Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kWF8A18UdYVQ8u9o0QT23NzfKQg.roa
File: kWF8A18UdYVQ8u9o0QT23NzfKQg.roa (raw, json)
Hash identifier: m192F/bhbhxu0SAF7qOWY+jF1lVPehZ7/BSnMEiJ69c=
Subject key identifier: 91:61:7C:03:5F:14:75:85:50:F2:EF:68:D1:04:F6:DC:DC:DF:29:08
Certificate issuer: /CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Certificate serial: 0190A72BA85AA1BE80BE95B0FAA9DDF5E8A6
Authority key identifier: C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kWF8A18UdYVQ8u9o0QT23NzfKQg.roa
Signing time: Fri 12 Jul 2024 13:39:34 +0000
ROA not before: Fri 12 Jul 2024 13:39:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212283
IP address blocks: 83.222.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a7:2b:a8:5a:a1:be:80:be:95:b0:fa:a9:dd:f5:e8:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c35eac64ea4802e6824686f7c0d201f2c85cb2aa
Validity
Not Before: Jul 12 13:39:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=91617c035f14758550f2ef68d104f6dcdcdf2908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:63:44:a9:81:11:86:5d:c1:83:7a:15:79:a1:
85:a3:54:67:a2:3b:08:96:d4:59:6b:24:71:f4:78:
09:ba:33:7c:a8:17:6d:38:f9:9c:f9:dd:10:85:f5:
f6:07:52:16:ad:0a:f1:58:5e:0b:71:63:d7:82:a5:
69:45:51:10:f3:23:d6:8d:93:a7:dc:b1:f8:b5:68:
c7:e1:99:24:9c:05:8d:a1:bb:84:1d:85:bc:e5:28:
13:2e:a6:c1:df:60:27:94:6b:f3:1d:0e:99:3c:5f:
cf:24:3c:d7:90:4e:e4:a4:bb:eb:b3:3f:48:00:b3:
5e:8c:48:a5:90:02:49:eb:51:d7:da:63:7d:e0:50:
34:bd:44:bf:50:69:32:65:e1:b0:3d:a3:b0:51:74:
ed:f5:fd:9a:ec:df:85:5a:6f:57:00:2f:70:26:ff:
91:cb:f9:c3:eb:fb:86:53:0a:8e:fb:63:8e:77:42:
66:d2:4a:09:38:3a:fc:ae:39:9d:fa:a4:ba:4b:2a:
77:c6:63:dc:b4:3f:a3:78:01:af:dd:5e:db:9d:9d:
0e:57:5d:1e:23:21:c1:ae:e1:31:2b:2a:a8:8d:de:
14:d4:c4:86:b6:17:7d:59:c7:d1:20:11:b7:e8:fe:
7f:92:b5:9a:6c:1f:ab:5b:f6:bb:2f:94:67:ec:c3:
ea:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:61:7C:03:5F:14:75:85:50:F2:EF:68:D1:04:F6:DC:DC:DF:29:08
X509v3 Authority Key Identifier:
keyid:C3:5E:AC:64:EA:48:02:E6:82:46:86:F7:C0:D2:01:F2:C8:5C:B2:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w16sZOpIAuaCRob3wNIB8shcsqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/kWF8A18UdYVQ8u9o0QT23NzfKQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ccdd8b-7720-4de0-8c43-dacb5f356ea3/1/w16sZOpIAuaCRob3wNIB8shcsqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.222.190.0/23
Signature Algorithm: sha256WithRSAEncryption
