Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/L0qIRBk2oteU6FOI-JDpvG91bbg.roa
File: L0qIRBk2oteU6FOI-JDpvG91bbg.roa (raw, json)
Hash identifier: 7yGIthdn1IJPrvmpoHh8tou/cpi3ipotknToY15Z/Qg=
Subject key identifier: 2F:4A:88:44:19:36:A2:D7:94:E8:53:88:F8:90:E9:BC:6F:75:6D:B8
Certificate issuer: /CN=dce6e13e413baf381b625131e924e947843436f5
Certificate serial: 018CC6B93FEFCAB66950226777DB3FEBCFA9
Authority key identifier: DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/L0qIRBk2oteU6FOI-JDpvG91bbg.roa
Signing time: Mon 01 Jan 2024 20:31:18 +0000
ROA not before: Mon 01 Jan 2024 20:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 194.1.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 04:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:3f:ef:ca:b6:69:50:22:67:77:db:3f:eb:cf:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dce6e13e413baf381b625131e924e947843436f5
Validity
Not Before: Jan 1 20:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f4a88441936a2d794e85388f890e9bc6f756db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ad:69:5f:61:68:91:4b:34:8d:06:a5:73:09:
8d:5a:5e:cd:a2:30:9b:b4:79:c2:80:0c:a9:3a:e1:
f3:81:71:f6:d9:20:7a:57:89:4f:88:12:79:58:48:
e8:cf:cc:8e:ef:07:4a:71:fc:c2:de:89:e3:3a:d9:
46:36:47:6a:5d:75:3f:53:e6:3c:a6:e2:9d:e9:65:
f5:35:7f:7b:8c:4d:13:c4:c6:33:c1:0b:79:f3:cb:
00:d8:22:04:73:18:fc:67:dc:9d:b6:8e:f2:60:bb:
b2:20:7c:79:aa:f8:c8:0c:89:13:ed:d5:9e:0c:95:
c0:ca:fc:17:a5:07:e2:36:30:a2:80:5e:4d:6b:24:
52:a0:44:fa:8a:bb:29:7e:14:d8:51:c3:eb:e8:6a:
9f:ab:d3:a9:81:e8:a3:be:3b:2f:a8:cc:e5:c9:3e:
b2:d4:46:4a:e0:65:ea:de:b3:23:e5:6e:01:1f:a1:
58:70:c2:db:14:6b:e8:af:74:14:37:29:72:87:c3:
bc:72:88:ad:02:82:47:b5:29:fb:6c:1b:bc:58:28:
46:84:c5:84:b7:95:29:e3:b3:41:91:b5:ef:ec:47:
9b:bb:18:69:f4:c9:d5:19:cd:6c:0a:c0:a8:7a:d9:
da:6d:e9:eb:7d:13:0a:2b:01:8c:be:31:65:7e:60:
09:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:4A:88:44:19:36:A2:D7:94:E8:53:88:F8:90:E9:BC:6F:75:6D:B8
X509v3 Authority Key Identifier:
keyid:DC:E6:E1:3E:41:3B:AF:38:1B:62:51:31:E9:24:E9:47:84:34:36:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ObhPkE7rzgbYlEx6STpR4Q0NvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/L0qIRBk2oteU6FOI-JDpvG91bbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9a4ef5-42fa-435f-a8fe-b1f4fc7522a0/1/3ObhPkE7rzgbYlEx6STpR4Q0NvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.1.245.0/24
Signature Algorithm: sha256WithRSAEncryption
