Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/CKNyXZnKeBx-DqyJyStYRE_HztE.roa
File: CKNyXZnKeBx-DqyJyStYRE_HztE.roa (raw, json)
Hash identifier: q0GrX2H13b++E4v+Yxu3sjZQfyTgykpTrawGzI/CbiY=
Subject key identifier: 08:A3:72:5D:99:CA:78:1C:7E:0E:AC:89:C9:2B:58:44:4F:C7:CE:D1
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 018CC9BA9DA4591FBC7CAB40EFC3BF87AC5D
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/CKNyXZnKeBx-DqyJyStYRE_HztE.roa
Signing time: Tue 02 Jan 2024 10:31:39 +0000
ROA not before: Tue 02 Jan 2024 10:31:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60068
IP address blocks: 178.253.16.0/24 maxlen: 24
178.253.38.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:ba:9d:a4:59:1f:bc:7c:ab:40:ef:c3:bf:87:ac:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 10:31:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08a3725d99ca781c7e0eac89c92b58444fc7ced1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:f6:11:c2:48:35:65:1d:b6:67:f7:4c:ec:
73:3a:d9:3e:1d:5a:8a:69:0a:d4:ae:dc:0f:9b:81:
04:d0:b1:eb:ab:c7:33:cc:e2:e4:34:bd:52:b2:e9:
f2:5f:e8:d3:d8:0c:38:ba:76:9a:f9:f0:d4:1d:a2:
b7:fd:7c:97:f2:a4:b9:ad:1d:18:a9:81:73:f4:2b:
0b:e0:dc:1e:0d:af:f4:00:fa:e1:b7:bb:a1:71:a3:
39:09:02:a0:e2:4a:65:67:6f:bd:00:b1:e1:cf:b4:
cf:21:b8:a4:16:ab:c0:46:1b:b7:12:6d:e3:33:92:
ff:f2:58:f7:8e:18:78:8e:50:22:f2:f2:16:b3:b2:
22:18:9a:d3:9d:54:35:25:cd:7c:89:89:b6:a4:06:
12:04:59:b1:7b:60:6c:f4:63:70:1d:a1:c4:8a:fc:
f4:36:34:45:d7:13:47:20:33:5a:1e:a0:b5:59:2b:
11:a1:3d:3e:0b:d1:f0:ac:e2:ba:20:0f:1b:f4:63:
bd:c7:7b:6a:92:8a:a7:df:c6:8e:a9:6e:bd:f3:41:
b8:ff:65:df:92:ab:cd:46:16:40:44:95:5f:9b:43:
ff:b4:30:72:c8:cb:16:2c:ec:98:2a:43:ec:78:ed:
4e:bb:a4:3e:74:b5:3c:e7:15:64:bb:a2:7e:83:4a:
73:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A3:72:5D:99:CA:78:1C:7E:0E:AC:89:C9:2B:58:44:4F:C7:CE:D1
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/CKNyXZnKeBx-DqyJyStYRE_HztE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.16.0/24
178.253.38.0/23
Signature Algorithm: sha256WithRSAEncryption
47:8a:c0:58:4a:e6:db:b7:a2:ed:e8:c3:ff:6e:0f:8d:6a:3f:
fb:2d:4a:80:1e:eb:5a:87:5b:8e:8b:f4:41:fe:cb:2c:cc:ed:
2a:e4:92:35:01:cb:86:c6:65:62:f0:63:a1:bc:9c:65:8d:9c:
f8:bb:27:4f:ee:c9:0e:ba:26:81:85:c3:22:b3:50:03:cc:2f:
b1:81:26:36:01:b6:cb:70:05:8e:e0:04:82:d4:29:34:c5:45:
28:9d:7e:85:20:1b:6b:4c:20:d1:a1:fd:22:58:92:b7:6c:47:
b4:7c:c1:75:ad:49:4d:e2:ec:93:91:c7:93:c4:30:90:54:4c:
ee:85:8a:9a:a1:70:9b:67:be:25:68:bc:49:40:a9:19:5d:63:
5e:3e:3e:8e:0c:12:f1:5b:c8:d7:00:92:24:66:46:59:77:90:
61:41:38:8a:40:5e:ea:6d:d6:7d:5b:54:3f:24:af:04:3b:ba:
2f:06:31:b3:bc:79:77:89:d4:09:b4:75:2a:c0:1d:bd:a1:75:
b7:1a:0d:04:0c:30:13:10:a9:66:e5:28:9e:db:bf:13:b3:79:
65:49:51:63:c5:ad:48:a1:78:10:5b:82:4b:ea:e8:0e:a3:ba:
c0:26:3d:13:ef:30:42:cd:33:51:49:6c:4a:0e:20:d7:95:56:
52:86:67:29
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzJup2kWR+8fKtA78O/h6xdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMyNzc4ZGUyYTliZTk4MDIxMjAzODJlNzUwZDE1OWU5NTg3
MmMyYWUwHhcNMjQwMTAyMTAzMTM5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOGEzNzI1ZDk5Y2E3ODFjN2UwZWFjODljOTJiNTg0NDRmYzdjZWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJ72EcJINWUdtmf3TOxzOtk+HVqK
aQrUrtwPm4EE0LHrq8czzOLkNL1SsunyX+jT2Aw4unaa+fDUHaK3/XyX8qS5rR0Y
qYFz9CsL4NweDa/0APrht7uhcaM5CQKg4kplZ2+9ALHhz7TPIbikFqvARhu3Em3j
M5L/8lj3jhh4jlAi8vIWs7IiGJrTnVQ1Jc18iYm2pAYSBFmxe2Bs9GNwHaHEivz0
NjRF1xNHIDNaHqC1WSsRoT0+C9HwrOK6IA8b9GO9x3tqkoqn38aOqW6980G4/2Xf
kqvNRhZARJVfm0P/tDByyMsWLOyYKkPseO1Ou6Q+dLU85xVku6J+g0pzRwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAijcl2Zyngcfg6sickrWERPx87RMB8GA1UdIwQY
MBaAFMJ3jeKpvpgCEgOC51DRWelYcsKuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEt
Zjk4ZGE1NGFmNDM0LzEvQ0tOeVhabktlQngtRHF5SnlTdFlSRV9IenRFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80MTA5MzAtOWQ2NS00YmU4LTllYmEtZjk4ZGE1NGFmNDM0
LzEvd25lTjRxbS1tQUlTQTRMblVORlo2Vmh5d3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsv0QAwQB
sv0mMA0GCSqGSIb3DQEBCwUAA4IBAQBHisBYSubbt6Lt6MP/bg+Naj/7LUqAHuta
h1uOi/RB/ssszO0q5JI1AcuGxmVi8GOhvJxljZz4uydP7skOuiaBhcMis1ADzC+x
gSY2AbbLcAWO4ASC1Ck0xUUonX6FIBtrTCDRof0iWJK3bEe0fMF1rUlN4uyTkceT
xDCQVEzuhYqaoXCbZ74laLxJQKkZXWNePj6ODBLxW8jXAJIkZkZZd5BhQTiKQF7q
bdZ9W1Q/JK8EO7ovBjGzvHl3idQJtHUqwB29oXW3Gg0EDDATEKlm5Sie278Ts3ll
SVFjxa1IoXgQW4JL6ugOo7rAJj0T7zBCzTNRSWxKDiDXlVZShmcp
-----END CERTIFICATE-----
Generated at Sat Apr 27 16:30:38 2024 by rpki-client on console-ams.rpki-client.org