Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/1BRwBlYDAyezQacEXHwn2WRRZXA.roa
File: 1BRwBlYDAyezQacEXHwn2WRRZXA.roa (raw, json)
Hash identifier: DCQ1TO8ktKBhsTv8xLmvW/loNCsk9VAgFF166+BMd5U=
Subject key identifier: D4:14:70:06:56:03:03:27:B3:41:A7:04:5C:7C:27:D9:64:51:65:70
Certificate issuer: /CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
Certificate serial: 018CC26D68AE420DBC3915FFFC29D5D30E9E
Authority key identifier: 92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/1BRwBlYDAyezQacEXHwn2WRRZXA.roa
Signing time: Mon 01 Jan 2024 00:29:59 +0000
ROA not before: Mon 01 Jan 2024 00:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8412
IP address blocks: 193.34.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:68:ae:42:0d:bc:39:15:ff:fc:29:d5:d3:0e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9260a8c66abdb6e50681007006d57f7d1fe9ca2e
Validity
Not Before: Jan 1 00:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d414700656030327b341a7045c7c27d964516570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:6d:c3:bc:63:29:80:4c:c6:55:21:b7:2f:
87:a4:68:09:18:3e:ae:95:41:72:f9:25:f0:d2:e1:
4f:9f:db:9e:02:fa:0e:69:b9:b3:dd:f7:4c:90:77:
30:12:f5:ba:bf:03:c9:26:af:1c:e4:40:92:c4:44:
8b:ff:60:cd:71:98:4c:11:27:5e:70:73:46:37:51:
2b:b5:dc:29:0c:92:c0:48:a6:b9:3b:0e:8c:ff:cc:
42:cf:24:38:14:b9:7e:05:c4:95:22:8d:0b:bd:78:
a8:55:a1:9a:62:93:da:3a:f0:d2:6d:6d:42:83:54:
db:2d:53:23:1c:7f:71:99:33:f3:1f:cd:c6:b9:82:
3f:dc:02:4c:53:3a:ec:b2:ca:b0:3e:d9:39:28:5c:
65:d9:4f:58:74:63:54:17:f0:45:81:bb:ae:35:de:
37:06:ed:71:75:e7:e4:5d:de:b3:aa:6d:b0:7a:13:
f4:60:e8:72:c8:10:7d:4f:a0:e1:67:41:41:cf:72:
b7:d4:2d:7b:0c:2a:d4:cc:e3:25:e6:68:16:32:b4:
5f:82:15:9a:43:ac:af:48:1c:ac:d3:a1:49:54:70:
02:8d:29:5f:de:68:5a:ee:76:77:c0:07:69:75:43:
84:8a:58:d3:21:2c:f2:24:94:b8:18:c7:65:34:8a:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:14:70:06:56:03:03:27:B3:41:A7:04:5C:7C:27:D9:64:51:65:70
X509v3 Authority Key Identifier:
keyid:92:60:A8:C6:6A:BD:B6:E5:06:81:00:70:06:D5:7F:7D:1F:E9:CA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmCoxmq9tuUGgQBwBtV_fR_pyi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/1BRwBlYDAyezQacEXHwn2WRRZXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/444ccc-2b56-4a5f-9a3a-dd4b514fcd08/1/kmCoxmq9tuUGgQBwBtV_fR_pyi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.227.0/24
Signature Algorithm: sha256WithRSAEncryption
29:0a:7b:fa:3a:00:57:0c:80:ee:aa:10:7d:96:05:83:16:27:
