Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/HW1wylgRmppQ5yjKeXqG20ZCH4A.roa
File: HW1wylgRmppQ5yjKeXqG20ZCH4A.roa (raw, json)
Hash identifier: BRrP4l+8rSyh8uLI/1F3ggz5BykkDJgMuVGqmp75MME=
Subject key identifier: 1D:6D:70:CA:58:11:9A:9A:50:E7:28:CA:79:7A:86:DB:46:42:1F:80
Certificate issuer: /CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Certificate serial: 018CC5DCBE29AF49CC865B67B902B18F831C
Authority key identifier: E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/HW1wylgRmppQ5yjKeXqG20ZCH4A.roa
Signing time: Mon 01 Jan 2024 16:30:27 +0000
ROA not before: Mon 01 Jan 2024 16:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206288
IP address blocks: 185.35.84.0/22 maxlen: 22
2a00:f280::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:be:29:af:49:cc:86:5b:67:b9:02:b1:8f:83:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e75bce163cb502a657f272f79fd3e487fbbd4b88
Validity
Not Before: Jan 1 16:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d6d70ca58119a9a50e728ca797a86db46421f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:50:26:93:5e:08:30:d2:16:1a:24:00:49:c0:
45:e3:fb:2a:e9:1e:1b:dd:8c:70:f5:8e:3b:7d:d3:
df:05:45:4a:00:89:bc:c4:e6:95:6d:dc:1c:0b:2e:
8c:ae:fc:54:d0:6b:11:38:6e:24:78:56:68:86:96:
c0:71:b4:89:51:11:93:af:da:cf:76:e6:67:b9:1c:
f2:ac:cd:ec:10:35:b7:6a:bf:24:df:d5:93:a0:12:
34:1a:8a:f4:de:87:b4:bd:9d:97:ec:21:0d:22:5c:
a1:0c:50:3b:54:16:ec:14:bb:15:10:9e:0c:b5:34:
7e:a4:48:37:61:b6:ae:ca:52:8c:20:91:22:b3:88:
47:c9:9b:a8:e4:27:a0:91:c7:e1:49:c7:bf:d5:8e:
18:49:10:8e:d0:2c:10:21:dd:b8:32:a7:ac:9c:0b:
0f:8c:51:34:88:fe:43:8b:ae:72:14:41:b3:9d:a2:
f6:21:47:30:56:ed:e5:9d:03:91:44:0d:a7:7c:92:
81:8c:35:17:d6:a2:38:c6:7c:46:b5:80:f5:27:76:
2e:dd:80:5d:8e:13:fb:5a:c8:1c:77:5d:38:e1:3e:
fd:05:bf:53:53:a9:d7:3f:d7:3a:69:10:58:0e:ea:
ba:27:fc:12:87:c2:15:c9:e2:4e:c0:eb:01:20:dc:
3c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:6D:70:CA:58:11:9A:9A:50:E7:28:CA:79:7A:86:DB:46:42:1F:80
X509v3 Authority Key Identifier:
keyid:E7:5B:CE:16:3C:B5:02:A6:57:F2:72:F7:9F:D3:E4:87:FB:BD:4B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51vOFjy1AqZX8nL3n9Pkh_u9S4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/HW1wylgRmppQ5yjKeXqG20ZCH4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/c5708b-faf9-42a4-bf48-4b8578715154/1/51vOFjy1AqZX8nL3n9Pkh_u9S4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.35.84.0/22
IPv6:
2a00:f280::/32
Signature Algorithm: sha256WithRSAEncryption
