Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1bHl9aLfGvTwPFGUoriNVyob_wk.roa
File: 1bHl9aLfGvTwPFGUoriNVyob_wk.roa (raw, json)
Hash identifier: KnnPPixxkATGqNZFkXtqFHW1MYvaWyMBEvfw5hOBlEE=
Subject key identifier: D5:B1:E5:F5:A2:DF:1A:F4:F0:3C:51:94:A2:B8:8D:57:2A:1B:FF:09
Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Certificate serial: 018CC4934E16E3CB21274A24A2D485768467
Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1bHl9aLfGvTwPFGUoriNVyob_wk.roa
Signing time: Mon 01 Jan 2024 10:30:37 +0000
ROA not before: Mon 01 Jan 2024 10:30:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 213.21.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 05:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:4e:16:e3:cb:21:27:4a:24:a2:d4:85:76:84:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9
Validity
Not Before: Jan 1 10:30:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d5b1e5f5a2df1af4f03c5194a2b88d572a1bff09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ad:0b:a7:c4:9b:8f:ae:ff:f3:6e:0f:61:eb:
90:15:50:cc:c1:c5:79:e2:4b:3a:b8:fb:1e:c4:e6:
07:38:97:f7:6e:c4:37:a5:24:71:56:c5:88:c7:1d:
fb:0b:3e:92:40:8a:53:4e:3f:7d:49:5c:a2:81:e3:
69:68:ee:f8:42:98:ea:f4:ba:00:cb:26:5a:7b:7b:
64:c4:47:85:ae:c5:a7:cc:d0:6d:7e:50:2d:5d:14:
f6:ca:39:ed:59:f0:94:ed:22:34:ec:cd:bb:0e:29:
24:ec:92:25:12:69:88:37:0b:9c:26:04:a3:e6:13:
51:91:a3:99:af:cc:c6:58:fe:c0:4e:d3:be:75:d3:
3c:14:f6:c0:96:14:f0:68:ed:9c:99:b7:7a:98:2b:
d7:8f:7f:9a:8c:67:53:2a:32:e6:6e:48:d0:99:47:
c5:c2:64:73:ec:13:f5:30:08:ae:d0:bd:46:6a:32:
41:88:b3:81:b5:60:1e:54:57:6c:a7:7f:99:f9:4d:
c7:c4:97:fc:db:3b:b4:e1:fd:c6:59:0d:65:4d:78:
8b:31:ce:e6:c1:9c:bc:77:94:b4:c5:68:79:c1:43:
c8:48:25:2d:70:9f:17:0d:9e:8e:21:fc:2f:98:22:
0a:6c:dc:49:d9:82:05:e8:c2:98:de:24:4a:13:a5:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:B1:E5:F5:A2:DF:1A:F4:F0:3C:51:94:A2:B8:8D:57:2A:1B:FF:09
X509v3 Authority Key Identifier:
keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/1bHl9aLfGvTwPFGUoriNVyob_wk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.21.243.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:9d:8a:c5:2b:10:16:34:6d:ed:c5:c3:27:10:59:fa:27:16:
0e:10:56:7a:2a:21:6b:43:3a:29:eb:3b:60:13:65:22:8e:86:
86:06:42:19:5c:fe:9f:2b:84:1c:06:e2:5e:0e:9c:e3:7f:7d:
a4:b7:1a:d5:be:b9:ad:8f:eb:dc:19:e1:18:40:3c:59:b9:0f:
af:32:85:df:db:c5:83:de:39:12:f1:79:05:5c:d2:9e:61:b0:
42:27:e3:07:1a:ff:ea:f8:f3:d2:87:df:a9:60:4e:5f:10:7d:
52:48:ac:6d:1f:4c:39:08:93:ac:8e:e9:82:b4:2d:39:71:ba:
7e:f0:59:7b:04:e8:a4:b6:93:a1:7f:c7:56:1e:3c:00:ab:93:
00:73:c0:84:80:4e:83:62:ea:c8:ea:1e:e8:a5:aa:64:4d:b2:
0c:de:0c:81:34:1c:7c:b1:33:42:79:28:02:60:ef:7d:22:e1:
2e:e1:a4:e3:36:14:09:30:c3:d4:c0:6a:11:75:9c:a1:b3:d6:
35:06:62:de:70:6d:f1:cd:4f:b1:61:c4:f4:d4:04:54:2b:52:
6c:57:36:c1:51:3e:f4:e7:c5:a1:3c:36:e6:d3:c3:03:02:82:
ce:f5:99:53:a2:79:72:38:ac:d1:91:1e:9a:9b:64:0e:39:7e:
1e:b6:ef:42
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk04W48shJ0okotSFdoRnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw
MmFjZDkwHhcNMjQwMTAxMTAzMDM3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNWIxZTVmNWEyZGYxYWY0ZjAzYzUxOTRhMmI4OGQ1NzJhMWJmZjA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkq0Lp8Sbj67/824PYeuQFVDMwcV5
4ks6uPsexOYHOJf3bsQ3pSRxVsWIxx37Cz6SQIpTTj99SVyigeNpaO74Qpjq9LoA
yyZae3tkxEeFrsWnzNBtflAtXRT2yjntWfCU7SI07M27Dikk7JIlEmmINwucJgSj
5hNRkaOZr8zGWP7ATtO+ddM8FPbAlhTwaO2cmbd6mCvXj3+ajGdTKjLmbkjQmUfF
wmRz7BP1MAiu0L1GajJBiLOBtWAeVFdsp3+Z+U3HxJf82zu04f3GWQ1lTXiLMc7m
wZy8d5S0xWh5wUPISCUtcJ8XDZ6OIfwvmCIKbNxJ2YIF6MKY3iRKE6WwUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNWx5fWi3xr08DxRlKK4jVcqG/8JMB8GA1UdIwQY
MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt
MWFmMjQ2NWE4ZWVjLzEvMWJIbDlhTGZHdlR3UEZHVW9yaU5WeW9iX3drLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj
LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1RXzMA0G
CSqGSIb3DQEBCwUAA4IBAQCbnYrFKxAWNG3txcMnEFn6JxYOEFZ6KiFrQzop6ztg
E2UijoaGBkIZXP6fK4QcBuJeDpzjf32ktxrVvrmtj+vcGeEYQDxZuQ+vMoXf28WD
3jkS8XkFXNKeYbBCJ+MHGv/q+PPSh9+pYE5fEH1SSKxtH0w5CJOsjumCtC05cbp+
8Fl7BOiktpOhf8dWHjwAq5MAc8CEgE6DYurI6h7opapkTbIM3gyBNBx8sTNCeSgC
YO99IuEu4aTjNhQJMMPUwGoRdZyhs9Y1BmLecG3xzU+xYcT01ARUK1JsVzbBUT70
58WhPDbm08MDAoLO9ZlTonlyOKzRkR6am2QOOX4etu9C
-----END CERTIFICATE-----
Generated at Sun May 5 10:36:27 2024 by rpki-client on console-ams.rpki-client.org