Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/bHr4YCSWLIosli9YK49bA0-OO9s.roa
File: bHr4YCSWLIosli9YK49bA0-OO9s.roa (raw, json)
Hash identifier: TDDr1OVBsLh3TMRwL1sVL3v3Rpsc2BZHCDRBlWXsNW4=
Subject key identifier: 6C:7A:F8:60:24:96:2C:8A:2C:96:2F:58:2B:8F:5B:03:4F:8E:3B:DB
Certificate issuer: /CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Certificate serial: 018CC6B88AB1E505CCE361CB45EEC196060B
Authority key identifier: 3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/bHr4YCSWLIosli9YK49bA0-OO9s.roa
Signing time: Mon 01 Jan 2024 20:30:32 +0000
ROA not before: Mon 01 Jan 2024 20:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13237
IP address blocks: 185.160.96.0/24 maxlen: 24
185.160.98.0/24 maxlen: 24
185.160.97.0/24 maxlen: 24
185.160.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:8a:b1:e5:05:cc:e3:61:cb:45:ee:c1:96:06:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e2bbf346ebd4aa0b76e10c58321ad33d72d519f
Validity
Not Before: Jan 1 20:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c7af86024962c8a2c962f582b8f5b034f8e3bdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:24:47:e8:a2:aa:0b:88:6d:29:e2:9c:1e:9e:
91:9b:e1:c9:1f:d2:75:54:31:ba:bc:71:2a:b2:11:
9e:ef:d7:ca:ec:36:1e:6d:0c:96:83:89:38:a8:a6:
17:da:0c:dc:3c:85:96:fd:b7:d0:36:ae:1f:3a:4a:
41:97:ec:dc:3e:f3:60:ee:27:b5:41:78:e4:db:cd:
87:c5:e2:65:dd:64:33:5c:32:4e:9a:78:a3:42:1d:
65:d3:63:a7:6f:62:73:cc:17:7a:8b:2b:c6:54:d0:
83:85:7a:67:91:dd:7c:b1:02:f4:58:e9:08:f2:5b:
11:43:e1:63:2d:8c:f8:63:6d:eb:79:bd:e0:d2:01:
91:8e:3e:71:fd:a2:61:d0:47:f4:13:1b:74:71:aa:
e4:e1:aa:9d:f2:23:10:1b:02:29:e0:31:6c:51:bc:
30:c6:ac:1c:bc:b4:d1:e7:bb:3c:82:0d:0c:95:02:
68:ee:7e:4f:9f:b5:ce:71:2a:48:7e:5e:cb:c0:e7:
b7:ec:10:fb:85:26:0f:28:37:3e:07:6b:be:53:0a:
fd:02:e6:ba:14:54:dd:8c:d3:db:24:7c:61:aa:d7:
02:bc:21:e7:a3:3a:67:25:c2:6d:7b:d5:81:8d:d7:
02:cc:ee:06:2b:6e:6b:45:ab:f7:b1:8f:2e:09:f5:
2f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:7A:F8:60:24:96:2C:8A:2C:96:2F:58:2B:8F:5B:03:4F:8E:3B:DB
X509v3 Authority Key Identifier:
keyid:3E:2B:BF:34:6E:BD:4A:A0:B7:6E:10:C5:83:21:AD:33:D7:2D:51:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Piu_NG69SqC3bhDFgyGtM9ctUZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/bHr4YCSWLIosli9YK49bA0-OO9s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/bc51cb-de0c-4881-b0b1-1aa277df3769/1/Piu_NG69SqC3bhDFgyGtM9ctUZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.160.96.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:e1:85:80:5f:f2:65:a3:e0:00:fb:52:89:af:33:ce:cd:83:
