Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/po_Y6e5sIO15yNDKkoiK8Apx_0k.roa
File: po_Y6e5sIO15yNDKkoiK8Apx_0k.roa (raw, json)
Hash identifier: 6mpbAdYCMQvqN+A7En6SV7/HdXZy47/LLTVXMgRy1MQ=
Subject key identifier: A6:8F:D8:E9:EE:6C:20:ED:79:C8:D0:CA:92:88:8A:F0:0A:71:FF:49
Certificate issuer: /CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Certificate serial: 018CC9BBC8397ACCDFEBB8C273A90B87A3E2
Authority key identifier: 20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/po_Y6e5sIO15yNDKkoiK8Apx_0k.roa
Signing time: Tue 02 Jan 2024 10:32:56 +0000
ROA not before: Tue 02 Jan 2024 10:32:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41969
IP address blocks: 193.104.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:c8:39:7a:cc:df:eb:b8:c2:73:a9:0b:87:a3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e37285eaa62310bc9e772b493d9d62ba8a7938
Validity
Not Before: Jan 2 10:32:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a68fd8e9ee6c20ed79c8d0ca92888af00a71ff49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:22:55:76:9a:d4:c8:0b:5d:92:94:d6:7e:23:
be:db:ca:78:42:7f:e1:e9:33:c1:76:26:dc:01:ae:
9a:bc:e6:b8:e8:11:db:69:b8:17:91:73:ad:51:c9:
30:af:13:ea:fc:ff:65:69:65:1a:71:c1:72:33:b8:
5d:36:bf:9c:fd:1f:1a:83:28:37:5e:dc:3b:54:51:
16:cc:05:16:35:1a:f9:e2:69:e0:f8:26:c6:81:3f:
56:f7:dd:2a:a9:e3:81:70:1a:e4:6b:d9:52:b7:17:
a4:be:de:d6:94:da:9a:a3:59:de:3b:e9:94:da:c4:
24:2d:2b:00:cf:34:6e:64:c7:70:fc:6e:c7:a5:12:
eb:3f:91:97:c4:74:9d:90:73:c5:ab:14:c9:91:d6:
ef:94:b4:93:45:05:61:74:c8:df:f3:45:28:44:42:
5a:13:36:48:22:81:60:64:34:b8:31:1d:0e:62:f6:
d5:f0:61:af:16:99:34:ea:11:cd:0a:94:36:7c:1d:
ec:69:21:82:be:b7:60:13:4c:80:d8:68:d1:b4:29:
2e:6d:71:ee:40:e2:9a:4f:fa:cc:07:a0:e7:26:3c:
86:da:e5:98:3f:90:8d:f1:77:0b:45:54:90:70:62:
2a:c6:09:40:a6:19:6f:50:a4:f0:96:3b:48:ed:6d:
c6:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8F:D8:E9:EE:6C:20:ED:79:C8:D0:CA:92:88:8A:F0:0A:71:FF:49
X509v3 Authority Key Identifier:
keyid:20:E3:72:85:EA:A6:23:10:BC:9E:77:2B:49:3D:9D:62:BA:8A:79:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IONyheqmIxC8nncrST2dYrqKeTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/po_Y6e5sIO15yNDKkoiK8Apx_0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/177f1d-ac39-4a9d-941d-fa8d8ca9495b/1/IONyheqmIxC8nncrST2dYrqKeTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.174.0/24
Signature Algorithm: sha256WithRSAEncryption
37:f2:a2:bd:a1:f7:2d:84:6f:0d:b8:65:40:95:75:7d:05:57:
24:ca:28:08:ac:d3:cb:d3:32:67:b7:0a:99:a6:0d:63:85:f0:
18:12:0b:cd:c2:48:26:5d:22:76:04:74:c2:01:fa:26:29:42:
91:43:fc:6c:e3:00:a9:6d:36:51:0f:22:fc:f6:0a:0d:a1:fb:
a6:5f:2e:32:4f:03:eb:c5:9c:33:6e:a2:c2:1d:80:4a:77:0a:
e0:4f:cf:37:67:84:f4:93:ff:e2:5d:94:fa:e5:77:f6:e9:1d:
84:d4:f5:af:84:6b:6b:48:85:03:5a:43:0c:d9:85:cc:85:47:
30:83:75:df:48:6b:d8:45:94:8b:c1:f1:d3:4a:56:3c:ca:36:
14:7a:0c:88:40:8e:e4:57:e9:4c:45:7a:ff:80:2e:b2:68:74:
0f:8b:88:a9:5b:bf:f9:d0:36:c0:83:83:01:73:28:32:fc:97:
12:68:83:46:62:1e:d8:95:dc:ec:79:21:81:56:d1:36:87:58:
c9:b6:c2:21:45:59:fb:3e:12:3f:29:cc:39:d8:00:4a:a7:17:
25:c8:44:b7:3b:73:8b:a8:10:bb:7a:50:4e:bd:ee:2f:d1:e4:
a0:4e:02:ac:e3:51:5f:56:b7:95:75:19:c7:1f:4b:50:8d:72:
ba:7d:9a:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJu8g5eszf67jCc6kLh6PiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZTM3Mjg1ZWFhNjIzMTBiYzllNzcyYjQ5M2Q5ZDYyYmE4
YTc5MzgwHhcNMjQwMTAyMTAzMjU2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjhmZDhlOWVlNmMyMGVkNzljOGQwY2E5Mjg4OGFmMDBhNzFmZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyJVdprUyAtdkpTWfiO+28p4Qn/h
6TPBdibcAa6avOa46BHbabgXkXOtUckwrxPq/P9laWUaccFyM7hdNr+c/R8agyg3
Xtw7VFEWzAUWNRr54mng+CbGgT9W990qqeOBcBrka9lStxekvt7WlNqao1neO+mU
2sQkLSsAzzRuZMdw/G7HpRLrP5GXxHSdkHPFqxTJkdbvlLSTRQVhdMjf80UoREJa
EzZIIoFgZDS4MR0OYvbV8GGvFpk06hHNCpQ2fB3saSGCvrdgE0yA2GjRtCkubXHu
QOKaT/rMB6DnJjyG2uWYP5CN8XcLRVSQcGIqxglAphlvUKTwljtI7W3GoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKaP2OnubCDtecjQypKIivAKcf9JMB8GA1UdIwQY
MBaAFCDjcoXqpiMQvJ53K0k9nWK6ink4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU9OeWhlcW1JeEM4bm5jclNUMmRZcnFLZVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8xNzdmMWQtYWMzOS00YTlkLTk0MWQt
ZmE4ZDhjYTk0OTViLzEvcG9fWTZlNXNJTzE1eU5ES2tvaUs4QXB4XzBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8xNzdmMWQtYWMzOS00YTlkLTk0MWQtZmE4ZDhjYTk0OTVi
LzEvSU9OeWhlcW1JeEM4bm5jclNUMmRZcnFLZVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWiuMA0G
CSqGSIb3DQEBCwUAA4IBAQA38qK9ofcthG8NuGVAlXV9BVckyigIrNPL0zJntwqZ
pg1jhfAYEgvNwkgmXSJ2BHTCAfomKUKRQ/xs4wCpbTZRDyL89goNofumXy4yTwPr
xZwzbqLCHYBKdwrgT883Z4T0k//iXZT65Xf26R2E1PWvhGtrSIUDWkMM2YXMhUcw
g3XfSGvYRZSLwfHTSlY8yjYUegyIQI7kV+lMRXr/gC6yaHQPi4ipW7/50DbAg4MB
cygy/JcSaINGYh7YldzseSGBVtE2h1jJtsIhRVn7PhI/Kcw52ABKpxclyES3O3OL
qBC7elBOve4v0eSgTgKs41FfVreVdRnHH0tQjXK6fZpt
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:32 2024 by rpki-client on console-fra.rpki-client.org