Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DBPv8ULHjw0j5ETEOdTXTf8JtVE.roa
File: DBPv8ULHjw0j5ETEOdTXTf8JtVE.roa (raw, json)
Hash identifier: gzwY0a8yHNpTY+Zb3K7GUtOJi98gzvVjRMvHjQDAJ3s=
Subject key identifier: 0C:13:EF:F1:42:C7:8F:0D:23:E4:44:C4:39:D4:D7:4D:FF:09:B5:51
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCDFE7A228A359F4B51275B2859FF7
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DBPv8ULHjw0j5ETEOdTXTf8JtVE.roa
Signing time: Tue 02 Jan 2024 06:29:27 +0000
ROA not before: Tue 02 Jan 2024 06:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42942
IP address blocks: 87.120.228.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:df:e7:a2:28:a3:59:f4:b5:12:75:b2:85:9f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c13eff142c78f0d23e444c439d4d74dff09b551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:8a:5e:8c:bc:ab:f6:41:73:b7:c2:9f:b9:
6b:00:bf:97:8c:b5:6f:c7:49:2e:a0:97:2a:1d:2e:
23:cc:7a:7d:69:d4:e0:55:b1:fa:e3:c3:a3:ba:fa:
58:14:d6:89:68:51:fd:b0:5e:b2:73:d2:b5:77:e4:
9c:77:f2:57:18:f3:e0:5e:47:6c:3e:aa:20:25:cf:
17:25:0f:98:d8:00:b4:7c:cf:da:65:c4:ed:a9:4e:
78:4b:14:97:98:bb:b6:d8:2d:37:a7:03:6b:b7:04:
a3:ed:49:65:19:c5:a8:b0:47:1e:64:5a:7b:15:5f:
3b:db:fa:6a:d4:8f:0c:1c:20:1e:f5:e4:da:92:92:
91:e0:74:c2:5f:12:32:5a:e3:70:48:6b:d5:9c:e4:
f9:ed:b6:78:a9:c1:0e:da:f6:75:c9:bf:49:6c:4f:
45:85:45:37:c4:c3:50:a9:3b:0d:7d:0a:4c:06:c1:
a2:27:60:f5:b2:f9:12:0a:51:1f:51:e5:1b:d2:90:
be:4a:6f:7c:b1:cc:3b:0c:4e:96:2c:bb:2c:4b:ec:
99:30:d9:7b:43:1e:ce:3c:9d:fa:1a:9a:0d:fe:47:
0a:87:e6:84:5b:01:4f:ab:5e:c0:82:4f:0d:3d:a9:
e8:40:fa:95:79:1e:41:7b:36:5c:0e:d3:ab:0b:30:
b1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:13:EF:F1:42:C7:8F:0D:23:E4:44:C4:39:D4:D7:4D:FF:09:B5:51
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/DBPv8ULHjw0j5ETEOdTXTf8JtVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.228.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:46:25:7b:bf:a9:b4:47:2b:ad:49:b4:88:4a:5d:d2:b4:82:
5d:33:70:47:b7:8a:17:8f:b2:ee:a7:b8:30:32:d4:0a:fb:89:
eb:9a:dc:6c:d3:4b:90:4f:96:ba:3f:9a:4c:44:7e:4f:8d:44:
ef:c3:81:88:20:7d:ae:96:05:b8:46:ab:cc:75:d8:f4:b5:14:
df:06:a0:a7:13:52:f4:05:b4:c2:70:f6:5a:62:58:93:95:b9:
6b:e7:0f:20:e9:e9:51:b9:01:bf:37:54:ff:8a:8e:40:74:f8:
19:95:26:4d:f9:81:67:6b:cf:40:9d:8f:e7:ca:da:e8:3d:63:
f0:dc:7b:88:b0:98:7c:8f:02:e9:71:40:a3:57:5d:a5:e0:67:
86:86:43:36:09:1e:1f:77:fd:3f:55:58:92:4c:c5:a8:35:72:
45:c5:25:9b:08:dc:ab:ba:df:7a:1e:3f:78:0a:e7:8b:c7:21:
ca:99:db:26:2e:f9:3d:cb:c7:7b:e3:a5:4e:89:e2:bf:b9:0d:
92:ec:42:74:f8:c3:62:29:5b:fa:a6:cc:ea:72:ea:ad:3f:5a:
4c:37:f8:ee:34:73:b4:2f:18:65:51:2e:49:c8:8d:d0:68:30:
e4:39:fb:1f:9a:3d:68:21:9b:2e:8e:85:f9:0f:4b:5e:8e:ad:
65:b6:5b:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3N/noiijWfS1EnWyhZ/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjQwMTAyMDYyOTI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzEzZWZmMTQyYzc4ZjBkMjNlNDQ0YzQzOWQ0ZDc0ZGZmMDliNTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5SKXoy8q/ZBc7fCn7lrAL+XjLVv
x0kuoJcqHS4jzHp9adTgVbH648OjuvpYFNaJaFH9sF6yc9K1d+Scd/JXGPPgXkds
PqogJc8XJQ+Y2AC0fM/aZcTtqU54SxSXmLu22C03pwNrtwSj7UllGcWosEceZFp7
FV872/pq1I8MHCAe9eTakpKR4HTCXxIyWuNwSGvVnOT57bZ4qcEO2vZ1yb9JbE9F
hUU3xMNQqTsNfQpMBsGiJ2D1svkSClEfUeUb0pC+Sm98scw7DE6WLLssS+yZMNl7
Qx7OPJ36GpoN/kcKh+aEWwFPq17Agk8NPanoQPqVeR5BezZcDtOrCzCxxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAwT7/FCx48NI+RExDnU103/CbVRMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvREJQdjhVTEhqdzBqNUVURU9kVFhUZjhKdFZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBV3jkMA0G
CSqGSIb3DQEBCwUAA4IBAQBcRiV7v6m0RyutSbSISl3StIJdM3BHt4oXj7Lup7gw
MtQK+4nrmtxs00uQT5a6P5pMRH5PjUTvw4GIIH2ulgW4RqvMddj0tRTfBqCnE1L0
BbTCcPZaYliTlblr5w8g6elRuQG/N1T/io5AdPgZlSZN+YFna89AnY/nytroPWPw
3HuIsJh8jwLpcUCjV12l4GeGhkM2CR4fd/0/VViSTMWoNXJFxSWbCNyrut96Hj94
CueLxyHKmdsmLvk9y8d746VOieK/uQ2S7EJ0+MNiKVv6pszqcuqtP1pMN/juNHO0
LxhlUS5JyI3QaDDkOfsfmj1oIZsujoX5D0tejq1ltlth
-----END CERTIFICATE-----
Generated at Sun Apr 28 03:28:44 2024 by rpki-client on console-ams.rpki-client.org