12:17:25:77:c8:db:53:a9:44:35:e2:81:37:0a:8f:82:c9:ce:
36:ad:d9:f9:78:07:84:d0:3d:fc:b8:20:6e:4c:a4:93:d4:2b:
b9:a8:2f:38:ed:e8:ce:5e:aa:d3:84:8c:e5:50:d3:47:53:ae:
57:3c:36:96:20:6f:d5:b1:46:a9:d4:d7:1f:64:ea:62:67:c2:
9b:60:fc:e0:b2:a1:b8:d5:ba:26:eb:ba:82:4b:0a:f5:72:ea:
c0:15:47:0d:65:c8:e7:e9:6d:32:ef:89:4a:eb:29:66:54:d5:
47:ce:0b:39:67:fb:de:c8:5c:f5:1d:3f:ed:2e:cb:07:7a:d4:
05:31:3e:33:2e:d9:2b:75:40:29:f6:55:97:b5:e7:db:42:f2:
c8:e5:65:4d:04:0c:30:47:84:da:c5:94:62:2b:bd:f3:7d:7f:
8a:20:f3:57:c2:a7:96:ab:b6:b1:65:6e:ca:e2:52:cc:6c:8b:
e5:b2:f8:17:63:29:ea:19:71:96:db:05:1a:30:b8:cf:fe:d3:
1a:6c:d2:bf:ed:21:3d:0c:3c:78:b0:a5:05:66:01:35:84:b7:
3c:ad:82:63:73:17:61:57:3e:0e:8d:f9:cc:b8:2b:11:72:0b:
6e:47:02:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGuIqx5QXM42HLRe7BlgYLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMmJiZjM0NmViZDRhYTBiNzZlMTBjNTgzMjFhZDMzZDcy
ZDUxOWYwHhcNMjQwMTAxMjAzMDMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzdhZjg2MDI0OTYyYzhhMmM5NjJmNTgyYjhmNWIwMzRmOGUzYmRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSRH6KKqC4htKeKcHp6Rm+HJH9J1
VDG6vHEqshGe79fK7DYebQyWg4k4qKYX2gzcPIWW/bfQNq4fOkpBl+zcPvNg7ie1
QXjk282HxeJl3WQzXDJOmnijQh1l02Onb2JzzBd6iyvGVNCDhXpnkd18sQL0WOkI
8lsRQ+FjLYz4Y23reb3g0gGRjj5x/aJh0Ef0Ext0cark4aqd8iMQGwIp4DFsUbww
xqwcvLTR57s8gg0MlQJo7n5Pn7XOcSpIfl7LwOe37BD7hSYPKDc+B2u+Uwr9Aua6
FFTdjNPbJHxhqtcCvCHnozpnJcJte9WBjdcCzO4GK25rRav3sY8uCfUviwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGx6+GAkliyKLJYvWCuPWwNPjjvbMB8GA1UdIwQY
MBaAFD4rvzRuvUqgt24QxYMhrTPXLVGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy9iYzUxY2ItZGUwYy00ODgxLWIwYjEt
MWFhMjc3ZGYzNzY5LzEvYkhyNFlDU1dMSW9zbGk5WUs0OWJBMC1PTzlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy9iYzUxY2ItZGUwYy00ODgxLWIwYjEtMWFhMjc3ZGYzNzY5
LzEvUGl1X05HNjlTcUMzYmhERmd5R3RNOWN0VVo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuaBgMA0G
CSqGSIb3DQEBCwUAA4IBAQBr4YWAX/Jlo+AA+1KJrzPOzYMSFyV3yNtTqUQ14oE3
Co+Cyc42rdn5eAeE0D38uCBuTKST1Cu5qC847ejOXqrThIzlUNNHU65XPDaWIG/V
sUap1NcfZOpiZ8KbYPzgsqG41bom67qCSwr1curAFUcNZcjn6W0y74lK6ylmVNVH
zgs5Z/veyFz1HT/tLssHetQFMT4zLtkrdUAp9lWXtefbQvLI5WVNBAwwR4TaxZRi
K73zfX+KIPNXwqeWq7axZW7K4lLMbIvlsvgXYynqGXGW2wUaMLjP/tMabNK/7SE9
DDx4sKUFZgE1hLc8rYJjcxdhVz4OjfnMuCsRcgtuRwLe
-----END CERTIFICATE-----
Generated at Sat Sep 28 14:40:41 2024 by rpki-client on console-ams.rpki-client.org