Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/I7TIQfZjcET3_IXBNWfMugo_8Ko.roa
File: I7TIQfZjcET3_IXBNWfMugo_8Ko.roa (raw, json)
Hash identifier: fJIDpwLz1vR/BkbFR4lfQzIhg6KBo5jc0VH2igMoDUE=
Subject key identifier: 23:B4:C8:41:F6:63:70:44:F7:FC:85:C1:35:67:CC:BA:0A:3F:F0:AA
Certificate issuer: /CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Certificate serial: 018CC5DC8654A0D4CE433C5C22C9D2CF5659
Authority key identifier: 40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/I7TIQfZjcET3_IXBNWfMugo_8Ko.roa
Signing time: Mon 01 Jan 2024 16:30:13 +0000
ROA not before: Mon 01 Jan 2024 16:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 193.104.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:86:54:a0:d4:ce:43:3c:5c:22:c9:d2:cf:56:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406a92250c28580f2ad4cc1c357b02a25a790cf7
Validity
Not Before: Jan 1 16:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=23b4c841f6637044f7fc85c13567ccba0a3ff0aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:0c:53:a1:bc:96:93:b4:56:28:34:62:34:
e8:a0:ac:ce:67:1a:67:f2:38:d6:e2:f2:05:fc:32:
75:fd:54:87:40:e7:4d:78:07:4f:52:e4:49:34:bb:
0c:76:cc:ab:c5:a4:96:1b:46:8a:c7:09:8f:cc:df:
3d:fc:e6:b2:7c:99:8b:fc:51:9c:64:a4:de:69:77:
04:d0:38:56:54:c7:a1:de:2f:21:b0:01:48:f8:48:
5f:1f:f1:fe:a5:58:65:02:57:84:cd:50:45:26:1f:
e1:7b:05:93:b4:3d:42:b8:47:5f:0b:54:03:94:aa:
ff:12:09:11:0b:31:fc:d5:86:50:fb:3f:d0:6e:f2:
d0:79:4c:c7:9e:bd:d6:4d:7f:4f:d3:01:11:58:2a:
e4:33:e4:b4:69:7b:ee:2c:8e:63:1f:e5:70:c7:ea:
88:0f:d0:7d:e2:ac:8a:f6:75:4a:90:27:97:97:ea:
2c:82:b6:e9:91:d3:f1:90:74:37:c3:c3:d7:96:9b:
23:7d:9d:1d:b9:9c:36:73:04:98:a5:03:07:e7:ef:
49:e1:2b:2a:cf:3d:95:e4:15:17:60:c4:a9:c3:2d:
ac:35:a0:a2:02:48:c1:fc:2e:0c:7d:1c:99:07:5e:
0d:ec:76:00:5c:69:ee:fb:29:3c:d4:fe:e8:dc:93:
71:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B4:C8:41:F6:63:70:44:F7:FC:85:C1:35:67:CC:BA:0A:3F:F0:AA
X509v3 Authority Key Identifier:
keyid:40:6A:92:25:0C:28:58:0F:2A:D4:CC:1C:35:7B:02:A2:5A:79:0C:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGqSJQwoWA8q1MwcNXsColp5DPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/I7TIQfZjcET3_IXBNWfMugo_8Ko.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6d011b-949e-4d0f-a7e3-7f20ef02f264/1/QGqSJQwoWA8q1MwcNXsColp5DPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.147.0/24
Signature Algorithm: sha256WithRSAEncryption
