Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/O0_EO4iaMQYNiWqYPPdTaKlPRvM.roa
File: O0_EO4iaMQYNiWqYPPdTaKlPRvM.roa (raw, json)
Hash identifier: nCE6S3UEUtSm9sKa+TSMQkv2rCgGLve7BgcMMKy1v2s=
Subject key identifier: 3B:4F:C4:3B:88:9A:31:06:0D:89:6A:98:3C:F7:53:68:A9:4F:46:F3
Certificate issuer: /CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Certificate serial: 018CC79350657F467057C82BC71F827ECC9E
Authority key identifier: 66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/O0_EO4iaMQYNiWqYPPdTaKlPRvM.roa
Signing time: Tue 02 Jan 2024 00:29:29 +0000
ROA not before: Tue 02 Jan 2024 00:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55002
IP address blocks: 194.37.250.0/23 maxlen: 24
194.39.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:50:65:7f:46:70:57:c8:2b:c7:1f:82:7e:cc:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66d475bb542f61821be39dbc9b68275d6e0087d4
Validity
Not Before: Jan 2 00:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3b4fc43b889a31060d896a983cf75368a94f46f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:d1:84:f9:9c:52:fb:a7:a9:59:59:02:51:
57:14:10:fd:b6:9d:78:8a:82:4c:e8:96:b0:4b:cc:
f5:be:86:a4:9c:81:b3:34:89:0c:c3:69:72:15:51:
ff:ba:1a:40:c2:ba:0c:1c:75:e5:f6:c5:83:d8:9c:
50:fe:09:a3:ae:b4:b5:00:6e:0a:81:77:6b:b3:19:
e7:06:fc:64:f2:eb:0f:8c:0e:ae:2e:92:fa:a5:32:
68:b1:4d:16:6f:12:b8:42:0d:6d:12:6e:00:7e:94:
29:e2:86:e8:8c:c8:ca:c0:1f:01:75:c5:56:2a:e7:
32:7e:f5:93:db:be:f5:fb:ba:fe:a9:38:01:75:24:
34:54:ef:a5:c5:1f:85:fd:8d:cf:1c:9e:e8:c1:ad:
fb:92:bd:92:69:c0:f4:5a:4e:3e:80:d3:45:7a:df:
1a:3c:b4:68:ed:42:ba:15:8f:b5:6d:26:52:8b:98:
7c:eb:f0:b7:ec:a7:4a:eb:d7:a1:a1:70:a5:fa:0c:
19:02:a8:ba:1f:32:70:98:1b:2d:2a:c9:35:e2:34:
95:af:e8:93:67:16:5f:91:f0:ef:99:16:be:9d:24:
95:20:3b:80:dd:2e:3f:95:51:ba:2d:d1:7b:f4:cc:
a6:1f:22:be:ce:49:9f:df:69:ee:3f:83:4a:9c:d0:
d3:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:4F:C4:3B:88:9A:31:06:0D:89:6A:98:3C:F7:53:68:A9:4F:46:F3
X509v3 Authority Key Identifier:
keyid:66:D4:75:BB:54:2F:61:82:1B:E3:9D:BC:9B:68:27:5D:6E:00:87:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/O0_EO4iaMQYNiWqYPPdTaKlPRvM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/ee354a-8428-4d86-9824-e5fcebdaa7f2/1/ZtR1u1QvYYIb4528m2gnXW4Ah9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.37.250.0/23
194.39.78.0/23
Signature Algorithm: sha256WithRSAEncryption
