Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/1-ANmxg8oy_psJGEOt7au85eaFW8.roa
File: 1-ANmxg8oy_psJGEOt7au85eaFW8.roa (raw, json)
Hash identifier: VSnJwSK7kT4JW2ClusDAj/2VI978TSeBacoTecoMXfs=
Subject key identifier: F8:03:66:C6:0F:28:CB:FA:6C:24:61:0E:B7:B6:AE:F3:97:9A:15:6F
Certificate issuer: /CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Certificate serial: 018CCA99F07C11D88B4305B6EC112A4EF705
Authority key identifier: 39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/1-ANmxg8oy_psJGEOt7au85eaFW8.roa
Signing time: Tue 02 Jan 2024 14:35:35 +0000
ROA not before: Tue 02 Jan 2024 14:35:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5408
IP address blocks: 193.218.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 14:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:f0:7c:11:d8:8b:43:05:b6:ec:11:2a:4e:f7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3937b5a5156b5c72ffc0f9c0b7104bb188dbcbbc
Validity
Not Before: Jan 2 14:35:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f80366c60f28cbfa6c24610eb7b6aef3979a156f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:66:01:57:75:bb:ad:4e:7f:32:6e:60:05:
03:ff:2b:da:5a:44:15:91:1f:3c:78:c0:d1:4a:f0:
e9:6d:26:13:4e:25:b5:30:21:b0:50:56:d3:6b:a6:
e8:a9:23:02:d9:ca:c0:67:dd:98:08:0e:5e:ad:64:
62:d7:24:6b:b0:93:89:29:81:f9:06:0f:d3:6e:d4:
6e:dd:8c:6e:37:e5:0b:3a:57:30:6b:0f:44:62:1b:
42:9e:f6:c8:cf:02:78:05:e8:08:40:80:6e:04:04:
69:84:75:a2:05:7f:f8:eb:fb:13:1c:71:96:4f:1d:
24:1a:48:0a:d0:04:6a:f4:c6:a7:46:73:eb:30:3e:
5d:e1:6a:35:53:55:45:4f:54:72:1e:af:ad:14:fc:
fa:75:2c:72:2d:e8:f0:89:fc:de:e5:fd:d6:a4:13:
b6:60:fe:9d:1f:8e:9c:c6:2d:7f:43:fc:63:93:d5:
dd:c2:d8:ba:e7:3f:b7:77:86:21:fd:63:03:02:64:
09:d2:35:0a:59:30:25:1a:10:e1:40:d7:23:1f:90:
2f:af:7e:b7:fc:b6:47:a9:5f:25:8d:d3:9c:4f:45:
bf:82:25:d0:98:3c:75:61:f5:76:88:dd:2f:7a:d7:
24:f1:f5:69:53:98:2c:31:7c:94:8a:ea:a8:43:78:
56:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:03:66:C6:0F:28:CB:FA:6C:24:61:0E:B7:B6:AE:F3:97:9A:15:6F
X509v3 Authority Key Identifier:
keyid:39:37:B5:A5:15:6B:5C:72:FF:C0:F9:C0:B7:10:4B:B1:88:DB:CB:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OTe1pRVrXHL_wPnAtxBLsYjby7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/1-ANmxg8oy_psJGEOt7au85eaFW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/d21778-193c-4f4c-8119-dd142a1335f0/1/OTe1pRVrXHL_wPnAtxBLsYjby7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.36.0/24
Signature Algorithm: sha256WithRSAEncryption
