Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/kmApeIUTdQxe7OywO_5N1W7Ja9k.roa
File: kmApeIUTdQxe7OywO_5N1W7Ja9k.roa (raw, json)
Hash identifier: uVVgxFQbuTiwEyxzi45V5dB6t295dtOSVS0hafWOFqM=
Subject key identifier: 92:60:29:78:85:13:75:0C:5E:EC:EC:B0:3B:FE:4D:D5:6E:C9:6B:D9
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 018CC64B3693847A9FF8A36A6E2432263F63
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/kmApeIUTdQxe7OywO_5N1W7Ja9k.roa
Signing time: Mon 01 Jan 2024 18:31:07 +0000
ROA not before: Mon 01 Jan 2024 18:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 194.30.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:36:93:84:7a:9f:f8:a3:6a:6e:24:32:26:3f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Jan 1 18:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=926029788513750c5eececb03bfe4dd56ec96bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:20:09:d5:31:9a:c8:5d:28:93:b7:04:fd:6c:
f4:44:69:4b:a4:3b:a9:1f:b6:2a:4a:b3:e8:d1:f5:
10:a9:19:18:1b:79:c0:12:e2:5c:4d:31:48:8a:1f:
cd:5e:b0:eb:b5:f8:45:77:3e:64:f2:d4:fb:8a:64:
aa:f1:c0:51:b8:a0:d9:65:db:73:f7:80:17:ca:ef:
40:bb:1d:6c:34:4c:8a:81:d7:2d:0d:72:de:e9:ef:
f3:a6:8f:fb:36:49:10:0b:1a:07:d9:c9:c3:25:cd:
3b:0b:7f:7b:23:e1:d5:fc:e7:e5:a1:33:98:bb:da:
bd:93:ab:4b:6e:a0:3e:cd:9c:09:fc:b9:06:90:fb:
b3:26:71:a1:1a:30:d0:ec:4d:36:f7:81:52:ef:74:
1a:55:a6:a1:42:b6:6a:b7:e8:cd:65:3c:2a:72:72:
a9:51:cb:b2:f6:91:aa:89:d1:8e:9e:b7:41:4e:c8:
43:4c:8c:d9:ab:84:56:24:2e:03:81:b8:3d:57:bc:
55:82:55:bb:cd:3c:c3:c4:c9:e7:d2:74:af:f7:43:
f1:69:bf:fe:b5:32:55:4b:7a:ad:a8:cd:5e:60:72:
5b:ac:92:c1:ec:ac:e6:cc:1a:ed:92:17:bd:b0:35:
b9:34:67:f8:bc:8b:2d:f3:62:34:e0:3d:55:6f:0b:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:60:29:78:85:13:75:0C:5E:EC:EC:B0:3B:FE:4D:D5:6E:C9:6B:D9
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/kmApeIUTdQxe7OywO_5N1W7Ja9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:9f:fa:de:7f:a1:a9:4c:dd:e9:8f:0b:2f:83:ac:eb:8c:cd:
97:44:70:b3:83:e3:41:dd:b0:d6:bf:a4:1d:d9:cc:82:2d:92:
da:c4:fe:26:6a:5f:8f:3a:1f:77:22:05:b5:8e:10:e0:28:da:
e5:50:58:82:10:30:30:3f:a6:d9:37:7e:b9:93:ee:a7:7c:f7:
cf:45:69:87:66:dd:35:98:d1:55:2c:d6:fd:04:e6:7d:cc:f6:
75:d7:d9:70:17:34:43:e5:96:36:33:82:1b:6a:b0:f0:6a:49:
7a:ac:6e:68:a6:df:a0:4e:d6:2d:6d:7a:e0:0a:b7:f1:81:dc:
a4:3b:0f:59:ed:15:85:cf:0a:52:cb:d3:85:39:35:38:cb:10:
f3:03:a1:52:64:7c:6f:1d:40:88:de:5c:e2:05:22:64:27:e3:
df:b4:bb:82:c2:d1:fb:d6:04:d6:16:0a:69:15:76:58:96:cf:
94:f1:89:31:e3:ba:5a:c9:5e:ee:ba:cd:55:f0:36:5d:da:2b:
6e:1b:e0:5e:63:06:06:c2:7c:53:ce:2e:bf:28:dd:27:7b:5a:
6b:0e:d5:09:2d:83:27:5b:0e:44:78:ab:0c:7f:ec:3b:1e:cf:
39:b7:56:03:df:2a:80:25:72:df:56:37:ba:e2:d3:5d:22:f5:
73:7a:ae:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSzaThHqf+KNqbiQyJj9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTRmODRmNzgwODVmOGVhMDNhNDk2ODljYmUzNzJlNzRh
YzE1M2MwHhcNMjQwMTAxMTgzMTA3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MjYwMjk3ODg1MTM3NTBjNWVlY2VjYjAzYmZlNGRkNTZlYzk2YmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSAJ1TGayF0ok7cE/Wz0RGlLpDup
H7YqSrPo0fUQqRkYG3nAEuJcTTFIih/NXrDrtfhFdz5k8tT7imSq8cBRuKDZZdtz
94AXyu9Aux1sNEyKgdctDXLe6e/zpo/7NkkQCxoH2cnDJc07C397I+HV/OfloTOY
u9q9k6tLbqA+zZwJ/LkGkPuzJnGhGjDQ7E0294FS73QaVaahQrZqt+jNZTwqcnKp
Ucuy9pGqidGOnrdBTshDTIzZq4RWJC4Dgbg9V7xVglW7zTzDxMnn0nSv90Pxab/+
tTJVS3qtqM1eYHJbrJLB7KzmzBrtkhe9sDW5NGf4vIst82I04D1VbwuJewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJJgKXiFE3UMXuzssDv+TdVuyWvZMB8GA1UdIwQY
MBaAFPRU+E94CF+OoDpJaJy+Ny50rBU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZUNFQzZ0lYNDZnT2tsb25MNDNMblNzRlR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wM2EwYWEtMmI2OS00YTk4LWE2MWIt
NjBiOTg4Yzk1MjMwLzEva21BcGVJVVRkUXhlN095d09fNU4xVzdKYTlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8wM2EwYWEtMmI2OS00YTk4LWE2MWItNjBiOTg4Yzk1MjMw
LzEvOUZUNFQzZ0lYNDZnT2tsb25MNDNMblNzRlR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh6vMA0G
CSqGSIb3DQEBCwUAA4IBAQAfn/ref6GpTN3pjwsvg6zrjM2XRHCzg+NB3bDWv6Qd
2cyCLZLaxP4mal+POh93IgW1jhDgKNrlUFiCEDAwP6bZN365k+6nfPfPRWmHZt01
mNFVLNb9BOZ9zPZ119lwFzRD5ZY2M4IbarDwakl6rG5opt+gTtYtbXrgCrfxgdyk
Ow9Z7RWFzwpSy9OFOTU4yxDzA6FSZHxvHUCI3lziBSJkJ+PftLuCwtH71gTWFgpp
FXZYls+U8Ykx47payV7uus1V8DZd2ituG+BeYwYGwnxTzi6/KN0ne1prDtUJLYMn
Ww5EeKsMf+w7Hs85t1YD3yqAJXLfVje64tNdIvVzeq5p
-----END CERTIFICATE-----
Generated at Thu May 2 09:07:14 2024 by rpki-client on console-ams.rpki-client.org