Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/ngqRTFATKz4xLTvnIwtA9bay5sU.roa
File: ngqRTFATKz4xLTvnIwtA9bay5sU.roa (raw, json)
Hash identifier: XELDoAGk2HMzbINiiNi3ocAxI62/Eixgc7tCWzWkCh8=
Subject key identifier: 9E:0A:91:4C:50:13:2B:3E:31:2D:3B:E7:23:0B:40:F5:B6:B2:E6:C5
Certificate issuer: /CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Certificate serial: 018CC8DE26D6E14E3AE10F4BBE7E7C66F6F9
Authority key identifier: BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/ngqRTFATKz4xLTvnIwtA9bay5sU.roa
Signing time: Tue 02 Jan 2024 06:30:51 +0000
ROA not before: Tue 02 Jan 2024 06:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15600
IP address blocks: 185.167.8.0/22 maxlen: 22
2a0b:2e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 06:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:26:d6:e1:4e:3a:e1:0f:4b:be:7e:7c:66:f6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bac03ae6c5458ad280765ba5527980a06fec23a8
Validity
Not Before: Jan 2 06:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9e0a914c50132b3e312d3be7230b40f5b6b2e6c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:2b:d1:46:6a:e6:32:a9:91:ba:e8:e4:dd:
f2:07:38:d6:68:ce:6d:0e:61:59:0d:a0:1e:b7:a3:
ea:e2:82:19:2e:2e:1c:a2:f2:7f:6e:2b:03:f9:9b:
fe:06:45:99:d8:6a:f0:c5:04:d3:39:ef:38:64:59:
07:fa:61:3e:49:58:99:ba:47:3c:37:9f:14:f2:5c:
d7:bc:86:64:06:e9:63:b0:ee:32:3b:8c:ef:b1:9e:
1f:22:d4:43:95:a0:9e:89:39:b4:c7:e4:40:f5:53:
65:c2:ab:a6:5b:0b:4a:18:f3:7c:ed:6c:2f:39:82:
82:a3:d1:62:04:9f:1b:f9:28:af:73:f6:ed:4c:a3:
56:bc:c1:66:d7:70:e7:e7:18:59:d5:eb:11:88:ea:
40:c9:ae:c6:61:c0:70:d7:1f:8d:8b:85:7d:3f:4c:
a8:c4:f1:a6:a9:c0:8a:f7:8d:1f:bb:95:ed:0f:2b:
3b:e9:68:f0:48:bb:6b:61:dc:52:9d:50:14:c6:02:
72:ad:ad:8d:ec:ab:ed:95:8a:76:a7:2b:24:27:5f:
49:29:a9:41:61:d5:a7:3e:b9:f6:6a:ff:06:b1:3e:
97:13:76:34:03:30:34:a2:68:29:d0:50:40:69:62:
a7:bb:fe:7a:4d:de:3b:25:21:a7:f1:a9:d9:2a:03:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0A:91:4C:50:13:2B:3E:31:2D:3B:E7:23:0B:40:F5:B6:B2:E6:C5
X509v3 Authority Key Identifier:
keyid:BA:C0:3A:E6:C5:45:8A:D2:80:76:5B:A5:52:79:80:A0:6F:EC:23:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/usA65sVFitKAdlulUnmAoG_sI6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/ngqRTFATKz4xLTvnIwtA9bay5sU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e931e6-a152-4a1a-b08a-1081aeb121b3/1/usA65sVFitKAdlulUnmAoG_sI6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.8.0/22
IPv6:
2a0b:2e00::/29
Signature Algorithm: sha256WithRSAEncryption