14:5a:f7:a7:e1:e2:08:ce:2c:a4:d7:e6:2e:5f:11:d1:00:e3:
c6:6c:f5:29:fc:ab:f3:13:fa:49:62:80:04:bf:ba:fd:af:b0:
34:18:50:b8:69:d8:0a:36:36:0e:60:9c:7e:7a:b1:a5:8c:03:
c7:a5:87:e5:53:dd:3a:39:d1:ad:4e:64:cb:1a:4e:67:de:ff:
9b:13:c6:90:88:ad:84:ec:10:ea:91:9b:0f:cd:91:02:8a:c9:
d8:66:19:d9:7b:e6:54:ee:47:7c:78:3a:b5:91:08:84:45:f9:
26:58:60:1a:df:24:fb:4b:6d:51:f4:73:77:fd:23:1a:57:3b:
af:87:50:19:69:d1:b7:6c:66:90:fd:d5:63:8a:b7:d0:b8:dd:
f2:68:77:4f:75:bf:00:92:46:ab:26:84:62:8c:b1:19:13:87:
cf:0f:80:e9:37:f8:a6:f2:96:3e:bf:b8:d2:48:eb:ef:8f:36:
ac:5f:d5:16:2b:d1:e3:1c:0d:b2:c4:10:92:88:d6:cb:98:02:
a7:55:a4:4a:19:a6:67:44:9d:82:d9:99:52:60:38:ba:21:24:
30:46:c8:c3:0a:45:3f:f3:9b:fd:4e:0e:2a:c1:ae:3d:53:5d:
2e:ed:cd:a8:8e:5d:c3:fa:0c:1d:41:98:d1:cf:0e:e1:22:b2:
6c:84:ed:62
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzKmfB8EdiLQwW27BEqTvcFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5MzdiNWE1MTU2YjVjNzJmZmMwZjljMGI3MTA0YmIxODhk
YmNiYmMwHhcNMjQwMTAyMTQzNTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODAzNjZjNjBmMjhjYmZhNmMyNDYxMGViN2I2YWVmMzk3OWExNTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBVmAVd1u61OfzJuYAUD/yvaWkQV
kR88eMDRSvDpbSYTTiW1MCGwUFbTa6boqSMC2crAZ92YCA5erWRi1yRrsJOJKYH5
Bg/TbtRu3YxuN+ULOlcwaw9EYhtCnvbIzwJ4BegIQIBuBARphHWiBX/46/sTHHGW
Tx0kGkgK0ARq9ManRnPrMD5d4Wo1U1VFT1RyHq+tFPz6dSxyLejwifze5f3WpBO2
YP6dH46cxi1/Q/xjk9Xdwti65z+3d4Yh/WMDAmQJ0jUKWTAlGhDhQNcjH5Avr363
/LZHqV8ljdOcT0W/giXQmDx1YfV2iN0vetck8fVpU5gsMXyUiuqoQ3hWeQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgDZsYPKMv6bCRhDre2rvOXmhVvMB8GA1UdIwQY
MBaAFDk3taUVa1xy/8D5wLcQS7GI28u8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT1RlMXBSVnJYSExfd1BuQXR4QkxzWWpieTd3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS9kMjE3NzgtMTkzYy00ZjRjLTgxMTkt
ZGQxNDJhMTMzNWYwLzEvMS1BTm14ZzhveV9wc0pHRU90N2F1ODVlYUZXOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvY2UvZDIxNzc4LTE5M2MtNGY0Yy04MTE5LWRkMTQyYTEzMzVm
MC8xL09UZTFwUlZyWEhMX3dQbkF0eEJMc1lqYnk3dy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMHaJDAN
BgkqhkiG9w0BAQsFAAOCAQEAFFr3p+HiCM4spNfmLl8R0QDjxmz1Kfyr8xP6SWKA
BL+6/a+wNBhQuGnYCjY2DmCcfnqxpYwDx6WH5VPdOjnRrU5kyxpOZ97/mxPGkIit
hOwQ6pGbD82RAorJ2GYZ2XvmVO5HfHg6tZEIhEX5JlhgGt8k+0ttUfRzd/0jGlc7
r4dQGWnRt2xmkP3VY4q30Ljd8mh3T3W/AJJGqyaEYoyxGROHzw+A6Tf4pvKWPr+4
0kjr7482rF/VFivR4xwNssQQkojWy5gCp1WkShmmZ0SdgtmZUmA4uiEkMEbIwwpF
P/Ob/U4OKsGuPVNdLu3NqI5dw/oMHUGY0c8O4SKybITtYg==
-----END CERTIFICATE-----
Generated at Sat Jun 15 23:48:55 2024 by rpki-client on console-ams.rpki-client.org