Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/IaJCuEhmGQZXCByax7XJAsHh8RE.roa
File: IaJCuEhmGQZXCByax7XJAsHh8RE.roa (raw, json)
Hash identifier: PTS4CwiiulCjmjunfNBLkQCsAq9sdDUyK0cZ0YqND24=
Subject key identifier: 21:A2:42:B8:48:66:19:06:57:08:1C:9A:C7:B5:C9:02:C1:E1:F1:11
Certificate issuer: /CN=3ca447fd0979b8a989355c354d304d114d20727a
Certificate serial: 01931ADB269B141B2C3FF34365F1C888DFB8
Authority key identifier: 3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/IaJCuEhmGQZXCByax7XJAsHh8RE.roa
Signing time: Mon 11 Nov 2024 10:53:09 +0000
ROA not before: Mon 11 Nov 2024 10:53:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205425
IP address blocks: 194.49.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:db:26:9b:14:1b:2c:3f:f3:43:65:f1:c8:88:df:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca447fd0979b8a989355c354d304d114d20727a
Validity
Not Before: Nov 11 10:53:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21a242b84866190657081c9ac7b5c902c1e1f111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:37:68:4d:f3:14:13:d2:0a:b2:2b:1f:76:cb:
d5:7a:35:5b:25:6b:b1:4b:9f:df:a9:e1:7b:9b:6b:
2f:ad:aa:6f:cc:7b:fa:1d:d3:4a:3e:61:f7:96:df:
43:f8:dd:52:5e:2d:48:96:1b:f9:e5:0f:37:2c:9f:
c2:11:80:00:f7:45:5f:48:6c:f2:f9:3c:80:2b:60:
7b:db:dd:9a:82:e3:8e:18:ef:97:1e:f2:bf:77:c9:
62:3b:db:9e:bd:10:97:9f:03:64:72:29:93:33:3a:
e7:80:d7:2d:6e:df:40:75:c5:d4:56:4f:08:62:8c:
5f:8b:8b:51:8c:a9:4b:f4:1a:4b:38:bd:01:21:95:
a3:fe:c4:55:40:91:43:bb:33:96:ac:4d:fc:5c:a0:
26:db:70:94:42:ea:24:ef:82:33:74:0c:85:b6:66:
30:f3:d0:f5:9b:05:01:b3:ac:79:b3:53:7d:bb:65:
8c:45:ab:fc:22:1a:15:1f:3f:29:7c:74:81:40:70:
3c:7c:f1:43:cb:52:1a:ae:8f:60:ec:4b:c2:fb:95:
28:a5:d9:27:0d:00:a9:59:d1:f5:26:3d:a6:2b:9b:
22:4a:43:8d:20:4d:b1:2b:52:35:13:de:f2:4c:8a:
92:f5:06:e1:8f:57:25:76:12:0d:82:b7:18:71:87:
06:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A2:42:B8:48:66:19:06:57:08:1C:9A:C7:B5:C9:02:C1:E1:F1:11
X509v3 Authority Key Identifier:
keyid:3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/IaJCuEhmGQZXCByax7XJAsHh8RE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.49.92.0/24
Signature Algorithm: sha256WithRSAEncryption
95:3f:88:94:ca:35:8f:8e:bc:85:9e:64:ad:1b:4c:ac:5d:16:
42:48:79:cb:4c:17:8d:50:91:33:80:30:e1:ac:c0:f4:8e:8e:
cb:4f:d0:66:38:ff:c5:39:77:2a:cc:a1:dc:d9:97:37:fb:48:
25:a4:0c:a9:fb:43:e4:dd:11:27:0b:6c:7c:d0:8f:f0:fe:c5:
b0:5d:f5:01:d9:01:7f:62:20:04:33:61:8c:9d:95:50:ec:27:
db:45:b8:4a:c7:a1:89:f1:2b:f2:a1:0c:29:83:f5:58:cb:03:
83:25:dc:eb:9e:68:f4:5f:a7:2d:9e:50:23:7f:ec:23:57:58:
b1:29:84:d1:d3:51:38:30:65:0b:5a:f4:f9:db:e0:08:ac:17:
b0:51:f9:a8:cc:e0:69:dc:8b:f3:38:b7:78:76:31:5d:05:1b:
c5:78:1a:dc:06:b6:bf:4d:a4:9b:ab:7e:b3:66:93:d9:97:3f:
50:5b:6e:81:5b:9b:d5:5c:1a:c9:33:21:31:2e:2f:03:54:59:
93:c3:8a:8b:01:7f:d1:00:69:11:c0:a1:35:e2:0a:00:c5:f1:
1a:97:bf:7c:9c:94:7e:d6:ec:0d:d0:0f:ef:1c:4d:0b:c4:b3:
f6:0d:ae:48:2c:67:4f:26:ed:e4:86:72:bc:b4:c1:6f:80:45:
0e:56:7a:b7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZMa2yabFBssP/NDZfHIiN+4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTQ0N2ZkMDk3OWI4YTk4OTM1NWMzNTRkMzA0ZDExNGQy
MDcyN2EwHhcNMjQxMTExMTA1MzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWEyNDJiODQ4NjYxOTA2NTcwODFjOWFjN2I1YzkwMmMxZTFmMTExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTdoTfMUE9IKsisfdsvVejVbJWux
S5/fqeF7m2svrapvzHv6HdNKPmH3lt9D+N1SXi1Ilhv55Q83LJ/CEYAA90VfSGzy
+TyAK2B7292aguOOGO+XHvK/d8liO9uevRCXnwNkcimTMzrngNctbt9AdcXUVk8I
Yoxfi4tRjKlL9BpLOL0BIZWj/sRVQJFDuzOWrE38XKAm23CUQuok74IzdAyFtmYw
89D1mwUBs6x5s1N9u2WMRav8IhoVHz8pfHSBQHA8fPFDy1Iaro9g7EvC+5Uopdkn
DQCpWdH1Jj2mK5siSkONIE2xK1I1E97yTIqS9Qbhj1cldhINgrcYcYcGbwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCGiQrhIZhkGVwgcmse1yQLB4fERMB8GA1UdIwQY
MBaAFDykR/0JebipiTVcNU0wTRFNIHJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNWEwOGYtZDlmOC00MzJkLWJhNGIt
YTZlZjc1MmM2ZGMyLzEvSWFKQ3VFaG1HUVpYQ0J5YXg3WEpBc0hoOFJFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iNWEwOGYtZDlmOC00MzJkLWJhNGItYTZlZjc1MmM2ZGMy
LzEvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjFcMA0G
CSqGSIb3DQEBCwUAA4IBAQCVP4iUyjWPjryFnmStG0ysXRZCSHnLTBeNUJEzgDDh
rMD0jo7LT9BmOP/FOXcqzKHc2Zc3+0glpAyp+0Pk3REnC2x80I/w/sWwXfUB2QF/
YiAEM2GMnZVQ7CfbRbhKx6GJ8SvyoQwpg/VYywODJdzrnmj0X6ctnlAjf+wjV1ix
KYTR01E4MGULWvT52+AIrBewUfmozOBp3IvzOLd4djFdBRvFeBrcBra/TaSbq36z
ZpPZlz9QW26BW5vVXBrJMyExLi8DVFmTw4qLAX/RAGkRwKE14goAxfEal798nJR+
1uwN0A/vHE0LxLP2Da5ILGdPJu3khnK8tMFvgEUOVnq3
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:40 2024 by rpki-client on console-fra.rpki-client.org