62:92:b7:5b:bb:e1:f4:fd:cc:50:2b:bc:ad:9c:96:7c:1d:7d:
47:59:8a:32:11:22:f3:cf:e4:1b:56:48:01:47:8f:96:ad:ac:
58:11:80:c8:5a:50:7a:1a:b8:3a:20:f0:8a:ad:fb:a5:b4:75:
6a:44:28:2c:cc:47:3a:16:d9:3c:e9:84:35:d3:fa:3a:b1:55:
b5:a9:40:18:ba:15:76:d3:60:db:43:73:12:d0:06:a0:d4:8b:
f6:26:81:a6:65:e1:6b:7d:62:1f:e6:0e:7f:60:c9:41:bc:ba:
db:75:dd:f7:1b:9f:7d:c2:49:ac:cf:23:cc:00:19:57:e6:ed:
63:7b:07:f0:bc:40:74:c0:2d:0e:32:8d:74:38:92:7c:d1:86:
73:91:7f:21:ff:fd:f0:2e:4b:80:46:fb:bd:83:df:9a:38:33:
20:52:19:76:bc:19:46:3d:e2:b3:5d:0e:fd:84:53:fc:5a:0f:
8f:74:b5:8d:bc:5d:ce:b5:3c:93:6f:c0:f7:fc:64:6d:b8:0b:
d8:db:42:68:48:05:4b:07:a4:9b:5f:36:ef:45:40:29:a4:54:
48:2c:c3:85:a8:5a:a9:7e:54:01:28:f4:5f:16:16:f2:78:2b:
9b:0a:eb:97:66:85:1c:4d:22:7c:ce:0e:5d:a9:84:47:82:12:
11:3c:1f:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3IZUoNTOQzxcIsnSz1ZZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQwNmE5MjI1MGMyODU4MGYyYWQ0Y2MxYzM1N2IwMmEyNWE3
OTBjZjcwHhcNMjQwMTAxMTYzMDEzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyM2I0Yzg0MWY2NjM3MDQ0ZjdmYzg1YzEzNTY3Y2NiYTBhM2ZmMGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHsMU6G8lpO0Vig0YjTooKzOZxpn
8jjW4vIF/DJ1/VSHQOdNeAdPUuRJNLsMdsyrxaSWG0aKxwmPzN89/OayfJmL/FGc
ZKTeaXcE0DhWVMeh3i8hsAFI+EhfH/H+pVhlAleEzVBFJh/hewWTtD1CuEdfC1QD
lKr/EgkRCzH81YZQ+z/QbvLQeUzHnr3WTX9P0wERWCrkM+S0aXvuLI5jH+Vwx+qI
D9B94qyK9nVKkCeXl+osgrbpkdPxkHQ3w8PXlpsjfZ0duZw2cwSYpQMH5+9J4Ssq
zz2V5BUXYMSpwy2sNaCiAkjB/C4MfRyZB14N7HYAXGnu+yk81P7o3JNxMwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCO0yEH2Y3BE9/yFwTVnzLoKP/CqMB8GA1UdIwQY
MBaAFEBqkiUMKFgPKtTMHDV7AqJaeQz3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMt
N2YyMGVmMDJmMjY0LzEvSTdUSVFmWmpjRVQzX0lYQk5XZk11Z29fOEtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS82ZDAxMWItOTQ5ZS00ZDBmLWE3ZTMtN2YyMGVmMDJmMjY0
LzEvUUdxU0pRd29XQThxMU13Y05Yc0NvbHA1RFBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWiTMA0G
CSqGSIb3DQEBCwUAA4IBAQBikrdbu+H0/cxQK7ytnJZ8HX1HWYoyESLzz+QbVkgB
R4+WraxYEYDIWlB6Grg6IPCKrfultHVqRCgszEc6Ftk86YQ10/o6sVW1qUAYuhV2
02DbQ3MS0Aag1Iv2JoGmZeFrfWIf5g5/YMlBvLrbdd33G599wkmszyPMABlX5u1j
ewfwvEB0wC0OMo10OJJ80YZzkX8h//3wLkuARvu9g9+aODMgUhl2vBlGPeKzXQ79
hFP8Wg+PdLWNvF3OtTyTb8D3/GRtuAvY20JoSAVLB6SbXzbvRUAppFRILMOFqFqp
flQBKPRfFhbyeCubCuuXZoUcTSJ8zg5dqYRHghIRPB9T
-----END CERTIFICATE-----
Generated at Sat Apr 27 11:36:40 2024 by rpki-client on console-ams.rpki-client.org