Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/k2bPRHKCbFaX3JmjKjJocJjRzcI.roa
File: k2bPRHKCbFaX3JmjKjJocJjRzcI.roa (raw, json)
Hash identifier: /bA3P7K2zVlAUyMzXad0jQbroAoCi331HMfppsFsBIo=
Subject key identifier: 93:66:CF:44:72:82:6C:56:97:DC:99:A3:2A:32:68:70:98:D1:CD:C2
Certificate issuer: /CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Certificate serial: 018CC49233105B35E4B4BFAAD95916E664A5
Authority key identifier: 31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/k2bPRHKCbFaX3JmjKjJocJjRzcI.roa
Signing time: Mon 01 Jan 2024 10:29:24 +0000
ROA not before: Mon 01 Jan 2024 10:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 193.223.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:33:10:5b:35:e4:b4:bf:aa:d9:59:16:e6:64:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31c6bbaf409f5fd6d709c4d7d24344a292a3caa5
Validity
Not Before: Jan 1 10:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9366cf4472826c5697dc99a32a32687098d1cdc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:41:11:47:5f:16:ef:cc:9e:d0:8a:11:1b:63:
57:4c:02:ae:9f:d4:49:06:fb:07:63:33:13:49:12:
2a:43:c6:b9:c5:38:78:50:45:b8:57:c0:78:9b:f1:
8f:e3:d7:0f:cc:21:86:25:4a:6c:7d:94:96:5f:22:
53:d7:6d:49:46:a8:04:10:ab:85:94:f6:10:f6:e1:
8c:f6:5e:1c:00:01:ae:54:23:b1:41:04:b4:23:a7:
55:32:1f:7e:18:aa:fe:3b:46:e7:30:02:c9:11:47:
7d:df:48:55:67:e6:80:91:3e:31:9f:ad:bc:44:bf:
26:c5:d1:aa:7f:ff:56:49:01:fc:ce:d6:c5:e0:79:
6c:de:cb:ac:03:79:74:9c:fd:85:6f:3b:98:5a:39:
46:d5:14:a6:91:06:db:04:27:b0:f3:85:ca:dd:9a:
9b:3c:69:f3:a6:c5:a5:4b:17:35:b9:d1:a7:93:ae:
17:6d:ed:f8:dc:63:a2:38:0b:86:1a:37:aa:f3:7e:
fa:c6:64:4c:a2:73:0b:d5:c4:65:7a:c1:65:df:99:
c4:69:71:df:e6:8e:2e:4f:e1:92:6c:b7:69:57:39:
98:65:27:5f:db:90:cb:61:df:49:fd:dc:3b:2f:1d:
48:8f:af:46:52:39:ab:a4:f3:b5:ee:47:9b:a0:01:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:66:CF:44:72:82:6C:56:97:DC:99:A3:2A:32:68:70:98:D1:CD:C2
X509v3 Authority Key Identifier:
keyid:31:C6:BB:AF:40:9F:5F:D6:D7:09:C4:D7:D2:43:44:A2:92:A3:CA:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mca7r0CfX9bXCcTX0kNEopKjyqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/k2bPRHKCbFaX3JmjKjJocJjRzcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/cbf93c-6dda-4824-8033-41c3cf908e97/1/Mca7r0CfX9bXCcTX0kNEopKjyqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.208.0/24
Signature Algorithm: sha256WithRSAEncryption
