Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/8AaWk5yqsCIShWFkavPhwhRcONk.roa
File: 8AaWk5yqsCIShWFkavPhwhRcONk.roa (raw, json)
Hash identifier: mB+cemiNG5c4Su6pjDOpNZTpQnZab/t4R57EQPBNDzk=
Subject key identifier: F0:06:96:93:9C:AA:B0:22:12:85:61:64:6A:F3:E1:C2:14:5C:38:D9
Certificate issuer: /CN=2ef957aba2ef00352850e202464c71d33ca81448
Certificate serial: 018CC4930305DD48407BAE549E810893CDC1
Authority key identifier: 2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/8AaWk5yqsCIShWFkavPhwhRcONk.roa
Signing time: Mon 01 Jan 2024 10:30:17 +0000
ROA not before: Mon 01 Jan 2024 10:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 789
IP address blocks: 193.48.100.0/24 maxlen: 24
193.48.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:03:05:dd:48:40:7b:ae:54:9e:81:08:93:cd:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ef957aba2ef00352850e202464c71d33ca81448
Validity
Not Before: Jan 1 10:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f00696939caab022128561646af3e1c2145c38d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fe:3f:86:ee:53:3c:30:12:af:0e:38:9f:b3:
ea:09:a0:c4:0a:ec:87:81:bb:84:14:e3:e8:c9:45:
f5:37:1f:05:66:54:e1:43:7e:c7:d5:ef:2f:c6:b8:
6a:4e:5e:34:bd:65:c8:5a:a7:16:6a:2e:d2:71:3f:
75:41:ea:00:39:f9:88:38:83:44:65:59:98:10:1d:
cc:75:3b:89:0a:9d:86:be:f5:97:ac:79:17:12:82:
cb:66:41:69:3b:ad:77:09:ac:1e:d0:6e:6e:7c:17:
fb:65:36:7f:06:ce:51:3f:d3:91:c8:4e:14:fe:d6:
cb:08:0c:2a:23:16:be:0b:f8:f0:d0:94:18:68:6c:
9f:31:e3:0f:35:f0:41:8f:6c:c0:88:d4:1a:04:e6:
71:0d:17:b7:d2:e8:1d:9a:fd:7c:a7:a2:a5:02:7b:
1e:56:06:e7:b8:8b:7c:26:d4:e7:c1:7c:21:c9:4c:
a6:54:ea:70:57:64:89:d5:20:84:b0:27:50:96:64:
4c:f7:82:b1:19:b7:6b:f6:5a:d7:a1:7c:83:bf:e4:
9d:f7:e8:b6:d6:95:76:86:5c:41:9b:f5:44:fb:9c:
b1:92:b3:41:ad:75:20:dc:28:a2:ed:98:e2:8c:56:
69:0b:fc:a1:b2:61:eb:30:c8:4f:ce:ad:55:f6:22:
62:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:06:96:93:9C:AA:B0:22:12:85:61:64:6A:F3:E1:C2:14:5C:38:D9
X509v3 Authority Key Identifier:
keyid:2E:F9:57:AB:A2:EF:00:35:28:50:E2:02:46:4C:71:D3:3C:A8:14:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LvlXq6LvADUoUOICRkxx0zyoFEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/8AaWk5yqsCIShWFkavPhwhRcONk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a584e4-ccd4-4c4f-9d16-04a27c4d5453/1/LvlXq6LvADUoUOICRkxx0zyoFEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.48.99.0-193.48.100.255
Signature Algorithm: sha256WithRSAEncryption
