Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/wOTCxkH7jfXpZlBXif2Q3ObS718.roa
File: wOTCxkH7jfXpZlBXif2Q3ObS718.roa (raw, json)
Hash identifier: 1AS+gBFKaAp2JqevLphf64Y91zjiIjqMe6PmE5X48Gk=
Subject key identifier: C0:E4:C2:C6:41:FB:8D:F5:E9:66:50:57:89:FD:90:DC:E6:D2:EF:5F
Certificate issuer: /CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Certificate serial: 018CC3B7058A90E45455D48E29F458138A22
Authority key identifier: 0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/wOTCxkH7jfXpZlBXif2Q3ObS718.roa
Signing time: Mon 01 Jan 2024 06:30:00 +0000
ROA not before: Mon 01 Jan 2024 06:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15719
IP address blocks: 195.29.139.0/24 maxlen: 24
194.152.233.0/24 maxlen: 24
194.152.232.0/23 maxlen: 23
194.152.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 20:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:05:8a:90:e4:54:55:d4:8e:29:f4:58:13:8a:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e0f4872ad1c1f4fcb213b6b2edb388a2d9c9a23
Validity
Not Before: Jan 1 06:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0e4c2c641fb8df5e966505789fd90dce6d2ef5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:dd:94:65:56:b7:bf:c6:ec:f4:fa:88:ba:
da:de:77:d6:4a:83:bd:e4:98:59:a3:ea:75:d7:8c:
37:fc:b1:4e:5f:a8:28:fe:91:d5:99:c5:aa:a8:1c:
54:a3:cc:f1:15:16:51:e1:fe:6c:21:59:53:15:45:
56:98:a1:ca:ea:63:26:fb:4a:12:63:f1:3b:47:23:
bb:7a:6e:63:6d:33:e7:cf:ce:6b:b6:98:c6:bf:f9:
dd:56:af:55:ff:16:71:47:fe:8d:ae:fb:ae:a3:6b:
08:03:38:b2:6c:3b:fc:bb:b8:2c:f0:db:1a:9d:7e:
d8:f9:4a:b3:2a:81:ea:90:80:0b:4e:a1:d9:e7:56:
cc:01:7c:57:4e:ed:91:19:0b:44:db:c5:5f:65:61:
0b:a0:8e:2e:08:45:4c:13:c1:47:ee:fa:36:26:f9:
98:0f:f0:93:40:39:98:48:32:76:3b:b2:2a:5c:fb:
11:dc:24:b8:20:1e:08:fd:05:8f:a5:ec:45:80:50:
2d:db:7f:a2:15:90:17:50:92:f8:87:7b:39:13:ac:
ea:4c:9c:70:f9:97:38:71:c6:dd:01:b1:4d:74:4d:
31:3f:dd:19:7a:20:e2:ce:b7:b6:1c:83:0e:5d:b1:
0b:0d:44:bf:1b:1c:30:0c:5a:92:ad:19:d4:ea:9b:
15:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E4:C2:C6:41:FB:8D:F5:E9:66:50:57:89:FD:90:DC:E6:D2:EF:5F
X509v3 Authority Key Identifier:
keyid:0E:0F:48:72:AD:1C:1F:4F:CB:21:3B:6B:2E:DB:38:8A:2D:9C:9A:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dg9Icq0cH0_LITtrLts4ii2cmiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/wOTCxkH7jfXpZlBXif2Q3ObS718.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dc5a62-064b-45b0-b89d-c01f80a1c805/1/Dg9Icq0cH0_LITtrLts4ii2cmiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.152.232.0/23