03:6d:1a:b3:cf:5d:a6:ef:83:a8:73:0f:e3:9e:d7:c1:db:39:
f3:7a:e6:42:c8:8c:6a:67:d2:bf:d3:36:2e:79:2e:9e:23:93:
1e:e0:0c:13:0f:30:7f:52:3f:ca:d2:3a:84:b7:6d:2e:23:a3:
e5:78:ea:19:66:84:ce:71:39:8d:b3:29:f1:1f:a5:2a:17:7d:
68:02:b3:e7:81:18:bd:a2:52:bf:44:c9:d9:2e:9a:57:2a:91:
47:f2:84:ca:b3:c5:51:d0:8f:21:13:4c:4a:91:50:fe:6a:b7:
99:47:3c:b5:91:bc:39:a4:7c:38:75:53:61:20:6d:48:2a:61:
97:2a:4f:53:6e:79:12:71:46:a1:2a:1c:7b:9f:2d:46:2f:58:
04:88:2c:fc:2c:66:4c:58:1c:6a:b0:37:1a:b6:88:cd:ca:3c:
0c:9b:41:49:7c:58:76:6c:4c:df:da:c4:92:33:b1:f8:a7:60:
8a:55:7a:be:18:16:41:fd:9c:c1:61:00:7d:eb:ea:c4:52:3f:
be:b8:34:ba:87:d3:e7:1f:ef:0e:39:ae:5f:64:2b:43:5b:95:
8a:3b:7a:cb:0a:d5:e6:82:95:03:b3:67:b4:f7:02:77:96:8b:
2b:6e:c0:40:97:77:52:52:21:bf:35:48:71:cb:c9:56:35:49:
90:fd:2a:2f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzHk1Blf0ZwV8grxx+CfsyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2ZDQ3NWJiNTQyZjYxODIxYmUzOWRiYzliNjgyNzVkNmUw
MDg3ZDQwHhcNMjQwMTAyMDAyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYjRmYzQzYjg4OWEzMTA2MGQ4OTZhOTgzY2Y3NTM2OGE5NGY0NmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0fRhPmcUvunqVlZAlFXFBD9tp14
ioJM6JawS8z1voaknIGzNIkMw2lyFVH/uhpAwroMHHXl9sWD2JxQ/gmjrrS1AG4K
gXdrsxnnBvxk8usPjA6uLpL6pTJosU0WbxK4Qg1tEm4AfpQp4obojMjKwB8BdcVW
KucyfvWT2771+7r+qTgBdSQ0VO+lxR+F/Y3PHJ7owa37kr2SacD0Wk4+gNNFet8a
PLRo7UK6FY+1bSZSi5h86/C37KdK69ehoXCl+gwZAqi6HzJwmBstKsk14jSVr+iT
ZxZfkfDvmRa+nSSVIDuA3S4/lVG6LdF79MymHyK+zkmf32nuP4NKnNDTWwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFDtPxDuImjEGDYlqmDz3U2ipT0bzMB8GA1UdIwQY
MBaAFGbUdbtUL2GCG+OdvJtoJ11uAIfUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQt
ZTVmY2ViZGFhN2YyLzEvTzBfRU80aWFNUVlOaVdxWVBQZFRhS2xQUnZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lZTM1NGEtODQyOC00ZDg2LTk4MjQtZTVmY2ViZGFhN2Yy
LzEvWnRSMXUxUXZZWUliNDUyOG0yZ25YVzRBaDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwiX6AwQB
widOMA0GCSqGSIb3DQEBCwUAA4IBAQADbRqzz12m74Oocw/jntfB2znzeuZCyIxq
Z9K/0zYueS6eI5Me4AwTDzB/Uj/K0jqEt20uI6PleOoZZoTOcTmNsynxH6UqF31o
ArPngRi9olK/RMnZLppXKpFH8oTKs8VR0I8hE0xKkVD+areZRzy1kbw5pHw4dVNh
IG1IKmGXKk9TbnkScUahKhx7ny1GL1gEiCz8LGZMWBxqsDcatojNyjwMm0FJfFh2
bEzf2sSSM7H4p2CKVXq+GBZB/ZzBYQB96+rEUj++uDS6h9PnH+8OOa5fZCtDW5WK
O3rLCtXmgpUDs2e09wJ3losrbsBAl3dSUiG/NUhxy8lWNUmQ/Sov
-----END CERTIFICATE-----
Generated at Mon May 20 13:21:32 2024 by rpki-client on console-ams.rpki-client.org