Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/T9ZFP2qvxCJ8blGLrLAIEMFkHFQ.roa
File: T9ZFP2qvxCJ8blGLrLAIEMFkHFQ.roa (raw, json)
Hash identifier: GYldccoTdiQ9Ggk5QTGFBetL3dpsLoNGWlA6nWraEJ4=
Subject key identifier: 4F:D6:45:3F:6A:AF:C4:22:7C:6E:51:8B:AC:B0:08:10:C1:64:1C:54
Certificate issuer: /CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Certificate serial: 018E854B8DB18614EBFB43E857721523DA4F
Authority key identifier: 82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/T9ZFP2qvxCJ8blGLrLAIEMFkHFQ.roa
Signing time: Thu 28 Mar 2024 13:41:44 +0000
ROA not before: Thu 28 Mar 2024 13:41:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204341
IP address blocks: 193.200.52.0/24 maxlen: 24
193.200.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:85:4b:8d:b1:86:14:eb:fb:43:e8:57:72:15:23:da:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8267fb4a0b677b8377907b82fb1fb8810a2fef08
Validity
Not Before: Mar 28 13:41:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fd6453f6aafc4227c6e518bacb00810c1641c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:75:ed:1c:8d:4e:39:5a:b2:8a:2c:a2:6e:
13:98:17:a4:45:2a:96:57:5e:a1:5f:f1:1b:17:d9:
e2:bc:3e:31:10:33:16:6d:07:e9:92:35:40:da:68:
22:2b:f8:93:d6:f6:f6:80:2d:49:ac:69:72:27:a5:
70:6b:09:f7:63:c0:44:ed:34:b6:03:f0:e5:65:e7:
63:55:53:f6:4c:06:2f:f3:4f:a8:ce:d1:72:41:34:
fb:22:0d:83:6f:29:85:b4:85:5b:2d:fe:4f:fb:05:
bf:16:01:52:bd:b9:d8:bb:ef:7b:a2:dc:7b:02:51:
6f:df:c5:b6:95:fe:b9:eb:17:b2:25:2d:28:b1:bf:
a8:1e:ad:0a:68:cb:a2:b5:ca:0c:9f:c8:35:83:00:
d4:2b:7a:85:0c:a7:0e:0e:1e:da:13:a1:d8:50:dd:
07:8c:be:04:f6:01:bb:99:8a:08:22:3e:ad:26:0d:
98:8e:83:3d:f4:69:09:02:d8:11:7e:0c:e3:61:54:
b6:02:57:a7:e1:27:63:ed:07:ec:0a:25:fe:06:dc:
d3:8a:f9:05:d9:68:a1:ac:10:4a:f2:60:69:45:d4:
5d:ab:f7:00:66:dc:75:44:bb:80:e5:ac:43:62:18:
a9:a2:e8:c0:07:f4:03:fe:cc:da:08:77:31:ed:91:
68:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D6:45:3F:6A:AF:C4:22:7C:6E:51:8B:AC:B0:08:10:C1:64:1C:54
X509v3 Authority Key Identifier:
keyid:82:67:FB:4A:0B:67:7B:83:77:90:7B:82:FB:1F:B8:81:0A:2F:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmf7Sgtne4N3kHuC-x-4gQov7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/T9ZFP2qvxCJ8blGLrLAIEMFkHFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0dda42-53a5-4aba-86ae-639e14d04de6/1/gmf7Sgtne4N3kHuC-x-4gQov7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.52.0/23
