Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/924GC8nBu7FtIPgg-A86bbuHqh8.roa
File: 924GC8nBu7FtIPgg-A86bbuHqh8.roa (raw, json)
Hash identifier: ViSsQ3uPSxAuUOoLeDz86Loel+IAxE5sLvhlVaBmJ7A=
Subject key identifier: F7:6E:06:0B:C9:C1:BB:B1:6D:20:F8:20:F8:0F:3A:6D:BB:87:AA:1F
Certificate issuer: /CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Certificate serial: 0192512F2C71CDAD5CC6A7B9B85447DB06CD
Authority key identifier: 41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/924GC8nBu7FtIPgg-A86bbuHqh8.roa
Signing time: Thu 03 Oct 2024 07:01:38 +0000
ROA not before: Thu 03 Oct 2024 07:01:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207388
IP address blocks: 192.109.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:2f:2c:71:cd:ad:5c:c6:a7:b9:b8:54:47:db:06:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41f5a10e4fd2655adbbb40ede18b2615ac558ea9
Validity
Not Before: Oct 3 07:01:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f76e060bc9c1bbb16d20f820f80f3a6dbb87aa1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:9e:09:2f:15:e5:3f:9a:68:c6:c6:a7:9e:
cf:2b:67:61:c9:bd:8d:ab:b6:e2:9f:1f:1f:bc:e6:
b2:16:69:73:a5:78:c2:80:45:f8:bb:81:ed:06:25:
0e:e7:95:33:02:b5:22:1a:c5:7c:d9:0e:54:28:93:
99:d3:30:d5:a8:74:ea:c4:cb:42:7d:85:f9:04:8b:
5c:9f:6c:fe:e0:d2:f6:8f:02:09:a2:9f:ed:6c:1b:
fa:86:bb:db:24:f1:37:73:b0:7b:72:64:2a:b1:e3:
d1:d5:c0:e2:a8:08:3e:e4:0d:57:1a:8c:9d:9e:2d:
9a:a8:39:92:22:f4:70:b6:28:64:06:42:c5:fb:42:
36:ce:b5:d4:60:29:18:de:83:d3:d1:a5:c0:16:24:
43:ea:ab:31:c2:69:b3:e8:8b:30:2a:1f:bf:8b:0f:
47:eb:0c:99:da:0f:a6:80:ee:6e:ca:86:55:13:c8:
92:98:1d:27:ac:2c:7c:37:f7:a1:af:0e:2f:d3:9e:
83:af:0f:7a:6e:49:84:f9:9c:ef:b8:9b:78:dc:fe:
29:15:6e:98:76:a8:e8:3a:07:9e:aa:1d:0b:d0:8f:
63:7f:0e:22:26:0a:c6:1f:f4:58:da:28:07:24:62:
30:8f:4d:38:9f:19:d9:e5:26:07:68:a1:a6:48:2d:
bb:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6E:06:0B:C9:C1:BB:B1:6D:20:F8:20:F8:0F:3A:6D:BB:87:AA:1F
X509v3 Authority Key Identifier:
keyid:41:F5:A1:0E:4F:D2:65:5A:DB:BB:40:ED:E1:8B:26:15:AC:55:8E:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/924GC8nBu7FtIPgg-A86bbuHqh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/8d3c82-e403-4da6-b315-8790206f0d74/1/QfWhDk_SZVrbu0Dt4YsmFaxVjqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.200.0/24
Signature Algorithm: sha256WithRSAEncryption
