Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/BtOt_o02JspPAqwMgb8tUd7kJ8k.roa
File: BtOt_o02JspPAqwMgb8tUd7kJ8k.roa (raw, json)
Hash identifier: 9BLACitiG5tvoY3giftIgBq9++Mp2xXQa8yuW4kGkJw=
Subject key identifier: 06:D3:AD:FE:8D:36:26:CA:4F:02:AC:0C:81:BF:2D:51:DE:E4:27:C9
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 018CC5DC793FAA17A4B1C72591AB4A7FA2C8
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/BtOt_o02JspPAqwMgb8tUd7kJ8k.roa
Signing time: Mon 01 Jan 2024 16:30:09 +0000
ROA not before: Mon 01 Jan 2024 16:30:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204170
IP address blocks: 161.8.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Sep 2024 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:79:3f:aa:17:a4:b1:c7:25:91:ab:4a:7f:a2:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 1 16:30:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=06d3adfe8d3626ca4f02ac0c81bf2d51dee427c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7d:ad:53:38:68:80:d5:b6:ec:e6:a4:ce:be:
76:df:0c:29:17:e0:10:d6:61:85:9b:1f:9d:cc:9a:
a6:ac:f7:f7:90:fb:48:2b:96:db:45:16:fe:f1:62:
e9:6a:84:2f:5e:23:f6:99:ea:04:9a:38:4a:61:17:
ee:9b:f8:60:4a:d7:2f:cd:7c:b0:d7:06:e7:85:de:
00:fa:2c:0f:b2:78:e7:0c:36:a6:02:d7:53:c9:ab:
92:24:b9:64:75:ab:71:77:ee:15:4c:ba:00:9b:3c:
79:fb:f7:09:6f:9e:d9:df:c5:76:56:7b:31:68:6f:
ca:d5:b4:1c:19:3e:ef:ec:1a:27:5b:ee:8d:80:1e:
1d:75:61:ae:d6:0f:7d:c6:5a:67:ea:ce:7e:83:c3:
91:b6:4a:b7:2d:79:eb:76:99:17:90:d8:77:8e:dd:
b6:b7:87:36:94:24:6b:6f:17:b3:47:1c:99:7b:aa:
3f:41:c5:26:f0:47:f1:af:30:a9:5e:7d:9f:30:03:
eb:3a:6e:28:f8:98:92:40:13:2b:bf:06:8d:2c:71:
0d:e4:b5:90:aa:5a:95:e6:d9:ee:04:ad:7f:ab:cb:
93:fb:f1:76:bc:f5:ab:ac:93:0e:3d:54:09:01:81:
a3:3e:2d:e0:b7:80:d3:4d:6d:f8:ce:fb:be:26:bf:
04:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D3:AD:FE:8D:36:26:CA:4F:02:AC:0C:81:BF:2D:51:DE:E4:27:C9
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/BtOt_o02JspPAqwMgb8tUd7kJ8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.8.64.0/18
Signature Algorithm: sha256WithRSAEncryption
0e:35:47:e8:1b:f6:58:bb:66:54:0c:2c:fa:22:c0:1e:80:43:
a9:df:e6:d5:cb:9b:e3:07:f5:f0:7f:81:94:65:be:ee:0a:1e:
5b:e6:12:d9:22:c6:af:2d:ed:6b:72:de:9c:fd:00:f9:ce:02:
6b:65:4f:72:01:08:d2:c7:ad:0d:28:dc:ca:95:77:f7:7d:02:
cf:c6:33:06:52:6a:cd:d7:44:9c:cd:6b:08:96:ce:de:03:17:
95:3f:bd:cf:35:7d:60:a5:03:a7:31:24:ba:31:08:20:f7:7d:
48:a8:33:5b:aa:5b:3f:1d:50:4d:fa:4b:7f:25:a2:d4:39:b5:
37:01:85:87:ed:84:93:d4:75:83:07:fa:be:fd:4d:cc:14:5a:
5a:9e:a6:cb:55:d0:f0:9b:d4:e6:c1:53:91:6b:c9:b3:9e:95:
f0:ea:76:d7:b2:6f:90:81:18:88:e9:2b:c6:3e:00:91:b7:3c:
96:c9:b7:75:62:bb:6b:fb:da:4c:82:33:09:17:c5:57:a3:7c:
87:8e:7f:af:46:ce:32:8f:d1:21:b2:ff:aa:41:5b:17:e2:e4:
ed:11:0e:19:5f:77:fd:b4:63:d0:19:eb:2c:f5:7d:65:d3:25:
6a:36:73:bf:6e:96:6c:05:ae:56:5f:76:3d:b3:5f:ff:1e:a3:
b9:65:cb:bc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzF3Hk/qhekscclkatKf6LIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZDk1NGQzYzc3YzljNGUzN2VlYmY3NTNkODZmM2RjZjA5
MWQ0YTkwHhcNMjQwMTAxMTYzMDA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmQzYWRmZThkMzYyNmNhNGYwMmFjMGM4MWJmMmQ1MWRlZTQyN2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH2tUzhogNW27Oakzr523wwpF+AQ
1mGFmx+dzJqmrPf3kPtIK5bbRRb+8WLpaoQvXiP2meoEmjhKYRfum/hgStcvzXyw
1wbnhd4A+iwPsnjnDDamAtdTyauSJLlkdatxd+4VTLoAmzx5+/cJb57Z38V2Vnsx
aG/K1bQcGT7v7BonW+6NgB4ddWGu1g99xlpn6s5+g8ORtkq3LXnrdpkXkNh3jt22
t4c2lCRrbxezRxyZe6o/QcUm8EfxrzCpXn2fMAPrOm4o+JiSQBMrvwaNLHEN5LWQ
qlqV5tnuBK1/q8uT+/F2vPWrrJMOPVQJAYGjPi3gt4DTTW34zvu+Jr8ERQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAbTrf6NNibKTwKsDIG/LVHe5CfJMB8GA1UdIwQY
MBaAFE3ZVNPHfJxON+6/dT2G89zwkdSpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDIt
ZWI3YWFhNjgyOGJlLzEvQnRPdF9vMDJKc3BQQXF3TWdiOHRVZDdrSjhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YTJhOTktMTQ2Yy00NzgxLWEzMDItZWI3YWFhNjgyOGJl
LzEvVGRsVTA4ZDhuRTQzN3I5MVBZYnozUENSMUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGoQhAMA0G
CSqGSIb3DQEBCwUAA4IBAQAONUfoG/ZYu2ZUDCz6IsAegEOp3+bVy5vjB/Xwf4GU
Zb7uCh5b5hLZIsavLe1rct6c/QD5zgJrZU9yAQjSx60NKNzKlXf3fQLPxjMGUmrN
10SczWsIls7eAxeVP73PNX1gpQOnMSS6MQgg931IqDNbqls/HVBN+kt/JaLUObU3
AYWH7YST1HWDB/q+/U3MFFpanqbLVdDwm9TmwVORa8mznpXw6nbXsm+QgRiI6SvG
PgCRtzyWybd1Yrtr+9pMgjMJF8VXo3yHjn+vRs4yj9Ehsv+qQVsX4uTtEQ4ZX3f9
tGPQGess9X1l0yVqNnO/bpZsBa5WX3Y9s1//HqO5Zcu8
-----END CERTIFICATE-----
Generated at Fri Sep 27 22:04:23 2024 by rpki-client on console-fra.rpki-client.org