Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/2Q_tuRozWUEx38TBwM0ew5JHsFo.roa
File: 2Q_tuRozWUEx38TBwM0ew5JHsFo.roa (raw, json)
Hash identifier: /vyitMCrKbko3A5jrIJtYK2MLhuewIE1qPiATnlKrMw=
Subject key identifier: D9:0F:ED:B9:1A:33:59:41:31:DF:C4:C1:C0:CD:1E:C3:92:47:B0:5A
Certificate issuer: /CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Certificate serial: 018CC5DC49C1E870AC6EA7741935D37A8E8E
Authority key identifier: C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/2Q_tuRozWUEx38TBwM0ew5JHsFo.roa
Signing time: Mon 01 Jan 2024 16:29:57 +0000
ROA not before: Mon 01 Jan 2024 16:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57696
IP address blocks: 176.162.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:49:c1:e8:70:ac:6e:a7:74:19:35:d3:7a:8e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c24de99101fafdf74bca293fd6d95060d50a63
Validity
Not Before: Jan 1 16:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d90fedb91a33594131dfc4c1c0cd1ec39247b05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:50:34:0c:5c:31:e2:20:66:64:b9:91:e0:c6:
78:5c:75:6a:da:1d:14:30:a9:1a:29:44:f9:a6:59:
1e:56:f9:6b:54:69:9e:5d:0d:e4:91:b1:72:77:cf:
c0:93:e6:95:8d:20:b7:27:e3:9f:db:17:18:11:41:
2f:71:66:3b:45:3a:e9:f1:d0:23:bf:5b:49:43:42:
f1:9b:76:73:43:f6:91:a6:a0:33:8a:a5:f0:ca:b5:
38:06:67:2f:e5:96:dd:aa:42:69:f1:98:99:59:b6:
de:b6:65:37:02:65:f4:0f:41:a9:aa:b4:e2:25:1d:
b5:ba:0f:33:29:2c:f9:da:0e:7c:8f:69:d2:7d:78:
5b:bd:9d:ff:b7:73:15:de:21:4f:74:e9:c6:08:d1:
7f:e9:10:66:63:20:d0:39:c7:1a:6c:be:6d:a3:1f:
c9:2b:c3:61:3f:fa:dd:56:cc:a7:96:be:ef:8a:45:
58:43:3e:9a:d7:0f:0e:ae:d7:10:90:30:cc:eb:91:
78:46:13:ad:a3:f9:56:96:f8:0b:3d:9a:23:e2:be:
f8:d8:14:30:fa:e9:19:93:70:e6:6f:d1:cb:d9:8b:
4d:d2:2c:ba:84:f2:59:c3:70:a2:68:7d:98:5e:11:
e4:13:be:9a:8f:c9:a9:0f:bd:bd:09:7e:b0:1f:44:
5e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0F:ED:B9:1A:33:59:41:31:DF:C4:C1:C0:CD:1E:C3:92:47:B0:5A
X509v3 Authority Key Identifier:
keyid:C7:C2:4D:E9:91:01:FA:FD:F7:4B:CA:29:3F:D6:D9:50:60:D5:0A:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8JN6ZEB-v33S8opP9bZUGDVCmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/2Q_tuRozWUEx38TBwM0ew5JHsFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/eb013f-5774-4e06-a5d4-ed5d6ce8d7e8/1/x8JN6ZEB-v33S8opP9bZUGDVCmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.162.233.0/24
Signature Algorithm: sha256WithRSAEncryption
