Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/ScAzM3Pv8V_KKFpDgRm6J0ZBPo4.roa
File: ScAzM3Pv8V_KKFpDgRm6J0ZBPo4.roa (raw, json)
Hash identifier: bdJVrwOk9s8HD7oIoaxEd9p8Goq3MJSdOc3ZS23GIis=
Subject key identifier: 49:C0:33:33:73:EF:F1:5F:CA:28:5A:43:81:19:BA:27:46:41:3E:8E
Certificate issuer: /CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Certificate serial: 018CC9BCA27D23D575C4F5BCCDDC5977B90E
Authority key identifier: 63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/ScAzM3Pv8V_KKFpDgRm6J0ZBPo4.roa
Signing time: Tue 02 Jan 2024 10:33:51 +0000
ROA not before: Tue 02 Jan 2024 10:33:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202208
IP address blocks: 193.111.226.0/24 maxlen: 24
193.111.229.0/24 maxlen: 24
193.111.168.0/24 maxlen: 24
193.111.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a2:7d:23:d5:75:c4:f5:bc:cd:dc:59:77:b9:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633b6895fe4993397b66232bb0a2d3e3c625cc1b
Validity
Not Before: Jan 2 10:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49c0333373eff15fca285a438119ba2746413e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:fc:db:11:12:2b:71:40:77:98:aa:e8:3a:8e:
a1:3e:9c:65:c0:c3:4c:6f:59:14:85:83:a7:d3:33:
21:a0:60:f3:33:7d:96:63:7e:b9:2f:1f:c9:5a:1c:
4f:48:db:81:b4:e5:3b:8f:72:df:45:5d:71:88:3f:
67:16:8f:d9:36:d9:f3:3d:b9:48:ce:ac:1a:37:ad:
4b:fc:72:7c:c4:c6:24:5b:6c:ee:98:87:c1:76:a5:
0e:51:14:25:29:8e:3b:b4:50:a6:60:59:da:f3:3c:
b3:57:be:92:d8:91:ef:29:bd:60:ac:d3:8b:73:9e:
74:c1:57:ac:8a:ab:f1:c3:c9:a2:6a:dc:cb:76:ca:
76:48:26:57:f2:b5:91:eb:09:c9:71:ff:4d:4f:a1:
c0:b8:88:a4:3b:72:f8:d5:98:44:23:a8:da:74:48:
d9:8d:64:0c:93:5b:ab:93:90:a1:e4:65:12:1c:48:
7d:d3:f5:a6:2b:8e:62:0b:0e:3d:26:ce:db:a6:0e:
8d:28:be:f9:2e:d7:92:ae:32:db:84:e5:e1:18:88:
e0:8b:42:f4:d7:ec:86:4c:2d:c1:cc:be:7e:7b:e0:
cc:5e:15:3e:10:c4:f7:56:27:21:c8:a6:1e:f3:97:
42:25:04:b4:ff:32:7a:42:d6:d5:4c:14:ef:90:43:
51:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:33:33:73:EF:F1:5F:CA:28:5A:43:81:19:BA:27:46:41:3E:8E
X509v3 Authority Key Identifier:
keyid:63:3B:68:95:FE:49:93:39:7B:66:23:2B:B0:A2:D3:E3:C6:25:CC:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yztolf5Jkzl7ZiMrsKLT48YlzBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/ScAzM3Pv8V_KKFpDgRm6J0ZBPo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2fc40a-55e3-4aba-91b5-70b8871b8e20/1/Yztolf5Jkzl7ZiMrsKLT48YlzBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.168.0/24
193.111.174.0/24
193.111.226.0/24