0b:68:39:97:12:30:57:bf:f1:a7:fb:81:3e:31:44:83:9f:22:
0a:5b:b7:3b:7b:68:23:b3:cd:37:cd:cc:2e:4f:f8:90:7c:5e:
06:9e:37:15:39:1e:59:aa:3c:78:ca:f7:85:7e:ea:50:63:1f:
e8:a4:7f:6f:c2:2f:af:8a:74:85:8d:23:63:c5:71:22:7a:85:
a8:89:9d:a0:87:6d:cf:5b:d8:d5:d2:ae:f3:52:42:40:59:46:
5e:de:f0:57:c7:9a:83:64:b7:49:df:a6:c4:f7:40:cb:de:2f:
70:ac:b5:c2:d5:e4:4d:b4:20:30:9d:59:96:39:45:ba:ea:df:
15:7b:c2:01:f9:c3:ad:d1:2d:a9:3e:b3:99:f3:5e:ab:9e:44:
26:08:1f:a6:d9:48:94:01:81:84:66:d6:a1:22:77:68:1d:c5:
dc:3e:47:c1:76:98:fe:86:ad:e9:d1:c2:bd:d0:bf:0e:08:31:
fa:e2:a0:87:be:18:0c:52:7a:b0:6f:8b:ed:e8:b7:1e:ca:73:
af:71:4f:a1:39:66:93:53:11:43:9f:bb:fe:10:d3:ea:e5:0f:
b0:e4:7e:73:bf:45:ac:bb:d0:10:c8:7e:aa:55:08:48:e7:03:
6f:a5:18:bc:86:3d:5f:d3:c8:ef:96:a8:dd:40:88:93:45:79:
07:0e:54:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZCnK6haob6AvpWw+qnd9eimMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNWVhYzY0ZWE0ODAyZTY4MjQ2ODZmN2MwZDIwMWYyYzg1
Y2IyYWEwHhcNMjQwNzEyMTMzOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTYxN2MwMzVmMTQ3NTg1NTBmMmVmNjhkMTA0ZjZkY2RjZGYyOTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWNEqYERhl3Bg3oVeaGFo1RnojsI
ltRZayRx9HgJujN8qBdtOPmc+d0QhfX2B1IWrQrxWF4LcWPXgqVpRVEQ8yPWjZOn
3LH4tWjH4ZkknAWNobuEHYW85SgTLqbB32AnlGvzHQ6ZPF/PJDzXkE7kpLvrsz9I
ALNejEilkAJJ61HX2mN94FA0vUS/UGkyZeGwPaOwUXTt9f2a7N+FWm9XAC9wJv+R
y/nD6/uGUwqO+2OOd0Jm0koJODr8rjmd+qS6Syp3xmPctD+jeAGv3V7bnZ0OV10e
IyHBruExKyqojd4U1MSGthd9WcfRIBG36P5/krWabB+rW/a7L5Rn7MPqWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJFhfANfFHWFUPLvaNEE9tzc3ykIMB8GA1UdIwQY
MBaAFMNerGTqSALmgkaG98DSAfLIXLKqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMt
ZGFjYjVmMzU2ZWEzLzEva1dGOEExOFVkWVZROHU5bzBRVDIzTnpmS1FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9jY2RkOGItNzcyMC00ZGUwLThjNDMtZGFjYjVmMzU2ZWEz
LzEvdzE2c1pPcElBdWFDUm9iM3dOSUI4c2hjc3FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBU96+MA0G
CSqGSIb3DQEBCwUAA4IBAQALaDmXEjBXv/Gn+4E+MUSDnyIKW7c7e2gjs803zcwu
T/iQfF4GnjcVOR5Zqjx4yveFfupQYx/opH9vwi+vinSFjSNjxXEieoWoiZ2gh23P
W9jV0q7zUkJAWUZe3vBXx5qDZLdJ36bE90DL3i9wrLXC1eRNtCAwnVmWOUW66t8V
e8IB+cOt0S2pPrOZ816rnkQmCB+m2UiUAYGEZtahIndoHcXcPkfBdpj+hq3p0cK9
0L8OCDH64qCHvhgMUnqwb4vt6LceynOvcU+hOWaTUxFDn7v+ENPq5Q+w5H5zv0Ws
u9AQyH6qVQhI5wNvpRi8hj1f08jvlqjdQIiTRXkHDlR+
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:59:42 2024 by rpki-client on console-ams.rpki-client.org