Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/bJQUGI9FH5yXaH3p6llGT8pu4ks.roa
File: bJQUGI9FH5yXaH3p6llGT8pu4ks.roa (raw, json)
Hash identifier: 6MU2KzT873rNdsjucJjKqW1Z/H8fXxv74Q1HY9+i+Q8=
Subject key identifier: 6C:94:14:18:8F:45:1F:9C:97:68:7D:E9:EA:59:46:4F:CA:6E:E2:4B
Certificate issuer: /CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
Certificate serial: 018E17F82178A91338EEC8685701E8ED0DA9
Authority key identifier: E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/bJQUGI9FH5yXaH3p6llGT8pu4ks.roa
Signing time: Thu 07 Mar 2024 08:12:01 +0000
ROA not before: Thu 07 Mar 2024 08:12:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8368
IP address blocks: 85.119.240.0/21 maxlen: 21
2a00:e760::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Oct 2024 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:17:f8:21:78:a9:13:38:ee:c8:68:57:01:e8:ed:0d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9318a5198dcd3fcac2498055385d9af2110a6b4
Validity
Not Before: Mar 7 08:12:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c9414188f451f9c97687de9ea59464fca6ee24b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:90:b2:3c:35:8d:63:2e:27:3a:ad:2e:af:cc:
52:78:61:02:ed:04:8c:0c:83:5f:cb:d8:c5:29:ad:
55:8a:44:31:3f:0c:e6:ca:2d:94:37:de:e3:8e:c8:
ae:c8:d3:86:e4:97:74:84:13:72:94:20:fb:f5:91:
f0:5f:bb:cb:f9:3f:15:c2:1e:2b:82:e6:5e:7a:96:
13:16:14:ea:79:59:fd:c5:95:f8:dc:c4:ef:ab:ad:
35:3f:40:8c:20:88:16:06:ca:68:5d:1b:d1:14:24:
97:8a:1e:4e:fa:5a:c6:6b:32:75:26:ee:8f:8a:ce:
75:7d:df:91:5d:f3:28:2e:eb:e7:07:a2:70:91:8c:
a4:90:ab:04:ff:75:0b:6d:09:23:ab:1c:02:30:92:
76:96:da:61:84:c7:73:6d:e7:bc:a4:0f:83:b7:93:
a4:6a:ad:44:69:9f:64:eb:e9:2a:88:b3:ad:85:33:
c0:ab:2f:4c:09:cd:91:07:b1:a9:41:07:af:6c:eb:
c3:ba:ba:4d:cc:8a:0e:ff:4b:07:f6:ab:6f:1a:4f:
ad:1a:9d:09:66:34:72:8a:86:53:7f:44:79:cd:66:
f7:92:e4:43:1c:18:1a:cd:9c:be:f8:13:1a:98:a6:
c5:82:2e:0b:a2:85:9d:3d:cc:d3:b2:41:42:d9:08:
be:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:94:14:18:8F:45:1F:9C:97:68:7D:E9:EA:59:46:4F:CA:6E:E2:4B
X509v3 Authority Key Identifier:
keyid:E9:31:8A:51:98:DC:D3:FC:AC:24:98:05:53:85:D9:AF:21:10:A6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6TGKUZjc0_ysJJgFU4XZryEQprQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/bJQUGI9FH5yXaH3p6llGT8pu4ks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b667aa-c415-4bbc-ad4c-c3377c1e3a2d/1/6TGKUZjc0_ysJJgFU4XZryEQprQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.240.0/21
IPv6:
2a00:e760::/32