195.29.139.0/24
Signature Algorithm: sha256WithRSAEncryption
18:6b:30:be:f7:34:8e:ae:19:4d:61:78:1b:14:75:4b:6c:30:
cb:96:2b:cd:ae:b3:1c:53:75:ec:e0:67:7f:e4:c8:18:5b:7f:
20:51:18:67:c4:ef:99:2f:b4:55:91:8f:f0:15:55:53:cb:ff:
c9:df:19:aa:94:34:6f:7b:3b:68:ca:a6:47:41:f4:c8:49:7e:
33:2e:b3:05:70:3d:e3:a9:19:fa:96:e2:a2:4f:a7:bc:d0:84:
72:91:9e:3c:9e:1a:89:e0:f6:4c:09:04:c7:f6:e4:e3:b6:6e:
4a:8d:a8:62:29:db:c6:a9:1f:b4:e3:95:63:f1:81:33:04:c3:
b3:bf:c1:e2:fa:a0:87:55:ae:5c:c4:f1:30:94:ec:a1:06:9d:
fd:66:43:68:3a:4d:c3:c4:ed:ff:57:c0:bd:b7:8d:78:a8:bc:
49:f7:4c:4f:99:57:be:f1:4a:66:05:93:08:b3:40:54:81:ba:
18:e7:c8:3d:1b:ce:8b:06:61:82:28:3d:19:76:0c:f4:d9:0f:
48:d7:ef:5c:b4:65:c9:90:9e:1e:43:89:7b:b1:cc:99:56:aa:
81:ee:30:b3:8a:f5:77:8d:ce:1f:da:67:8e:71:78:9d:87:d5:
bc:94:6c:47:77:6f:89:c2:ad:2d:ea:8f:c4:1d:9b:11:17:e3:
5d:2a:10:b1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzDtwWKkORUVdSOKfRYE4oiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMGY0ODcyYWQxYzFmNGZjYjIxM2I2YjJlZGIzODhhMmQ5
YzlhMjMwHhcNMjQwMTAxMDYzMDAwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGU0YzJjNjQxZmI4ZGY1ZTk2NjUwNTc4OWZkOTBkY2U2ZDJlZjVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjXdlGVWt7/G7PT6iLra3nfWSoO9
5JhZo+p114w3/LFOX6go/pHVmcWqqBxUo8zxFRZR4f5sIVlTFUVWmKHK6mMm+0oS
Y/E7RyO7em5jbTPnz85rtpjGv/ndVq9V/xZxR/6Nrvuuo2sIAziybDv8u7gs8Nsa
nX7Y+UqzKoHqkIALTqHZ51bMAXxXTu2RGQtE28VfZWELoI4uCEVME8FH7vo2JvmY
D/CTQDmYSDJ2O7IqXPsR3CS4IB4I/QWPpexFgFAt23+iFZAXUJL4h3s5E6zqTJxw
+Zc4ccbdAbFNdE0xP90ZeiDizre2HIMOXbELDUS/GxwwDFqSrRnU6psVEwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFMDkwsZB+4316WZQV4n9kNzm0u9fMB8GA1UdIwQY
MBaAFA4PSHKtHB9PyyE7ay7bOIotnJojMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQt
YzAxZjgwYTFjODA1LzEvd09UQ3hrSDdqZlhwWmxCWGlmMlEzT2JTNzE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy9kYzVhNjItMDY0Yi00NWIwLWI4OWQtYzAxZjgwYTFjODA1
LzEvRGc5SWNxMGNIMF9MSVR0ckx0czRpaTJjbWlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwpjoAwQA
wx2LMA0GCSqGSIb3DQEBCwUAA4IBAQAYazC+9zSOrhlNYXgbFHVLbDDLlivNrrMc
U3Xs4Gd/5MgYW38gURhnxO+ZL7RVkY/wFVVTy//J3xmqlDRveztoyqZHQfTISX4z
LrMFcD3jqRn6luKiT6e80IRykZ48nhqJ4PZMCQTH9uTjtm5KjahiKdvGqR+045Vj
8YEzBMOzv8Hi+qCHVa5cxPEwlOyhBp39ZkNoOk3DxO3/V8C9t414qLxJ90xPmVe+
8UpmBZMIs0BUgboY58g9G86LBmGCKD0Zdgz02Q9I1+9ctGXJkJ4eQ4l7scyZVqqB
7jCzivV3jc4f2meOcXidh9W8lGxHd2+Jwq0t6o/EHZsRF+NdKhCx
-----END CERTIFICATE-----
Generated at Fri May 17 05:21:15 2024 by rpki-client on console-fra.rpki-client.org