Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0ooirBnJ1aUnq94-Hx-dHHnPcxM.roa
File: 0ooirBnJ1aUnq94-Hx-dHHnPcxM.roa (raw, json)
Hash identifier: 9gz74te4/QvvaOVm0f22NBzBvcaAmulQ8eJt0xSTg30=
Subject key identifier: D2:8A:22:AC:19:C9:D5:A5:27:AB:DE:3E:1F:1F:9D:1C:79:CF:73:13
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802DBB583734204471F55D51A059129
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0ooirBnJ1aUnq94-Hx-dHHnPcxM.roa
Signing time: Tue 02 Jan 2024 02:31:19 +0000
ROA not before: Tue 02 Jan 2024 02:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8642
IP address blocks: 192.165.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:db:b5:83:73:42:04:47:1f:55:d5:1a:05:91:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d28a22ac19c9d5a527abde3e1f1f9d1c79cf7313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:3b:c5:d1:a0:24:ea:9e:93:dc:ae:dc:91:4e:
9e:e8:5c:4d:56:69:78:fa:26:47:c1:c6:ce:ba:3a:
eb:e6:0b:05:1f:55:05:c6:47:82:cc:89:31:89:69:
2e:64:be:41:4d:bb:ba:09:e0:2a:5b:7b:98:0a:22:
f5:10:97:0b:3d:7f:18:05:f2:08:32:25:62:f5:af:
37:82:a6:6d:e3:43:23:03:85:8d:55:67:d1:c9:a3:
f0:90:c0:1e:87:00:27:85:0f:4a:2c:05:3e:18:97:
6c:2b:5b:f7:a2:48:46:79:4f:4d:f7:43:31:75:a7:
96:e2:a6:d8:c0:d7:ae:69:f8:d3:55:ac:3e:68:12:
4b:28:78:3e:e0:7c:6a:a4:53:a9:5e:b6:6d:6a:44:
8c:85:ca:e6:50:91:d4:2e:1e:bc:1a:4d:71:c1:b4:
7f:0e:08:69:41:ac:e9:31:c8:6a:3a:d2:11:d5:32:
7d:2d:6a:8e:8b:c0:8c:59:e2:0a:72:28:13:73:44:
49:2a:5c:a5:4a:a0:7d:0a:40:9b:ce:d5:94:19:87:
fe:6a:f5:dd:aa:51:90:5d:bd:7b:33:9d:5c:be:7a:
aa:89:de:d0:95:86:b6:37:3c:f9:1b:62:39:44:55:
06:ba:05:63:97:bd:18:37:14:26:11:da:0e:fb:5a:
20:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8A:22:AC:19:C9:D5:A5:27:AB:DE:3E:1F:1F:9D:1C:79:CF:73:13
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0ooirBnJ1aUnq94-Hx-dHHnPcxM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.86.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e1:f4:7d:bf:32:3f:88:1a:41:cf:dc:48:36:d1:91:60:67:
00:01:8a:dd:2b:c8:80:de:97:af:06:b9:d4:6b:b3:a5:6d:35:
1d:32:a9:1e:5e:b2:fb:0e:92:f3:c6:d2:28:f5:f9:59:b7:f7:
9e:2f:f2:a2:d8:83:56:d1:a2:22:a3:c1:7f:d2:9e:a0:f7:eb:
f7:e5:bf:8a:c8:db:c2:a6:c5:6a:f2:9f:b8:76:e0:ad:ea:8f:
33:83:99:e3:5d:e1:4b:96:fd:5a:b2:5a:39:f8:7c:c2:db:ec:
1c:90:e1:e4:33:f8:dd:29:f1:e1:60:db:c9:ae:c6:de:b8:67:
32:c3:88:8f:9b:33:c2:20:df:b3:2a:1c:09:81:74:ca:25:32:
fd:53:00:37:01:04:50:74:1c:f6:a8:fa:c6:d6:6a:7c:2d:01:
77:c1:f7:0d:5c:f5:dd:e9:27:92:38:af:bf:ba:21:a8:c8:9d:
80:08:b2:84:a9:6e:81:7d:c4:d0:86:6b:9d:86:76:fe:27:55:
bd:9f:06:ca:fc:cc:9b:81:fd:91:99:6d:ab:2b:31:2a:5c:fb:
9a:cb:05:f6:67:a8:1d:26:be:48:29:2d:0a:82:be:99:b7:fb:
59:22:84:4f:2e:23:49:48:9c:9d:e7:14:3b:22:0a:0e:35:15:
59:b6:80:94
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAtu1g3NCBEcfVdUaBZEpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTE5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjhhMjJhYzE5YzlkNWE1MjdhYmRlM2UxZjFmOWQxYzc5Y2Y3MzEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjvF0aAk6p6T3K7ckU6e6FxNVml4
+iZHwcbOujrr5gsFH1UFxkeCzIkxiWkuZL5BTbu6CeAqW3uYCiL1EJcLPX8YBfII
MiVi9a83gqZt40MjA4WNVWfRyaPwkMAehwAnhQ9KLAU+GJdsK1v3okhGeU9N90Mx
daeW4qbYwNeuafjTVaw+aBJLKHg+4HxqpFOpXrZtakSMhcrmUJHULh68Gk1xwbR/
DghpQazpMchqOtIR1TJ9LWqOi8CMWeIKcigTc0RJKlylSqB9CkCbztWUGYf+avXd
qlGQXb17M51cvnqqid7QlYa2Nzz5G2I5RFUGugVjl70YNxQmEdoO+1og7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNKKIqwZydWlJ6vePh8fnRx5z3MTMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvMG9vaXJCbkoxYVVucTk0LUh4LWRISG5QY3hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKVWMA0G
CSqGSIb3DQEBCwUAA4IBAQCU4fR9vzI/iBpBz9xINtGRYGcAAYrdK8iA3pevBrnU
a7OlbTUdMqkeXrL7DpLzxtIo9flZt/eeL/Ki2INW0aIio8F/0p6g9+v35b+KyNvC
psVq8p+4duCt6o8zg5njXeFLlv1aslo5+HzC2+wckOHkM/jdKfHhYNvJrsbeuGcy
w4iPmzPCIN+zKhwJgXTKJTL9UwA3AQRQdBz2qPrG1mp8LQF3wfcNXPXd6SeSOK+/
uiGoyJ2ACLKEqW6BfcTQhmudhnb+J1W9nwbK/Mybgf2RmW2rKzEqXPuaywX2Z6gd
Jr5IKS0Kgr6Zt/tZIoRPLiNJSJyd5xQ7IgoONRVZtoCU
-----END CERTIFICATE-----
Generated at Sat May 25 09:13:22 2024 by rpki-client on console-fra.rpki-client.org