Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/rG9cvCTt1xak6gebuKHQfVNbYYo.roa
File: rG9cvCTt1xak6gebuKHQfVNbYYo.roa (raw, json)
Hash identifier: WczdZQF4gzZSDGGx6UFjSjfQ7Z6TMvg8Fsj9/gLdr8E=
Subject key identifier: AC:6F:5C:BC:24:ED:D7:16:A4:EA:07:9B:B8:A1:D0:7D:53:5B:61:8A
Certificate issuer: /CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Certificate serial: 018CC64B5D638C166B7ACC8DC154E674E7E4
Authority key identifier: 3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/rG9cvCTt1xak6gebuKHQfVNbYYo.roa
Signing time: Mon 01 Jan 2024 18:31:17 +0000
ROA not before: Mon 01 Jan 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212140
IP address blocks: 185.226.96.0/24 maxlen: 24
193.56.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:5d:63:8c:16:6b:7a:cc:8d:c1:54:e6:74:e7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a76fc5c9010b41119ca68dc6b9950ba5ff7327e
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac6f5cbc24edd716a4ea079bb8a1d07d535b618a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:13:61:81:f7:90:9e:f9:75:cb:56:04:bd:aa:
22:e4:01:3a:7a:cd:9a:21:09:66:6b:47:e2:ef:d3:
72:03:c0:1d:87:51:e1:92:dc:8c:06:bf:1e:92:cd:
ab:55:c9:a9:d8:91:7d:c6:c3:35:10:e9:c7:b5:84:
d5:79:f7:b2:18:81:33:02:11:a8:5e:f3:80:fd:ed:
67:78:1c:e5:d3:67:a3:30:87:6e:71:16:b0:cc:48:
76:7c:7f:fe:97:97:59:fd:ab:28:fa:0c:53:03:b9:
4b:77:ff:cd:60:7b:b5:9f:e9:99:50:f8:c8:cb:0d:
0d:6a:dc:4a:74:a4:e9:21:41:bf:a3:f8:66:90:8f:
10:63:38:a8:0b:cd:42:f4:71:8b:f2:84:bc:f8:e0:
73:50:85:d6:84:47:56:60:8a:b3:74:7a:fb:ff:42:
20:c5:5a:2f:a4:74:4a:6b:04:16:a6:3b:a8:ca:2f:
a7:d8:84:06:e4:1f:fe:00:4b:74:8d:ba:f0:e0:bf:
48:38:9d:83:5e:7d:04:f4:26:3f:e6:55:d4:0e:65:
fe:3b:01:98:58:54:93:70:fb:1f:f7:5b:24:74:89:
1c:60:59:82:e2:fd:5e:8f:f5:4d:ff:4b:d6:ff:3d:
73:8e:4a:e9:27:cf:2e:59:72:9d:28:62:e0:b9:d4:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:6F:5C:BC:24:ED:D7:16:A4:EA:07:9B:B8:A1:D0:7D:53:5B:61:8A
X509v3 Authority Key Identifier:
keyid:3A:76:FC:5C:90:10:B4:11:19:CA:68:DC:6B:99:50:BA:5F:F7:32:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Onb8XJAQtBEZymjca5lQul_3Mn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/rG9cvCTt1xak6gebuKHQfVNbYYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/a2787e-c4bb-4dfd-83cd-bdfa7c4f8b0a/1/Onb8XJAQtBEZymjca5lQul_3Mn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.96.0/24
