Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/mSEHKkz3V0zvul37WohG5gxzmHs.roa
File: mSEHKkz3V0zvul37WohG5gxzmHs.roa (raw, json)
Hash identifier: sHyPtQAiJZ+DXxaHC0YV3Ah/ZK7DSvwbtr1l4b+nOho=
Subject key identifier: 99:21:07:2A:4C:F7:57:4C:EF:BA:5D:FB:5A:88:46:E6:0C:73:98:7B
Certificate issuer: /CN=3ca447fd0979b8a989355c354d304d114d20727a
Certificate serial: 0192D75AADAABB4EAD6BD16D2DBFDF39299A
Authority key identifier: 3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/mSEHKkz3V0zvul37WohG5gxzmHs.roa
Signing time: Tue 29 Oct 2024 08:18:17 +0000
ROA not before: Tue 29 Oct 2024 08:18:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208967
IP address blocks: 194.76.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.mft
rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:5a:ad:aa:bb:4e:ad:6b:d1:6d:2d:bf:df:39:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ca447fd0979b8a989355c354d304d114d20727a
Validity
Not Before: Oct 29 08:18:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9921072a4cf7574cefba5dfb5a8846e60c73987b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fc:c8:92:82:b8:c0:e0:ae:a6:ff:2b:1d:0e:
9a:f2:d3:ac:7e:f9:fb:06:aa:e2:93:e0:4b:54:fa:
fb:47:7e:7a:8f:59:58:5c:57:97:a7:23:2b:4e:7b:
c6:57:33:d0:67:95:bd:5c:84:ec:f2:3a:5d:dd:7d:
2d:96:e5:15:49:30:fa:ae:4e:51:af:85:98:73:7f:
2e:dd:9f:09:c0:5a:cd:06:4d:71:9c:a9:1d:05:22:
ef:6f:f6:4f:5e:59:f6:7f:07:ae:22:55:24:8b:d2:
e2:24:a3:d3:d7:8c:72:ef:ab:f0:fb:cd:4a:10:b6:
d7:5f:5b:84:36:8d:5d:93:13:5f:80:3b:00:e0:b7:
49:1e:73:6d:1e:4b:36:a5:54:6a:3d:6a:bf:6e:01:
c3:c0:f5:3d:0f:01:b1:d5:17:ab:61:dc:d7:9d:5d:
3e:66:7b:4e:89:5d:ab:10:2e:15:3d:a3:4e:a9:5c:
2c:ba:a2:f3:2e:1d:39:f9:ca:d2:59:7b:da:33:8f:
40:2e:8a:f5:8a:1c:2f:d7:fd:f7:1d:1b:e5:01:5a:
e2:24:1a:e7:8f:5d:e0:1f:98:56:77:6f:ca:14:b2:
c6:89:55:32:d5:2e:64:bf:0b:85:32:ac:b0:5c:7b:
fa:e5:44:8c:a8:16:18:99:e4:19:27:fd:14:a3:cb:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:21:07:2A:4C:F7:57:4C:EF:BA:5D:FB:5A:88:46:E6:0C:73:98:7B
X509v3 Authority Key Identifier:
keyid:3C:A4:47:FD:09:79:B8:A9:89:35:5C:35:4D:30:4D:11:4D:20:72:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PKRH_Ql5uKmJNVw1TTBNEU0gcno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/mSEHKkz3V0zvul37WohG5gxzmHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/b5a08f-d9f8-432d-ba4b-a6ef752c6dc2/1/PKRH_Ql5uKmJNVw1TTBNEU0gcno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.42.0/24