79:19:70:e9:86:ce:3f:7c:7c:f6:d8:02:8e:9f:c7:58:f5:65:
93:db:49:07:4a:1a:15:db:06:65:47:4a:f5:ab:47:93:48:1d:
8e:65:79:49:46:3b:94:7c:06:6e:36:b6:9f:54:d6:ab:90:70:
d1:be:a9:31:3c:36:a9:ec:57:5f:6c:54:e1:fa:4b:7a:36:99:
9f:d8:ab:ee:3e:c4:d2:c6:a5:f6:a5:46:24:65:20:97:da:2a:
54:43:2a:f2:7a:db:73:62:d6:89:40:96:a4:a6:ca:78:a7:8f:
40:f4:66:87:aa:c1:f3:46:c6:b8:3c:dc:47:16:d9:4a:e1:0f:
4d:af:36:46:82:51:01:e5:ec:8d:a5:59:77:72:40:ba:b5:f1:
02:f5:1e:28:0a:68:43:93:1f:dd:ad:c5:dd:4f:d2:26:b5:fd:
47:30:62:bf:de:c1:18:c2:7a:db:ff:d3:42:1b:a4:02:73:61:
c3:ac:cc:d8:f1:76:b7:a8:9b:f7:1a:ab:91:c9:b4:50:de:7f:
5d:03:f3:0f:ee:c6:45:07:86:b3:cd:91:bf:1c:69:ce:ed:c1:
ee:b7:45:ca:bb:d4:d1:42:92:86:3c:65:9a:5a:f7:62:5a:51:
94:49:8b:e4:71:8d:dc:f5:b9:bc:fb:91:f1:24:0e:e1:61:86:
08:f3:93:2d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJRLyxxza1cxqe5uFRH2wbNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZjVhMTBlNGZkMjY1NWFkYmJiNDBlZGUxOGIyNjE1YWM1
NThlYTkwHhcNMjQxMDAzMDcwMTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzZlMDYwYmM5YzFiYmIxNmQyMGY4MjBmODBmM2E2ZGJiODdhYTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkeCeCS8V5T+aaMbGp57PK2dhyb2N
q7binx8fvOayFmlzpXjCgEX4u4HtBiUO55UzArUiGsV82Q5UKJOZ0zDVqHTqxMtC
fYX5BItcn2z+4NL2jwIJop/tbBv6hrvbJPE3c7B7cmQqsePR1cDiqAg+5A1XGoyd
ni2aqDmSIvRwtihkBkLF+0I2zrXUYCkY3oPT0aXAFiRD6qsxwmmz6IswKh+/iw9H
6wyZ2g+mgO5uyoZVE8iSmB0nrCx8N/ehrw4v056Drw96bkmE+ZzvuJt43P4pFW6Y
dqjoOgeeqh0L0I9jfw4iJgrGH/RY2igHJGIwj004nxnZ5SYHaKGmSC27pQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPduBgvJwbuxbSD4IPgPOm27h6ofMB8GA1UdIwQY
MBaAFEH1oQ5P0mVa27tA7eGLJhWsVY6pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUt
ODc5MDIwNmYwZDc0LzEvOTI0R0M4bkJ1N0Z0SVBnZy1BODZiYnVIcWg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84ZDNjODItZTQwMy00ZGE2LWIzMTUtODc5MDIwNmYwZDc0
LzEvUWZXaERrX1NaVnJidTBEdDRZc21GYXhWanFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG3IMA0G
CSqGSIb3DQEBCwUAA4IBAQB5GXDphs4/fHz22AKOn8dY9WWT20kHShoV2wZlR0r1
q0eTSB2OZXlJRjuUfAZuNrafVNarkHDRvqkxPDap7FdfbFTh+kt6Npmf2KvuPsTS
xqX2pUYkZSCX2ipUQyryettzYtaJQJakpsp4p49A9GaHqsHzRsa4PNxHFtlK4Q9N
rzZGglEB5eyNpVl3ckC6tfEC9R4oCmhDkx/drcXdT9Imtf1HMGK/3sEYwnrb/9NC
G6QCc2HDrMzY8Xa3qJv3GquRybRQ3n9dA/MP7sZFB4azzZG/HGnO7cHut0XKu9TR
QpKGPGWaWvdiWlGUSYvkcY3c9bm8+5HxJA7hYYYI85Mt
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:13:01 2024 by rpki-client on console-fra.rpki-client.org