Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/_aDHy8crGCk2GPJaE52dMLe10vA.roa
File: _aDHy8crGCk2GPJaE52dMLe10vA.roa (raw, json)
Hash identifier: jVW/CA6PBREHWSPkIStUs46TCsR+/zLW+VPd8f4YrL4=
Subject key identifier: FD:A0:C7:CB:C7:2B:18:29:36:18:F2:5A:13:9D:9D:30:B7:B5:D2:F0
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 018CC3B706A58B6AD4B09E65194C5D2877BA
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/_aDHy8crGCk2GPJaE52dMLe10vA.roa
Signing time: Mon 01 Jan 2024 06:30:01 +0000
ROA not before: Mon 01 Jan 2024 06:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204163
IP address blocks: 194.152.213.0/24 maxlen: 24
194.152.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:06:a5:8b:6a:d4:b0:9e:65:19:4c:5d:28:77:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Jan 1 06:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fda0c7cbc72b18293618f25a139d9d30b7b5d2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bc:e5:1c:b8:4b:08:25:24:ac:71:e6:f7:81:
33:a9:1d:85:46:d6:21:8d:42:ec:9e:c3:ba:2b:4d:
52:65:38:bc:e7:ab:86:29:d9:f2:c0:a6:ba:04:10:
28:ac:46:85:f4:25:df:b0:9b:87:f4:71:f5:1c:34:
91:fa:74:cd:bf:c7:f5:30:61:bd:59:a7:f6:0d:a4:
9b:0a:ea:10:1e:f1:73:e6:e9:63:14:f7:38:f5:79:
63:96:6f:c8:f9:fe:42:44:ec:ad:a7:f3:c2:fa:8d:
07:94:a6:5c:8e:78:0f:2e:a3:1d:1c:0e:65:5f:36:
73:4c:20:65:b0:7a:a6:2b:92:a3:af:f8:70:3d:fc:
16:c7:15:96:75:e5:02:c0:89:4b:cf:34:6a:6e:ac:
8f:4c:b1:cc:2e:29:30:84:82:2f:e1:f1:c7:0e:64:
8d:b6:1d:d1:d7:ac:63:91:40:e3:8c:a1:f0:c1:ce:
8a:7d:5c:6b:04:44:aa:df:61:7b:f3:83:42:9a:3e:
f7:0b:c7:40:7f:f0:81:62:5c:b6:0d:90:8e:ca:8e:
1c:eb:b4:bd:bc:c1:4a:a1:d8:63:4d:c6:de:e7:d0:
86:e5:2d:86:3f:14:3b:16:27:b9:aa:d8:2e:51:0e:
6b:49:ff:22:ad:e3:19:b2:dc:6c:b6:ea:3c:fb:c7:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:C7:CB:C7:2B:18:29:36:18:F2:5A:13:9D:9D:30:B7:B5:D2:F0
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/_aDHy8crGCk2GPJaE52dMLe10vA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.213.0/24
194.152.238.0/24
Signature Algorithm: sha256WithRSAEncryption
37:42:a9:43:38:c7:6e:02:e4:fa:65:55:87:ae:cb:15:cd:ec:
9e:87:7b:4c:4c:95:5c:f2:85:bc:57:39:f3:e1:c5:5c:86:2b:
bc:99:53:56:db:ff:3f:0b:10:52:d7:c0:03:e1:0f:d6:d2:0a:
82:1c:25:3d:67:0b:8e:00:66:33:91:b6:7b:1a:cc:83:7f:fd:
07:48:23:c2:c6:32:2d:1b:06:ea:8e:b3:4e:e8:50:7b:a0:0a:
42:20:90:f6:8c:b5:4b:62:b8:58:c5:74:2d:a6:b2:0c:99:86:
c9:cc:3d:e4:f3:39:bc:66:29:7c:b6:19:be:f0:2d:18:90:97:
d1:4d:0b:98:04:c7:35:f6:13:0c:5f:24:e9:67:00:42:0d:19:
12:33:8b:60:02:3f:99:fb:96:2b:c4:b8:4b:20:ee:9d:d0:72:
36:13:67:da:bf:b5:4b:8d:ea:b0:72:f5:58:3d:4a:34:88:15:
75:90:53:a5:36:fa:00:f4:f8:2e:1d:e3:b5:c8:35:00:dd:14:
e5:d3:41:b6:6e:a5:00:86:36:10:c6:02:b3:78:23:c5:5c:cc:
f6:e7:02:32:97:c5:a9:bb:36:32:ee:29:85:0a:a6:72:f5:70:
f3:cc:aa:2d:4a:f7:a2:e9:7f:e1:fb:d3:7c:ab:9e:6f:cc:ec:
f5:a1:9e:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDtwali2rUsJ5lGUxdKHe6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5
YzlhMjMwHhcNMjQwMTAxMDYzMDAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZGEwYzdjYmM3MmIxODI5MzYxOGYyNWExMzlkOWQzMGI3YjVkMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLzlHLhLCCUkrHHm94EzqR2FRtYh
jULsnsO6K01SZTi856uGKdnywKa6BBAorEaF9CXfsJuH9HH1HDSR+nTNv8f1MGG9
Waf2DaSbCuoQHvFz5uljFPc49Xljlm/I+f5CROytp/PC+o0HlKZcjngPLqMdHA5l
XzZzTCBlsHqmK5Kjr/hwPfwWxxWWdeUCwIlLzzRqbqyPTLHMLikwhIIv4fHHDmSN
th3R16xjkUDjjKHwwc6KfVxrBESq32F784NCmj73C8dAf/CBYly2DZCOyo4c67S9
vMFKodhjTcbe59CG5S2GPxQ7Fie5qtguUQ5rSf8ireMZstxstuo8+8c/UQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFP2gx8vHKxgpNhjyWhOdnTC3tdLwMB8GA1UdIwQY
MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt
YzAxZjgwYTFjODA1LzEvX2FESHk4Y3JHQ2syR1BKYUU1MmRNTGUxMHZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQtYzAxZjgwYTFjODA1
LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwpjVAwQA
wpjuMA0GCSqGSIb3DQEBCwUAA4IBAQA3QqlDOMduAuT6ZVWHrssVzeyeh3tMTJVc
8oW8Vznz4cVchiu8mVNW2/8/CxBS18AD4Q/W0gqCHCU9ZwuOAGYzkbZ7GsyDf/0H
SCPCxjItGwbqjrNO6FB7oApCIJD2jLVLYrhYxXQtprIMmYbJzD3k8zm8Zil8thm+
8C0YkJfRTQuYBMc19hMMXyTpZwBCDRkSM4tgAj+Z+5YrxLhLIO6d0HI2E2fav7VL
jeqwcvVYPUo0iBV1kFOlNvoA9PguHeO1yDUA3RTl00G2bqUAhjYQxgKzeCPFXMz2
5wIyl8WpuzYy7imFCqZy9XDzzKotSvei6X/h+9N8q55vzOz1oZ6d
-----END CERTIFICATE-----
Generated at Fri May 17 09:11:21 2024 by rpki-client on console-fra.rpki-client.org