41:88:58:54:bd:72:94:0c:c2:f7:b6:60:0a:a9:82:43:97:37:
bd:78:30:ea:63:df:e6:29:b0:f8:96:ad:23:4a:22:d7:26:42:
42:b3:4b:66:c1:0e:af:8e:a5:a3:eb:31:d1:b4:93:5a:e3:db:
2a:3d:4f:21:05:9c:ab:8e:e7:c7:e2:6a:c8:d4:b0:12:18:91:
da:44:9e:13:fd:9b:e1:0f:8f:58:38:f4:f8:a0:c4:62:2a:2b:
d5:e7:31:6a:02:f0:9e:2f:70:66:e9:e3:75:8e:dd:f0:ed:38:
07:88:58:2d:f0:35:52:de:a6:45:98:df:e2:05:3c:cc:15:f2:
fc:11:06:ec:50:d7:60:42:c0:d5:f7:14:72:c3:d8:53:90:4e:
5a:82:0e:77:e5:cc:0d:1a:e6:1f:b0:e3:28:0e:59:30:77:fa:
a9:cf:b2:9a:5c:29:1d:5c:5b:03:37:26:a4:09:c5:db:26:56:
04:00:39:f8:99:6c:d1:4d:9d:e1:f6:29:f7:1b:64:10:58:69:
40:8b:f1:6f:e4:2b:a2:d4:ae:c2:d2:47:34:a4:e5:44:1a:00:
b3:31:7a:63:c4:67:1e:c1:62:66:d1:02:01:0b:29:d7:42:03:
72:a3:53:2d:6c:2b:66:f8:bc:c7:5b:2e:d5:13:e7:87:c5:ed:
9c:f0:64:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEkjMQWzXktL+q2VkW5mSlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxYzZiYmFmNDA5ZjVmZDZkNzA5YzRkN2QyNDM0NGEyOTJh
M2NhYTUwHhcNMjQwMTAxMTAyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzY2Y2Y0NDcyODI2YzU2OTdkYzk5YTMyYTMyNjg3MDk4ZDFjZGMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20ERR18W78ye0IoRG2NXTAKun9RJ
BvsHYzMTSRIqQ8a5xTh4UEW4V8B4m/GP49cPzCGGJUpsfZSWXyJT121JRqgEEKuF
lPYQ9uGM9l4cAAGuVCOxQQS0I6dVMh9+GKr+O0bnMALJEUd930hVZ+aAkT4xn628
RL8mxdGqf/9WSQH8ztbF4Hls3susA3l0nP2FbzuYWjlG1RSmkQbbBCew84XK3Zqb
PGnzpsWlSxc1udGnk64Xbe343GOiOAuGGjeq8376xmRMonML1cRlesFl35nEaXHf
5o4uT+GSbLdpVzmYZSdf25DLYd9J/dw7Lx1Ij69GUjmrpPO17keboAGyZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJNmz0RygmxWl9yZoyoyaHCY0c3CMB8GA1UdIwQY
MBaAFDHGu69An1/W1wnE19JDRKKSo8qlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMt
NDFjM2NmOTA4ZTk3LzEvazJiUFJIS0NiRmFYM0ptaktqSm9jSmpSemNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9jYmY5M2MtNmRkYS00ODI0LTgwMzMtNDFjM2NmOTA4ZTk3
LzEvTWNhN3IwQ2ZYOWJYQ2NUWDBrTkVvcEtqeXFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd/QMA0G
CSqGSIb3DQEBCwUAA4IBAQBBiFhUvXKUDML3tmAKqYJDlze9eDDqY9/mKbD4lq0j
SiLXJkJCs0tmwQ6vjqWj6zHRtJNa49sqPU8hBZyrjufH4mrI1LASGJHaRJ4T/Zvh
D49YOPT4oMRiKivV5zFqAvCeL3Bm6eN1jt3w7TgHiFgt8DVS3qZFmN/iBTzMFfL8
EQbsUNdgQsDV9xRyw9hTkE5agg535cwNGuYfsOMoDlkwd/qpz7KaXCkdXFsDNyak
CcXbJlYEADn4mWzRTZ3h9in3G2QQWGlAi/Fv5Cui1K7C0kc0pOVEGgCzMXpjxGce
wWJm0QIBCynXQgNyo1MtbCtm+LzHWy7VE+eHxe2c8GSU
-----END CERTIFICATE-----
Generated at Sat May 18 02:48:54 2024 by rpki-client on console-ams.rpki-client.org