8a:fe:c5:c4:6e:eb:03:6a:83:95:cb:78:32:f4:5e:d7:83:3d:
1f:55:2a:11:a6:f9:dd:90:1d:fd:78:38:b7:8c:03:ca:5b:ff:
2a:23:68:88:51:c1:30:b1:dd:53:da:10:46:94:c8:c6:e7:43:
f0:43:48:ac:eb:30:60:61:5e:02:b7:f1:09:f2:9f:be:89:ba:
13:c4:cd:9f:4b:df:eb:db:33:8b:a9:d6:40:cc:e8:af:b3:a7:
25:1a:48:26:a5:69:e4:aa:e0:1a:e2:8e:4d:c5:c0:df:ff:0a:
ea:00:1a:a7:38:78:dc:7d:d1:e1:a2:41:a2:04:33:cf:67:d7:
1f:52:bb:b3:70:98:3d:0d:f4:5c:42:b2:8e:7f:2f:32:08:0a:
fd:3f:fa:9a:cb:74:72:53:f8:30:19:6f:86:4a:35:f2:5b:e6:
d7:95:e7:31:65:95:1f:e8:9b:5d:55:55:72:1b:44:f5:f5:7d:
84:5d:12:6c:1d:c5:83:93:28:7a:88:f5:cb:4f:19:c9:8f:20:
d8:32:52:49:d9:aa:28:e5:a3:aa:31:c1:3c:d8:07:6f:ab:71:
70:c1:f5:61:73:62:f3:88:f6:6a:56:da:3c:6b:b8:c8:62:fa:
28:09:cc:1a:57:78:f6:69:ef:0d:46:cf:0f:8f:70:3e:23:a8:
b1:d3:08:e5
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzEkwMF3UhAe65UnoEIk83BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlZjk1N2FiYTJlZjAwMzUyODUwZTIwMjQ2NGM3MWQzM2Nh
ODE0NDgwHhcNMjQwMTAxMTAzMDE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDA2OTY5MzljYWFiMDIyMTI4NTYxNjQ2YWYzZTFjMjE0NWMzOGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/4/hu5TPDASrw44n7PqCaDECuyH
gbuEFOPoyUX1Nx8FZlThQ37H1e8vxrhqTl40vWXIWqcWai7ScT91QeoAOfmIOINE
ZVmYEB3MdTuJCp2GvvWXrHkXEoLLZkFpO613Cawe0G5ufBf7ZTZ/Bs5RP9ORyE4U
/tbLCAwqIxa+C/jw0JQYaGyfMeMPNfBBj2zAiNQaBOZxDRe30ugdmv18p6KlAnse
VgbnuIt8JtTnwXwhyUymVOpwV2SJ1SCEsCdQlmRM94KxGbdr9lrXoXyDv+Sd9+i2
1pV2hlxBm/VE+5yxkrNBrXUg3Cii7ZjijFZpC/yhsmHrMMhPzq1V9iJikwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPAGlpOcqrAiEoVhZGrz4cIUXDjZMB8GA1UdIwQY
MBaAFC75V6ui7wA1KFDiAkZMcdM8qBRIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYt
MDRhMjdjNGQ1NDUzLzEvOEFhV2s1eXFzQ0lTaFdGa2F2UGh3aFJjT05rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9hNTg0ZTQtY2NkNC00YzRmLTlkMTYtMDRhMjdjNGQ1NDUz
LzEvTHZsWHE2THZBRFVvVU9JQ1JreHgwenlvRkVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADBMGMD
BADBMGQwDQYJKoZIhvcNAQELBQADggEBAIr+xcRu6wNqg5XLeDL0XteDPR9VKhGm
+d2QHf14OLeMA8pb/yojaIhRwTCx3VPaEEaUyMbnQ/BDSKzrMGBhXgK38Qnyn76J
uhPEzZ9L3+vbM4up1kDM6K+zpyUaSCalaeSq4Brijk3FwN//CuoAGqc4eNx90eGi
QaIEM89n1x9Su7NwmD0N9FxCso5/LzIICv0/+prLdHJT+DAZb4ZKNfJb5teV5zFl
lR/om11VVXIbRPX1fYRdEmwdxYOTKHqI9ctPGcmPINgyUknZqijlo6oxwTzYB2+r
cXDB9WFzYvOI9mpW2jxruMhi+igJzBpXePZp7w1Gzw+PcD4jqLHTCOU=
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:46:08 2024 by rpki-client on console-ams.rpki-client.org