Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/Hr89O8dB3iPJacZyEqPOyFZyShc.roa
File: Hr89O8dB3iPJacZyEqPOyFZyShc.roa (raw, json)
Hash identifier: 9C166V9MmQyafFyx2qBoQlOMK2VZH7Qm2sn67XcBk0k=
Subject key identifier: 1E:BF:3D:3B:C7:41:DE:23:C9:69:C6:72:12:A3:CE:C8:56:72:4A:17
Certificate issuer: /CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Certificate serial: 0190435A6021FB9BF79B47DF5A4F6664B390
Authority key identifier: 7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/Hr89O8dB3iPJacZyEqPOyFZyShc.roa
Signing time: Sun 23 Jun 2024 04:28:34 +0000
ROA not before: Sun 23 Jun 2024 04:28:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49556
IP address blocks: 193.228.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:43:5a:60:21:fb:9b:f7:9b:47:df:5a:4f:66:64:b3:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ee053cb9cb4f41c1e4773e7f16e84bb57522033
Validity
Not Before: Jun 23 04:28:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ebf3d3bc741de23c969c67212a3cec856724a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:30:c6:1b:1a:98:06:a1:f4:17:65:cc:3f:30:
c8:b6:31:c4:ea:89:8e:b9:1e:84:b2:fe:e4:92:6a:
f1:af:d0:53:40:42:09:cb:86:14:58:3c:f8:7a:3e:
9e:63:89:e1:56:fc:36:98:18:76:7c:83:9d:1c:ae:
f8:88:a9:5b:f5:d5:89:fe:56:be:fa:93:c2:a1:ab:
f5:0b:a8:bd:06:da:2f:2e:69:b8:a3:e3:60:fc:cc:
f0:76:53:9b:e2:d9:69:18:a0:50:a1:1a:96:4f:5e:
58:d3:a9:80:72:9a:7f:42:f1:ec:41:5b:6a:d4:a8:
52:35:96:ae:32:9a:83:82:7a:5b:f4:33:cd:45:2e:
12:12:09:64:4b:9d:ea:ea:c7:e2:26:bc:2f:f4:58:
8b:ca:0f:b5:94:d1:00:e3:dc:fc:3a:17:11:88:87:
a4:21:3f:e4:8c:37:2a:28:b0:7c:4f:96:fd:b6:22:
66:04:09:75:4c:97:05:e2:d6:f9:7d:91:3d:19:f4:
61:d4:7c:95:c6:42:cc:ed:11:c0:32:36:09:22:0a:
bb:de:b1:15:78:09:c0:08:46:53:7b:21:42:37:55:
b0:e2:69:85:81:6b:18:cb:23:2e:1e:2d:fe:e5:b8:
5a:34:42:78:47:ef:e4:8b:50:cb:4e:e7:58:2f:73:
ea:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:BF:3D:3B:C7:41:DE:23:C9:69:C6:72:12:A3:CE:C8:56:72:4A:17
X509v3 Authority Key Identifier:
keyid:7E:E0:53:CB:9C:B4:F4:1C:1E:47:73:E7:F1:6E:84:BB:57:52:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fuBTy5y09BweR3Pn8W6Eu1dSIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/Hr89O8dB3iPJacZyEqPOyFZyShc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0600a4-1464-4a7c-af56-18e86f0b1d81/1/fuBTy5y09BweR3Pn8W6Eu1dSIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.91.0/24
Signature Algorithm: sha256WithRSAEncryption
