Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/kd-huYOFeAFyVclO_6ZSHUMAuVo.roa
File: kd-huYOFeAFyVclO_6ZSHUMAuVo.roa (raw, json)
Hash identifier: tTdelJxdufLhNKZwQj7Kbj7/oLoQxsHtczMCE/ofzRc=
Subject key identifier: 91:DF:A1:B9:83:85:78:01:72:55:C9:4E:FF:A6:52:1D:43:00:B9:5A
Certificate issuer: /CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Certificate serial: 018CC64B471EC9C1450C6360133532C91B26
Authority key identifier: B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/kd-huYOFeAFyVclO_6ZSHUMAuVo.roa
Signing time: Mon 01 Jan 2024 18:31:11 +0000
ROA not before: Mon 01 Jan 2024 18:31:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25111
IP address blocks: 193.0.58.0/24 maxlen: 24
193.0.57.0/24 maxlen: 24
193.0.56.0/24 maxlen: 24
193.0.60.0/24 maxlen: 24
193.0.59.0/24 maxlen: 24
2001:67c:184::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:47:1e:c9:c1:45:0c:63:60:13:35:32:c9:1b:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b38594146202e2f6c3456b0696ff18562f1b9f81
Validity
Not Before: Jan 1 18:31:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91dfa1b9838578017255c94effa6521d4300b95a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d6:e7:13:eb:04:ce:2a:a9:6a:fe:f4:da:07:
15:74:30:7f:a1:9e:63:2c:6d:1d:ad:21:60:d7:a2:
e6:a4:93:43:02:ea:f6:11:4f:c6:e3:9e:fc:fd:33:
d9:d5:db:a4:00:76:07:97:7b:f2:ce:43:36:64:1f:
8a:27:be:ee:1a:80:57:cb:52:50:e7:fd:49:70:4c:
35:cf:9e:8e:15:70:88:f7:2e:04:b5:7c:13:52:36:
34:3e:19:eb:ba:16:07:39:0a:65:b8:66:e2:9c:f1:
95:ad:30:11:16:dc:c9:0a:84:80:f1:20:ea:a2:d9:
aa:fa:b9:83:c5:e6:44:23:1d:84:fd:c6:38:29:dc:
cd:0a:fc:33:a7:32:46:1d:6c:d9:29:f7:ed:05:61:
e1:dc:ed:1e:9a:fa:c8:84:0d:df:0c:00:b2:0e:2b:
7e:0e:19:c2:63:6f:55:32:a0:13:3c:b2:ac:c7:77:
60:2c:82:e2:77:3a:73:5f:bf:03:d6:0d:3d:0e:66:
09:eb:8b:98:25:fb:d0:00:59:bf:e4:e7:fb:d7:a2:
7d:0a:48:e0:f3:66:fe:32:fd:fa:29:2e:cd:8f:e9:
2f:fd:7a:8e:13:4d:b8:00:5f:8d:97:3c:33:46:c8:
9a:3f:de:a7:e5:b8:e8:de:80:22:83:d6:2f:f2:48:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DF:A1:B9:83:85:78:01:72:55:C9:4E:FF:A6:52:1D:43:00:B9:5A
X509v3 Authority Key Identifier:
keyid:B3:85:94:14:62:02:E2:F6:C3:45:6B:06:96:FF:18:56:2F:1B:9F:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4WUFGIC4vbDRWsGlv8YVi8bn4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/kd-huYOFeAFyVclO_6ZSHUMAuVo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d2e826-5acb-47d6-92a4-43bb19f2e53b/1/s4WUFGIC4vbDRWsGlv8YVi8bn4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.56.0-193.0.60.255
IPv6:
2001:67c:184::/48
Signature Algorithm: sha256WithRSAEncryption
