Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/KSSYQZn_wGHzg5GY1ibpYm32WJM.roa
File: KSSYQZn_wGHzg5GY1ibpYm32WJM.roa (raw, json)
Hash identifier: /ealf7ESvxzCrylhRdz3rBN6i+7pLmueKtVo5z87Ubk=
Subject key identifier: 29:24:98:41:99:FF:C0:61:F3:83:91:98:D6:26:E9:62:6D:F6:58:93
Certificate issuer: /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial: 018E5D356A07DBF47F0DFAB32759ABC1E70F
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/KSSYQZn_wGHzg5GY1ibpYm32WJM.roa
Signing time: Wed 20 Mar 2024 18:52:45 +0000
ROA not before: Wed 20 Mar 2024 18:52:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54339
IP address blocks: 194.26.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5d:35:6a:07:db:f4:7f:0d:fa:b3:27:59:ab:c1:e7:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Validity
Not Before: Mar 20 18:52:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2924984199ffc061f3839198d626e9626df65893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:35:7b:27:a1:55:c0:fe:92:81:0a:7c:4b:dc:
54:87:b1:d5:f6:39:7e:20:a2:5f:19:26:bb:3c:18:
95:c5:e8:30:10:c7:42:f1:88:45:19:68:ac:37:c2:
6a:f5:d5:f6:32:a0:c1:bb:7a:59:7f:fa:47:16:21:
f8:bd:bf:03:63:45:fe:fd:99:97:c7:ff:5f:7d:91:
3a:9e:ad:09:32:26:08:74:92:da:cd:b9:a2:a7:56:
15:a4:39:bc:83:fe:b1:22:57:fc:45:a6:1c:b1:56:
e0:03:88:6f:cb:86:51:e6:c0:33:c1:7a:90:54:eb:
29:da:cc:85:45:e7:29:34:33:7e:e4:ce:82:18:2b:
34:72:c6:00:44:dc:a4:42:b8:81:63:f0:0e:7e:5a:
8c:9e:9a:9c:fc:3a:1f:86:58:47:f0:f2:ea:7b:c4:
19:7b:de:b2:79:9e:da:91:19:ee:07:e6:81:69:3b:
e2:77:d3:48:a2:6b:7f:41:b2:61:d1:0b:30:54:14:
b7:f8:ff:fc:bf:6f:99:75:b6:28:71:2a:5f:8c:dd:
94:cc:86:1c:4e:78:cb:a0:a7:e9:a7:4a:df:76:4c:
70:27:ba:c2:32:9e:33:aa:f9:be:43:b4:8d:87:f2:
3f:dc:6e:a7:44:ae:d7:f5:9c:5f:ad:58:db:94:1e:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:24:98:41:99:FF:C0:61:F3:83:91:98:D6:26:E9:62:6D:F6:58:93
X509v3 Authority Key Identifier:
keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/KSSYQZn_wGHzg5GY1ibpYm32WJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.3.0/24
Signature Algorithm: sha256WithRSAEncryption
74:26:66:30:82:f7:93:96:98:80:b5:1a:60:9c:27:ed:fc:6f:
34:31:4d:ef:32:6e:0e:5f:fd:f6:3d:d1:b7:3d:5b:5f:4a:6d:
b1:06:57:e9:ea:de:24:b0:53:34:f3:41:31:58:96:12:aa:28:
36:63:20:08:24:2d:3b:38:35:24:d0:7c:5b:5a:25:b4:3b:3a:
25:7f:70:f8:2d:65:86:80:59:4e:dd:a4:e6:30:82:87:83:ad:
6d:9c:7b:e5:09:f6:be:57:35:3b:ea:f0:24:61:c4:32:c2:64:
a0:d1:0c:b5:dd:4b:d5:db:b9:58:0f:a0:8a:7d:c1:14:73:2c:
d2:b5:95:f3:50:9d:dc:d6:de:c4:53:7e:d8:80:44:bc:57:3f:
c9:93:c0:95:bd:4c:7d:28:06:1e:33:da:f7:1c:15:ae:80:a0:
6b:b1:47:e2:6e:6b:d2:28:bd:3d:6a:99:60:ff:75:cc:53:29:
85:fb:3d:27:59:d4:07:c0:4a:df:04:c7:41:b1:88:56:1c:01:
21:2d:37:3a:48:1d:0f:2f:0e:35:43:cd:1c:11:8e:51:b5:67:
91:2f:15:b7:a3:73:31:df:a0:fd:78:3c:e0:d9:4b:ca:6e:bb:
89:b4:c1:a1:4f:cd:e5:11:ab:aa:49:cf:23:be:e1:c4:58:56:
13:98:35:cf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY5dNWoH2/R/DfqzJ1mrwecPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMmYyZTg2ZGQ3Y2M5MTAxNjU4ZmY4ZDVhNTI0MTQ0NWZj
ZDFkNmEwHhcNMjQwMzIwMTg1MjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTI0OTg0MTk5ZmZjMDYxZjM4MzkxOThkNjI2ZTk2MjZkZjY1ODkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjV7J6FVwP6SgQp8S9xUh7HV9jl+
IKJfGSa7PBiVxegwEMdC8YhFGWisN8Jq9dX2MqDBu3pZf/pHFiH4vb8DY0X+/ZmX
x/9ffZE6nq0JMiYIdJLazbmip1YVpDm8g/6xIlf8RaYcsVbgA4hvy4ZR5sAzwXqQ
VOsp2syFRecpNDN+5M6CGCs0csYARNykQriBY/AOflqMnpqc/DofhlhH8PLqe8QZ
e96yeZ7akRnuB+aBaTvid9NIomt/QbJh0QswVBS3+P/8v2+ZdbYocSpfjN2UzIYc
TnjLoKfpp0rfdkxwJ7rCMp4zqvm+Q7SNh/I/3G6nRK7X9ZxfrVjblB6mbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCkkmEGZ/8Bh84ORmNYm6WJt9liTMB8GA1UdIwQY
MBaAFK8vLobdfMkQFlj/jVpSQURfzR1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYt
NDZiYjdhZWMxZjMwLzEvS1NTWVFabl93R0h6ZzVHWTFpYnBZbTMyV0pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lMDhiOGUtYmYyMi00MzVjLThiMWYtNDZiYjdhZWMxZjMw
LzEvcnk4dWh0MTh5UkFXV1AtTldsSkJSRl9OSFdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhoDMA0G
CSqGSIb3DQEBCwUAA4IBAQB0JmYwgveTlpiAtRpgnCft/G80MU3vMm4OX/32PdG3
PVtfSm2xBlfp6t4ksFM080ExWJYSqig2YyAIJC07ODUk0HxbWiW0Ozolf3D4LWWG
gFlO3aTmMIKHg61tnHvlCfa+VzU76vAkYcQywmSg0Qy13UvV27lYD6CKfcEUcyzS
tZXzUJ3c1t7EU37YgES8Vz/Jk8CVvUx9KAYeM9r3HBWugKBrsUfibmvSKL09aplg
/3XMUymF+z0nWdQHwErfBMdBsYhWHAEhLTc6SB0PLw41Q80cEY5RtWeRLxW3o3Mx
36D9eDzg2UvKbruJtMGhT83lEauqSc8jvuHEWFYTmDXP
-----END CERTIFICATE-----
Generated at Wed May 29 10:17:24 2024 by rpki-client on console-fra.rpki-client.org