Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/9nHjigFuLekPGRzs6DgIkvzpwqQ.roa
File: 9nHjigFuLekPGRzs6DgIkvzpwqQ.roa (raw, json)
Hash identifier: s5Jj0OgqcpBI6qHuyIvIBI9MKIBGhXNQZuMx/4fU+Ig=
Subject key identifier: F6:71:E3:8A:01:6E:2D:E9:0F:19:1C:EC:E8:38:08:92:FC:E9:C2:A4
Certificate issuer: /CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Certificate serial: 018EE74423579B759E79B61EDDD336168049
Authority key identifier: 60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/9nHjigFuLekPGRzs6DgIkvzpwqQ.roa
Signing time: Tue 16 Apr 2024 14:16:26 +0000
ROA not before: Tue 16 Apr 2024 14:16:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57152
IP address blocks: 185.121.124.0/24 maxlen: 24
185.121.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.mft
rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 08:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e7:44:23:57:9b:75:9e:79:b6:1e:dd:d3:36:16:80:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60b9615df8c659dac8cc087bd011d4b5ff373e2a
Validity
Not Before: Apr 16 14:16:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f671e38a016e2de90f191cece8380892fce9c2a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1d:56:f5:0f:97:a5:77:3a:57:73:7e:02:42:
cd:08:86:88:2e:5d:d8:39:d3:15:df:f3:e5:da:68:
cb:bb:79:4d:6c:28:d2:96:0c:20:6f:94:df:ee:08:
64:bf:57:5f:6e:de:67:1d:c0:51:1e:a1:17:01:74:
1c:14:b9:ae:7c:1d:bd:1b:71:c6:e6:65:5e:61:f0:
9a:98:35:8f:c2:d8:bd:f5:bc:a6:e7:80:36:4a:12:
0b:cb:e1:0a:50:b3:fc:de:0b:b0:17:89:94:fe:9a:
8f:49:b0:8c:b9:0e:b4:50:d7:48:42:cd:12:47:03:
f1:63:ba:40:2f:63:00:bb:d9:f3:19:de:45:dc:58:
d3:5d:70:73:cc:a4:72:8b:8a:30:b8:e6:54:2f:47:
2c:ad:50:63:33:0b:71:92:1f:cc:cd:cd:c1:2b:bd:
6f:36:9d:17:33:81:63:49:39:1f:bd:92:28:4c:0a:
bf:6a:df:49:cc:11:54:04:0a:8e:1b:8d:03:4a:4d:
2c:c0:e8:a4:86:6b:70:af:11:b5:4b:7f:6e:1d:a9:
c6:ab:61:7b:fc:3b:f6:75:a7:d7:7a:3d:51:a7:b2:
49:94:32:4b:ba:bf:c3:d8:93:3a:17:d3:0b:62:f1:
67:9a:d5:58:c9:97:58:85:91:d2:1c:79:ef:1c:0d:
38:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:71:E3:8A:01:6E:2D:E9:0F:19:1C:EC:E8:38:08:92:FC:E9:C2:A4
X509v3 Authority Key Identifier:
keyid:60:B9:61:5D:F8:C6:59:DA:C8:CC:08:7B:D0:11:D4:B5:FF:37:3E:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YLlhXfjGWdrIzAh70BHUtf83Pio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/9nHjigFuLekPGRzs6DgIkvzpwqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/9a8ad8-b6c9-4c6c-ac27-62d881aa906f/1/YLlhXfjGWdrIzAh70BHUtf83Pio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.124.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:5c:91:f2:24:e6:12:a2:8a:79:4e:10:88:58:a2:cf:fc:22:
