Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/HJl1Z9-jqvMogLU3dkNYXqqOT3o.roa
File: HJl1Z9-jqvMogLU3dkNYXqqOT3o.roa (raw, json)
Hash identifier: bE24Ia5K9TJzTNNPOvxfl5o2YddmuPxaBwE/CxiX/O0=
Subject key identifier: 1C:99:75:67:DF:A3:AA:F3:28:80:B5:37:76:43:58:5E:AA:8E:4F:7A
Certificate issuer: /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial: 018CC348C2A8801991EEC967752B20E3059E
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/HJl1Z9-jqvMogLU3dkNYXqqOT3o.roa
Signing time: Mon 01 Jan 2024 04:29:34 +0000
ROA not before: Mon 01 Jan 2024 04:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7473
IP address blocks: 185.84.218.0/24 maxlen: 24
185.84.219.0/24 maxlen: 24
193.103.148.0/24 maxlen: 24
2a05:a884:de10::/48 maxlen: 48
2a05:a884:de20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:c2:a8:80:19:91:ee:c9:67:75:2b:20:e3:05:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Validity
Not Before: Jan 1 04:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c997567dfa3aaf32880b5377643585eaa8e4f7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ad:e9:b1:8d:db:b8:6c:3e:86:d2:9d:e2:79:
ab:ea:6a:7f:66:2e:d8:75:93:fa:31:b2:23:a8:d7:
86:3e:5d:78:16:7e:74:47:3c:32:28:6b:89:cc:a4:
b0:66:dc:4c:75:23:9a:2a:5c:01:f6:50:90:70:2b:
8a:c2:ca:6a:66:a7:a3:ff:5c:14:16:59:5f:bd:64:
98:6e:5f:32:b9:75:19:6b:db:a5:32:1f:b4:58:c8:
e2:95:60:a3:72:6c:c9:1f:b4:0d:f0:e5:d6:dc:70:
fb:62:5a:9f:f1:6c:20:82:65:8b:21:6e:28:63:0b:
9f:44:c1:03:ea:61:ab:4c:a2:73:9b:44:80:4b:3a:
5d:2a:c4:fa:a9:86:52:11:47:ba:bc:c8:25:8c:cf:
a2:fe:8b:6b:14:16:ce:ef:23:4c:e5:a7:8d:3e:9d:
b3:bd:86:58:89:7d:2a:4e:67:26:ad:18:2f:a6:e7:
75:e2:3e:c5:ed:c3:10:42:33:d1:28:f8:88:9b:8a:
39:53:5b:8b:65:14:00:9f:5d:b8:82:72:13:d5:11:
3c:64:12:ef:92:c2:62:10:0d:a7:69:b9:3c:2e:4d:
f4:d8:8e:6a:41:56:7c:fa:07:5e:01:bf:9c:2d:a7:
b2:7d:2d:b1:76:d3:6d:86:c7:7d:33:00:31:63:2c:
6a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:99:75:67:DF:A3:AA:F3:28:80:B5:37:76:43:58:5E:AA:8E:4F:7A
X509v3 Authority Key Identifier:
keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/HJl1Z9-jqvMogLU3dkNYXqqOT3o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.218.0/23
193.103.148.0/24
IPv6:
2a05:a884:de10::/48
2a05:a884:de20::/48
Signature Algorithm: sha256WithRSAEncryption
13:42:9d:5e:1a:d9:20:eb:46:69:35:ff:37:e4:fe:0c:cb:27:
37:8d:bd:ae:68:ab:ab:83:a5:1d:5d:91:3c:fd:de:71:d0:61:
24:33:ae:7b:d5:20:41:00:d6:d8:39:6e:a5:eb:2b:db:3b:6d:
3c:6d:91:0b:5d:ba:cd:69:cc:27:1c:d8:12:18:d2:e6:b0:f9:
7a:b2:82:c3:3c:ac:a4:a2:75:2f:7b:6f:75:ed:c6:05:2f:2f:
41:1e:86:60:8e:93:57:df:ed:a0:fb:01:63:3d:c5:8b:9e:f0:
77:27:0c:df:3d:6a:b2:ae:58:7f:9e:7e:2d:63:50:ca:b6:b2:
a0:ff:06:ce:58:80:b1:69:5e:ec:d4:5d:fb:86:3c:91:0c:be:
2b:82:c6:f1:23:55:75:66:c9:af:99:ac:77:fc:7c:63:9e:05:
e7:8c:2e:48:e0:67:4a:c8:60:4d:10:3a:1c:6f:11:77:d9:c2:
6c:10:de:be:1f:6c:3e:5c:eb:61:9b:5a:3f:33:d6:63:38:b2:
9d:21:14:a4:02:97:de:58:28:37:54:b9:c5:a5:13:ca:77:2c:
8c:32:57:34:e4:f5:8d:1d:26:bd:dd:43:79:ec:b6:95:27:a1:
fc:67:7b:6b:ab:bb:93:ed:15:ee:e5:2d:30:64:b2:3e:d8:b0:
13:17:1c:96
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYzDSMKogBmR7slndSsg4wWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhj
MmE5NmIwHhcNMjQwMTAxMDQyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzk5NzU2N2RmYTNhYWYzMjg4MGI1Mzc3NjQzNTg1ZWFhOGU0ZjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj63psY3buGw+htKd4nmr6mp/Zi7Y
dZP6MbIjqNeGPl14Fn50RzwyKGuJzKSwZtxMdSOaKlwB9lCQcCuKwspqZqej/1wU
FllfvWSYbl8yuXUZa9ulMh+0WMjilWCjcmzJH7QN8OXW3HD7Ylqf8WwggmWLIW4o
YwufRMED6mGrTKJzm0SASzpdKsT6qYZSEUe6vMgljM+i/otrFBbO7yNM5aeNPp2z
vYZYiX0qTmcmrRgvpud14j7F7cMQQjPRKPiIm4o5U1uLZRQAn124gnIT1RE8ZBLv
ksJiEA2nabk8Lk302I5qQVZ8+gdeAb+cLaeyfS2xdtNthsd9MwAxYyxqmQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFByZdWffo6rzKIC1N3ZDWF6qjk96MB8GA1UdIwQY
MBaAFHftqPcmpptQTemUlDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTkt
NjA4NGNmYzZlNGM0LzEvSEpsMVo5LWpxdk1vZ0xVM2RrTllYcXFPVDNvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0
LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBuVTaAwQA
wWeUMBgEAgACMBIDBwAqBaiE3hADBwAqBaiE3iAwDQYJKoZIhvcNAQELBQADggEB
ABNCnV4a2SDrRmk1/zfk/gzLJzeNva5oq6uDpR1dkTz93nHQYSQzrnvVIEEA1tg5
bqXrK9s7bTxtkQtdus1pzCcc2BIY0uaw+XqygsM8rKSidS97b3XtxgUvL0EehmCO
k1ff7aD7AWM9xYue8HcnDN89arKuWH+efi1jUMq2sqD/Bs5YgLFpXuzUXfuGPJEM
viuCxvEjVXVmya+ZrHf8fGOeBeeMLkjgZ0rIYE0QOhxvEXfZwmwQ3r4fbD5c62Gb
Wj8z1mM4sp0hFKQCl95YKDdUucWlE8p3LIwyVzTk9Y0dJr3dQ3nstpUnofxne2ur
u5PtFe7lLTBksj7YsBMXHJY=
-----END CERTIFICATE-----
Generated at Sun Jun 2 05:11:38 2024 by rpki-client on console-fra.rpki-client.org