34:1a:1f:a4:75:54:35:4e:16:c3:68:85:43:61:0a:0a:f2:08:
87:cd:94:09:89:16:3c:1c:7f:65:e3:64:38:1a:dc:bf:80:d4:
4d:4b:fe:10:66:7c:85:57:89:17:3d:be:2c:45:2f:84:f9:1d:
67:5f:0c:07:b6:87:32:aa:b9:46:35:b0:f2:de:81:61:7b:06:
47:f7:1f:53:52:0e:62:77:30:24:3e:07:9c:f3:fb:17:9d:4c:
44:49:0c:6b:99:3a:9a:a8:02:a1:ba:35:9a:0c:42:17:29:c0:
7d:89:50:b3:d6:4a:f6:26:c4:5f:48:e7:e9:fc:eb:f6:00:46:
f9:32:6a:78:e1:dd:e2:80:e0:6b:ed:9f:00:64:b0:8a:a8:44:
c1:f3:21:8c:31:7b:74:3a:d0:0e:a3:b2:45:39:f8:99:18:33:
55:ac:5c:58:d3:60:0e:5e:4f:ed:79:21:b5:eb:2b:e0:2d:46:
49:25:f9:49:6a:54:f4:93:b6:2d:fa:af:fb:ef:d1:61:5f:e5:
bc:74:40:5f:3c:5b:5d:6a:ea:ed:01:b6:2e:52:33:ec:cd:4a:
67:55:6f:8a:67:6d:2c:8b:a5:84:7f:47:03:80:2d:41:69:cf:
0f:fa:06:56:64:2c:22:91:9c:29:b9:77:2b:1c:4c:b7:58:0f:
10:e3:37:d9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzI3ibW4U464Q9Lvn58Zvb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYzAzYWU2YzU0NThhZDI4MDc2NWJhNTUyNzk4MGEwNmZl
YzIzYTgwHhcNMjQwMTAyMDYzMDUxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZTBhOTE0YzUwMTMyYjNlMzEyZDNiZTcyMzBiNDBmNWI2YjJlNmM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvR0r0UZq5jKpkbro5N3yBzjWaM5t
DmFZDaAet6Pq4oIZLi4covJ/bisD+Zv+BkWZ2GrwxQTTOe84ZFkH+mE+SViZukc8
N58U8lzXvIZkBuljsO4yO4zvsZ4fItRDlaCeiTm0x+RA9VNlwqumWwtKGPN87Wwv
OYKCo9FiBJ8b+Sivc/btTKNWvMFm13Dn5xhZ1esRiOpAya7GYcBw1x+Ni4V9P0yo
xPGmqcCK940fu5XtDys76WjwSLtrYdxSnVAUxgJyra2N7KvtlYp2pyskJ19JKalB
YdWnPrn2av8GsT6XE3Y0AzA0omgp0FBAaWKnu/56Td47JSGn8anZKgNCowIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJ4KkUxQEys+MS075yMLQPW2subFMB8GA1UdIwQY
MBaAFLrAOubFRYrSgHZbpVJ5gKBv7COoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXNBNjVzVkZpdEtBZGx1bFVubUFvR19zSTZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9lOTMxZTYtYTE1Mi00YTFhLWIwOGEt
MTA4MWFlYjEyMWIzLzEvbmdxUlRGQVRLejR4TFR2bkl3dEE5YmF5NXNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9lOTMxZTYtYTE1Mi00YTFhLWIwOGEtMTA4MWFlYjEyMWIz
LzEvdXNBNjVzVkZpdEtBZGx1bFVubUFvR19zSTZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuacIMA0E
AgACMAcDBQMqCy4AMA0GCSqGSIb3DQEBCwUAA4IBAQA0Gh+kdVQ1ThbDaIVDYQoK
8giHzZQJiRY8HH9l42Q4Gty/gNRNS/4QZnyFV4kXPb4sRS+E+R1nXwwHtocyqrlG
NbDy3oFhewZH9x9TUg5idzAkPgec8/sXnUxESQxrmTqaqAKhujWaDEIXKcB9iVCz
1kr2JsRfSOfp/Ov2AEb5Mmp44d3igOBr7Z8AZLCKqETB8yGMMXt0OtAOo7JFOfiZ
GDNVrFxY02AOXk/teSG16yvgLUZJJflJalT0k7Yt+q/779FhX+W8dEBfPFtdaurt
AbYuUjPszUpnVW+KZ20si6WEf0cDgC1Bac8P+gZWZCwikZwpuXcrHEy3WA8Q4zfZ
-----END CERTIFICATE-----
Generated at Mon Jun 24 11:59:59 2024 by rpki-client on console-fra.rpki-client.org