Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/HpVQcF_vgVgaqJWK7dUfYYtGu1M.roa
File: HpVQcF_vgVgaqJWK7dUfYYtGu1M.roa (raw, json)
Hash identifier: 2StUTMFEmSaAC8q1mj53vZraeurw0YAFQErQJur/yOk=
Subject key identifier: 1E:95:50:70:5F:EF:81:58:1A:A8:95:8A:ED:D5:1F:61:8B:46:BB:53
Certificate issuer: /CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Certificate serial: 018CC2DAE668352721B06849F01AF9936CA7
Authority key identifier: 44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/HpVQcF_vgVgaqJWK7dUfYYtGu1M.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24961
IP address blocks: 185.249.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Jun 2024 13:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e6:68:35:27:21:b0:68:49:f0:1a:f9:93:6c:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c3b44cbbc4f3da5a4b4285c96ea3cb50d4d073
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e9550705fef81581aa8958aedd51f618b46bb53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:76:fb:62:1f:23:c9:f1:a7:76:d8:86:8d:4a:
e8:e5:cb:03:9d:dd:10:73:b3:99:a6:93:4f:e4:17:
5b:90:c7:2e:2d:f6:df:3e:87:c2:f7:55:19:5c:3f:
30:bd:61:6c:54:72:85:de:1a:d1:c8:81:57:6b:ca:
44:ee:38:dc:4b:c4:46:20:79:a6:2c:f2:f1:48:6d:
7d:a5:3d:5b:4b:4d:62:37:18:f7:89:95:7e:2c:af:
8c:5e:49:ce:be:c3:60:99:cc:11:17:6d:5b:04:de:
e6:9b:27:a3:c6:b8:93:23:0d:25:33:9a:a1:de:11:
94:58:05:83:04:5d:2f:72:df:c4:1d:c6:65:da:96:
7e:ce:cb:b6:2e:05:73:fb:c2:66:ce:2f:1b:39:d7:
60:33:57:2d:9f:04:08:d2:6a:04:17:07:da:44:3b:
d4:89:8e:41:4a:56:bd:6e:61:ff:77:39:e5:09:81:
d6:d1:0e:8a:2b:a5:f2:90:86:2a:72:23:9f:7f:fe:
c7:4a:a7:00:a9:a6:af:4e:80:e2:80:46:9e:c9:f9:
90:28:31:fa:f8:6e:82:07:03:b4:18:0d:bb:4c:48:
61:d7:59:de:e3:fd:9b:04:b4:c2:ec:85:dd:0a:6b:
aa:c6:d1:64:95:2e:c7:2e:3d:3f:53:91:34:39:00:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:95:50:70:5F:EF:81:58:1A:A8:95:8A:ED:D5:1F:61:8B:46:BB:53
X509v3 Authority Key Identifier:
keyid:44:C3:B4:4C:BB:C4:F3:DA:5A:4B:42:85:C9:6E:A3:CB:50:D4:D0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMO0TLvE89paS0KFyW6jy1DU0HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/HpVQcF_vgVgaqJWK7dUfYYtGu1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/b284a3-c2f1-4205-b1d5-47977669958d/1/RMO0TLvE89paS0KFyW6jy1DU0HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.64.0/22
Signature Algorithm: sha256WithRSAEncryption
6e:29:d9:61:96:a0:12:28:9a:84:fc:24:66:76:57:de:1a:ee:
c0:b1:a6:78:20:dc:33:93:b0:c9:1b:d4:a2:7b:d8:c6:9d:49:
a4:46:9b:ff:2d:02:59:d0:fe:b0:a4:c1:d2:88:0f:e4:1d:5e:
9d:72:49:d3:9e:af:d7:a9:66:bd:c3:6a:fa:fc:86:f2:51:3e:
e6:9d:09:0e:26:22:c2:80:45:ab:a6:be:12:94:66:38:26:a0:
14:08:25:c5:7c:e6:d1:ce:43:1d:5d:cd:76:07:aa:91:f0:77:
88:8e:af:c4:8f:0e:85:19:28:47:a1:fc:f6:70:bd:4c:d0:65:
5f:fb:f4:af:da:cd:a8:42:e9:8c:9a:b3:02:f7:2e:20:0d:99:
89:12:cd:03:81:ca:b5:09:00:ff:2f:69:f7:e7:63:1a:8a:15:
cd:e0:83:a7:92:61:4c:41:48:4b:4e:4f:5e:16:0d:4c:5c:8a:
b9:72:8b:40:0d:ef:a5:df:51:26:f3:3d:49:c8:30:71:12:fc:
23:ae:80:8a:bc:42:e8:da:db:ab:ca:18:d2:e9:fe:73:13:8a:
16:33:4c:74:c5:37:79:84:81:01:15:32:ec:f7:c4:3d:a9:af:
32:33:b0:bc:25:d7:77:2f:32:4c:33:b4:8e:2f:45:bd:f8:a7:
32:53:47:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2uZoNSchsGhJ8Br5k2ynMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YzNiNDRjYmJjNGYzZGE1YTRiNDI4NWM5NmVhM2NiNTBk
NGQwNzMwHhcNMjQwMTAxMDIyOTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTk1NTA3MDVmZWY4MTU4MWFhODk1OGFlZGQ1MWY2MThiNDZiYjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3b7Yh8jyfGndtiGjUro5csDnd0Q
c7OZppNP5BdbkMcuLfbfPofC91UZXD8wvWFsVHKF3hrRyIFXa8pE7jjcS8RGIHmm
LPLxSG19pT1bS01iNxj3iZV+LK+MXknOvsNgmcwRF21bBN7mmyejxriTIw0lM5qh
3hGUWAWDBF0vct/EHcZl2pZ+zsu2LgVz+8Jmzi8bOddgM1ctnwQI0moEFwfaRDvU
iY5BSla9bmH/dznlCYHW0Q6KK6XykIYqciOff/7HSqcAqaavToDigEaeyfmQKDH6
+G6CBwO0GA27TEhh11ne4/2bBLTC7IXdCmuqxtFklS7HLj0/U5E0OQDmnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB6VUHBf74FYGqiViu3VH2GLRrtTMB8GA1UdIwQY
MBaAFETDtEy7xPPaWktChcluo8tQ1NBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUk1PMFRMdkU4OXBhUzBLRnlXNmp5MURVMEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC9iMjg0YTMtYzJmMS00MjA1LWIxZDUt
NDc5Nzc2Njk5NThkLzEvSHBWUWNGX3ZnVmdhcUpXSzdkVWZZWXRHdTFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC9iMjg0YTMtYzJmMS00MjA1LWIxZDUtNDc5Nzc2Njk5NThk
LzEvUk1PMFRMdkU4OXBhUzBLRnlXNmp5MURVMEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuflAMA0G
CSqGSIb3DQEBCwUAA4IBAQBuKdlhlqASKJqE/CRmdlfeGu7AsaZ4INwzk7DJG9Si
e9jGnUmkRpv/LQJZ0P6wpMHSiA/kHV6dcknTnq/XqWa9w2r6/IbyUT7mnQkOJiLC
gEWrpr4SlGY4JqAUCCXFfObRzkMdXc12B6qR8HeIjq/Ejw6FGShHofz2cL1M0GVf
+/Sv2s2oQumMmrMC9y4gDZmJEs0Dgcq1CQD/L2n352MaihXN4IOnkmFMQUhLTk9e
Fg1MXIq5cotADe+l31Em8z1JyDBxEvwjroCKvELo2turyhjS6f5zE4oWM0x0xTd5
hIEBFTLs98Q9qa8yM7C8Jdd3LzJMM7SOL0W9+KcyU0c9
-----END CERTIFICATE-----
Generated at Thu Jun 27 22:48:04 2024 by rpki-client on console-fra.rpki-client.org