Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/HZm1nAgV4uzouIBCeqi0p_MfH-A.roa
File: HZm1nAgV4uzouIBCeqi0p_MfH-A.roa (raw, json)
Hash identifier: GuU0vDvv+3ncO1MCgaabWzA25IA43qcG8TxQWEUx5ko=
Subject key identifier: 1D:99:B5:9C:08:15:E2:EC:E8:B8:80:42:7A:A8:B4:A7:F3:1F:1F:E0
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 018CC9BC8B770A6A0F5930325F64EE67149E
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/HZm1nAgV4uzouIBCeqi0p_MfH-A.roa
Signing time: Tue 02 Jan 2024 10:33:46 +0000
ROA not before: Tue 02 Jan 2024 10:33:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 194.32.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 01:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:8b:77:0a:6a:0f:59:30:32:5f:64:ee:67:14:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 10:33:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d99b59c0815e2ece8b880427aa8b4a7f31f1fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:cc:bf:56:e2:f9:46:ba:17:43:25:5b:3b:
f9:29:c3:60:56:14:5e:0e:32:e5:59:c9:54:74:94:
c0:e7:5c:20:e0:44:46:ba:e8:2e:03:af:65:34:34:
94:12:85:5a:de:f9:71:70:ac:fb:56:f9:ac:6a:93:
6f:33:aa:33:c0:b8:c9:a8:52:99:4c:37:83:4a:37:
20:7b:14:a0:94:97:a7:c9:31:08:08:fc:47:44:33:
b6:12:31:28:4c:ac:ac:ac:00:03:48:fb:bd:71:23:
69:a6:48:6e:f8:2a:5e:84:49:3f:7f:84:3d:b8:d9:
aa:f5:ad:ac:2e:e2:0a:d4:37:cd:fe:65:15:35:4c:
e1:2d:f0:69:47:ae:41:6e:8c:1b:a1:70:7c:15:56:
99:08:ea:05:96:90:9e:e2:18:8d:d9:f4:04:4d:98:
cc:68:c8:80:fb:1e:15:4f:0f:27:85:ac:cd:75:57:
03:3c:58:5c:0c:8f:f0:aa:e8:d1:43:26:41:70:5e:
a9:87:37:d4:9d:8d:19:90:49:15:d3:63:d0:60:ea:
e9:03:30:1f:6b:1a:0f:b2:1c:2b:26:79:dd:bc:77:
cd:3c:ab:02:c7:41:e5:c2:08:84:cb:de:95:19:9a:
5d:44:8e:3e:78:16:95:30:cb:5f:66:68:8f:4d:6e:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:99:B5:9C:08:15:E2:EC:E8:B8:80:42:7A:A8:B4:A7:F3:1F:1F:E0
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/HZm1nAgV4uzouIBCeqi0p_MfH-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.32.71.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:68:79:c4:a7:61:92:41:3e:9a:63:6a:d9:47:99:8c:d4:8e:
d7:57:c9:09:06:d2:7d:b6:ca:2a:ef:5f:bb:b1:31:cc:41:0f:
50:3b:1c:36:15:13:07:d9:25:4d:a8:1c:56:43:0e:a9:81:01:
22:12:12:f5:c6:19:ea:82:1d:92:35:b5:35:46:19:8c:cd:3e:
46:1b:c9:c9:07:d7:ff:44:f5:c9:9c:99:88:28:54:bb:b7:89:
aa:09:d8:cd:de:b2:dd:32:de:1c:b3:22:23:45:0d:69:6e:2e:
42:09:71:c7:4a:7d:d7:f3:42:62:9e:58:61:2f:20:26:82:39:
fd:aa:bf:63:bf:ff:2e:ed:3c:0a:03:f2:8e:ca:d8:c8:a2:57:
3f:4d:ce:b5:29:27:f0:84:8e:c1:cf:b4:6e:a1:26:91:f9:ec:
71:ea:f2:fa:40:15:ba:55:d1:0b:ee:72:ff:fb:58:8c:14:59:
46:e8:96:b7:9a:5d:b0:4e:63:9f:c5:b1:68:73:55:a3:73:cb:
0f:a3:fc:49:70:ff:23:ff:88:6f:20:b9:e6:70:60:6e:89:8a:
7e:13:b0:5b:69:6a:7b:28:69:fa:cf:71:bc:56:94:50:f8:4e:
9b:75:9b:44:53:e4:ec:6a:c5:6d:15:fb:ac:9d:5e:da:53:e9:
33:ad:19:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJvIt3CmoPWTAyX2TuZxSeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWEyOTIxZmJlYjhhNDQ4ZTdhZTFlYzVhMTFiOGFiODk4
ZDIyZmQwHhcNMjQwMTAyMTAzMzQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDk5YjU5YzA4MTVlMmVjZThiODgwNDI3YWE4YjRhN2YzMWYxZmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTzMv1bi+Ua6F0MlWzv5KcNgVhRe
DjLlWclUdJTA51wg4ERGuuguA69lNDSUEoVa3vlxcKz7VvmsapNvM6ozwLjJqFKZ
TDeDSjcgexSglJenyTEICPxHRDO2EjEoTKysrAADSPu9cSNppkhu+CpehEk/f4Q9
uNmq9a2sLuIK1DfN/mUVNUzhLfBpR65BbowboXB8FVaZCOoFlpCe4hiN2fQETZjM
aMiA+x4VTw8nhazNdVcDPFhcDI/wqujRQyZBcF6phzfUnY0ZkEkV02PQYOrpAzAf
axoPshwrJnndvHfNPKsCx0HlwgiEy96VGZpdRI4+eBaVMMtfZmiPTW69/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB2ZtZwIFeLs6LiAQnqotKfzHx/gMB8GA1UdIwQY
MBaAFE1aKSH764pEjnrh7FoRuKuJjSL9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUt
NzgwYTI1Y2QwZGQ5LzEvSFptMW5BZ1Y0dXpvdUlCQ2VxaTBwX01mSC1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9lZThiOTgtNzI0MC00YjYyLWFjYzUtNzgwYTI1Y2QwZGQ5
LzEvVFZvcElmdnJpa1NPZXVIc1doRzRxNG1OSXYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiBHMA0G
CSqGSIb3DQEBCwUAA4IBAQAeaHnEp2GSQT6aY2rZR5mM1I7XV8kJBtJ9tsoq71+7
sTHMQQ9QOxw2FRMH2SVNqBxWQw6pgQEiEhL1xhnqgh2SNbU1RhmMzT5GG8nJB9f/
RPXJnJmIKFS7t4mqCdjN3rLdMt4csyIjRQ1pbi5CCXHHSn3X80JinlhhLyAmgjn9
qr9jv/8u7TwKA/KOytjIolc/Tc61KSfwhI7Bz7RuoSaR+exx6vL6QBW6VdEL7nL/
+1iMFFlG6Ja3ml2wTmOfxbFoc1Wjc8sPo/xJcP8j/4hvILnmcGBuiYp+E7BbaWp7
KGn6z3G8VpRQ+E6bdZtEU+TsasVtFfusnV7aU+kzrRk+
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:44:21 2024 by rpki-client on console-ams.rpki-client.org