Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/HCbfYTRIJQBNk2SKZtZGVJ8SJbk.roa
File: HCbfYTRIJQBNk2SKZtZGVJ8SJbk.roa (raw, json)
Hash identifier: wCLXuXxvyFpPxcMgiLcRxvWsuLwA+LaFwMdFFBxTlpw=
Subject key identifier: 1C:26:DF:61:34:48:25:00:4D:93:64:8A:66:D6:46:54:9F:12:25:B9
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649E6A567D7E4CCE84E26C5C2F746D5
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/HCbfYTRIJQBNk2SKZtZGVJ8SJbk.roa
Signing time: Mon 01 Jan 2024 18:29:41 +0000
ROA not before: Mon 01 Jan 2024 18:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198868
IP address blocks: 84.242.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e6:a5:67:d7:e4:cc:e8:4e:26:c5:c2:f7:46:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c26df61344825004d93648a66d646549f1225b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1b:0d:6e:ad:60:d1:20:90:a4:9e:62:6d:04:
87:75:ab:1b:12:61:56:c9:54:60:52:a2:47:d8:16:
ad:20:35:84:07:d1:98:e5:45:98:7b:a2:24:a9:0e:
32:69:12:09:93:d8:19:bc:4d:08:ee:c0:46:ff:4a:
c2:79:53:4e:eb:1c:24:bf:c5:92:5f:2f:d0:22:31:
87:17:ae:43:c2:f6:57:b0:20:7a:2d:57:5c:5e:04:
c1:c0:c4:4e:1e:81:d9:b9:65:c4:12:63:41:0f:8e:
2f:d0:02:27:a1:3e:cb:05:8c:78:e4:74:52:68:59:
cd:b2:fc:c0:e9:2a:5f:e3:cf:e9:21:85:37:cf:56:
13:c1:84:55:5c:6b:78:d7:87:a0:f9:c4:08:bc:74:
30:fa:ae:e4:55:b9:22:e2:5b:76:0c:43:f9:65:c6:
c9:ce:23:02:c0:b9:88:e1:b7:72:bc:e1:06:a5:ee:
9d:a3:bd:ce:f6:c6:9e:ad:a2:db:71:8a:d6:3b:01:
67:4d:5a:72:76:ae:e3:73:5f:58:2a:e1:ae:3b:4d:
20:a5:19:a2:a3:ca:22:a9:aa:fb:37:c6:b8:4d:16:
7d:bc:44:0c:3e:9a:cd:9c:5c:18:bb:3b:0f:86:66:
c3:d8:72:dd:7d:ab:c5:b4:d0:33:5e:ee:a5:25:52:
21:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:26:DF:61:34:48:25:00:4D:93:64:8A:66:D6:46:54:9F:12:25:B9
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/HCbfYTRIJQBNk2SKZtZGVJ8SJbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.242.130.0/24
Signature Algorithm: sha256WithRSAEncryption
20:4f:2a:40:9b:ab:94:e9:dc:ef:6a:24:c8:9b:07:ab:89:70:
fa:26:2a:9e:f8:56:db:45:43:0b:ea:85:8c:85:5c:dd:02:84:
f8:3b:d6:02:76:a5:8a:5f:3e:ba:29:c9:ad:13:18:cb:35:72:
b7:e2:29:0f:43:c6:95:a9:cf:60:78:0e:ad:7c:ae:cc:73:dc:
bc:06:de:ef:5c:83:b6:f2:55:50:1f:9a:10:c7:1d:57:e5:99:
a3:e9:61:1e:fb:86:d3:45:cc:52:c7:26:e9:47:da:72:28:e2:
46:32:62:2b:69:d0:a5:aa:b5:e9:ae:99:a0:2d:cc:e8:51:3a:
4d:82:5a:b2:45:d3:1f:34:30:26:84:9e:e9:4e:6d:ae:49:fa:
a9:18:8f:8e:bd:56:27:45:e0:2e:67:0c:4d:cf:e4:0f:ea:58:
ba:4d:9e:f6:af:f1:f4:9c:2f:e1:fe:b6:cd:88:d4:e5:90:24:
fd:20:e6:24:48:f9:37:eb:69:34:ed:1c:e2:a9:0e:a7:56:65:
96:ba:ae:2a:49:64:5f:f2:7e:30:d4:da:c4:76:2c:3b:3d:f0:
04:b8:93:5e:8a:bf:e0:31:d5:02:0e:95:f9:3b:fa:46:73:0a:
7f:52:91:2b:cc:fe:10:89:fd:d5:40:52:76:5a:1f:a7:ff:8d:
c8:12:67:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSealZ9fkzOhOJsXC90bVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjQwMTAxMTgyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzI2ZGY2MTM0NDgyNTAwNGQ5MzY0OGE2NmQ2NDY1NDlmMTIyNWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRsNbq1g0SCQpJ5ibQSHdasbEmFW
yVRgUqJH2BatIDWEB9GY5UWYe6IkqQ4yaRIJk9gZvE0I7sBG/0rCeVNO6xwkv8WS
Xy/QIjGHF65DwvZXsCB6LVdcXgTBwMROHoHZuWXEEmNBD44v0AInoT7LBYx45HRS
aFnNsvzA6Spf48/pIYU3z1YTwYRVXGt414eg+cQIvHQw+q7kVbki4lt2DEP5ZcbJ
ziMCwLmI4bdyvOEGpe6do73O9saeraLbcYrWOwFnTVpydq7jc19YKuGuO00gpRmi
o8oiqar7N8a4TRZ9vEQMPprNnFwYuzsPhmbD2HLdfavFtNAzXu6lJVIhdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBwm32E0SCUATZNkimbWRlSfEiW5MB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvSENiZllUUklKUUJOazJTS1p0WkdWSjhTSmJrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVPKCMA0G
CSqGSIb3DQEBCwUAA4IBAQAgTypAm6uU6dzvaiTImweriXD6Jiqe+FbbRUML6oWM
hVzdAoT4O9YCdqWKXz66KcmtExjLNXK34ikPQ8aVqc9geA6tfK7Mc9y8Bt7vXIO2
8lVQH5oQxx1X5Zmj6WEe+4bTRcxSxybpR9pyKOJGMmIradClqrXprpmgLczoUTpN
glqyRdMfNDAmhJ7pTm2uSfqpGI+OvVYnReAuZwxNz+QP6li6TZ72r/H0nC/h/rbN
iNTlkCT9IOYkSPk362k07RziqQ6nVmWWuq4qSWRf8n4w1NrEdiw7PfAEuJNeir/g
MdUCDpX5O/pGcwp/UpErzP4Qif3VQFJ2Wh+n/43IEmfQ
-----END CERTIFICATE-----
Generated at Mon May 6 20:31:21 2024 by rpki-client on console-fra.rpki-client.org