Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/IHq4aUtTW9d4nlAlg1YRTtbrsMg.roa
File: IHq4aUtTW9d4nlAlg1YRTtbrsMg.roa (raw, json)
Hash identifier: NTcVz3tCj1qu6VNkG30gXgGOJAfbfKlz3DJSLXf9DYw=
Subject key identifier: 20:7A:B8:69:4B:53:5B:D7:78:9E:50:25:83:56:11:4E:D6:EB:B0:C8
Certificate issuer: /CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Certificate serial: 018E3D99FA52B0B6186D14D96E21A1FC8C60
Authority key identifier: 45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/IHq4aUtTW9d4nlAlg1YRTtbrsMg.roa
Signing time: Thu 14 Mar 2024 15:34:45 +0000
ROA not before: Thu 14 Mar 2024 15:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 193.101.11.0/24 maxlen: 24
193.101.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3d:99:fa:52:b0:b6:18:6d:14:d9:6e:21:a1:fc:8c:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=450c581248b11ae2a46f552e5ca43c69d65e72a8
Validity
Not Before: Mar 14 15:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=207ab8694b535bd7789e50258356114ed6ebb0c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:53:3c:d7:52:e0:0b:69:26:72:e7:52:23:
ed:f4:e6:70:e4:77:42:b4:c8:28:53:3c:76:ed:ef:
68:54:63:8b:c2:51:dc:dd:72:93:b3:f0:af:db:32:
45:84:6b:9c:77:3f:07:1d:37:c0:38:de:1e:41:ab:
a9:02:3a:ba:bf:b7:ec:57:bd:4c:ff:12:60:73:8a:
cd:df:04:34:49:33:f5:24:86:83:52:d5:c0:15:82:
b1:44:04:37:e9:55:c1:d7:e2:25:2b:83:77:5f:19:
12:2d:26:95:b4:4c:63:55:54:66:a1:0c:6b:af:f0:
2f:67:49:c2:51:1a:b9:08:7a:e8:24:6f:2c:31:27:
fb:91:86:3b:00:5f:dd:dc:17:38:8e:41:4b:4a:e5:
88:5d:a2:ea:5b:b9:7f:cc:bd:25:8e:79:e2:ee:51:
39:48:62:23:34:80:80:f1:26:22:b8:bc:19:d5:18:
2f:f9:b6:b5:83:c0:d1:70:d9:74:22:a3:f9:a2:05:
ac:c9:50:d1:ce:59:fb:56:f0:f0:36:2d:8f:4d:ca:
28:6f:c6:28:0d:24:fb:2d:fd:a4:1e:ac:2d:4a:db:
44:ae:df:49:1e:46:af:f4:a3:15:b6:4e:61:0e:6d:
7b:52:83:6e:44:ca:c2:89:42:ed:27:b2:a1:ee:50:
f7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7A:B8:69:4B:53:5B:D7:78:9E:50:25:83:56:11:4E:D6:EB:B0:C8
X509v3 Authority Key Identifier:
keyid:45:0C:58:12:48:B1:1A:E2:A4:6F:55:2E:5C:A4:3C:69:D6:5E:72:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQxYEkixGuKkb1UuXKQ8adZecqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/IHq4aUtTW9d4nlAlg1YRTtbrsMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1cf0b2-c51d-45f5-84dc-7499a8231f56/1/RQxYEkixGuKkb1UuXKQ8adZecqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.11.0/24
193.101.24.0/21
Signature Algorithm: sha256WithRSAEncryption
