSatxUH44KgB6K4J+k22KU5FW8=
Subject key identifier: 23:D0:D8:F1:54:FE:28:0B:AB:B7:12:C8:5F:A0:90:21:A7:49:FC:1D
Certificate issuer: /CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Certificate serial: 018CC3B70B411D77EBD59C6758DD11B8DD9E
Authority key identifier: 69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/I9DY8VT-KAurtxLIX6CQIadJ_B0.roa
Signing time: Mon 01 Jan 2024 06:30:02 +0000
ROA not before: Mon 01 Jan 2024 06:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197157
IP address blocks: 178.249.136.0/21 maxlen: 21
178.249.140.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:0b:41:1d:77:eb:d5:9c:67:58:dd:11:b8:dd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6988519de918185fb6e1ebafd1e0835caa1132e4
Validity
Not Before: Jan 1 06:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23d0d8f154fe280babb712c85fa09021a749fc1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d4:af:ec:41:05:f1:64:68:be:65:a0:39:5f:
b0:66:9e:20:76:f3:00:0a:42:d4:e4:6a:73:dc:15:
dc:97:9b:9a:8f:e9:8f:d1:5c:ed:99:f0:15:5c:99:
ac:51:9a:3e:ad:c5:76:7e:95:0c:4f:9a:d8:18:69:
fa:38:b4:23:43:9f:e6:e5:ea:fd:26:2b:1f:41:66:
0b:94:af:ed:c4:2c:92:4b:16:26:57:00:7a:72:4f:
b7:2f:e9:7e:10:de:4b:5a:cb:1b:dc:f3:1a:5c:d2:
a5:68:91:60:54:47:3c:d0:75:39:07:5a:85:c8:34:
78:b3:1b:76:8c:64:7b:dd:1a:77:f7:18:88:63:bb:
52:89:6b:51:c3:4a:06:71:ff:d3:b8:0e:66:b6:9f:
23:fe:6e:f5:63:90:d7:6b:82:6b:32:be:57:87:38:
f5:74:9b:e1:a4:07:4e:ba:2b:48:6e:d1:0c:12:77:
19:33:fb:bc:aa:58:79:58:62:c3:3e:72:f8:96:ad:
5b:01:32:5c:68:9e:ae:8d:72:c7:6e:0a:cb:1a:5c:
bf:5c:ec:2c:08:13:e5:37:fd:0c:b7:66:c3:33:b9:
53:f0:c0:35:62:42:dc:b2:23:07:0a:b5:79:7e:29:
36:13:d9:97:20:a7:ed:87:0b:5a:31:a2:45:90:1f:
37:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D0:D8:F1:54:FE:28:0B:AB:B7:12:C8:5F:A0:90:21:A7:49:FC:1D
X509v3 Authority Key Identifier:
keyid:69:88:51:9D:E9:18:18:5F:B6:E1:EB:AF:D1:E0:83:5C:AA:11:32:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aYhRnekYGF-24euv0eCDXKoRMuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/I9DY8VT-KAurtxLIX6CQIadJ_B0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/515240-b594-469b-a992-ec72d6ada04a/1/aYhRnekYGF-24euv0eCDXKoRMuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.249.136.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:76:9d:57:c5:63:ff:28:c1:0a:22:74:52:d1:b1:b4:13:d3:
33:cd:b5:bc:4c:07:5d:e4:bf:fb:6d:31:ff:aa:8d:5e:92:f8:
5a:77:e2:df:e7:f8:31:d8:61:3f:79:f9:d5:70:9d:44:7e:45:
33:47:1d:d4:11:28:aa:6d:94:97:1f:96:5b:b3:ca:ff:8f:5e:
8a:63:96:b4:2d:2e:5b:f9:85:f1:48:c0:6c:58:79:a2:0f:62:
e8:7d:6b:f4:f3:6d:50:c1:44:d3:05:31:b7:64:16:74:f5:91:
62:5b:9b:aa:ef:c8:5a:1f:22:dc:cc:42:14:b3:c0:a1:99:75:
b5:60:e1:27:da:a0:d9:39:a9:cc:2b:e4:95:98:f8:ce:86:8a:
47:13:d3:cf:3f:7a:b5:ca:8d:87:f1:7a:39:68:44:95:98:52:
e3:87:95:29:32:fc:df:bc:5a:1f:60:aa:ad:61:46:5d:43:78:
c8:2f:cf:f0:d8:c2:0c:b0:90:41:34:8a:41:62:1d:ab:6f:e6:
bf:b0:a6:7d:96:7f:91:da:0e:b7:2d:f3:de:fb:65:99:df:8f:
95:e7:d0:e6:8b:15:c7:17:f5:98:3b:34:27:0e:bc:5d:0f:d3:
83:51:f2:5e:72:08:fc:f9:30:d2:7c:86:92:0a:41:20:70:f1:
33:14:c5:7b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtwtBHXfr1ZxnWN0RuN2eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ODg1MTlkZTkxODE4NWZiNmUxZWJhZmQxZTA4MzVjYWEx
MTMyZTQwHhcNMjQwMTAxMDYzMDAyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2QwZDhmMTU0ZmUyODBiYWJiNzEyYzg1ZmEwOTAyMWE3NDlmYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdSv7EEF8WRovmWgOV+wZp4gdvMA
CkLU5Gpz3BXcl5uaj+mP0VztmfAVXJmsUZo+rcV2fpUMT5rYGGn6OLQjQ5/m5er9
JisfQWYLlK/txCySSxYmVwB6ck+3L+l+EN5LWssb3PMaXNKlaJFgVEc80HU5B1qF
yDR4sxt2jGR73Rp39xiIY7tSiWtRw0oGcf/TuA5mtp8j/m71Y5DXa4JrMr5Xhzj1
dJvhpAdOuitIbtEMEncZM/u8qlh5WGLDPnL4lq1bATJcaJ6ujXLHbgrLGly/XOws
CBPlN/0Mt2bDM7lT8MA1YkLcsiMHCrV5fik2E9mXIKfthwtaMaJFkB83lwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCPQ2PFU/igLq7cSyF+gkCGnSfwdMB8GA1UdIwQY
MBaAFGmIUZ3pGBhftuHrr9Hgg1yqETLkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVloUm5la1lHRi0yNGV1djBlQ0RYS29STXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS81MTUyNDAtYjU5NC00NjliLWE5OTIt
ZWM3MmQ2YWRhMDRhLzEvSTlEWThWVC1LQXVydHhMSVg2Q1FJYWRKX0IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS81MTUyNDAtYjU5NC00NjliLWE5OTItZWM3MmQ2YWRhMDRh
LzEvYVloUm5la1lHRi0yNGV1djBlQ0RYS29STXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDsvmIMA0G
CSqGSIb3DQEBCwUAA4IBAQBKdp1XxWP/KMEKInRS0bG0E9MzzbW8TAdd5L/7bTH/
qo1ekvhad+Lf5/gx2GE/efnVcJ1EfkUzRx3UESiqbZSXH5Zbs8r/j16KY5a0LS5b
+YXxSMBsWHmiD2LofWv0821QwUTTBTG3ZBZ09ZFiW5uq78haHyLczEIUs8ChmXW1
YOEn2qDZOanMK+SVmPjOhopHE9PPP3q1yo2H8Xo5aESVmFLjh5UpMvzfvFofYKqt
YUZdQ3jIL8/w2MIMsJBBNIpBYh2rb+a/sKZ9ln+R2g63LfPe+2WZ34+V59DmixXH
F/WYOzQnDrxdD9ODUfJecgj8+TDSfIaSCkEgcPEzFMV7
-----END CERTIFICATE-----
Generated at Sat Jun 1 16:55:38 2024 by rpki-client on console-ams.rpki-client.org