51:e5:ac:05:6d:8d:d3:e9:c1:8b:42:9d:f1:76:9d:8c:b5:1a:
c8:d9:b3:24:23:f6:3c:57:91:d3:c2:96:b4:dd:6b:cd:58:bd:
74:a9:09:49:17:5b:b0:1b:98:a7:a1:64:68:0f:fc:58:40:04:
e1:91:a3:bf:95:e5:1d:6c:8e:fe:52:a0:2f:3e:e1:1b:4f:41:
2d:38:f7:f9:53:a3:b6:c1:23:38:97:e0:3c:2a:fd:31:a7:f4:
ef:f5:29:6a:41:63:06:80:1f:25:6e:29:90:91:4a:f7:81:2c:
1b:5e:21:38:0e:5d:e1:d4:d5:12:e0:1e:78:30:4d:19:b8:34:
1a:09:2b:96:11:83:98:85:2e:43:e0:0f:4f:05:62:cb:c1:b9:
95:d9:54:56:bf:1d:30:99:6c:58:e0:e0:e5:6b:72:12:72:2d:
cf:0e:5d:82:55:94:cc:51:2c:de:bc:73:7c:34:fc:21:60:44:
4b:2b:d3:c2:4a:00:33:dd:35:f6:0b:8c:21:e9:30:7c:06:69:
65:4d:28:ea:5d:84:b6:f0:a7:9c:8e:e7:ec:bc:a8:b9:a1:47:
1d:12:14:f7:ff:45:af:89:f8:0f:e8:43:37:52:29:cb:ee:b0:
68:9d:fe:83
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY7nRCNXm3WeebYe3dM2FoBJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwYjk2MTVkZjhjNjU5ZGFjOGNjMDg3YmQwMTFkNGI1ZmYz
NzNlMmEwHhcNMjQwNDE2MTQxNjI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjcxZTM4YTAxNmUyZGU5MGYxOTFjZWNlODM4MDg5MmZjZTljMmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArB1W9Q+XpXc6V3N+AkLNCIaILl3Y
OdMV3/Pl2mjLu3lNbCjSlgwgb5Tf7ghkv1dfbt5nHcBRHqEXAXQcFLmufB29G3HG
5mVeYfCamDWPwti99bym54A2ShILy+EKULP83guwF4mU/pqPSbCMuQ60UNdIQs0S
RwPxY7pAL2MAu9nzGd5F3FjTXXBzzKRyi4owuOZUL0csrVBjMwtxkh/Mzc3BK71v
Np0XM4FjSTkfvZIoTAq/at9JzBFUBAqOG40DSk0swOikhmtwrxG1S39uHanGq2F7
/Dv2dafXej1Rp7JJlDJLur/D2JM6F9MLYvFnmtVYyZdYhZHSHHnvHA04dwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPZx44oBbi3pDxkc7Og4CJL86cKkMB8GA1UdIwQY
MBaAFGC5YV34xlnayMwIe9AR1LX/Nz4qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjct
NjJkODgxYWE5MDZmLzEvOW5IamlnRnVMZWtQR1J6czZEZ0lrdnpwd3FRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS85YThhZDgtYjZjOS00YzZjLWFjMjctNjJkODgxYWE5MDZm
LzEvWUxsaFhmakdXZHJJekFoNzBCSFV0ZjgzUGlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuXl8MA0G
CSqGSIb3DQEBCwUAA4IBAQCMXJHyJOYSoop5ThCIWKLP/CJR5awFbY3T6cGLQp3x
dp2MtRrI2bMkI/Y8V5HTwpa03WvNWL10qQlJF1uwG5inoWRoD/xYQAThkaO/leUd
bI7+UqAvPuEbT0EtOPf5U6O2wSM4l+A8Kv0xp/Tv9SlqQWMGgB8lbimQkUr3gSwb
XiE4Dl3h1NUS4B54ME0ZuDQaCSuWEYOYhS5D4A9PBWLLwbmV2VRWvx0wmWxY4ODl
a3ISci3PDl2CVZTMUSzevHN8NPwhYERLK9PCSgAz3TX2C4wh6TB8BmllTSjqXYS2
8KecjufsvKi5oUcdEhT3/0WvifgP6EM3UinL7rBonf6D
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:38:49 2024 by rpki-client on console-fra.rpki-client.org