22:58:dd:b1:6e:c4:f4:ba:47:a7:0b:51:7c:5b:d5:fd:dc:a3:
fc:b0:50:42:f2:43:0c:ec:42:4b:dc:09:8b:61:11:6e:01:f5:
e9:aa:92:d9:8a:a8:ff:ea:73:bc:c2:97:31:3e:cb:a9:55:e8:
45:41:b6:97:fc:91:16:e4:38:d8:1d:83:5f:7a:d5:7d:59:f8:
f4:b6:4b:c7:0a:70:d9:a6:c0:bf:e5:02:cd:6f:d5:8b:2d:bf:
6e:b0:15:7a:e7:29:8d:16:a9:6b:3b:f3:ca:59:0d:2c:30:42:
1a:51:f7:cc:f7:be:55:f2:4e:56:60:5a:41:fb:95:aa:11:c5:
f1:e9:31:61:48:83:5a:31:54:52:11:1c:af:c8:98:7a:56:1b:
90:8e:e9:d7:47:e9:9d:22:96:89:be:0c:91:c4:fe:74:92:08:
8e:d1:0a:b2:b4:75:c0:6e:d9:bf:9c:96:28:7c:a7:b6:bf:cb:
49:28:fe:64:6b:a4:ee:00:f1:da:50:fb:a5:11:6b:9b:7f:fa:
e6:9c:5f:86:e4:d6:b5:27:b2:5e:66:17:ef:c2:15:0f:68:b3:
0a:a5:8e:ed:ec:54:dd:23:ba:39:e2:1f:2a:d1:94:8e:54:bd:
a9:bf:92:94:8a:85:c7:5d:88:bc:55:db:9c:9e:f0:23:a4:fa:
19:61:7b:37
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3EnB6HCsbqd0GTXTeo6OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3YzI0ZGU5OTEwMWZhZmRmNzRiY2EyOTNmZDZkOTUwNjBk
NTBhNjMwHhcNMjQwMTAxMTYyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTBmZWRiOTFhMzM1OTQxMzFkZmM0YzFjMGNkMWVjMzkyNDdiMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVA0DFwx4iBmZLmR4MZ4XHVq2h0U
MKkaKUT5plkeVvlrVGmeXQ3kkbFyd8/Ak+aVjSC3J+Of2xcYEUEvcWY7RTrp8dAj
v1tJQ0Lxm3ZzQ/aRpqAziqXwyrU4Bmcv5ZbdqkJp8ZiZWbbetmU3AmX0D0GpqrTi
JR21ug8zKSz52g58j2nSfXhbvZ3/t3MV3iFPdOnGCNF/6RBmYyDQOccabL5tox/J
K8NhP/rdVsynlr7vikVYQz6a1w8OrtcQkDDM65F4RhOto/lWlvgLPZoj4r742BQw
+ukZk3Dmb9HL2YtN0iy6hPJZw3CiaH2YXhHkE76aj8mpD729CX6wH0ReowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNkP7bkaM1lBMd/EwcDNHsOSR7BaMB8GA1UdIwQY
MBaAFMfCTemRAfr990vKKT/W2VBg1QpjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQt
ZWQ1ZDZjZThkN2U4LzEvMlFfdHVSb3pXVUV4MzhUQndNMGV3NUpIc0ZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9lYjAxM2YtNTc3NC00ZTA2LWE1ZDQtZWQ1ZDZjZThkN2U4
LzEveDhKTjZaRUItdjMzUzhvcFA5YlpVR0RWQ21NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsKLpMA0G
CSqGSIb3DQEBCwUAA4IBAQAiWN2xbsT0ukenC1F8W9X93KP8sFBC8kMM7EJL3AmL
YRFuAfXpqpLZiqj/6nO8wpcxPsupVehFQbaX/JEW5DjYHYNfetV9Wfj0tkvHCnDZ
psC/5QLNb9WLLb9usBV65ymNFqlrO/PKWQ0sMEIaUffM975V8k5WYFpB+5WqEcXx
6TFhSINaMVRSERyvyJh6VhuQjunXR+mdIpaJvgyRxP50kgiO0QqytHXAbtm/nJYo
fKe2v8tJKP5ka6TuAPHaUPulEWubf/rmnF+G5Na1J7JeZhfvwhUPaLMKpY7t7FTd
I7o54h8q0ZSOVL2pv5KUioXHXYi8VducnvAjpPoZYXs3
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:13:29 2024 by rpki-client on console-fra.rpki-client.org