Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lD5d7M4dS3giQffZPHGAm1vBfS4.roa
File: lD5d7M4dS3giQffZPHGAm1vBfS4.roa (raw, json)
Hash identifier: 497EHFfe9Q629yzHRTDUR3osQVBgZJ10PxBRTyCr39g=
Subject key identifier: 94:3E:5D:EC:CE:1D:4B:78:22:41:F7:D9:3C:71:80:9B:5B:C1:7D:2E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802E3AE4788F4FE3F61EB4F424EEBA0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lD5d7M4dS3giQffZPHGAm1vBfS4.roa
Signing time: Tue 02 Jan 2024 02:31:21 +0000
ROA not before: Tue 02 Jan 2024 02:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28099
IP address blocks: 193.235.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e3:ae:47:88:f4:fe:3f:61:eb:4f:42:4e:eb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=943e5decce1d4b782241f7d93c71809b5bc17d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:22:8b:0b:63:d2:f7:a9:a4:8c:52:ed:d1:9a:
28:9c:c2:0f:e0:74:23:28:d3:ff:6a:ad:01:9a:7b:
49:29:59:cd:a9:28:31:cb:0c:23:0b:63:7d:bd:de:
9d:ea:d6:e5:a8:16:ed:38:6e:05:29:95:33:53:f5:
9b:45:94:ff:80:07:f5:bb:74:b1:ca:c4:db:40:75:
90:b1:65:3a:9f:0c:88:28:ca:eb:11:1a:e9:99:e6:
2c:1a:ad:c2:73:1f:18:41:dc:7f:1f:bd:a1:8f:a6:
11:35:73:58:02:cc:71:9c:7a:84:72:c1:39:bb:c1:
4e:c3:40:d7:c4:32:ed:9c:06:b9:0f:f0:65:86:d0:
a1:8a:78:60:90:83:93:27:a6:69:fc:7d:8d:0b:d8:
80:90:c1:d3:3c:aa:63:98:42:b9:05:83:8c:ce:61:
bc:e3:82:8c:7f:01:5a:34:2f:8a:a8:3b:78:0d:a3:
84:80:4b:95:31:c2:72:7f:1f:0d:ed:5d:1a:a1:fb:
e7:54:19:c0:c5:19:c7:a3:19:3d:c8:63:22:57:aa:
05:b8:35:d2:5f:bc:39:94:5c:fa:65:3c:b0:41:cb:
ef:32:f0:37:e6:a7:9a:4c:d6:de:04:ef:1b:88:c3:
8b:20:2d:35:ab:54:44:c7:50:52:b2:e1:b8:00:79:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:5D:EC:CE:1D:4B:78:22:41:F7:D9:3C:71:80:9B:5B:C1:7D:2E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lD5d7M4dS3giQffZPHGAm1vBfS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.146.0/24
Signature Algorithm: sha256WithRSAEncryption
55:64:b2:9b:55:3f:63:a4:ef:bf:54:df:85:26:f5:69:a5:f6:
2b:e0:11:68:ff:0f:2d:ab:c6:17:13:db:ee:4e:5e:0a:37:23:
a0:37:37:69:00:dc:21:28:89:c4:21:a2:d2:a6:a7:23:54:d9:
62:47:d7:13:06:fd:15:f4:15:a3:2f:5a:a3:8c:d9:ee:81:d0:
3d:fe:a4:0f:67:77:e9:f4:9e:fa:ee:ee:64:51:06:8c:94:83:
25:a7:8d:2f:06:04:e1:73:bb:76:79:ce:65:10:fd:ef:af:9c:
ca:0c:3d:52:a5:a3:3b:33:f6:b0:36:fb:f8:8c:00:15:be:34:
2d:5e:c1:48:0c:24:10:6e:e3:3c:de:02:cc:f7:65:fc:f3:d1:
5a:0a:a5:8b:4c:49:9c:2a:5e:68:ca:6d:5f:5c:aa:c6:60:d4:
68:3b:ad:de:08:99:4c:9a:b8:82:96:63:af:1f:9c:75:a0:65:
09:10:27:ad:50:49:7b:bc:5d:14:e7:06:d6:4c:56:ac:e8:06:
c7:8c:a0:c2:a6:4f:51:82:4e:85:c5:bd:24:d4:bd:b0:39:f7:
61:ca:1f:89:36:c6:9c:cf:75:c0:4d:40:8b:cf:3e:3e:ea:73:
c8:9a:ca:5f:0e:60:d4:31:86:17:de:f5:70:a0:86:f1:6e:bb:
35:f8:b3:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAuOuR4j0/j9h609CTuugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5NDNlNWRlY2NlMWQ0Yjc4MjI0MWY3ZDkzYzcxODA5YjViYzE3ZDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiKLC2PS96mkjFLt0ZoonMIP4HQj
KNP/aq0BmntJKVnNqSgxywwjC2N9vd6d6tblqBbtOG4FKZUzU/WbRZT/gAf1u3Sx
ysTbQHWQsWU6nwyIKMrrERrpmeYsGq3Ccx8YQdx/H72hj6YRNXNYAsxxnHqEcsE5
u8FOw0DXxDLtnAa5D/BlhtChinhgkIOTJ6Zp/H2NC9iAkMHTPKpjmEK5BYOMzmG8
44KMfwFaNC+KqDt4DaOEgEuVMcJyfx8N7V0aofvnVBnAxRnHoxk9yGMiV6oFuDXS
X7w5lFz6ZTywQcvvMvA35qeaTNbeBO8biMOLIC01q1REx1BSsuG4AHn7iwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJQ+XezOHUt4IkH32TxxgJtbwX0uMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvbEQ1ZDdNNGRTM2dpUWZmWlBIR0FtMXZCZlM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweuSMA0G
CSqGSIb3DQEBCwUAA4IBAQBVZLKbVT9jpO+/VN+FJvVppfYr4BFo/w8tq8YXE9vu
Tl4KNyOgNzdpANwhKInEIaLSpqcjVNliR9cTBv0V9BWjL1qjjNnugdA9/qQPZ3fp
9J767u5kUQaMlIMlp40vBgThc7t2ec5lEP3vr5zKDD1SpaM7M/awNvv4jAAVvjQt
XsFIDCQQbuM83gLM92X889FaCqWLTEmcKl5oym1fXKrGYNRoO63eCJlMmriClmOv
H5x1oGUJECetUEl7vF0U5wbWTFas6AbHjKDCpk9Rgk6Fxb0k1L2wOfdhyh+JNsac
z3XATUCLzz4+6nPImspfDmDUMYYX3vVwoIbxbrs1+LOI
-----END CERTIFICATE-----
Generated at Sat May 25 10:39:48 2024 by rpki-client on console-ams.rpki-client.org