94:62:f5:04:83:64:38:e6:5f:25:1e:d2:81:2e:c2:c0:2e:3a:
79:e8:4a:a5:e2:f9:b6:16:6f:d1:e8:ae:42:c7:8d:b7:1e:38:
48:87:1d:a6:64:a7:fe:8e:ff:44:c7:f7:e3:2b:92:0a:ed:0b:
d8:6a:7c:26:65:af:fe:08:30:91:d8:ce:d3:85:b1:ef:ea:41:
5a:1d:30:f2:12:58:f2:a2:de:8f:9e:c4:a4:cf:db:cb:42:b9:
0a:35:dd:04:66:30:b8:cf:c8:03:b1:53:57:00:83:f6:54:2c:
f5:88:03:b3:bc:bd:5c:72:c6:d9:6e:82:96:27:f3:18:10:18:
d3:d5:f3:4e:66:12:1c:a5:11:96:f5:46:87:f8:78:63:15:c8:
12:f7:f6:1e:c0:84:5f:83:45:67:d9:7d:1e:1a:7f:02:2a:48:
59:4c:43:30:f9:af:60:25:8a:bf:7f:f7:1d:b4:a5:a1:83:11:
8c:d9:ea:e0:ff:a3:49:52:b9:8b:67:b9:1e:07:72:ee:87:8b:
da:a6:c4:ac:d6:9a:3a:bc:58:78:67:de:45:e0:6f:1f:2e:5e:
c5:1a:b1:7b:61:91:4b:d5:e8:fc:01:05:f7:04:0e:b5:5c:dd:
ad:24:19:90:b3:9b:14:2b:95:f4:09:35:73:07:e5:0a:ed:5c:
36:2b:6f:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuT/vyrZpUCJnd9s/68+pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRjZTZlMTNlNDEzYmFmMzgxYjYyNTEzMWU5MjRlOTQ3ODQz
NDM2ZjUwHhcNMjQwMTAxMjAzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjRhODg0NDE5MzZhMmQ3OTRlODUzODhmODkwZTliYzZmNzU2ZGI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm61pX2FokUs0jQalcwmNWl7NojCb
tHnCgAypOuHzgXH22SB6V4lPiBJ5WEjoz8yO7wdKcfzC3onjOtlGNkdqXXU/U+Y8
puKd6WX1NX97jE0TxMYzwQt588sA2CIEcxj8Z9ydto7yYLuyIHx5qvjIDIkT7dWe
DJXAyvwXpQfiNjCigF5NayRSoET6irspfhTYUcPr6Gqfq9OpgeijvjsvqMzlyT6y
1EZK4GXq3rMj5W4BH6FYcMLbFGvor3QUNylyh8O8coitAoJHtSn7bBu8WChGhMWE
t5Up47NBkbXv7Eebuxhp9MnVGc1sCsCoetnabenrfRMKKwGMvjFlfmAJuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC9KiEQZNqLXlOhTiPiQ6bxvdW24MB8GA1UdIwQY
MBaAFNzm4T5BO684G2JRMekk6UeENDb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85YTRlZjUtNDJmYS00MzVmLWE4ZmUt
YjFmNGZjNzUyMmEwLzEvTDBxSVJCazJvdGVVNkZPSS1KRHB2RzkxYmJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi85YTRlZjUtNDJmYS00MzVmLWE4ZmUtYjFmNGZjNzUyMmEw
LzEvM09iaFBrRTdyemdiWWxFeDZTVHBSNFEwTnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgH1MA0G
CSqGSIb3DQEBCwUAA4IBAQCUYvUEg2Q45l8lHtKBLsLALjp56Eql4vm2Fm/R6K5C
x423HjhIhx2mZKf+jv9Ex/fjK5IK7QvYanwmZa/+CDCR2M7ThbHv6kFaHTDyEljy
ot6PnsSkz9vLQrkKNd0EZjC4z8gDsVNXAIP2VCz1iAOzvL1ccsbZboKWJ/MYEBjT
1fNOZhIcpRGW9UaH+HhjFcgS9/YewIRfg0Vn2X0eGn8CKkhZTEMw+a9gJYq/f/cd
tKWhgxGM2erg/6NJUrmLZ7keB3Luh4vapsSs1po6vFh4Z95F4G8fLl7FGrF7YZFL
1ej8AQX3BA61XN2tJBmQs5sUK5X0CTVzB+UK7Vw2K29i
-----END CERTIFICATE-----
Generated at Fri May 10 10:19:58 2024 by rpki-client on console-ams.rpki-client.org