Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/KiRM_YEi9T2A4FO0nYXchVvz84w.roa
File: KiRM_YEi9T2A4FO0nYXchVvz84w.roa (raw, json)
Hash identifier: giH9TsUrYD4U576OzxqgtYAHt1XhXsGJ7krH3D1LAvM=
Subject key identifier: 2A:24:4C:FD:81:22:F5:3D:80:E0:53:B4:9D:85:DC:85:5B:F3:F3:8C
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0190A72BA8038282EE6FAB593C53A757761A
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/KiRM_YEi9T2A4FO0nYXchVvz84w.roa
Signing time: Fri 12 Jul 2024 13:39:34 +0000
ROA not before: Fri 12 Jul 2024 13:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202325
IP address blocks: 83.222.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:2b:a8:03:82:82:ee:6f:ab:59:3c:53:a7:57:76:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jul 12 13:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2a244cfd8122f53d80e053b49d85dc855bf3f38c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:41:5e:e9:01:db:fb:ba:39:d8:a0:8a:47:ff:
f3:0c:15:34:b7:52:e8:a9:c4:75:1a:f2:3b:ae:d0:
5a:bf:40:a9:c6:69:2a:5e:60:16:24:09:98:2a:2f:
32:87:c4:5a:53:8b:21:1e:93:f3:51:5a:10:4d:42:
37:43:4e:4f:b6:c9:59:ce:e8:16:47:b4:d1:f4:b6:
c0:86:55:bb:b7:d0:14:d5:6a:b0:df:ac:99:5d:ce:
98:94:18:dc:53:7e:4e:4f:7b:c3:d5:ab:d7:e1:5d:
2c:09:bd:13:36:4f:0d:fd:76:ec:21:ff:2f:32:b4:
71:84:db:5a:f3:5e:4c:14:5b:55:72:15:11:eb:f7:
6e:30:6e:d9:0b:95:96:3d:e6:4e:72:51:f3:66:99:
50:b7:d7:45:45:23:dd:5a:65:9b:c2:f7:e3:d3:be:
eb:ba:c8:a7:6d:14:a2:44:33:f0:9d:90:ad:2a:77:
c1:4c:a2:4a:df:d0:91:6e:51:b2:b2:ee:e7:48:2e:
7e:bd:fa:37:46:f4:22:1f:9a:8f:64:6e:c6:e0:b8:
4b:60:ae:82:fa:e3:8f:01:44:9a:cf:c0:25:87:a3:
78:e2:d0:7b:d6:a4:7f:90:49:ab:b8:a7:1e:d9:98:
5d:d4:9f:c8:4d:69:92:d7:00:c8:2e:03:79:3e:d6:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:24:4C:FD:81:22:F5:3D:80:E0:53:B4:9D:85:DC:85:5B:F3:F3:8C
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/KiRM_YEi9T2A4FO0nYXchVvz84w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.190.0/23
Signature Algorithm: sha256WithRSAEncryption
93:6b:dd:1f:50:51:73:c5:a0:db:72:8a:e2:2d:71:f8:47:a6:
08:6b:de:0d:53:c2:03:ce:0d:7f:18:ab:5f:07:12:b6:a8:50:
83:2d:e3:9e:04:a9:39:c7:95:4f:c1:bb:94:de:c3:43:ce:83:
f2:36:15:1b:d0:61:53:bb:db:d2:8e:d8:ba:d4:09:c8:af:c8:
7f:fc:ff:23:b4:b2:97:d3:56:c2:dc:3b:61:92:d3:3b:3e:78:
fb:dc:01:18:68:0d:e6:b1:3f:4b:48:01:b8:5f:70:c5:ce:d2:
57:7a:4a:2d:6a:2e:6c:fd:ba:f3:f4:ce:b8:b7:5a:45:48:93:
1b:a1:41:5b:39:2d:33:e2:7a:0a:27:2f:29:46:1e:bf:cc:11:
28:ba:6a:5e:c2:db:b4:e9:a3:55:a2:69:2f:f0:4c:17:c2:e6:
c2:40:54:40:18:26:e5:07:4c:2a:bf:0e:e0:10:19:dd:4a:55:
d7:db:09:82:01:de:21:5c:93:79:96:85:49:e9:7a:bd:22:92:
6a:19:13:3c:e9:08:b7:4d:0c:7d:f9:0a:12:65:94:84:b6:c9:
ca:aa:b7:1e:f5:7c:3d:6d:b1:0a:20:52:ec:e7:bd:43:cc:30:
dd:1d:3c:23:28:40:d7:38:85:92:0b:fb:6d:c0:07:ef:9e:6f:
b6:4c:a7:6d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCnK6gDgoLub6tZPFOnV3YaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjQwNzEyMTMzOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYTI0NGNmZDgxMjJmNTNkODBlMDUzYjQ5ZDg1ZGM4NTViZjNmMzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykFe6QHb+7o52KCKR//zDBU0t1Lo
qcR1GvI7rtBav0CpxmkqXmAWJAmYKi8yh8RaU4shHpPzUVoQTUI3Q05PtslZzugW
R7TR9LbAhlW7t9AU1Wqw36yZXc6YlBjcU35OT3vD1avX4V0sCb0TNk8N/XbsIf8v
MrRxhNta815MFFtVchUR6/duMG7ZC5WWPeZOclHzZplQt9dFRSPdWmWbwvfj077r
usinbRSiRDPwnZCtKnfBTKJK39CRblGysu7nSC5+vfo3RvQiH5qPZG7G4LhLYK6C
+uOPAUSaz8Alh6N44tB71qR/kEmruKce2Zhd1J/ITWmS1wDILgN5PtZE3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCokTP2BIvU9gOBTtJ2F3IVb8/OMMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEvS2lSTV9ZRWk5VDJBNEZPMG5ZWGNoVnZ6ODR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU96+MA0G
CSqGSIb3DQEBCwUAA4IBAQCTa90fUFFzxaDbcoriLXH4R6YIa94NU8IDzg1/GKtf
BxK2qFCDLeOeBKk5x5VPwbuU3sNDzoPyNhUb0GFTu9vSjti61AnIr8h//P8jtLKX
01bC3DthktM7Pnj73AEYaA3msT9LSAG4X3DFztJXekotai5s/brz9M64t1pFSJMb
oUFbOS0z4noKJy8pRh6/zBEoumpewtu06aNVomkv8EwXwubCQFRAGCblB0wqvw7g
EBndSlXX2wmCAd4hXJN5loVJ6Xq9IpJqGRM86Qi3TQx9+QoSZZSEtsnKqrce9Xw9
bbEKIFLs571DzDDdHTwjKEDXOIWSC/ttwAfvnm+2TKdt
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:59:42 2024 by rpki-client on console-ams.rpki-client.org