57:c4:8c:12:a4:76:78:7f:c2:9b:52:c2:99:4d:8f:6f:67:e6:
6a:77:a6:14:7f:16:8c:77:a6:f4:b1:dc:78:a4:de:54:c0:c7:
ba:cb:c8:36:da:52:80:57:e9:50:0f:16:69:c0:bf:b3:0a:46:
e0:de:86:c5:1c:84:24:7f:db:a2:3e:70:39:22:b5:12:77:ab:
50:87:1e:5f:ca:cd:d8:34:d4:b4:c6:0d:6a:29:1e:e7:c2:f5:
46:3f:78:e9:5b:0b:38:04:96:2c:41:69:c9:83:9c:1e:25:dd:
6a:15:0f:8c:aa:5a:d7:f7:4f:6d:fd:ec:81:98:03:d8:1d:46:
b6:b2:6a:46:74:44:fd:36:b1:41:3f:a3:59:0f:b4:22:95:3b:
c3:27:e6:0c:13:2a:0e:7e:7f:80:a7:1d:6c:72:c9:8f:7c:88:
7d:09:cf:c9:49:c7:01:11:aa:de:dd:7f:49:a8:30:fe:2f:37:
8a:cf:6b:73:1d:34:55:77:8d:24:35:e3:a0:a6:e8:23:8b:3f:
ce:be:8a:2e:18:c9:d0:8f:ca:81:ee:6a:5b:2c:e1:7e:03:19:
07:fe:0b:a1:0f:57:d1:a9:0d:7c:6b:95:3a:f1:27:85:f8:3f:
90:26:50:26:6c:81:f9:e4:d9:ad:48:ee:fc:8b:47:8b:cd:97:
5b:2c:f0:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY49mfpSsLYYbRTZbiGh/IxgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MGM1ODEyNDhiMTFhZTJhNDZmNTUyZTVjYTQzYzY5ZDY1
ZTcyYTgwHhcNMjQwMzE0MTUzNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMDdhYjg2OTRiNTM1YmQ3Nzg5ZTUwMjU4MzU2MTE0ZWQ2ZWJiMGM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk9TPNdS4AtpJnLnUiPt9OZw5HdC
tMgoUzx27e9oVGOLwlHc3XKTs/Cv2zJFhGucdz8HHTfAON4eQaupAjq6v7fsV71M
/xJgc4rN3wQ0STP1JIaDUtXAFYKxRAQ36VXB1+IlK4N3XxkSLSaVtExjVVRmoQxr
r/AvZ0nCURq5CHroJG8sMSf7kYY7AF/d3Bc4jkFLSuWIXaLqW7l/zL0ljnni7lE5
SGIjNICA8SYiuLwZ1Rgv+ba1g8DRcNl0IqP5ogWsyVDRzln7VvDwNi2PTcoob8Yo
DST7Lf2kHqwtSttErt9JHkav9KMVtk5hDm17UoNuRMrCiULtJ7Kh7lD3rQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCB6uGlLU1vXeJ5QJYNWEU7W67DIMB8GA1UdIwQY
MBaAFEUMWBJIsRripG9VLlykPGnWXnKoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMt
NzQ5OWE4MjMxZjU2LzEvSUhxNGFVdFRXOWQ0bmxBbGcxWVJUdGJyc01nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS8xY2YwYjItYzUxZC00NWY1LTg0ZGMtNzQ5OWE4MjMxZjU2
LzEvUlF4WUVraXhHdUtrYjFVdVhLUThhZFplY3FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwWULAwQD
wWUYMA0GCSqGSIb3DQEBCwUAA4IBAQBXxIwSpHZ4f8KbUsKZTY9vZ+Zqd6YUfxaM
d6b0sdx4pN5UwMe6y8g22lKAV+lQDxZpwL+zCkbg3obFHIQkf9uiPnA5IrUSd6tQ
hx5fys3YNNS0xg1qKR7nwvVGP3jpWws4BJYsQWnJg5weJd1qFQ+MqlrX909t/eyB
mAPYHUa2smpGdET9NrFBP6NZD7QilTvDJ+YMEyoOfn+Apx1scsmPfIh9Cc/JSccB
Eare3X9JqDD+LzeKz2tzHTRVd40kNeOgpugjiz/OvoouGMnQj8qB7mpbLOF+AxkH
/guhD1fRqQ18a5U68SeF+D+QJlAmbIH55NmtSO78i0eLzZdbLPCl
-----END CERTIFICATE-----
Generated at Wed May 15 17:13:20 2024 by rpki-client on console-ams.rpki-client.org