Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/iKXrrfeiIPRGUxDN_drb5g_jh3Y.roa
File: iKXrrfeiIPRGUxDN_drb5g_jh3Y.roa (raw, json)
Hash identifier: mdqmPzDvVtjMvcgFHfkG6bhfrpe6uPme8nfyQ9xpCMQ=
Subject key identifier: 88:A5:EB:AD:F7:A2:20:F4:46:53:10:CD:FD:DA:DB:E6:0F:E3:87:76
Certificate issuer: /CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Certificate serial: 0191FAA38F8F00E06FBBDA4C1C1B4E85C3ED
Authority key identifier: FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/iKXrrfeiIPRGUxDN_drb5g_jh3Y.roa
Signing time: Mon 16 Sep 2024 11:41:48 +0000
ROA not before: Mon 16 Sep 2024 11:41:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48763
IP address blocks: 193.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:fa:a3:8f:8f:00:e0:6f:bb:da:4c:1c:1b:4e:85:c3:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc9128a762ceeb6b59f5431568bc13fce41aba12
Validity
Not Before: Sep 16 11:41:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=88a5ebadf7a220f4465310cdfddadbe60fe38776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5f:b1:c5:26:30:46:e1:8f:0d:70:47:66:39:
5b:9c:ab:a5:87:c3:81:a8:21:c9:be:5b:62:09:21:
fc:d8:8d:da:6e:c9:e9:3d:b7:50:b5:d3:9b:4b:15:
e5:a9:23:93:3a:2e:f2:9b:aa:38:c7:fe:6f:b2:9e:
51:3d:dd:3e:e1:ae:96:3d:81:da:ae:d9:90:2b:d1:
60:56:cc:ed:f3:7b:9e:08:4a:e8:c7:65:40:46:41:
2e:c3:72:03:ef:58:1d:eb:df:e9:bd:2c:5e:a7:9e:
d5:ac:95:a8:99:92:75:0e:96:0e:c9:67:41:99:85:
c9:26:1b:a9:f5:c8:71:aa:ba:7f:10:47:be:ad:00:
c4:63:03:6b:b0:8c:e9:d0:77:4a:c4:2e:15:10:f7:
89:27:5a:15:23:18:e4:84:cf:e8:8c:51:18:a5:71:
f4:0a:f9:80:f3:0a:33:4d:56:91:95:62:20:8d:9a:
dc:22:19:20:9f:bd:9d:53:b8:a3:3d:77:94:3e:c4:
42:7e:ab:55:dc:d1:52:7f:b2:b3:28:9b:c8:90:ae:
29:e2:4a:63:5c:ba:36:dc:b9:be:63:f0:d3:15:bd:
d5:47:be:13:9f:d0:51:0e:f9:6e:20:88:d0:f9:ac:
f8:6b:02:65:ef:66:f2:d9:b3:b3:d0:7d:15:b1:c1:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A5:EB:AD:F7:A2:20:F4:46:53:10:CD:FD:DA:DB:E6:0F:E3:87:76
X509v3 Authority Key Identifier:
keyid:FC:91:28:A7:62:CE:EB:6B:59:F5:43:15:68:BC:13:FC:E4:1A:BA:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JEop2LO62tZ9UMVaLwT_OQauhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/iKXrrfeiIPRGUxDN_drb5g_jh3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/21e68c-1c4c-4559-9e30-135d709b59e0/1/_JEop2LO62tZ9UMVaLwT_OQauhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:ef:d0:92:1d:cc:f8:e9:19:62:f2:67:7b:04:e5:6d:53:22:
