Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/hYqASM0-yhjFxLcuCur2XwsrI7M.roa
File: hYqASM0-yhjFxLcuCur2XwsrI7M.roa (raw, json)
Hash identifier: GhqpckVOc9QQ9jyk+mWP+4gFJnWsd4cv+1FdzWAWj4w=
Subject key identifier: 85:8A:80:48:CD:3E:CA:18:C5:C4:B7:2E:0A:EA:F6:5F:0B:2B:23:B3
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 018CC801668A83D61ED091CDD8D683FA6BE9
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/hYqASM0-yhjFxLcuCur2XwsrI7M.roa
Signing time: Tue 02 Jan 2024 02:29:44 +0000
ROA not before: Tue 02 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57395
IP address blocks: 185.255.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:66:8a:83:d6:1e:d0:91:cd:d8:d6:83:fa:6b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Jan 2 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=858a8048cd3eca18c5c4b72e0aeaf65f0b2b23b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d8:8e:ae:e3:f8:81:c2:58:8c:e5:ff:8c:cf:
61:2d:33:27:b1:13:cd:cb:c8:28:50:0c:a2:a1:bb:
db:31:30:18:66:0c:d2:e1:e4:fd:9a:94:62:22:2b:
68:c1:15:3b:1e:61:80:7a:5b:24:c3:ec:c3:bf:9b:
c8:83:59:4d:16:10:d6:dd:29:0d:2d:dd:ca:33:4f:
fc:90:7c:a5:46:f2:12:4a:6c:63:95:1c:43:42:c7:
84:cc:ce:3a:9e:c7:40:f6:b5:a7:68:bc:35:f8:21:
4e:73:60:3b:0c:1e:c6:6d:d7:2e:d9:d4:69:49:52:
2d:57:30:92:90:91:e9:b5:76:aa:78:f3:1a:d2:46:
fa:76:8f:45:64:cc:94:4b:35:c4:9d:b4:e4:ed:c3:
ec:a2:f4:33:9b:fd:52:8b:f2:bd:68:4b:44:e3:f5:
ed:80:01:a9:69:0e:3d:cd:aa:98:5c:b0:c8:5e:e6:
a4:ac:e8:fe:15:42:37:7e:1b:5f:04:9b:81:7c:09:
1d:4c:39:bb:e2:76:bc:c0:b8:85:b9:c6:7f:db:06:
fa:68:de:94:42:5c:b6:32:f9:10:53:a0:24:aa:ce:
d5:71:71:6a:39:e9:e0:e7:30:82:07:8d:59:41:9e:
d2:aa:1c:f5:5a:e3:b1:cc:1f:74:fa:2d:42:34:35:
74:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8A:80:48:CD:3E:CA:18:C5:C4:B7:2E:0A:EA:F6:5F:0B:2B:23:B3
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/hYqASM0-yhjFxLcuCur2XwsrI7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.80.0/22
Signature Algorithm: sha256WithRSAEncryption
3a:c9:9a:dd:f9:38:90:43:a7:7a:ef:7a:84:d5:34:51:3a:aa:
bd:77:ca:95:f4:7a:dc:7f:b5:be:fd:14:37:e6:a9:cd:58:da:
7a:4b:de:50:9d:e8:d4:77:c7:b9:32:b0:c5:a3:1c:bc:17:19:
61:6c:59:c6:33:9a:b7:47:0a:49:36:f7:22:30:14:86:08:e3:
7d:40:95:eb:f9:c0:e0:99:fd:01:34:2c:62:2f:fa:47:d2:51:
e3:92:49:8c:9c:4a:5d:1c:ab:3d:34:66:f9:51:6d:d7:db:1e:
5b:e8:45:35:c0:e3:7f:bf:f5:c9:58:c0:89:2d:6a:5f:60:0f:
ae:16:20:c8:10:e5:3f:b7:9e:8f:42:b8:d6:a9:53:b8:4e:d9:
0b:67:4b:af:48:38:6c:f7:81:0b:a4:8e:69:fb:1f:18:75:06:
c4:20:1a:a4:95:c4:4d:8d:57:34:39:ea:f7:55:6b:17:e6:28:
37:81:e6:4a:58:68:01:85:35:f1:bf:30:07:f6:eb:b1:2f:4c:
5c:e3:7b:0a:55:b5:02:b7:d8:7b:03:b6:72:1a:0b:24:b3:1f:
da:1a:70:4e:f9:b4:07:45:6e:dc:8a:78:25:c1:1c:58:86:0c:
91:fc:58:e3:24:57:f8:19:73:d7:e1:75:8a:3e:73:35:3e:20:
28:f3:fb:91
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAWaKg9Ye0JHN2NaD+mvpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZTE1ZGEzMzk2N2Q0MTQ3MGE5NmQ2MTQxYzgzNDBmMjI0
MDU4MWMwHhcNMjQwMTAyMDIyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NThhODA0OGNkM2VjYTE4YzVjNGI3MmUwYWVhZjY1ZjBiMmIyM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNiOruP4gcJYjOX/jM9hLTMnsRPN
y8goUAyiobvbMTAYZgzS4eT9mpRiIitowRU7HmGAelskw+zDv5vIg1lNFhDW3SkN
Ld3KM0/8kHylRvISSmxjlRxDQseEzM46nsdA9rWnaLw1+CFOc2A7DB7Gbdcu2dRp
SVItVzCSkJHptXaqePMa0kb6do9FZMyUSzXEnbTk7cPsovQzm/1Si/K9aEtE4/Xt
gAGpaQ49zaqYXLDIXuakrOj+FUI3fhtfBJuBfAkdTDm74na8wLiFucZ/2wb6aN6U
Qly2MvkQU6Akqs7VcXFqOeng5zCCB41ZQZ7Sqhz1WuOxzB90+i1CNDV0JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIWKgEjNPsoYxcS3Lgrq9l8LKyOzMB8GA1UdIwQY
MBaAFFHhXaM5Z9QUcKltYUHINA8iQFgcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi8yM2Q1YzEtYWM2Ni00NjFmLTkwMGYt
MzgwODg1NzQwZDRhLzEvaFlxQVNNMC15aGpGeExjdUN1cjJYd3NySTdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi8yM2Q1YzEtYWM2Ni00NjFmLTkwMGYtMzgwODg1NzQwZDRh
LzEvVWVGZG96bG4xQlJ3cVcxaFFjZzBEeUpBV0J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf9QMA0G
CSqGSIb3DQEBCwUAA4IBAQA6yZrd+TiQQ6d673qE1TRROqq9d8qV9Hrcf7W+/RQ3
5qnNWNp6S95QnejUd8e5MrDFoxy8FxlhbFnGM5q3RwpJNvciMBSGCON9QJXr+cDg
mf0BNCxiL/pH0lHjkkmMnEpdHKs9NGb5UW3X2x5b6EU1wON/v/XJWMCJLWpfYA+u
FiDIEOU/t56PQrjWqVO4TtkLZ0uvSDhs94ELpI5p+x8YdQbEIBqklcRNjVc0Oer3
VWsX5ig3geZKWGgBhTXxvzAH9uuxL0xc43sKVbUCt9h7A7ZyGgsksx/aGnBO+bQH
RW7cinglwRxYhgyR/FjjJFf4GXPX4XWKPnM1PiAo8/uR
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:07:44 2024 by rpki-client on console-fra.rpki-client.org