Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/sRVxFn1AlNpN8SYTIoBE6E7IO0s.roa
File: sRVxFn1AlNpN8SYTIoBE6E7IO0s.roa (raw, json)
Hash identifier: mhlO8cQstkVF4Etyh/rEqXmVNjGcWA0sMww+l6NQugk=
Subject key identifier: B1:15:71:16:7D:40:94:DA:4D:F1:26:13:22:80:44:E8:4E:C8:3B:4B
Certificate issuer: /CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Certificate serial: 018CC6B93805671773B01A6E28F27E0AF655
Authority key identifier: 8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/sRVxFn1AlNpN8SYTIoBE6E7IO0s.roa
Signing time: Mon 01 Jan 2024 20:31:16 +0000
ROA not before: Mon 01 Jan 2024 20:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3303
IP address blocks: 193.223.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.mft
rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:38:05:67:17:73:b0:1a:6e:28:f2:7e:0a:f6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f987fa86faeced8ca7a4462af7f005eab2779a8
Validity
Not Before: Jan 1 20:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b11571167d4094da4df12613228044e84ec83b4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:31:89:ca:21:2b:13:81:a2:9a:a6:06:38:bb:
57:1b:90:3f:2f:46:92:c2:c1:d8:d2:0c:da:8e:4b:
4b:42:de:f5:ed:97:a8:2a:66:b8:4d:6b:8f:66:83:
74:84:75:30:9c:1b:20:1d:47:42:de:1e:3e:af:8a:
be:53:56:1e:7d:05:82:f4:06:5d:70:36:e3:e0:b8:
8a:6e:bb:31:fb:dd:57:89:91:da:02:8c:5e:53:55:
56:25:0c:50:c2:3d:9a:ff:1a:01:ea:62:af:63:ed:
9a:ab:dd:8c:13:00:1c:28:8b:b2:96:14:c4:81:f2:
e8:a6:98:e0:4c:26:6d:08:eb:a9:6d:03:b5:18:2e:
14:ba:e9:8d:8e:2b:d5:2a:b7:3c:2c:11:63:d2:44:
9e:2b:97:a7:08:2e:24:7a:b5:2f:04:0f:71:5a:cb:
1f:31:0b:19:3c:2b:71:a6:c3:34:f0:6c:28:10:cd:
ce:7d:d6:63:90:ca:a6:21:ad:aa:70:40:26:d0:59:
67:7b:70:4a:3f:6b:90:45:b9:63:a9:55:34:9c:71:
e5:e9:3c:c0:cb:94:96:e1:29:be:8d:fe:28:8a:01:
e6:85:d8:cc:0e:39:cd:78:cc:e7:fc:44:4e:4f:6f:
79:a7:bd:2b:3b:70:07:15:8c:5d:ab:02:50:9d:b9:
12:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:15:71:16:7D:40:94:DA:4D:F1:26:13:22:80:44:E8:4E:C8:3B:4B
X509v3 Authority Key Identifier:
keyid:8F:98:7F:A8:6F:AE:CE:D8:CA:7A:44:62:AF:7F:00:5E:AB:27:79:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j5h_qG-uztjKekRir38AXqsneag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/sRVxFn1AlNpN8SYTIoBE6E7IO0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/fb4c63-bdb3-4b85-82f0-6f6c6c821781/1/j5h_qG-uztjKekRir38AXqsneag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.223.102.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:de:9f:d8:ba:75:d0:af:5c:b5:f2:08:00:ad:81:40:eb:cb:
c5:ed:75:4b:e4:6b:b0:07:11:b6:90:9f:65:64:ae:1a:8a:29:
f0:3e:e4:a0:40:1c:16:0e:49:0a:1b:b6:16:93:2f:04:59:1d:
f0:db:68:a9:58:62:b8:09:90:eb:fc:77:b4:be:03:fa:66:4d:
3f:7a:00:22:43:cb:70:a0:27:9c:95:a7:6a:e3:3f:e5:41:83:
8b:93:58:e8:4a:5e:ae:b4:58:f9:6b:f4:57:47:2f:a9:9c:98:
57:a9:b2:35:cb:7c:a2:67:6d:73:44:0f:00:37:ca:93:b7:34:
3e:9e:72:8b:d2:5a:c0:e8:a3:68:98:df:af:c9:c4:6e:5f:f7:
03:5c:91:7c:f8:1a:69:5e:0d:50:88:f1:8d:18:37:01:cf:bc:
d8:90:60:c5:97:47:a9:77:81:ed:b5:63:48:38:45:ab:a0:4e:
29:bf:0f:c5:c3:bb:df:aa:75:66:06:a8:72:43:80:76:32:48:
55:5f:6c:f7:16:31:f0:17:7e:c3:60:e5:af:ad:c8:4d:d1:49:
9b:b1:b9:fb:4a:e7:07:a1:94:c6:cc:bb:5a:86:24:cd:6d:bf:
a8:46:bc:55:2b:59:31:09:dd:ac:47:7e:e6:04:80:5d:b2:ac:
8a:00:df:da
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuTgFZxdzsBpuKPJ+CvZVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmOTg3ZmE4NmZhZWNlZDhjYTdhNDQ2MmFmN2YwMDVlYWIy
Nzc5YTgwHhcNMjQwMTAxMjAzMTE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTE1NzExNjdkNDA5NGRhNGRmMTI2MTMyMjgwNDRlODRlYzgzYjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTGJyiErE4GimqYGOLtXG5A/L0aS
wsHY0gzajktLQt717ZeoKma4TWuPZoN0hHUwnBsgHUdC3h4+r4q+U1YefQWC9AZd
cDbj4LiKbrsx+91XiZHaAoxeU1VWJQxQwj2a/xoB6mKvY+2aq92MEwAcKIuylhTE
gfLoppjgTCZtCOupbQO1GC4UuumNjivVKrc8LBFj0kSeK5enCC4kerUvBA9xWssf
MQsZPCtxpsM08GwoEM3OfdZjkMqmIa2qcEAm0Flne3BKP2uQRbljqVU0nHHl6TzA
y5SW4Sm+jf4oigHmhdjMDjnNeMzn/EROT295p70rO3AHFYxdqwJQnbkS+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLEVcRZ9QJTaTfEmEyKAROhOyDtLMB8GA1UdIwQY
MBaAFI+Yf6hvrs7YynpEYq9/AF6rJ3moMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAt
NmY2YzZjODIxNzgxLzEvc1JWeEZuMUFsTnBOOFNZVElvQkU2RTdJTzBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mYjRjNjMtYmRiMy00Yjg1LTgyZjAtNmY2YzZjODIxNzgx
LzEvajVoX3FHLXV6dGpLZWtSaXIzOEFYcXNuZWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwd9mMA0G
CSqGSIb3DQEBCwUAA4IBAQBP3p/YunXQr1y18ggArYFA68vF7XVL5GuwBxG2kJ9l
ZK4aiinwPuSgQBwWDkkKG7YWky8EWR3w22ipWGK4CZDr/He0vgP6Zk0/egAiQ8tw
oCecladq4z/lQYOLk1joSl6utFj5a/RXRy+pnJhXqbI1y3yiZ21zRA8AN8qTtzQ+
nnKL0lrA6KNomN+vycRuX/cDXJF8+BppXg1QiPGNGDcBz7zYkGDFl0epd4HttWNI
OEWroE4pvw/Fw7vfqnVmBqhyQ4B2MkhVX2z3FjHwF37DYOWvrchN0Umbsbn7SucH
oZTGzLtahiTNbb+oRrxVK1kxCd2sR37mBIBdsqyKAN/a
-----END CERTIFICATE-----
Generated at Fri Jun 7 18:52:58 2024 by rpki-client on console-fra.rpki-client.org