63:e4:d5:d1:be:51:5c:93:31:10:e6:a0:19:78:04:dd:c8:14:
6a:04:09:49:72:ef:d4:74:80:30:4e:61:86:30:88:1b:28:5c:
c6:64:3d:74:c1:e2:13:38:31:fe:42:ca:88:f2:06:bf:50:fe:
91:0b:f5:31:61:fd:df:60:f8:6d:b8:f2:13:6e:7b:3b:be:c7:
bc:35:5a:47:42:a6:93:db:01:90:3e:a7:33:23:71:4b:34:7f:
bc:6f:3a:85:9e:38:39:f1:d2:91:f9:4d:a3:69:fa:86:67:1a:
b8:0b:fe:c2:9e:9f:5c:9a:f7:fb:53:64:6f:92:36:24:9f:db:
33:53:29:c2:c7:da:70:20:70:cd:13:fc:49:48:8a:78:fa:05:
61:fb:45:c8:80:32:00:b0:b4:bc:ca:dd:e9:a4:3c:e6:35:32:
cf:70:92:69:a5:27:1c:2f:58:3b:49:2f:7f:eb:15:30:bc:0f:
4d:48:74:70:87:36:cf:b6:f7:55:25:e8:19:0f:37:a4:e5:84:
3f:97:25:5a:6c:66:b9:a6:6a:7a:00:c7:b4:87:5e:0d:f9:05:
8d:b5:d6:ef:62:3d:77:21:d6:14:a0:f0:de:98:b2:59:a1:d9:
11:70:51:c4:51:c2:2a:9c:17:52:b6:1e:c6:c7:16:d9:e0:00:
85:9f:e8:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzGS0ceycFFDGNgEzUyyRsmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzODU5NDE0NjIwMmUyZjZjMzQ1NmIwNjk2ZmYxODU2MmYx
YjlmODEwHhcNMjQwMTAxMTgzMTExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWRmYTFiOTgzODU3ODAxNzI1NWM5NGVmZmE2NTIxZDQzMDBiOTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdbnE+sEziqpav702gcVdDB/oZ5j
LG0drSFg16LmpJNDAur2EU/G4578/TPZ1dukAHYHl3vyzkM2ZB+KJ77uGoBXy1JQ
5/1JcEw1z56OFXCI9y4EtXwTUjY0PhnruhYHOQpluGbinPGVrTARFtzJCoSA8SDq
otmq+rmDxeZEIx2E/cY4KdzNCvwzpzJGHWzZKfftBWHh3O0emvrIhA3fDACyDit+
DhnCY29VMqATPLKsx3dgLILidzpzX78D1g09DmYJ64uYJfvQAFm/5Of716J9Ckjg
82b+Mv36KS7Nj+kv/XqOE024AF+NlzwzRsiaP96n5bjo3oAig9Yv8kgh5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHfobmDhXgBclXJTv+mUh1DALlaMB8GA1UdIwQY
MBaAFLOFlBRiAuL2w0VrBpb/GFYvG5+BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvczRXVUZHSUM0dmJEUldzR2x2OFlWaThibjRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9kMmU4MjYtNWFjYi00N2Q2LTkyYTQt
NDNiYjE5ZjJlNTNiLzEva2QtaHVZT0ZlQUZ5VmNsT182WlNIVU1BdVZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9kMmU4MjYtNWFjYi00N2Q2LTkyYTQtNDNiYjE5ZjJlNTNi
LzEvczRXVUZHSUM0dmJEUldzR2x2OFlWaThibjRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDgGCCsGAQUFBwEHAQH/BCkwJzAUBAIAATAOMAwDBAPBADgD
BADBADwwDwQCAAIwCQMHACABBnwBhDANBgkqhkiG9w0BAQsFAAOCAQEAY+TV0b5R
XJMxEOagGXgE3cgUagQJSXLv1HSAME5hhjCIGyhcxmQ9dMHiEzgx/kLKiPIGv1D+
kQv1MWH932D4bbjyE257O77HvDVaR0Kmk9sBkD6nMyNxSzR/vG86hZ44OfHSkflN
o2n6hmcauAv+wp6fXJr3+1Nkb5I2JJ/bM1MpwsfacCBwzRP8SUiKePoFYftFyIAy
ALC0vMrd6aQ85jUyz3CSaaUnHC9YO0kvf+sVMLwPTUh0cIc2z7b3VSXoGQ83pOWE
P5clWmxmuaZqegDHtIdeDfkFjbXW72I9dyHWFKDw3piyWaHZEXBRxFHCKpwXUrYe
xscW2eAAhZ/oOA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:17:27 2024 by rpki-client on console-fra.rpki-client.org