Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/1uD5a_vyyZcbRRxuzl1LL7kN4CA.roa
File: 1uD5a_vyyZcbRRxuzl1LL7kN4CA.roa (raw, json)
Hash identifier: fJJmAKl/nplEC1qm7jEgPsOQQ+UaV+t6AL3DtWSK08Q=
Subject key identifier: D6:E0:F9:6B:FB:F2:C9:97:1B:45:1C:6E:CE:5D:4B:2F:B9:0D:E0:20
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019251EB014C12A44FEF6568969ED6A5B37B
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/1uD5a_vyyZcbRRxuzl1LL7kN4CA.roa
Signing time: Thu 03 Oct 2024 10:26:48 +0000
ROA not before: Thu 03 Oct 2024 10:26:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 193.43.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:eb:01:4c:12:a4:4f:ef:65:68:96:9e:d6:a5:b3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Oct 3 10:26:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d6e0f96bfbf2c9971b451c6ece5d4b2fb90de020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2f:8e:8b:55:9f:ba:f4:a6:33:45:36:68:4f:
67:21:59:25:48:60:a3:dd:a8:2a:8c:59:58:48:28:
3b:8a:ba:ff:e7:1b:71:67:7f:28:22:09:f0:d4:10:
7a:4f:ad:cf:e8:14:b8:1f:69:1e:a8:87:bb:ec:fb:
6b:ef:40:df:cc:2b:7e:3c:84:68:cb:67:82:33:7e:
ce:64:95:a8:39:4f:39:d7:b8:72:35:b6:a7:7e:5f:
cf:03:3e:00:7b:b3:a0:22:bb:22:41:a0:29:4e:1c:
fc:e1:c3:74:d4:87:e1:c1:73:ce:9a:18:3a:c2:12:
71:87:7b:0f:ef:b7:57:18:0f:a6:1b:4b:50:65:ef:
f4:7a:26:64:44:34:8d:aa:18:08:26:d9:99:f9:e8:
eb:bb:cc:a0:8e:9f:8a:b6:e8:64:77:4a:a5:ec:ea:
7a:bf:09:6a:57:89:b6:d5:58:ed:4a:c8:0d:2d:3b:
b5:29:e7:1a:87:ff:b0:dc:93:a9:a6:a0:b9:4d:43:
a4:17:ab:0f:a6:f5:cb:d5:db:4c:9d:5b:57:7d:eb:
2d:c4:8b:69:8d:23:cf:3a:e1:1e:9b:1d:ee:67:56:
3c:66:2a:05:c7:c4:d1:bb:84:eb:08:1b:9d:1a:bb:
ba:4b:3c:57:9f:33:6e:bf:7f:13:fc:e7:ed:42:81:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E0:F9:6B:FB:F2:C9:97:1B:45:1C:6E:CE:5D:4B:2F:B9:0D:E0:20
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/1uD5a_vyyZcbRRxuzl1LL7kN4CA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:d9:09:99:09:d4:66:d7:1f:7b:af:e9:7c:29:80:98:bb:6c:
03:e3:c9:01:b8:72:01:15:46:76:d4:a4:11:fe:f5:df:9d:a7:
01:10:64:e4:42:8c:ce:39:cb:9c:f0:56:fe:cc:64:a5:9d:bd:
af:aa:25:46:5d:44:11:40:66:a7:0d:1a:43:65:af:c3:58:e9:
10:97:79:0c:dd:3c:8e:c3:d7:87:ea:b3:94:55:85:90:56:00:
e0:48:25:32:a5:12:12:d0:1f:9b:fe:ef:0b:8b:43:65:67:e4:
70:1c:7e:ad:bc:66:34:74:b7:57:2c:e2:a1:16:3f:c5:de:62:
19:56:d9:fb:70:6e:ec:c2:a0:55:a9:2e:1a:05:ef:c0:d7:a9:
74:f6:40:fb:4c:56:df:8c:a6:58:48:bc:be:a0:85:ea:b9:41:
f3:53:16:ea:7a:e2:00:92:88:21:f2:3e:41:d7:d8:fe:66:6c:
94:43:a7:03:b5:c1:8a:f2:77:ea:cf:a9:5a:5b:d7:8a:a4:03:
8f:75:51:78:68:7a:40:6d:d7:c5:96:30:81:0a:f3:51:09:9d:
f3:2d:84:a0:83:e7:0f:3a:c2:95:95:83:8f:cb:f0:78:33:b2:
a9:f4:94:9d:1d:51:94:22:40:85:3e:b1:ec:17:ad:6a:29:0d:
3a:01:3a:62
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZJR6wFMEqRP72Volp7WpbN7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0ZmM4ODdjOTc3MzkzNTc1ZGU2MjU3ZTc1ZmE5OWNkZTIw
MzdjNmMwHhcNMjQxMDAzMTAyNjQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmUwZjk2YmZiZjJjOTk3MWI0NTFjNmVjZTVkNGIyZmI5MGRlMDIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS+Oi1WfuvSmM0U2aE9nIVklSGCj
3agqjFlYSCg7irr/5xtxZ38oIgnw1BB6T63P6BS4H2keqIe77Ptr70DfzCt+PIRo
y2eCM37OZJWoOU8517hyNbanfl/PAz4Ae7OgIrsiQaApThz84cN01IfhwXPOmhg6
whJxh3sP77dXGA+mG0tQZe/0eiZkRDSNqhgIJtmZ+ejru8ygjp+Ktuhkd0ql7Op6
vwlqV4m21VjtSsgNLTu1Kecah/+w3JOppqC5TUOkF6sPpvXL1dtMnVtXfestxItp
jSPPOuEemx3uZ1Y8ZioFx8TRu4TrCBudGru6SzxXnzNuv38T/OftQoGUAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNbg+Wv78smXG0Ucbs5dSy+5DeAgMB8GA1UdIwQY
MBaAFET8iHyXc5NXXeYlfnX6mc3iA3xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMt
YzM2OWMxZDRjMzM3LzEvMXVENWFfdnl5WmNiUlJ4dXpsMUxMN2tONENBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy9mMDdjNjYtNDczZC00MzVhLWI2OTMtYzM2OWMxZDRjMzM3
LzEvUlB5SWZKZHprMWRkNWlWLWRmcVp6ZUlEZkd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSuOMA0G
CSqGSIb3DQEBCwUAA4IBAQDJ2QmZCdRm1x97r+l8KYCYu2wD48kBuHIBFUZ21KQR
/vXfnacBEGTkQozOOcuc8Fb+zGSlnb2vqiVGXUQRQGanDRpDZa/DWOkQl3kM3TyO
w9eH6rOUVYWQVgDgSCUypRIS0B+b/u8Li0NlZ+RwHH6tvGY0dLdXLOKhFj/F3mIZ
Vtn7cG7swqBVqS4aBe/A16l09kD7TFbfjKZYSLy+oIXquUHzUxbqeuIAkogh8j5B
19j+ZmyUQ6cDtcGK8nfqz6laW9eKpAOPdVF4aHpAbdfFljCBCvNRCZ3zLYSgg+cP
OsKVlYOPy/B4M7Kp9JSdHVGUIkCFPrHsF61qKQ06ATpi
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:53:34 2024 by rpki-client on console-fra.rpki-client.org