Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/hqDaycVO1KxCqfZgxZlv_Lvkh98.roa
File: hqDaycVO1KxCqfZgxZlv_Lvkh98.roa (raw, json)
Hash identifier: f9NoQhJhXm+/4yTyYczcXpZR0IUb2pGopLnprZDJLe8=
Subject key identifier: 86:A0:DA:C9:C5:4E:D4:AC:42:A9:F6:60:C5:99:6F:FC:BB:E4:87:DF
Certificate issuer: /CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Certificate serial: 018CC5DCFA9D114943EDC561DA1F1E2850F6
Authority key identifier: 64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/hqDaycVO1KxCqfZgxZlv_Lvkh98.roa
Signing time: Mon 01 Jan 2024 16:30:42 +0000
ROA not before: Mon 01 Jan 2024 16:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209281
IP address blocks: 137.59.56.0/23 maxlen: 23
185.216.188.0/23 maxlen: 23
93.115.196.0/22 maxlen: 22
185.107.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:49:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:fa:9d:11:49:43:ed:c5:61:da:1f:1e:28:50:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64ffb309c289acffc1be34a6f0b6675c001713ea
Validity
Not Before: Jan 1 16:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86a0dac9c54ed4ac42a9f660c5996ffcbbe487df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:12:61:33:df:ae:5f:c2:7a:41:6e:1b:d4:
3a:f8:c1:15:a6:1f:27:30:77:4b:ca:54:d3:f3:70:
67:0f:fa:20:e5:cb:ac:73:37:32:58:f2:a3:06:b3:
48:42:55:c0:cb:28:01:e2:79:22:16:2e:32:a9:bb:
2b:cc:d9:49:18:f1:4a:f8:a6:85:d2:48:3a:0c:76:
68:e1:83:b0:83:e3:95:a9:9e:e3:9d:17:2d:2a:6a:
b9:74:a1:28:b5:5f:50:c7:9a:ce:16:45:eb:10:a0:
1c:16:cb:a4:66:06:5b:50:1a:25:9b:48:82:cb:c8:
00:1d:11:41:fe:07:3c:05:09:6f:7e:f2:c8:e0:63:
e8:1a:8b:f9:1f:9c:96:f2:64:ba:69:be:e5:6a:c5:
07:35:d8:f2:da:0e:7b:94:91:41:93:65:4e:13:4e:
3e:4e:08:9e:c5:e0:26:99:c1:08:11:26:bb:7a:ff:
bd:c9:71:f9:ff:d1:4e:ba:91:f7:ba:4a:59:03:ea:
b6:9b:ed:73:6f:b8:66:c3:5c:e0:94:77:64:6d:6b:
41:9f:a5:b8:48:05:d8:be:e9:a9:57:9f:60:3f:92:
b9:1b:ed:a5:c6:9c:2e:bb:b4:78:18:99:4c:84:a2:
2a:f9:bf:86:4a:c4:4e:74:c7:bc:a8:75:ec:34:0f:
72:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A0:DA:C9:C5:4E:D4:AC:42:A9:F6:60:C5:99:6F:FC:BB:E4:87:DF
X509v3 Authority Key Identifier:
keyid:64:FF:B3:09:C2:89:AC:FF:C1:BE:34:A6:F0:B6:67:5C:00:17:13:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/hqDaycVO1KxCqfZgxZlv_Lvkh98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/87d086-f53a-41ba-81fe-ca444704416f/1/ZP-zCcKJrP_BvjSm8LZnXAAXE-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.115.196.0/22
137.59.56.0/23
185.107.0.0/22
