Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/dXueQ1hNH0QUmMF36qGTp5J2tvU.roa
File: dXueQ1hNH0QUmMF36qGTp5J2tvU.roa (raw, json)
Hash identifier: UEVbirwqx1cFoKCcEA9oCUdxWSAva8pvJUSQe6Dsx6c=
Subject key identifier: 75:7B:9E:43:58:4D:1F:44:14:98:C1:77:EA:A1:93:A7:92:76:B6:F5
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D6444B16B04DD046E0A32429862A9
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/dXueQ1hNH0QUmMF36qGTp5J2tvU.roa
Signing time: Mon 01 Jan 2024 00:29:58 +0000
ROA not before: Mon 01 Jan 2024 00:29:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201114
IP address blocks: 62.176.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:64:44:b1:6b:04:dd:04:6e:0a:32:42:98:62:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=757b9e43584d1f441498c177eaa193a79276b6f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:da:45:7b:fb:c5:a3:8d:25:ad:60:17:d9:bc:
98:fc:03:a5:f8:ce:95:af:29:d9:af:6e:d5:89:ea:
4e:49:31:d5:be:aa:aa:77:75:aa:b8:06:05:07:00:
bf:7f:03:a4:8e:33:92:48:9d:a7:a7:87:54:da:76:
23:a5:b0:5f:cd:58:7e:b6:b4:7a:40:e1:c5:18:e6:
11:3f:77:a8:c0:c6:22:e1:db:cf:ae:bb:13:c0:49:
b6:a8:f2:eb:d3:14:85:ba:61:3f:4a:84:ee:f1:43:
57:2b:ee:87:86:93:40:b5:2c:31:c9:0d:52:8e:8b:
d5:bf:4e:c3:09:6a:ab:b0:ca:77:94:9c:de:56:28:
e3:26:89:d0:f1:c8:dc:4b:d9:af:e6:d1:05:df:ff:
3c:70:1f:68:81:bb:be:3f:1c:17:06:4b:9e:25:7a:
af:fd:a1:d7:9f:f8:70:ed:33:f5:50:43:47:f4:34:
18:48:1c:30:46:90:88:a3:d4:47:0e:1a:b1:97:fc:
96:58:88:bc:f7:65:bf:f5:c7:9d:0d:6c:e7:4e:2d:
2c:7e:27:d7:ba:e1:53:6d:57:b2:64:13:cb:fa:c6:
ca:4f:31:e6:4a:e8:fe:34:75:f1:0a:02:f4:37:10:
09:04:d0:45:f7:b7:28:79:32:44:2b:fa:9b:8c:98:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7B:9E:43:58:4D:1F:44:14:98:C1:77:EA:A1:93:A7:92:76:B6:F5
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/dXueQ1hNH0QUmMF36qGTp5J2tvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.176.121.0/24
Signature Algorithm: sha256WithRSAEncryption
36:78:20:34:0f:30:00:9a:8f:c1:da:33:34:46:4f:7b:8d:20:
46:f5:22:ce:2b:d9:4d:eb:72:4c:db:21:ce:96:cb:d2:9d:46:
b4:66:a2:a8:9d:f3:45:b5:e8:fa:89:71:4b:4c:2c:1c:be:3c:
86:0e:a0:8a:16:9a:9f:27:2d:4c:a9:92:4f:a9:ce:c3:71:4d:
d1:38:44:b9:71:67:4a:3a:53:db:7b:af:36:e0:95:f7:b9:66:
c0:83:8c:e0:43:56:c5:fb:05:81:95:0a:98:ca:5c:1b:77:f2:
45:aa:da:96:d8:ae:cb:83:39:32:42:2d:1f:c9:20:1e:73:89:
8c:d2:c9:34:fd:0d:b1:97:b9:21:3f:e4:ed:cf:9b:91:5d:6c:
f8:ff:d1:4e:d7:b7:b7:28:ea:fb:55:70:fc:98:33:5d:9b:37:
b9:6f:f6:6e:e9:64:d3:85:d3:5d:2f:9c:96:e9:d8:05:01:19:
06:1a:7d:f3:42:01:a9:04:29:d6:94:8f:f4:ce:8e:ac:c6:57:
0b:cd:21:23:bb:3b:87:58:73:2e:ac:39:59:8e:f2:21:fb:1b:
9e:9b:20:b6:9a:00:8f:ae:1b:5c:a7:c6:6a:5c:bc:2b:a5:2a:
d6:e9:02:37:cb:9c:4e:11:cd:4f:47:97:80:de:d5:22:72:f6:
c8:91:12:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbWREsWsE3QRuCjJCmGKpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjQwMTAxMDAyOTU4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTdiOWU0MzU4NGQxZjQ0MTQ5OGMxNzdlYWExOTNhNzkyNzZiNmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdpFe/vFo40lrWAX2byY/AOl+M6V
rynZr27ViepOSTHVvqqqd3WquAYFBwC/fwOkjjOSSJ2np4dU2nYjpbBfzVh+trR6
QOHFGOYRP3eowMYi4dvPrrsTwEm2qPLr0xSFumE/SoTu8UNXK+6HhpNAtSwxyQ1S
jovVv07DCWqrsMp3lJzeVijjJonQ8cjcS9mv5tEF3/88cB9ogbu+PxwXBkueJXqv
/aHXn/hw7TP1UENH9DQYSBwwRpCIo9RHDhqxl/yWWIi892W/9cedDWznTi0sfifX
uuFTbVeyZBPL+sbKTzHmSuj+NHXxCgL0NxAJBNBF97coeTJEK/qbjJgfywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHV7nkNYTR9EFJjBd+qhk6eSdrb1MB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvZFh1ZVExaE5IMFFVbU1GMzZxR1RwNUoydHZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPrB5MA0G
CSqGSIb3DQEBCwUAA4IBAQA2eCA0DzAAmo/B2jM0Rk97jSBG9SLOK9lN63JM2yHO
lsvSnUa0ZqKonfNFtej6iXFLTCwcvjyGDqCKFpqfJy1MqZJPqc7DcU3ROES5cWdK
OlPbe6824JX3uWbAg4zgQ1bF+wWBlQqYylwbd/JFqtqW2K7LgzkyQi0fySAec4mM
0sk0/Q2xl7khP+Ttz5uRXWz4/9FO17e3KOr7VXD8mDNdmze5b/Zu6WTThdNdL5yW
6dgFARkGGn3zQgGpBCnWlI/0zo6sxlcLzSEjuzuHWHMurDlZjvIh+xuemyC2mgCP
rhtcp8ZqXLwrpSrW6QI3y5xOEc1PR5eA3tUicvbIkRKO
-----END CERTIFICATE-----
Generated at Mon Jun 24 12:31:54 2024 by rpki-client on console-fra.rpki-client.org