Signature Algorithm: sha256WithRSAEncryption
48:0f:79:c1:04:1f:8e:35:a9:ff:4e:3a:e7:70:b0:c2:59:ef:
fc:7a:4c:5f:6c:80:b7:3a:b9:79:7a:93:2d:cf:e9:29:90:d9:
f4:e4:7a:f7:8d:ef:c9:43:a6:5d:ba:17:82:6c:54:98:c1:79:
b7:b6:1f:a0:4e:2c:dd:76:2e:85:68:a8:cb:c6:36:4c:f3:cd:
38:f9:97:86:41:b6:50:ea:18:30:28:5c:69:13:04:82:e5:a2:
e7:af:58:10:db:60:58:92:a4:ba:fd:65:6f:4b:e0:30:81:54:
38:16:7b:8d:78:23:9a:45:e8:9f:aa:96:26:b5:f3:0a:70:4d:
8e:9a:3e:01:e6:c5:8b:36:0b:a9:3f:24:40:c2:96:49:4b:1b:
a3:cc:5f:7e:74:9f:3f:ae:c2:d4:6f:ab:5c:c6:d1:9d:09:5e:
09:e2:2d:22:3f:57:aa:32:d8:02:71:50:0d:fa:40:41:bc:ca:
49:4d:6b:5f:0f:0f:61:86:5f:39:ff:3a:87:e8:be:2e:25:69:
b3:f5:c0:33:63:90:2e:b7:16:53:a2:b6:96:98:cd:c8:dc:c9:
72:08:15:a0:ef:9f:86:1e:29:fd:66:ba:34:1e:a7:43:f5:76:
a6:38:6e:24:80:b6:88:92:c8:a0:a5:37:78:ed:ee:d6:9e:cd:
7b:20:75:45
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6FS42xhhTr+0PoV3IVI9pPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNjdmYjRhMGI2NzdiODM3NzkwN2I4MmZiMWZiODgxMGEy
ZmVmMDgwHhcNMjQwMzI4MTM0MTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZmQ2NDUzZjZhYWZjNDIyN2M2ZTUxOGJhY2IwMDgxMGMxNjQxYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rN17RyNTjlasoosom4TmBekRSqW
V16hX/EbF9nivD4xEDMWbQfpkjVA2mgiK/iT1vb2gC1JrGlyJ6Vwawn3Y8BE7TS2
A/DlZedjVVP2TAYv80+oztFyQTT7Ig2DbymFtIVbLf5P+wW/FgFSvbnYu+97otx7
AlFv38W2lf656xeyJS0osb+oHq0KaMuitcoMn8g1gwDUK3qFDKcODh7aE6HYUN0H
jL4E9gG7mYoIIj6tJg2YjoM99GkJAtgRfgzjYVS2Alen4Sdj7QfsCiX+BtzTivkF
2WihrBBK8mBpRdRdq/cAZtx1RLuA5axDYhipoujAB/QD/szaCHcx7ZFohQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE/WRT9qr8QifG5Ri6ywCBDBZBxUMB8GA1UdIwQY
MBaAFIJn+0oLZ3uDd5B7gvsfuIEKL+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUt
NjM5ZTE0ZDA0ZGU2LzEvVDlaRlAycXZ4Q0o4YmxHTHJMQUlFTUZrSEZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wZGRhNDItNTNhNS00YWJhLTg2YWUtNjM5ZTE0ZDA0ZGU2
LzEvZ21mN1NndG5lNE4za0h1Qy14LTRnUW92N3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwcg0MA0G
CSqGSIb3DQEBCwUAA4IBAQBID3nBBB+ONan/TjrncLDCWe/8ekxfbIC3Orl5epMt
z+kpkNn05Hr3je/JQ6ZduheCbFSYwXm3th+gTizddi6FaKjLxjZM8804+ZeGQbZQ
6hgwKFxpEwSC5aLnr1gQ22BYkqS6/WVvS+AwgVQ4FnuNeCOaReifqpYmtfMKcE2O
mj4B5sWLNgupPyRAwpZJSxujzF9+dJ8/rsLUb6tcxtGdCV4J4i0iP1eqMtgCcVAN
+kBBvMpJTWtfDw9hhl85/zqH6L4uJWmz9cAzY5AutxZToraWmM3I3MlyCBWg75+G
Hin9Zro0HqdD9XamOG4kgLaIksigpTd47e7Wns17IHVF
-----END CERTIFICATE-----
Generated at Thu May 30 09:47:49 2024 by rpki-client on console-ams.rpki-client.org