185.216.188.0/23
Signature Algorithm: sha256WithRSAEncryption
40:a3:a2:b6:ae:17:71:9e:e2:4e:00:3d:65:fd:5a:dd:61:14:
2d:e0:7c:d3:37:95:ac:04:18:61:65:00:2e:54:b1:11:e0:48:
fd:bb:33:f6:70:1d:9b:05:c3:fc:a5:85:10:3c:63:38:02:c6:
1d:63:c3:c8:aa:0f:1c:aa:84:cf:7c:cf:37:f2:40:f8:43:7c:
30:43:da:bf:d4:9a:4b:8b:6b:30:49:1c:bb:66:e3:94:bd:5e:
da:32:23:50:e3:9e:39:16:5b:12:d3:d2:b8:9d:05:5e:56:45:
12:a4:a1:82:b1:62:2e:9e:e2:98:0c:06:e7:a3:d1:7c:90:57:
b1:4b:8d:f9:18:eb:a3:78:e0:a8:1b:95:43:d3:ba:43:1b:33:
2c:8e:f7:d9:af:2c:12:e1:2b:27:76:2c:7f:fb:f7:58:c0:5d:
f6:c4:2a:b6:d4:ad:fd:c5:7a:1c:2f:e2:dc:7b:08:c3:65:b5:
4b:a7:30:86:5d:cb:62:3c:10:0b:a8:00:c8:ba:9e:bd:93:23:
1d:53:78:e9:ec:21:56:cf:8a:43:28:4a:54:a8:0a:a5:10:8f:
ef:f4:bb:0f:d1:0e:25:de:e5:ab:f9:85:9d:e6:70:8b:cf:45:
63:eb:79:2d:b7:9f:ee:92:3e:2d:f0:b6:fa:b5:21:19:ae:da:
90:f1:75:12
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYzF3PqdEUlD7cVh2h8eKFD2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZmZiMzA5YzI4OWFjZmZjMWJlMzRhNmYwYjY2NzVjMDAx
NzEzZWEwHhcNMjQwMTAxMTYzMDQyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NmEwZGFjOWM1NGVkNGFjNDJhOWY2NjBjNTk5NmZmY2JiZTQ4N2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+sSYTPfrl/CekFuG9Q6+MEVph8n
MHdLylTT83BnD/og5cusczcyWPKjBrNIQlXAyygB4nkiFi4yqbsrzNlJGPFK+KaF
0kg6DHZo4YOwg+OVqZ7jnRctKmq5dKEotV9Qx5rOFkXrEKAcFsukZgZbUBolm0iC
y8gAHRFB/gc8BQlvfvLI4GPoGov5H5yW8mS6ab7lasUHNdjy2g57lJFBk2VOE04+
TgiexeAmmcEIESa7ev+9yXH5/9FOupH3ukpZA+q2m+1zb7hmw1zglHdkbWtBn6W4
SAXYvumpV59gP5K5G+2lxpwuu7R4GJlMhKIq+b+GSsROdMe8qHXsNA9yXwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIag2snFTtSsQqn2YMWZb/y75IffMB8GA1UdIwQY
MBaAFGT/swnCiaz/wb40pvC2Z1wAFxPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUt
Y2E0NDQ3MDQ0MTZmLzEvaHFEYXljVk8xS3hDcWZaZ3habHZfTHZraDk4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS84N2QwODYtZjUzYS00MWJhLTgxZmUtY2E0NDQ3MDQ0MTZm
LzEvWlAtekNjS0pyUF9CdmpTbThMWm5YQUFYRS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCXXPEAwQB
iTs4AwQCuWsAAwQBudi8MA0GCSqGSIb3DQEBCwUAA4IBAQBAo6K2rhdxnuJOAD1l
/VrdYRQt4HzTN5WsBBhhZQAuVLER4Ej9uzP2cB2bBcP8pYUQPGM4AsYdY8PIqg8c
qoTPfM838kD4Q3wwQ9q/1JpLi2swSRy7ZuOUvV7aMiNQ4545FlsS09K4nQVeVkUS
pKGCsWIunuKYDAbno9F8kFexS435GOujeOCoG5VD07pDGzMsjvfZrywS4Ssndix/
+/dYwF32xCq21K39xXocL+LcewjDZbVLpzCGXctiPBALqADIup69kyMdU3jp7CFW
z4pDKEpUqAqlEI/v9LsP0Q4l3uWr+YWd5nCLz0Vj63ktt5/ukj4t8Lb6tSEZrtqQ
8XUS
-----END CERTIFICATE-----
Generated at Sun Jun 23 18:35:59 2024 by rpki-client on console-ams.rpki-client.org