Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/s0O1F1_bWUBWhbNpo_MEBpj6zyc.roa
File: s0O1F1_bWUBWhbNpo_MEBpj6zyc.roa (raw, json)
Hash identifier: CN3MNX+Ce+ejGr2Sy6EyOau3fX9NRGsrCCEU1n0PnNQ=
Subject key identifier: B3:43:B5:17:5F:DB:59:40:56:85:B3:69:A3:F3:04:06:98:FA:CF:27
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 018CC5DCB5343F753361E89DA522D7B588DC
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/s0O1F1_bWUBWhbNpo_MEBpj6zyc.roa
Signing time: Mon 01 Jan 2024 16:30:25 +0000
ROA not before: Mon 01 Jan 2024 16:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205191
IP address blocks: 194.140.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:b5:34:3f:75:33:61:e8:9d:a5:22:d7:b5:88:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 16:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b343b5175fdb59405685b369a3f3040698facf27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e9:86:af:e8:3a:9f:8d:5d:fe:2e:10:2c:49:
7a:0d:80:90:6f:df:92:bc:5d:0d:49:7b:cf:83:fc:
15:3c:40:17:91:58:1a:c7:a4:f8:b8:0e:24:02:4d:
a0:c0:91:10:ca:c8:0d:c0:ea:74:5b:d8:eb:75:d7:
8f:d7:b2:1f:f1:c4:ca:79:26:54:6f:fb:f4:94:6f:
52:b6:8f:d7:b9:9b:ca:97:f9:4d:57:af:22:36:78:
a3:bc:2f:31:43:a5:e5:d6:bf:7a:ea:c7:3d:3c:65:
d3:7a:23:46:2b:6a:af:c7:60:b6:57:0a:44:d7:76:
5c:2e:e0:89:7d:be:80:cd:fb:d8:31:a0:d2:cb:e4:
c7:a3:2c:1c:10:b4:44:3c:90:bc:3b:31:cb:e1:ef:
f7:f0:20:7b:13:bf:3d:4c:0e:41:8a:4b:17:cf:fd:
8e:45:76:ae:bb:01:a9:d2:45:cb:ea:dc:2a:95:fd:
19:95:1e:0d:b5:82:9a:a3:5d:a4:ef:24:0f:4d:25:
33:83:80:44:85:d8:35:4e:69:ca:0c:e0:5a:9d:60:
8c:a0:30:fc:18:8c:8c:f6:99:c8:52:f6:02:5a:8c:
d9:07:76:92:51:a2:fe:91:7d:80:cd:52:e4:b6:73:
7a:d1:35:83:37:b9:2d:6c:a6:c9:bb:ea:ab:f3:bc:
55:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:43:B5:17:5F:DB:59:40:56:85:B3:69:A3:F3:04:06:98:FA:CF:27
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/s0O1F1_bWUBWhbNpo_MEBpj6zyc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
67:cf:1b:40:25:a8:5e:ed:a7:cc:dd:81:fc:1d:d5:c3:00:de:
81:df:0b:c6:63:f9:9e:59:a9:17:3a:a6:72:e1:27:45:59:44:
57:cb:4d:eb:56:19:dd:3f:ce:1e:fe:05:5e:a3:84:cb:bd:ba:
24:6e:c4:60:90:92:4d:70:01:38:2c:61:32:38:82:db:fb:87:
16:c2:04:46:97:dc:96:5f:0e:e6:26:5a:ff:ff:1a:95:bf:34:
3e:04:80:af:8b:20:c5:8e:b4:09:34:fa:2f:66:32:24:29:81:
13:38:66:c0:90:cc:a5:d0:14:23:39:9f:a9:f5:bd:ad:76:ec:
0f:a9:01:2d:8c:6a:0c:7e:17:13:5a:43:1f:e9:c1:93:af:f1:
c1:11:66:af:61:76:25:4b:03:eb:90:38:f5:59:4c:cc:fb:9c:
41:37:1a:50:48:8e:e5:90:72:5d:14:1e:5d:36:79:bf:59:23:
6a:d7:ff:85:2c:f5:8b:6f:06:7b:d8:e4:29:74:01:5e:50:74:
6d:c3:4c:dd:4c:5a:f5:f4:42:d6:f8:a3:6d:f4:d9:ce:56:8f:
f5:ab:a7:94:fa:77:af:9d:86:5b:25:02:3c:b8:b6:3e:96:a4:
9e:e4:d6:7c:8b:cd:c6:58:37:ba:c5:25:9d:ff:94:d3:49:f4:
1c:95:b7:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3LU0P3UzYeidpSLXtYjcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MzRmMTY4NjEwMjg3NmM2MjE2YmNlYTI4YTVlNTAyZWMw
ZDdiNmIwHhcNMjQwMTAxMTYzMDI1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzQzYjUxNzVmZGI1OTQwNTY4NWIzNjlhM2YzMDQwNjk4ZmFjZjI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqemGr+g6n41d/i4QLEl6DYCQb9+S
vF0NSXvPg/wVPEAXkVgax6T4uA4kAk2gwJEQysgNwOp0W9jrddeP17If8cTKeSZU
b/v0lG9Sto/XuZvKl/lNV68iNnijvC8xQ6Xl1r966sc9PGXTeiNGK2qvx2C2VwpE
13ZcLuCJfb6AzfvYMaDSy+THoywcELREPJC8OzHL4e/38CB7E789TA5BiksXz/2O
RXauuwGp0kXL6twqlf0ZlR4NtYKao12k7yQPTSUzg4BEhdg1TmnKDOBanWCMoDD8
GIyM9pnIUvYCWozZB3aSUaL+kX2AzVLktnN60TWDN7ktbKbJu+qr87xVIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLNDtRdf21lAVoWzaaPzBAaY+s8nMB8GA1UdIwQY
MBaAFNQ08WhhAodsYha86iil5QLsDXtrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2Ut
NTcxMmQ5NWFlNjM4LzEvczBPMUYxX2JXVUJXaGJOcG9fTUVCcGo2enljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC83MjZiYjQtNWQ4Ny00MDJkLTkxY2UtNTcxMmQ5NWFlNjM4
LzEvMURUeGFHRUNoMnhpRnJ6cUtLWGxBdXdOZTJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwoy7MA0G
CSqGSIb3DQEBCwUAA4IBAQBnzxtAJahe7afM3YH8HdXDAN6B3wvGY/meWakXOqZy
4SdFWURXy03rVhndP84e/gVeo4TLvbokbsRgkJJNcAE4LGEyOILb+4cWwgRGl9yW
Xw7mJlr//xqVvzQ+BICviyDFjrQJNPovZjIkKYETOGbAkMyl0BQjOZ+p9b2tduwP
qQEtjGoMfhcTWkMf6cGTr/HBEWavYXYlSwPrkDj1WUzM+5xBNxpQSI7lkHJdFB5d
Nnm/WSNq1/+FLPWLbwZ72OQpdAFeUHRtw0zdTFr19ELW+KNt9NnOVo/1q6eU+nev
nYZbJQI8uLY+lqSe5NZ8i83GWDe6xSWd/5TTSfQclbcT
-----END CERTIFICATE-----
Generated at Sun May 19 11:41:47 2024 by rpki-client on console-ams.rpki-client.org