Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BiZo9cnigWRSd852kucfnAdPNkI.roa
File: BiZo9cnigWRSd852kucfnAdPNkI.roa (raw, json)
Hash identifier: y+nE2VwsYza3U9MNPnGMjmVUHiD8u1edv9Ryc1u1NPk=
Subject key identifier: 06:26:68:F5:C9:E2:81:64:52:77:CE:76:92:E7:1F:9C:07:4F:36:42
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802FC3390412E6EA9D641408C650884
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BiZo9cnigWRSd852kucfnAdPNkI.roa
Signing time: Tue 02 Jan 2024 02:31:28 +0000
ROA not before: Tue 02 Jan 2024 02:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199520
IP address blocks: 194.132.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:fc:33:90:41:2e:6e:a9:d6:41:40:8c:65:08:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=062668f5c9e281645277ce7692e71f9c074f3642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b0:8e:e9:84:24:b7:81:db:00:73:77:b6:f5:
0d:c8:b4:75:0c:2d:75:5a:ac:23:7e:03:d9:af:83:
b7:d0:94:15:48:f8:99:ba:4f:f4:bf:c2:0b:7b:22:
0f:fb:ca:aa:b2:82:b1:6b:1d:8a:8a:99:b7:2a:db:
14:cc:46:d6:c6:51:6a:c2:ae:06:bf:0d:a9:df:ee:
73:c2:f3:e2:ab:0e:b4:95:24:c7:89:3f:33:52:6d:
ab:67:c7:1f:5e:47:73:89:3a:09:ef:9e:c3:10:26:
d4:87:ce:f0:52:16:6e:d1:84:9a:99:af:a2:54:4d:
c8:49:34:de:af:20:91:9b:f6:28:7e:04:f1:6d:77:
1f:49:f0:d7:41:10:21:40:6b:25:bd:8d:2d:89:86:
7d:f0:e8:ee:0c:f2:32:59:d0:1a:ae:42:c4:98:c3:
ae:6c:73:34:fa:85:17:1c:c2:0e:4c:ac:6d:bf:93:
4b:ff:de:18:8d:a0:ae:1b:21:a1:bb:aa:49:a2:4e:
dc:50:fd:63:76:2b:fa:15:26:fb:6d:d0:34:29:ab:
8a:74:22:77:0f:43:96:67:5f:f8:8b:80:4c:d5:40:
d4:8b:40:9d:0d:c6:33:0d:85:07:11:0d:9a:ff:1f:
21:6d:c0:7f:2a:42:41:81:5b:03:cf:8b:e3:b7:c2:
f1:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:26:68:F5:C9:E2:81:64:52:77:CE:76:92:E7:1F:9C:07:4F:36:42
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/BiZo9cnigWRSd852kucfnAdPNkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.19.0/24
Signature Algorithm: sha256WithRSAEncryption
90:76:5b:07:4c:1b:fe:4a:2e:fe:e0:f5:56:95:78:07:c2:30:
73:b9:82:d2:ab:ef:89:f8:da:02:63:4a:8b:0f:e0:05:7b:6c:
24:8a:44:42:10:ab:70:91:52:8d:a6:d0:21:09:71:c4:d0:f5:
a4:6d:e8:07:58:5e:03:6f:c0:1c:f5:fe:04:d6:3d:ca:25:40:
9f:ba:6b:58:12:cb:5f:f9:8d:3d:4f:3a:0b:09:aa:e9:87:91:
53:11:9e:b4:c5:28:cb:e1:51:65:01:ce:1c:60:a1:d4:58:9e:
28:d3:c3:db:a7:46:97:6a:06:c9:94:2b:30:c9:b7:92:d0:82:
e6:72:f9:00:3a:a0:e2:e0:a9:92:e0:fe:a7:8b:ad:ae:2f:94:
70:de:a7:09:d4:db:14:e9:c1:b6:9e:39:f3:f1:6a:d7:08:0f:
00:1f:04:d6:18:1f:39:6d:b6:41:8a:a7:67:be:00:86:3b:0a:
25:7e:cc:70:0e:e6:bc:b2:d5:67:ef:1b:66:87:54:0a:1e:ae:
bc:c0:0c:f6:53:69:a4:01:d7:ae:e4:0b:c6:1a:d2:49:61:48:
ef:62:1d:d2:f3:2c:0e:53:44:18:e4:7f:31:f0:1a:02:7c:30:
ab:70:38:c0:d5:04:96:97:40:b9:97:c2:e1:6c:2b:dc:11:ff:
b7:c0:a2:a8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAvwzkEEubqnWQUCMZQiEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTI4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjI2NjhmNWM5ZTI4MTY0NTI3N2NlNzY5MmU3MWY5YzA3NGYzNjQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87CO6YQkt4HbAHN3tvUNyLR1DC11
WqwjfgPZr4O30JQVSPiZuk/0v8ILeyIP+8qqsoKxax2Kipm3KtsUzEbWxlFqwq4G
vw2p3+5zwvPiqw60lSTHiT8zUm2rZ8cfXkdziToJ757DECbUh87wUhZu0YSama+i
VE3ISTTeryCRm/YofgTxbXcfSfDXQRAhQGslvY0tiYZ98OjuDPIyWdAarkLEmMOu
bHM0+oUXHMIOTKxtv5NL/94YjaCuGyGhu6pJok7cUP1jdiv6FSb7bdA0KauKdCJ3
D0OWZ1/4i4BM1UDUi0CdDcYzDYUHEQ2a/x8hbcB/KkJBgVsDz4vjt8LxpwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAYmaPXJ4oFkUnfOdpLnH5wHTzZCMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvQmlabzljbmlnV1JTZDg1Mmt1Y2ZuQWRQTmtJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwoQTMA0G
CSqGSIb3DQEBCwUAA4IBAQCQdlsHTBv+Si7+4PVWlXgHwjBzuYLSq++J+NoCY0qL
D+AFe2wkikRCEKtwkVKNptAhCXHE0PWkbegHWF4Db8Ac9f4E1j3KJUCfumtYEstf
+Y09TzoLCarph5FTEZ60xSjL4VFlAc4cYKHUWJ4o08Pbp0aXagbJlCswybeS0ILm
cvkAOqDi4KmS4P6ni62uL5Rw3qcJ1NsU6cG2njnz8WrXCA8AHwTWGB85bbZBiqdn
vgCGOwolfsxwDua8stVn7xtmh1QKHq68wAz2U2mkAdeu5AvGGtJJYUjvYh3S8ywO
U0QY5H8x8BoCfDCrcDjA1QSWl0C5l8LhbCvcEf+3wKKo
-----END CERTIFICATE-----
Generated at Sat May 25 09:13:22 2024 by rpki-client on console-fra.rpki-client.org