Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/D8sTgJd_M0mEJsjQ6YLUCXZGWIU.roa
File: D8sTgJd_M0mEJsjQ6YLUCXZGWIU.roa (raw, json)
Hash identifier: hHanXsXM/w5NFYCk+Ao2iHS1kLdF2+GjyM3/c/XdrMs=
Subject key identifier: 0F:CB:13:80:97:7F:33:49:84:26:C8:D0:E9:82:D4:09:76:46:58:85
Certificate issuer: /CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Certificate serial: 018CC4254BA533B9AD50846D7FF199271ABE
Authority key identifier: 4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/D8sTgJd_M0mEJsjQ6YLUCXZGWIU.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12743
IP address blocks: 194.9.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4b:a5:33:b9:ad:50:84:6d:7f:f1:99:27:1a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf53007c79cc5e2f2d7356ba9121a78c0c7714
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0fcb1380977f33498426c8d0e982d40976465885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:4c:e8:d1:1b:73:72:d8:92:49:6e:bc:05:8e:
01:de:76:61:f4:50:2a:e5:a5:a1:db:b7:c3:58:69:
a9:96:09:67:e3:19:49:a8:cb:67:bb:50:fb:f7:06:
78:37:b3:03:fd:bc:54:61:e2:de:33:b0:17:24:70:
68:08:45:9f:44:dc:d6:47:73:46:7f:52:ce:bc:54:
86:03:13:12:ab:02:bb:fd:f9:20:14:3c:30:8b:6f:
fa:20:57:46:2e:1d:c7:8d:47:00:81:a3:09:a7:9f:
b8:c2:9e:e8:95:03:70:3e:bd:cb:14:be:2c:3b:e2:
20:4f:03:9d:a4:d2:fc:0b:df:22:34:38:4f:e3:fe:
57:04:00:e3:1f:df:2e:21:9f:12:34:72:dc:3a:50:
bb:7c:52:a1:59:83:e9:5f:2e:54:a4:1c:1d:0e:4a:
b9:7a:24:f9:bb:9b:63:a8:e2:4e:20:d1:7c:49:ac:
02:d9:94:07:4f:1b:b1:cd:61:46:10:1c:d9:fb:65:
be:8f:e6:86:37:30:eb:c5:1f:3b:eb:53:40:85:6e:
4e:63:a2:ee:4a:50:83:0a:50:e2:47:21:ea:38:c4:
5f:06:31:39:d7:ba:85:ce:c5:83:57:10:13:00:74:
41:35:bb:37:c8:f7:83:aa:0e:cf:57:1b:bc:c7:34:
cb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:CB:13:80:97:7F:33:49:84:26:C8:D0:E9:82:D4:09:76:46:58:85
X509v3 Authority Key Identifier:
keyid:4E:CF:53:00:7C:79:CC:5E:2F:2D:73:56:BA:91:21:A7:8C:0C:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/D8sTgJd_M0mEJsjQ6YLUCXZGWIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/648c75-2be8-4bfd-a1b1-cb8b3a094209/1/Ts9TAHx5zF4vLXNWupEhp4wMdxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.223.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:91:2c:43:06:80:1b:cc:94:26:06:74:23:f0:c2:b0:20:d4:
35:26:71:e8:89:7e:1f:49:f4:ec:3f:33:4a:43:00:7b:a7:fd:
c3:49:ce:ce:3b:26:74:c0:04:7f:be:71:5e:b1:7d:95:f4:f4:
57:c1:62:8d:60:43:60:86:d3:3a:7a:17:eb:42:07:fb:4a:ee:
49:e1:0a:e7:72:fc:50:87:c6:3b:a4:10:df:89:4c:a5:93:19:
47:92:1f:d7:76:4a:5f:e9:21:ed:d1:70:74:af:ea:46:ee:bb:
32:de:2d:a8:c5:bb:65:b4:60:bc:dc:2d:8f:0d:37:e5:6d:3e:
b5:bb:ac:73:ab:e3:14:fe:da:4b:91:63:d5:96:e1:93:23:ab:
3a:56:78:80:0c:c4:63:7e:9f:6c:44:c6:ac:c6:d6:e9:d6:83:
26:09:ac:cd:b6:ab:5e:f2:b3:90:4a:f8:1b:1a:ff:30:ca:af:
ee:31:fc:ae:e4:bf:4c:58:ce:18:4d:e5:1b:ee:89:51:21:08:
eb:aa:c5:c1:7f:54:b8:b5:ed:d0:95:69:b9:46:77:89:6d:e4:
a0:44:2b:fe:16:74:03:09:0b:0f:ab:03:8f:bf:c8:b0:27:6d:
49:52:83:2c:fa:4b:a3:1e:59:37:99:45:30:2b:2b:bb:f7:63:
13:6e:9d:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEJUulM7mtUIRtf/GZJxq+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlY2Y1MzAwN2M3OWNjNWUyZjJkNzM1NmJhOTEyMWE3OGMw
Yzc3MTQwHhcNMjQwMTAxMDgzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZmNiMTM4MDk3N2YzMzQ5ODQyNmM4ZDBlOTgyZDQwOTc2NDY1ODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikzo0RtzctiSSW68BY4B3nZh9FAq
5aWh27fDWGmplgln4xlJqMtnu1D79wZ4N7MD/bxUYeLeM7AXJHBoCEWfRNzWR3NG
f1LOvFSGAxMSqwK7/fkgFDwwi2/6IFdGLh3HjUcAgaMJp5+4wp7olQNwPr3LFL4s
O+IgTwOdpNL8C98iNDhP4/5XBADjH98uIZ8SNHLcOlC7fFKhWYPpXy5UpBwdDkq5
eiT5u5tjqOJOINF8SawC2ZQHTxuxzWFGEBzZ+2W+j+aGNzDrxR8761NAhW5OY6Lu
SlCDClDiRyHqOMRfBjE517qFzsWDVxATAHRBNbs3yPeDqg7PVxu8xzTLUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA/LE4CXfzNJhCbI0OmC1Al2RliFMB8GA1UdIwQY
MBaAFE7PUwB8ecxeLy1zVrqRIaeMDHcUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEt
Y2I4YjNhMDk0MjA5LzEvRDhzVGdKZF9NMG1FSnNqUTZZTFVDWFpHV0lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82NDhjNzUtMmJlOC00YmZkLWExYjEtY2I4YjNhMDk0MjA5
LzEvVHM5VEFIeDV6RjR2TFhOV3VwRWhwNHdNZHhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgnfMA0G
CSqGSIb3DQEBCwUAA4IBAQBNkSxDBoAbzJQmBnQj8MKwINQ1JnHoiX4fSfTsPzNK
QwB7p/3DSc7OOyZ0wAR/vnFesX2V9PRXwWKNYENghtM6ehfrQgf7Su5J4QrncvxQ
h8Y7pBDfiUylkxlHkh/Xdkpf6SHt0XB0r+pG7rsy3i2oxbtltGC83C2PDTflbT61
u6xzq+MU/tpLkWPVluGTI6s6VniADMRjfp9sRMasxtbp1oMmCazNtqte8rOQSvgb
Gv8wyq/uMfyu5L9MWM4YTeUb7olRIQjrqsXBf1S4te3QlWm5RneJbeSgRCv+FnQD
CQsPqwOPv8iwJ21JUoMs+kujHlk3mUUwKyu792MTbp3y
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:46:41 2024 by rpki-client on console-fra.rpki-client.org