Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4PMk-1cBcsl4uu48v2SpAoNUizE.roa
File: 4PMk-1cBcsl4uu48v2SpAoNUizE.roa (raw, json)
Hash identifier: n6+9kFDs6KmXIhcSd6WJmVUOdXyUHIlAxQtdH7lO1DA=
Subject key identifier: E0:F3:24:FB:57:01:72:C9:78:BA:EE:3C:BF:64:A9:02:83:54:8B:31
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802E108B7DB97294AB058AF0454A0A9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4PMk-1cBcsl4uu48v2SpAoNUizE.roa
Signing time: Tue 02 Jan 2024 02:31:21 +0000
ROA not before: Tue 02 Jan 2024 02:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20625
IP address blocks: 194.14.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e1:08:b7:db:97:29:4a:b0:58:af:04:54:a0:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e0f324fb570172c978baee3cbf64a90283548b31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:c3:9a:78:8b:cb:bf:57:bb:01:0a:54:59:
48:8e:19:e2:2e:0b:26:29:54:45:c2:70:92:1d:df:
88:fe:3e:07:8a:cf:ad:de:e1:ca:37:8a:a3:25:f1:
15:da:1c:1a:99:8f:94:7c:f7:d4:7d:41:5d:9c:f6:
38:7f:be:36:4a:90:57:27:5b:f5:c5:e3:b8:17:6c:
95:66:ec:eb:c5:a1:4f:54:7b:6c:6e:85:28:b2:22:
8c:5c:5a:9f:6f:f0:3a:af:c5:10:35:97:c0:56:8b:
6e:22:a0:48:bb:ad:ce:18:55:c9:1a:61:87:bc:30:
34:39:53:f8:26:d0:0b:30:52:11:62:16:72:36:85:
43:f4:b0:73:56:10:d5:45:b4:4c:b3:89:69:07:9d:
50:d6:83:51:b6:13:54:d8:22:2c:57:57:a4:b5:97:
63:ae:98:22:d3:68:b7:4a:20:be:3e:c2:9f:de:8d:
9f:72:d8:33:45:36:81:45:fe:c7:e9:c4:f0:a6:7b:
8b:c9:dd:e0:23:19:cf:97:93:22:73:b0:5c:f3:28:
78:ba:9e:cc:ed:d9:2e:a5:cf:88:9e:67:86:f2:9d:
5d:0a:25:1b:10:2a:01:b0:b5:f1:b4:33:dc:14:89:
c9:20:06:99:9b:96:69:38:bd:b3:f3:68:f5:ca:5e:
cf:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F3:24:FB:57:01:72:C9:78:BA:EE:3C:BF:64:A9:02:83:54:8B:31
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4PMk-1cBcsl4uu48v2SpAoNUizE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.103.0/24
Signature Algorithm: sha256WithRSAEncryption
58:55:92:a3:9b:99:c0:59:87:08:d0:c6:ac:92:15:f7:ba:06:
c5:1b:5e:03:e3:25:1a:21:8d:9f:51:45:7a:38:1b:b2:a2:c6:
08:e2:ec:cd:75:b8:d6:44:a8:6f:67:82:45:8f:df:ab:97:df:
74:f5:b8:28:33:7d:f1:3b:34:00:de:1e:14:d7:70:59:bd:d4:
2a:bd:83:1f:c3:2f:b0:be:37:41:24:cf:78:8b:33:bc:a2:6c:
6e:26:83:6d:21:71:31:df:d6:fc:2e:60:43:04:e6:ae:71:6a:
cb:99:a6:ab:6e:d3:9c:c6:89:14:ff:af:e5:97:7e:74:56:e2:
79:b3:af:57:d3:a9:7f:70:df:96:a7:34:9d:0a:6c:ff:c9:af:
39:84:fc:e6:83:de:bd:d1:da:43:ec:b8:ee:96:f8:c2:b7:b1:
c3:41:da:23:15:47:8a:8e:3c:80:bc:35:a3:90:ee:2b:2c:ef:
da:9e:32:62:25:13:b3:58:60:a6:30:f4:8d:b8:25:c6:ff:81:
86:1c:8c:3a:e6:62:0c:0d:5a:b0:7b:61:c7:de:ac:25:61:e0:
e3:bc:44:19:d0:bd:6d:8f:46:dc:47:dc:1d:da:94:9e:2a:3a:
f6:83:e5:4a:45:3d:18:92:a7:0a:6e:92:cf:26:40:5d:a2:ea:
73:5d:fc:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAuEIt9uXKUqwWK8EVKCpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlMGYzMjRmYjU3MDE3MmM5NzhiYWVlM2NiZjY0YTkwMjgzNTQ4YjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn7DmniLy79XuwEKVFlIjhniLgsm
KVRFwnCSHd+I/j4His+t3uHKN4qjJfEV2hwamY+UfPfUfUFdnPY4f742SpBXJ1v1
xeO4F2yVZuzrxaFPVHtsboUosiKMXFqfb/A6r8UQNZfAVotuIqBIu63OGFXJGmGH
vDA0OVP4JtALMFIRYhZyNoVD9LBzVhDVRbRMs4lpB51Q1oNRthNU2CIsV1ektZdj
rpgi02i3SiC+PsKf3o2fctgzRTaBRf7H6cTwpnuLyd3gIxnPl5Mic7Bc8yh4up7M
7dkupc+InmeG8p1dCiUbECoBsLXxtDPcFInJIAaZm5ZpOL2z82j1yl7PJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFODzJPtXAXLJeLruPL9kqQKDVIsxMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvNFBNay0xY0Jjc2w0dXU0OHYyU3BBb05VaXpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg5nMA0G
CSqGSIb3DQEBCwUAA4IBAQBYVZKjm5nAWYcI0MaskhX3ugbFG14D4yUaIY2fUUV6
OBuyosYI4uzNdbjWRKhvZ4JFj9+rl9909bgoM33xOzQA3h4U13BZvdQqvYMfwy+w
vjdBJM94izO8omxuJoNtIXEx39b8LmBDBOaucWrLmaarbtOcxokU/6/ll350VuJ5
s69X06l/cN+WpzSdCmz/ya85hPzmg9690dpD7LjulvjCt7HDQdojFUeKjjyAvDWj
kO4rLO/anjJiJROzWGCmMPSNuCXG/4GGHIw65mIMDVqwe2HH3qwlYeDjvEQZ0L1t
j0bcR9wd2pSeKjr2g+VKRT0YkqcKbpLPJkBdoupzXfwk
-----END CERTIFICATE-----
Generated at Mon Nov 25 17:04:53 2024 by rpki-client on console-ams.rpki-client.org