76:b1:2d:94:e4:eb:79:6e:ad:d9:1f:1f:db:0a:93:94:1c:fe:
4c:59:fe:a3:ab:bd:87:80:95:2e:fd:70:71:a3:a7:be:be:26:
53:6e:d4:42:05:28:ce:d6:c8:26:b1:69:69:00:6b:fa:13:9b:
d9:6b:a7:55:5b:9b:1f:6d:0e:01:54:db:77:33:81:17:91:79:
bd:aa:a5:d9:7f:86:3c:7b:b9:ca:b4:05:e2:9e:e1:f3:7e:86:
a8:bf:f2:59:27:4d:7b:58:0b:ee:25:ce:45:eb:d5:6b:b6:e8:
63:8e:31:5c:ca:f4:f0:2a:95:f3:80:35:f3:65:3e:e8:07:d4:
77:32:7c:22:47:32:92:50:ff:9a:f0:d0:21:74:7c:32:0d:4d:
d7:54:93:6f:d2:54:ba:c9:40:19:82:bd:42:40:f0:fa:fd:fd:
5f:bc:22:2e:c3:f7:ce:45:15:b6:3f:d3:32:a9:73:cf:ef:d1:
72:ba:a7:1e:ae:a1:2d:7d:9c:55:74:2c:c3:91:d2:fc:82:0d:
1e:92:ea:23:af:1c:bd:aa:2f:86:9b:da:94:50:b3:f8:45:58:
5d:9a:d2:9b:ba:c9:0f:d6:c5:e8:65:44:f8:f2:6c:2d:3d:92:
d1:9b:af:34:3c:5a:45:fc:ac:b4:4f:7a:a5:ba:2c:ed:79:3d:
ba:72:9a:57
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzF3L4pr0nMhltnuQKxj4McMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NWJjZTE2M2NiNTAyYTY1N2YyNzJmNzlmZDNlNDg3ZmJi
ZDRiODgwHhcNMjQwMTAxMTYzMDI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDZkNzBjYTU4MTE5YTlhNTBlNzI4Y2E3OTdhODZkYjQ2NDIxZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylAmk14IMNIWGiQAScBF4/sq6R4b
3Yxw9Y47fdPfBUVKAIm8xOaVbdwcCy6MrvxU0GsROG4keFZohpbAcbSJURGTr9rP
duZnuRzyrM3sEDW3ar8k39WToBI0Gor03oe0vZ2X7CENIlyhDFA7VBbsFLsVEJ4M
tTR+pEg3YbauylKMIJEis4hHyZuo5CegkcfhSce/1Y4YSRCO0CwQId24MqesnAsP
jFE0iP5Di65yFEGznaL2IUcwVu3lnQORRA2nfJKBjDUX1qI4xnxGtYD1J3Yu3YBd
jhP7Wsgcd1044T79Bb9TU6nXP9c6aRBYDuq6J/wSh8IVyeJOwOsBINw8bwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFB1tcMpYEZqaUOcoynl6httGQh+AMB8GA1UdIwQY
MBaAFOdbzhY8tQKmV/Jy95/T5If7vUuIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9jNTcwOGItZmFmOS00MmE0LWJmNDgt
NGI4NTc4NzE1MTU0LzEvSFcxd3lsZ1JtcHBRNXlqS2VYcUcyMFpDSDRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9jNTcwOGItZmFmOS00MmE0LWJmNDgtNGI4NTc4NzE1MTU0
LzEvNTF2T0ZqeTFBcVpYOG5MM245UGtoX3U5UzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuSNUMA0E
AgACMAcDBQAqAPKAMA0GCSqGSIb3DQEBCwUAA4IBAQB2sS2U5Ot5bq3ZHx/bCpOU
HP5MWf6jq72HgJUu/XBxo6e+viZTbtRCBSjO1sgmsWlpAGv6E5vZa6dVW5sfbQ4B
VNt3M4EXkXm9qqXZf4Y8e7nKtAXinuHzfoaov/JZJ017WAvuJc5F69VrtuhjjjFc
yvTwKpXzgDXzZT7oB9R3MnwiRzKSUP+a8NAhdHwyDU3XVJNv0lS6yUAZgr1CQPD6
/f1fvCIuw/fORRW2P9MyqXPP79FyuqcerqEtfZxVdCzDkdL8gg0ekuojrxy9qi+G
m9qUULP4RVhdmtKbuskP1sXoZUT48mwtPZLRm680PFpF/Ky0T3qluizteT26cppX
-----END CERTIFICATE-----
Generated at Sun Jun 30 16:46:22 2024 by rpki-client on console-fra.rpki-client.org