193.111.229.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:78:b6:77:44:54:df:69:e2:ef:ac:22:ca:78:45:45:c5:d1:
a2:47:5f:a5:2b:7e:ee:bc:46:db:74:43:32:70:86:9f:22:4c:
c2:b7:e8:db:d1:9e:7f:95:dd:b3:45:e7:f9:2c:eb:d4:92:6d:
34:33:db:27:ab:a3:22:4f:d5:5d:70:db:0d:b2:a1:7c:26:57:
32:89:ae:a6:29:39:65:b0:28:12:5c:5b:a8:62:29:b0:df:6d:
9a:d1:90:09:63:e1:d8:6f:6c:c9:7a:04:27:0e:d4:16:ec:91:
bb:a9:ee:82:c6:ec:4b:90:30:19:61:f5:49:80:42:ef:4a:14:
b9:60:6c:eb:37:f2:60:b3:22:db:d4:9c:cf:78:07:fc:0f:e6:
74:f9:08:56:cc:dd:a7:c5:6b:83:e4:b2:9f:7d:82:be:f0:8d:
52:12:6b:ec:79:83:5c:16:9b:e6:97:84:90:da:4a:ba:d1:42:
1a:61:24:4b:6d:45:33:00:45:9a:cd:5a:f3:bd:f6:ea:cd:05:
ff:d0:75:b8:9b:6c:ec:82:f6:4e:ee:aa:9d:7c:43:6e:b4:d2:
78:41:c5:ea:7b:86:3b:57:b4:e3:ad:a8:ab:2d:e9:47:bb:34:
bf:77:24:e0:ed:70:ef:0e:44:bc:9c:18:52:94:f9:3d:e7:f9:
23:de:f3:8c
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzJvKJ9I9V1xPW8zdxZd7kOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzM2I2ODk1ZmU0OTkzMzk3YjY2MjMyYmIwYTJkM2UzYzYy
NWNjMWIwHhcNMjQwMTAyMTAzMzUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWMwMzMzMzczZWZmMTVmY2EyODVhNDM4MTE5YmEyNzQ2NDEzZThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPzbERIrcUB3mKroOo6hPpxlwMNM
b1kUhYOn0zMhoGDzM32WY365Lx/JWhxPSNuBtOU7j3LfRV1xiD9nFo/ZNtnzPblI
zqwaN61L/HJ8xMYkW2zumIfBdqUOURQlKY47tFCmYFna8zyzV76S2JHvKb1grNOL
c550wVesiqvxw8miatzLdsp2SCZX8rWR6wnJcf9NT6HAuIikO3L41ZhEI6jadEjZ
jWQMk1urk5Ch5GUSHEh90/WmK45iCw49Js7bpg6NKL75LteSrjLbhOXhGIjgi0L0
1+yGTC3BzL5+e+DMXhU+EMT3VichyKYe85dCJQS0/zJ6QtbVTBTvkENRZQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEnAMzNz7/FfyihaQ4EZuidGQT6OMB8GA1UdIwQY
MBaAFGM7aJX+SZM5e2YjK7Ci0+PGJcwbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXp0b2xmNUpremw3WmlNcnNLTFQ0OFlsekJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8yZmM0MGEtNTVlMy00YWJhLTkxYjUt
NzBiODg3MWI4ZTIwLzEvU2NBek0zUHY4Vl9LS0ZwRGdSbTZKMFpCUG80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8yZmM0MGEtNTVlMy00YWJhLTkxYjUtNzBiODg3MWI4ZTIw
LzEvWXp0b2xmNUpremw3WmlNcnNLTFQ0OFlsekJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAwW+oAwQA
wW+uAwQAwW/iAwQAwW/lMA0GCSqGSIb3DQEBCwUAA4IBAQCKeLZ3RFTfaeLvrCLK
eEVFxdGiR1+lK37uvEbbdEMycIafIkzCt+jb0Z5/ld2zRef5LOvUkm00M9snq6Mi
T9VdcNsNsqF8Jlcyia6mKTllsCgSXFuoYimw322a0ZAJY+HYb2zJegQnDtQW7JG7
qe6CxuxLkDAZYfVJgELvShS5YGzrN/JgsyLb1JzPeAf8D+Z0+QhWzN2nxWuD5LKf
fYK+8I1SEmvseYNcFpvml4SQ2kq60UIaYSRLbUUzAEWazVrzvfbqzQX/0HW4m2zs
gvZO7qqdfENutNJ4QcXqe4Y7V7TjrairLelHuzS/dyTg7XDvDkS8nBhSlPk95/kj
3vOM
-----END CERTIFICATE-----
Generated at Mon Jun 3 02:55:29 2024 by rpki-client on console-ams.rpki-client.org