Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/wP0GIImcmmFio1P8kXWsboJ4Vjk.roa
File: wP0GIImcmmFio1P8kXWsboJ4Vjk.roa (raw, json)
Hash identifier: QVNKs1kVYe8dlARsVk3fqVJh0p/IiDoBNwUfFMRZkWQ=
Subject key identifier: C0:FD:06:20:89:9C:9A:61:62:A3:53:FC:91:75:AC:6E:82:78:56:39
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 018D0CB4A0D905BDFFD80E6C1154505C1ADE
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/wP0GIImcmmFio1P8kXWsboJ4Vjk.roa
Signing time: Mon 15 Jan 2024 10:39:40 +0000
ROA not before: Mon 15 Jan 2024 10:39:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34412
IP address blocks: 193.37.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:0c:b4:a0:d9:05:bd:ff:d8:0e:6c:11:54:50:5c:1a:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: Jan 15 10:39:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c0fd0620899c9a6162a353fc9175ac6e82785639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:77:72:a8:e2:a6:c9:09:6e:75:d3:3c:2e:aa:
bb:e1:af:ab:c2:d8:36:8a:7c:42:3e:ba:49:ad:99:
17:c5:63:26:2c:cc:2a:7f:54:78:5e:d4:4a:f3:0a:
c5:55:d9:5b:73:18:6c:63:13:a5:ce:4e:27:3e:7c:
07:5f:1b:28:2e:f6:5f:98:fa:15:f8:de:39:6a:a2:
68:c4:8d:d8:32:f6:2c:df:3d:23:f5:51:2a:2e:86:
9c:57:59:94:8e:18:c7:71:db:68:ac:cb:82:f4:a3:
96:f1:30:49:5f:2a:9a:a5:59:1e:24:fd:33:88:8e:
0d:fb:d5:d6:24:5b:df:4f:43:e2:0b:de:08:93:24:
3f:dd:fc:a1:48:82:ec:2d:74:32:98:65:79:20:17:
52:31:fc:fa:cb:4d:4a:4d:86:6a:9e:c7:5b:e4:d9:
1e:3f:af:27:a3:2f:01:f3:8e:15:f5:88:8e:22:82:
7a:b6:3e:fa:ef:f0:7f:f9:d0:17:e3:a9:09:4f:6d:
43:39:b0:69:a7:7a:af:c4:89:32:f4:22:f1:56:cd:
2a:7e:8b:d9:58:9e:c1:b7:14:a2:bd:60:42:6c:1e:
06:13:88:cc:86:bf:07:e1:5b:45:6e:fe:a0:bc:0f:
3a:e9:eb:fb:e6:0e:f5:2d:62:94:f3:bb:9c:2a:f0:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:FD:06:20:89:9C:9A:61:62:A3:53:FC:91:75:AC:6E:82:78:56:39
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/wP0GIImcmmFio1P8kXWsboJ4Vjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.37.37.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:99:64:24:85:c9:84:28:be:ad:01:c3:4c:d9:80:49:99:a7:
ea:54:bb:48:95:ab:19:37:9d:43:b3:d9:e3:1c:f1:95:0f:25:
bd:69:b0:f1:28:af:8d:7f:1e:7f:23:82:f6:98:1e:0d:75:0b:
0d:41:de:29:2c:d4:24:53:61:b8:aa:aa:c4:14:c8:d5:ae:c8:
c7:aa:0c:ee:67:5e:6b:58:be:92:65:03:66:67:38:b4:c5:7b:
ad:00:82:f5:a2:1b:e2:9a:00:29:90:00:db:08:d6:54:7f:48:
57:43:6a:7b:e0:83:a9:fe:6d:66:d1:3f:c5:8a:a3:9a:24:78:
22:10:61:31:5f:7e:10:1e:76:c2:bf:e0:05:5a:60:b4:61:c9:
17:69:ff:b4:a3:06:4e:22:d5:11:aa:2c:08:15:9f:68:2b:65:
e7:7b:4b:7a:83:3a:fb:f9:35:3f:7f:17:dd:4a:66:0a:9f:9a:
2e:8f:da:54:89:c5:9e:95:20:38:61:cb:6b:93:06:39:35:ee:
06:7e:dd:7b:99:aa:26:2a:d0:04:0b:8d:12:a3:57:11:1e:bf:
90:f3:4b:ba:21:60:91:4f:fc:d6:73:e5:fa:ca:2f:95:12:b4:
55:82:a3:48:0a:24:83:e3:8b:da:b4:ce:cc:26:79:c3:15:47:
af:ac:66:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY0MtKDZBb3/2A5sEVRQXBreMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjliNGYxYTA5MGFjMDdiZTE3NjJkZWMzMzhlNmEwZmUz
NWQ5N2UwHhcNMjQwMTE1MTAzOTQwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMGZkMDYyMDg5OWM5YTYxNjJhMzUzZmM5MTc1YWM2ZTgyNzg1NjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnndyqOKmyQluddM8Lqq74a+rwtg2
inxCPrpJrZkXxWMmLMwqf1R4XtRK8wrFVdlbcxhsYxOlzk4nPnwHXxsoLvZfmPoV
+N45aqJoxI3YMvYs3z0j9VEqLoacV1mUjhjHcdtorMuC9KOW8TBJXyqapVkeJP0z
iI4N+9XWJFvfT0PiC94IkyQ/3fyhSILsLXQymGV5IBdSMfz6y01KTYZqnsdb5Nke
P68noy8B844V9YiOIoJ6tj767/B/+dAX46kJT21DObBpp3qvxIky9CLxVs0qfovZ
WJ7BtxSivWBCbB4GE4jMhr8H4VtFbv6gvA866ev75g71LWKU87ucKvA6ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMD9BiCJnJphYqNT/JF1rG6CeFY5MB8GA1UdIwQY
MBaAFHYptPGgkKwHvhdi3sM45qD+Ndl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQt
NWYxNzViNWFlMDM4LzEvd1AwR0lJbWNtbUZpbzFQOGtYV3Nib0o0VmprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQtNWYxNzViNWFlMDM4
LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSUlMA0G
CSqGSIb3DQEBCwUAA4IBAQBrmWQkhcmEKL6tAcNM2YBJmafqVLtIlasZN51Ds9nj
HPGVDyW9abDxKK+Nfx5/I4L2mB4NdQsNQd4pLNQkU2G4qqrEFMjVrsjHqgzuZ15r
WL6SZQNmZzi0xXutAIL1ohvimgApkADbCNZUf0hXQ2p74IOp/m1m0T/FiqOaJHgi
EGExX34QHnbCv+AFWmC0YckXaf+0owZOItURqiwIFZ9oK2Xne0t6gzr7+TU/fxfd
SmYKn5ouj9pUicWelSA4YctrkwY5Ne4Gft17maomKtAEC40So1cRHr+Q80u6IWCR
T/zWc+X6yi+VErRVgqNICiSD44vatM7MJnnDFUevrGbu
-----END CERTIFICATE-----
Generated at Tue Jun 18 12:26:24 2024 by rpki-client on console-ams.rpki-client.org