ba:8a:dc:b1:09:a3:05:9e:4b:8d:15:22:ca:e9:25:bc:91:1c:
3d:7e:d8:bc:c8:7d:64:d5:40:8d:0f:9a:f8:b4:9e:68:d2:1e:
c4:9c:b3:54:00:42:f2:6f:fe:4e:ed:5a:b7:07:af:c1:6b:cc:
16:e8:6e:7e:a2:c6:4e:0e:73:14:10:83:e4:2c:51:8f:8d:a2:
03:0d:1c:75:9d:be:5c:ba:6b:75:4c:15:b3:61:7f:71:df:1d:
1e:d9:0f:b1:25:43:f2:a1:55:cb:17:b2:5d:f5:bb:64:99:2b:
f8:ea:26:de:60:4a:98:b1:30:d5:e1:10:28:b1:1e:6a:48:01:
72:b8:f1:0d:3f:9e:93:08:7c:9a:a1:49:10:8c:da:42:41:e7:
6d:9b:c6:47:b8:09:63:12:5a:d1:7e:57:28:4f:99:d6:e7:78:
e5:db:49:47:f8:23:fc:d6:54:d8:1c:8d:b8:8d:8d:79:ee:b9:
f0:fb:68:eb:3a:84:03:08:33:7c:ab:6c:6f:09:1a:08:79:bd:
41:05:9c:5e:f9:8d:90:76:3a:6c:2a:cf:e7:87:92:74:b7:5e:
b5:0c:61:46:70:cb:e2:e4:89:8a:bf:3e:a5:26:3e:17:26:00:
65:93:82:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbWiuQg28ORX//CnV0w6eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNjBhOGM2NmFiZGI2ZTUwNjgxMDA3MDA2ZDU3ZjdkMWZl
OWNhMmUwHhcNMjQwMTAxMDAyOTU5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDE0NzAwNjU2MDMwMzI3YjM0MWE3MDQ1YzdjMjdkOTY0NTE2NTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZJtw7xjKYBMxlUhty+HpGgJGD6u
lUFy+SXw0uFPn9ueAvoOabmz3fdMkHcwEvW6vwPJJq8c5ECSxESL/2DNcZhMESde
cHNGN1ErtdwpDJLASKa5Ow6M/8xCzyQ4FLl+BcSVIo0LvXioVaGaYpPaOvDSbW1C
g1TbLVMjHH9xmTPzH83GuYI/3AJMUzrsssqwPtk5KFxl2U9YdGNUF/BFgbuuNd43
Bu1xdefkXd6zqm2wehP0YOhyyBB9T6DhZ0FBz3K31C17DCrUzOMl5mgWMrRfghWa
Q6yvSBys06FJVHACjSlf3mha7nZ3wAdpdUOEiljTISzyJJS4GMdlNIo46wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNQUcAZWAwMns0GnBFx8J9lkUWVwMB8GA1UdIwQY
MBaAFJJgqMZqvbblBoEAcAbVf30f6couMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva21Db3htcTl0dVVHZ1FCd0J0Vl9mUl9weWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80NDRjY2MtMmI1Ni00YTVmLTlhM2Et
ZGQ0YjUxNGZjZDA4LzEvMUJSd0JsWURBeWV6UWFjRVhId24yV1JSWlhBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS80NDRjY2MtMmI1Ni00YTVmLTlhM2EtZGQ0YjUxNGZjZDA4
LzEva21Db3htcTl0dVVHZ1FCd0J0Vl9mUl9weWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSLjMA0G
CSqGSIb3DQEBCwUAA4IBAQApCnv6OgBXDIDuqhB9lgWDFie6ityxCaMFnkuNFSLK
6SW8kRw9fti8yH1k1UCND5r4tJ5o0h7EnLNUAELyb/5O7Vq3B6/Ba8wW6G5+osZO
DnMUEIPkLFGPjaIDDRx1nb5cumt1TBWzYX9x3x0e2Q+xJUPyoVXLF7Jd9btkmSv4
6ibeYEqYsTDV4RAosR5qSAFyuPENP56TCHyaoUkQjNpCQedtm8ZHuAljElrRflco
T5nW53jl20lH+CP81lTYHI24jY157rnw+2jrOoQDCDN8q2xvCRoIeb1BBZxe+Y2Q
djpsKs/nh5J0t161DGFGcMvi5ImKvz6lJj4XJgBlk4Jv
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:14:54 2024 by rpki-client on console-ams.rpki-client.org