23:b7:5a:39:a6:b4:b2:4d:70:4d:84:69:04:9e:6a:18:96:7d:
50:ec:67:a7:1e:e8:fc:cf:9d:e6:84:f6:e1:36:25:43:f8:8d:
97:08:3a:b8:5d:1e:a1:c9:f0:9c:48:c9:3a:3b:07:92:72:6d:
17:7b:6e:fb:be:2d:c4:3c:23:db:3a:66:6b:97:66:6c:ac:2d:
20:91:92:10:cc:3e:39:e6:6a:47:b3:0c:16:e5:17:8a:f5:3d:
e5:0d:70:af:b6:4b:c7:49:5d:9b:20:61:1f:7a:dc:4a:82:00:
b4:2f:01:18:13:3c:b3:01:4e:5a:40:dc:09:ad:11:e8:f9:d9:
3e:e5:76:bc:a1:55:3e:03:ad:be:48:33:6d:9e:45:1e:ee:78:
3d:12:36:8d:b2:e8:bb:62:fe:26:e5:eb:0f:93:5b:0b:ac:04:
41:69:1f:5e:29:d6:db:97:58:c7:db:ff:ab:10:ed:bb:1b:b0:
73:80:5b:24:da:6e:20:b6:7f:16:e3:d3:15:69:14:ef:25:85:
e2:50:19:b0:b6:e2:db:2b:38:2e:15:60:3b:5f:60:f6:0c:fd:
c2:14:ac:e0:56:27:a5:09:75:36:56:05:05:5d:e4:20:68:b7:
bd:7f:aa:ee:c0:2e:75:44:f4:71:89:16:c4:87:af:e6:c5:21:
08:bd:cb:44
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBDWmAh+5v3m0ffWk9mZLOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZTA1M2NiOWNiNGY0MWMxZTQ3NzNlN2YxNmU4NGJiNTc1
MjIwMzMwHhcNMjQwNjIzMDQyODM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWJmM2QzYmM3NDFkZTIzYzk2OWM2NzIxMmEzY2VjODU2NzI0YTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jDGGxqYBqH0F2XMPzDItjHE6omO
uR6Esv7kkmrxr9BTQEIJy4YUWDz4ej6eY4nhVvw2mBh2fIOdHK74iKlb9dWJ/la+
+pPCoav1C6i9BtovLmm4o+Ng/MzwdlOb4tlpGKBQoRqWT15Y06mAcpp/QvHsQVtq
1KhSNZauMpqDgnpb9DPNRS4SEglkS53q6sfiJrwv9FiLyg+1lNEA49z8OhcRiIek
IT/kjDcqKLB8T5b9tiJmBAl1TJcF4tb5fZE9GfRh1HyVxkLM7RHAMjYJIgq73rEV
eAnACEZTeyFCN1Ww4mmFgWsYyyMuHi3+5bhaNEJ4R+/ki1DLTudYL3PqVwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB6/PTvHQd4jyWnGchKjzshWckoXMB8GA1UdIwQY
MBaAFH7gU8uctPQcHkdz5/FuhLtXUiAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYt
MThlODZmMGIxZDgxLzEvSHI4OU84ZEIzaVBKYWNaeUVxUE95Rlp5U2hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8wNjAwYTQtMTQ2NC00YTdjLWFmNTYtMThlODZmMGIxZDgx
LzEvZnVCVHk1eTA5QndlUjNQbjhXNkV1MWRTSURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweRbMA0G
CSqGSIb3DQEBCwUAA4IBAQAjt1o5prSyTXBNhGkEnmoYln1Q7GenHuj8z53mhPbh
NiVD+I2XCDq4XR6hyfCcSMk6OweScm0Xe277vi3EPCPbOmZrl2ZsrC0gkZIQzD45
5mpHswwW5ReK9T3lDXCvtkvHSV2bIGEfetxKggC0LwEYEzyzAU5aQNwJrRHo+dk+
5Xa8oVU+A62+SDNtnkUe7ng9EjaNsui7Yv4m5esPk1sLrARBaR9eKdbbl1jH2/+r
EO27G7BzgFsk2m4gtn8W49MVaRTvJYXiUBmwtuLbKzguFWA7X2D2DP3CFKzgViel
CXU2VgUFXeQgaLe9f6ruwC51RPRxiRbEh6/mxSEIvctE
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:34:17 2024 by rpki-client on console-ams.rpki-client.org