22:88:10:f3:59:82:cc:3b:00:b4:44:63:88:6c:c4:76:85:c2:
a7:e9:98:97:55:00:cf:79:81:ab:14:56:4e:99:4b:88:d6:55:
93:f1:99:f3:d8:b7:7c:08:b6:5a:4c:b5:2e:68:f1:5d:63:9d:
9a:87:f3:12:cb:64:58:70:d3:02:c2:7b:ac:3e:db:56:ea:c9:
41:12:90:4a:0b:ee:8a:16:d7:14:98:f0:07:32:e1:47:d3:a7:
c5:a7:b9:9d:d4:0b:59:b8:74:6e:8f:49:3c:41:c7:5a:af:8b:
b5:0c:36:1b:b9:b7:22:a9:15:38:c4:da:e7:fd:fa:09:ce:0f:
24:7c:45:01:79:65:ff:b4:fa:a0:fd:e4:4c:8d:c9:be:f3:ff:
3d:54:b9:80:e3:c7:f0:67:79:90:08:28:10:41:bb:bb:57:66:
7f:28:2a:a8:b6:a0:d3:b0:d1:5c:0b:68:5f:57:d8:99:bb:cb:
20:86:03:d7:5e:a4:24:d5:63:29:70:86:ab:52:65:eb:b3:42:
16:f5:36:0d:ee:e0:e5:9a:19:89:69:05:37:77:db:ea:16:38:
d8:43:39:c6:7c:80:71:f2:90:3b:8d:f2:e7:4d:82:8f:f5:2d:
7f:d6:fa:bd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZH6o4+PAOBvu9pMHBtOhcPtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjOTEyOGE3NjJjZWViNmI1OWY1NDMxNTY4YmMxM2ZjZTQx
YWJhMTIwHhcNMjQwOTE2MTE0MTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4OGE1ZWJhZGY3YTIyMGY0NDY1MzEwY2RmZGRhZGJlNjBmZTM4Nzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51+xxSYwRuGPDXBHZjlbnKulh8OB
qCHJvltiCSH82I3absnpPbdQtdObSxXlqSOTOi7ym6o4x/5vsp5RPd0+4a6WPYHa
rtmQK9FgVszt83ueCErox2VARkEuw3ID71gd69/pvSxep57VrJWomZJ1DpYOyWdB
mYXJJhup9chxqrp/EEe+rQDEYwNrsIzp0HdKxC4VEPeJJ1oVIxjkhM/ojFEYpXH0
CvmA8wozTVaRlWIgjZrcIhkgn72dU7ijPXeUPsRCfqtV3NFSf7KzKJvIkK4p4kpj
XLo23Lm+Y/DTFb3VR74Tn9BRDvluIIjQ+az4awJl72by2bOz0H0VscF57QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIil6633oiD0RlMQzf3a2+YP44d2MB8GA1UdIwQY
MBaAFPyRKKdizutrWfVDFWi8E/zkGroSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAt
MTM1ZDcwOWI1OWUwLzEvaUtYcnJmZWlJUFJHVXhETl9kcmI1Z19qaDNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi8yMWU2OGMtMWM0Yy00NTU5LTllMzAtMTM1ZDcwOWI1OWUw
LzEvX0pFb3AyTE82MnRaOVVNVmFMd1RfT1FhdWhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwQjJMA0G
CSqGSIb3DQEBCwUAA4IBAQAt79CSHcz46Rli8md7BOVtUyIiiBDzWYLMOwC0RGOI
bMR2hcKn6ZiXVQDPeYGrFFZOmUuI1lWT8Znz2Ld8CLZaTLUuaPFdY52ah/MSy2RY
cNMCwnusPttW6slBEpBKC+6KFtcUmPAHMuFH06fFp7md1AtZuHRuj0k8Qcdar4u1
DDYbubciqRU4xNrn/foJzg8kfEUBeWX/tPqg/eRMjcm+8/89VLmA48fwZ3mQCCgQ
Qbu7V2Z/KCqotqDTsNFcC2hfV9iZu8sghgPXXqQk1WMpcIarUmXrs0IW9TYN7uDl
mhmJaQU3d9vqFjjYQznGfIBx8pA7jfLnTYKP9S1/1vq9
-----END CERTIFICATE-----
Generated at Sat Nov 23 02:23:32 2024 by rpki-client on console-ams.rpki-client.org