193.56.103.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:ad:94:99:4d:30:87:50:30:60:62:fc:cf:de:53:aa:40:2e:
46:c0:ef:59:f6:40:81:06:dc:f2:85:2c:1b:2c:1e:65:98:f6:
e6:5c:7f:58:e7:03:0f:3c:d3:64:90:26:70:72:ee:6f:f6:d5:
b3:ea:58:35:e6:fe:20:63:62:c3:83:ca:b2:2f:27:0f:f0:61:
3d:6c:f5:b5:37:54:af:2e:9e:e2:20:29:88:63:94:68:a9:dd:
29:3e:9c:1a:91:6f:3c:f8:73:55:74:7a:1e:7e:39:b7:aa:19:
e8:c5:ba:b8:65:b8:86:0a:a7:80:af:07:19:80:f7:c9:67:40:
30:45:96:50:eb:41:8d:79:59:c0:ed:a1:47:5c:11:57:fb:f0:
38:49:79:00:25:a8:be:57:ad:d0:33:e1:30:92:b3:98:ca:ca:
0b:9c:e5:25:d7:a1:e9:fa:2d:25:db:da:50:a3:3d:b0:b7:48:
23:d1:85:97:1b:40:7c:b5:66:13:c1:14:cc:43:b5:1e:1a:3a:
08:df:ba:ba:9b:b4:d8:7f:77:0b:bc:a2:86:ed:00:e8:17:be:
23:d2:61:2f:28:00:cc:67:0c:7f:1f:9e:f0:b1:05:02:9a:b8:
9d:4a:38:0c:94:44:0b:a9:32:3c:6c:e2:ed:70:79:46:bf:2c:
30:09:49:93
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGS11jjBZresyNwVTmdOfkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhNzZmYzVjOTAxMGI0MTExOWNhNjhkYzZiOTk1MGJhNWZm
NzMyN2UwHhcNMjQwMTAxMTgzMTE3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYzZmNWNiYzI0ZWRkNzE2YTRlYTA3OWJiOGExZDA3ZDUzNWI2MThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBNhgfeQnvl1y1YEvaoi5AE6es2a
IQlma0fi79NyA8Adh1HhktyMBr8eks2rVcmp2JF9xsM1EOnHtYTVefeyGIEzAhGo
XvOA/e1neBzl02ejMIducRawzEh2fH/+l5dZ/aso+gxTA7lLd//NYHu1n+mZUPjI
yw0NatxKdKTpIUG/o/hmkI8QYzioC81C9HGL8oS8+OBzUIXWhEdWYIqzdHr7/0Ig
xVovpHRKawQWpjuoyi+n2IQG5B/+AEt0jbrw4L9IOJ2DXn0E9CY/5lXUDmX+OwGY
WFSTcPsf91skdIkcYFmC4v1ej/VN/0vW/z1zjkrpJ88uWXKdKGLgudS2mwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKxvXLwk7dcWpOoHm7ih0H1TW2GKMB8GA1UdIwQY
MBaAFDp2/FyQELQRGcpo3GuZULpf9zJ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2Qt
YmRmYTdjNGY4YjBhLzEvckc5Y3ZDVHQxeGFrNmdlYnVLSFFmVk5iWVlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9hMjc4N2UtYzRiYi00ZGZkLTgzY2QtYmRmYTdjNGY4YjBh
LzEvT25iOFhKQVF0QkVaeW1qY2E1bFF1bF8zTW40LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAueJgAwQA
wThnMA0GCSqGSIb3DQEBCwUAA4IBAQBfrZSZTTCHUDBgYvzP3lOqQC5GwO9Z9kCB
BtzyhSwbLB5lmPbmXH9Y5wMPPNNkkCZwcu5v9tWz6lg15v4gY2LDg8qyLycP8GE9
bPW1N1SvLp7iICmIY5Roqd0pPpwakW88+HNVdHoefjm3qhnoxbq4ZbiGCqeArwcZ
gPfJZ0AwRZZQ60GNeVnA7aFHXBFX+/A4SXkAJai+V63QM+EwkrOYysoLnOUl16Hp
+i0l29pQoz2wt0gj0YWXG0B8tWYTwRTMQ7UeGjoI37q6m7TYf3cLvKKG7QDoF74j
0mEvKADMZwx/H57wsQUCmridSjgMlEQLqTI8bOLtcHlGvywwCUmT
-----END CERTIFICATE-----
Generated at Sun Sep 29 00:32:54 2024 by rpki-client on console-fra.rpki-client.org