Signature Algorithm: sha256WithRSAEncryption
53:ad:01:25:93:8b:99:42:19:16:72:0a:1f:92:93:3b:76:b9:
4d:0b:00:c0:95:14:44:d0:02:41:2d:03:41:43:6a:e6:ed:b3:
b8:3f:be:2e:a8:5a:a8:e4:43:ae:34:53:af:f9:c8:bf:d3:08:
68:70:9d:28:f7:11:b6:16:3d:f9:fd:43:71:3f:40:d7:01:47:
ae:5a:88:8c:3e:81:54:25:bf:20:d9:f2:09:07:ea:02:6b:5a:
e4:37:e7:c5:c1:4f:66:2d:e2:5f:a7:db:d5:f9:9e:72:25:f6:
ae:2e:6b:2d:82:92:a8:47:62:3e:c3:4e:b6:7b:f1:ea:8f:02:
c1:24:f9:b5:01:90:d7:e8:32:58:2e:a0:d4:54:88:40:22:19:
97:1d:ef:d9:00:62:af:14:b6:2b:19:35:38:af:c8:51:68:36:
75:30:3b:83:a5:3a:dd:0a:b4:28:18:86:e3:bd:89:1d:7c:cf:
75:44:71:09:20:d0:3f:37:28:9a:3a:7b:2a:f4:11:65:40:e1:
8e:33:c8:8e:98:fa:77:3e:57:5d:aa:ff:20:3c:45:be:87:29:
46:0d:0e:47:06:b3:24:df:fc:48:a6:d9:76:a5:a3:45:d8:b4:
2e:a6:32:fe:03:82:13:27:f0:84:eb:3a:f3:71:95:04:93:cf:
b5:01:ce:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZLXWq2qu06ta9FtLb/fOSmaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNjYTQ0N2ZkMDk3OWI4YTk4OTM1NWMzNTRkMzA0ZDExNGQy
MDcyN2EwHhcNMjQxMDI5MDgxODE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5OTIxMDcyYTRjZjc1NzRjZWZiYTVkZmI1YTg4NDZlNjBjNzM5ODdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvzIkoK4wOCupv8rHQ6a8tOsfvn7
Bqrik+BLVPr7R356j1lYXFeXpyMrTnvGVzPQZ5W9XITs8jpd3X0tluUVSTD6rk5R
r4WYc38u3Z8JwFrNBk1xnKkdBSLvb/ZPXln2fweuIlUki9LiJKPT14xy76vw+81K
ELbXX1uENo1dkxNfgDsA4LdJHnNtHks2pVRqPWq/bgHDwPU9DwGx1RerYdzXnV0+
ZntOiV2rEC4VPaNOqVwsuqLzLh05+crSWXvaM49ALor1ihwv1/33HRvlAVriJBrn
j13gH5hWd2/KFLLGiVUy1S5kvwuFMqywXHv65USMqBYYmeQZJ/0Uo8tgFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJkhBypM91dM77pd+1qIRuYMc5h7MB8GA1UdIwQY
MBaAFDykR/0JebipiTVcNU0wTRFNIHJ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9iNWEwOGYtZDlmOC00MzJkLWJhNGIt
YTZlZjc1MmM2ZGMyLzEvbVNFSEtrejNWMHp2dWwzN1dvaEc1Z3h6bUhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9iNWEwOGYtZDlmOC00MzJkLWJhNGItYTZlZjc1MmM2ZGMy
LzEvUEtSSF9RbDV1S21KTlZ3MVRUQk5FVTBnY25vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwkwqMA0G
CSqGSIb3DQEBCwUAA4IBAQBTrQElk4uZQhkWcgofkpM7drlNCwDAlRRE0AJBLQNB
Q2rm7bO4P74uqFqo5EOuNFOv+ci/0whocJ0o9xG2Fj35/UNxP0DXAUeuWoiMPoFU
Jb8g2fIJB+oCa1rkN+fFwU9mLeJfp9vV+Z5yJfauLmstgpKoR2I+w062e/HqjwLB
JPm1AZDX6DJYLqDUVIhAIhmXHe/ZAGKvFLYrGTU4r8hRaDZ1MDuDpTrdCrQoGIbj
vYkdfM91RHEJINA/NyiaOnsq9BFlQOGOM8iOmPp3Plddqv8gPEW+hylGDQ5HBrMk
3/xIptl2paNF2LQupjL+A4ITJ/CE6zrzcZUEk8+1Ac71
-----END CERTIFICATE-----
Generated at Wed Nov 27 00:56:40 2024 by rpki-client on console-fra.rpki-client.org