Signature Algorithm: sha256WithRSAEncryption
38:51:4f:58:86:a0:27:10:c4:2f:aa:f0:53:1c:8b:a5:8d:ec:
bc:2a:64:a9:9b:ef:86:1e:4a:11:73:4e:b8:b0:4f:9d:24:bd:
15:b9:59:a1:c8:6e:d5:cc:4c:bd:62:4d:58:d0:20:dc:38:7c:
75:f3:32:8f:a5:80:d2:7b:15:f0:71:25:df:65:7c:20:88:7e:
f6:13:95:a2:0c:8a:28:bf:b9:8e:56:97:59:c9:55:85:68:5d:
7e:9c:c0:dc:a9:12:47:53:33:c3:76:a0:cc:8a:55:26:02:86:
3c:4f:13:4a:9f:4f:db:5b:e5:c5:4b:40:35:45:20:f6:77:49:
01:86:04:52:78:38:8f:9c:7c:f6:8d:34:cb:06:cb:be:cc:64:
f8:46:58:46:3e:24:6c:68:69:22:74:c2:30:f8:53:92:e9:e2:
fa:f9:c4:22:1c:33:a1:bf:c8:c9:b8:b4:00:0c:1b:a1:27:25:
fd:f4:70:b4:6d:e6:67:36:d7:c8:8d:58:1b:a4:6d:68:40:1b:
a6:55:1c:bc:8b:06:02:3e:cb:ec:23:ca:df:89:85:50:8c:49:
38:1d:f8:86:40:7b:b4:71:4f:46:b0:ee:5c:5c:b3:4e:c8:02:
97:a8:2e:ba:51:c3:ec:9d:22:98:59:34:41:51:05:2e:59:92:
c6:40:37:b9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAY4X+CF4qRM47shoVwHo7Q2pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5MzE4YTUxOThkY2QzZmNhYzI0OTgwNTUzODVkOWFmMjEx
MGE2YjQwHhcNMjQwMzA3MDgxMjAxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2Yzk0MTQxODhmNDUxZjljOTc2ODdkZTllYTU5NDY0ZmNhNmVlMjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5CyPDWNYy4nOq0ur8xSeGEC7QSM
DINfy9jFKa1VikQxPwzmyi2UN97jjsiuyNOG5Jd0hBNylCD79ZHwX7vL+T8Vwh4r
guZeepYTFhTqeVn9xZX43MTvq601P0CMIIgWBspoXRvRFCSXih5O+lrGazJ1Ju6P
is51fd+RXfMoLuvnB6JwkYykkKsE/3ULbQkjqxwCMJJ2ltphhMdzbee8pA+Dt5Ok
aq1EaZ9k6+kqiLOthTPAqy9MCc2RB7GpQQevbOvDurpNzIoO/0sH9qtvGk+tGp0J
ZjRyioZTf0R5zWb3kuRDHBgazZy++BMamKbFgi4LooWdPczTskFC2Qi+SQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFGyUFBiPRR+cl2h96epZRk/KbuJLMB8GA1UdIwQY
MBaAFOkxilGY3NP8rCSYBVOF2a8hEKa0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iNjY3YWEtYzQxNS00YmJjLWFkNGMt
YzMzNzdjMWUzYTJkLzEvYkpRVUdJOUZINXlYYUgzcDZsbEdUOHB1NGtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9iNjY3YWEtYzQxNS00YmJjLWFkNGMtYzMzNzdjMWUzYTJk
LzEvNlRHS1VaamMwX3lzSkpnRlU0WFpyeUVRcHJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQDVXfwMA0E
AgACMAcDBQAqAOdgMA0GCSqGSIb3DQEBCwUAA4IBAQA4UU9YhqAnEMQvqvBTHIul
jey8KmSpm++GHkoRc064sE+dJL0VuVmhyG7VzEy9Yk1Y0CDcOHx18zKPpYDSexXw
cSXfZXwgiH72E5WiDIoov7mOVpdZyVWFaF1+nMDcqRJHUzPDdqDMilUmAoY8TxNK
n0/bW+XFS0A1RSD2d0kBhgRSeDiPnHz2jTTLBsu+zGT4RlhGPiRsaGkidMIw+FOS
6eL6+cQiHDOhv8jJuLQADBuhJyX99HC0beZnNtfIjVgbpG1oQBumVRy8iwYCPsvs
I8rfiYVQjEk4HfiGQHu0cU9GsO5cXLNOyAKXqC66UcPsnSKYWTRBUQUuWZLGQDe5
-----END CERTIFICATE-----
Generated at Sat Oct 5 08:01:51 2024 by rpki-client on console-ams.rpki-client.org