Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/a66SJrQhIModLOJvVmVa5pW8Gnk.roa
File: a66SJrQhIModLOJvVmVa5pW8Gnk.roa (raw, json)
Hash identifier: BGQOVoDA5kG6lu/pK5pg9VNLwlmaQHg6yJeAaHPgaAI=
Subject key identifier: 6B:AE:92:26:B4:21:20:CA:1D:2C:E2:6F:56:65:5A:E6:95:BC:1A:79
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 018CC649E896B2C2524991ADB58B65AB3295
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/a66SJrQhIModLOJvVmVa5pW8Gnk.roa
Signing time: Mon 01 Jan 2024 18:29:41 +0000
ROA not before: Mon 01 Jan 2024 18:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200422
IP address blocks: 213.169.58.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 06:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:e8:96:b2:c2:52:49:91:ad:b5:8b:65:ab:32:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 1 18:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6bae9226b42120ca1d2ce26f56655ae695bc1a79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f1:ae:af:7d:3a:f7:e1:92:0d:0c:e3:58:5b:
ed:3d:9b:ef:ea:8e:ce:3c:f0:ba:10:b7:a7:72:d1:
11:6f:8e:ef:6b:57:d4:41:04:c6:43:50:cb:7c:c2:
54:15:41:f2:8a:1a:30:3c:72:28:69:aa:6b:2c:4a:
ff:db:b1:64:a8:85:1a:0e:c7:29:0b:f6:8f:ff:e3:
52:01:af:4e:bd:95:46:2c:12:f2:19:4a:96:05:57:
1e:8d:f0:50:2e:11:9a:f3:be:2b:be:38:24:34:da:
a4:ed:a5:d4:b8:c3:87:0e:c4:cc:e9:e7:87:0e:91:
36:61:56:f7:17:de:7e:94:67:e1:69:9c:4a:12:ca:
84:c1:04:a4:83:01:3e:c3:c4:82:26:2d:d2:86:85:
0e:a3:5b:8d:db:33:1a:f2:cf:b4:32:c5:b4:3c:9e:
dc:41:26:e2:40:08:25:a8:de:6e:31:00:ad:6b:83:
61:8c:2d:8e:ee:46:a7:b4:b6:08:a9:d2:18:43:c5:
12:0a:30:e6:2a:ed:f6:a1:18:33:7d:94:65:a7:30:
57:de:b6:75:e5:97:e1:6e:32:7b:31:8a:95:d9:1a:
bc:ce:3a:c2:46:9e:6a:b6:d7:d9:29:bc:7e:ae:0e:
13:3f:8f:3e:67:53:8a:a6:6d:e6:0a:3a:47:a9:80:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:AE:92:26:B4:21:20:CA:1D:2C:E2:6F:56:65:5A:E6:95:BC:1A:79
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/a66SJrQhIModLOJvVmVa5pW8Gnk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.58.0/24
Signature Algorithm: sha256WithRSAEncryption
91:4e:f6:d7:6a:f2:48:93:33:4e:bd:ed:47:03:b9:d3:da:44:
40:df:b2:2b:79:99:21:5c:10:86:0c:4d:30:74:fe:29:c3:4c:
b4:d8:aa:de:90:a5:c7:4a:e0:a5:7c:a4:83:0a:f6:57:87:d3:
e9:66:58:35:25:2a:21:4e:63:a3:e3:b7:7a:55:6a:18:e9:a9:
4f:62:9c:49:7e:47:f3:17:26:e6:d1:34:65:39:cc:21:4b:c6:
a4:26:71:e1:e8:f9:0e:1d:8c:0a:9f:c4:b5:cd:1a:dd:0f:03:
55:73:b6:73:c6:5f:b4:80:6d:34:ca:d4:57:93:ce:73:86:ed:
6b:b7:bf:5e:ba:0b:0a:f9:d3:b7:f1:51:68:b0:9e:79:22:8a:
72:b2:58:75:ee:d8:5a:c6:8f:fa:57:4a:03:fe:24:cd:6c:c8:
6b:e9:2a:6e:c6:c7:25:53:fb:eb:df:01:50:f6:7c:83:6b:81:
5b:07:67:4b:58:0b:96:92:cf:4d:f2:33:06:7e:89:38:fb:32:
3a:46:07:cb:13:42:8f:88:43:42:ee:ae:23:2b:44:69:66:b1:
d7:e2:c8:3c:e9:61:ae:13:92:8a:db:26:be:e3:56:d2:5f:9f:
5c:14:18:20:2d:5c:30:2a:cf:f9:09:f0:4c:00:1a:b3:01:13:
3a:e8:80:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSeiWssJSSZGttYtlqzKVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NDhjZWRmMTcwMjllZDk4YTEwODExM2M2YzEwOWVjYWNj
ZDgyZWMwHhcNMjQwMTAxMTgyOTQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YmFlOTIyNmI0MjEyMGNhMWQyY2UyNmY1NjY1NWFlNjk1YmMxYTc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfGur3069+GSDQzjWFvtPZvv6o7O
PPC6ELenctERb47va1fUQQTGQ1DLfMJUFUHyihowPHIoaaprLEr/27FkqIUaDscp
C/aP/+NSAa9OvZVGLBLyGUqWBVcejfBQLhGa874rvjgkNNqk7aXUuMOHDsTM6eeH
DpE2YVb3F95+lGfhaZxKEsqEwQSkgwE+w8SCJi3ShoUOo1uN2zMa8s+0MsW0PJ7c
QSbiQAglqN5uMQCta4NhjC2O7kantLYIqdIYQ8USCjDmKu32oRgzfZRlpzBX3rZ1
5ZfhbjJ7MYqV2Rq8zjrCRp5qttfZKbx+rg4TP48+Z1OKpm3mCjpHqYDcjwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGuukia0ISDKHSzib1ZlWuaVvBp5MB8GA1UdIwQY
MBaAFAVIzt8XAp7ZihCBE8bBCeyszYLsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAt
N2ZiYmFlNmY5NDM3LzEvYTY2U0pyUWhJTW9kTE9KdlZtVmE1cFc4R25rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS81NDFjMDUtOGQ3ZC00MmI4LWFiMDAtN2ZiYmFlNmY5NDM3
LzEvQlVqTzN4Y0NudG1LRUlFVHhzRUo3S3pOZ3V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1ak6MA0G
CSqGSIb3DQEBCwUAA4IBAQCRTvbXavJIkzNOve1HA7nT2kRA37IreZkhXBCGDE0w
dP4pw0y02KrekKXHSuClfKSDCvZXh9PpZlg1JSohTmOj47d6VWoY6alPYpxJfkfz
Fybm0TRlOcwhS8akJnHh6PkOHYwKn8S1zRrdDwNVc7Zzxl+0gG00ytRXk85zhu1r
t79eugsK+dO38VFosJ55Iopyslh17thaxo/6V0oD/iTNbMhr6SpuxsclU/vr3wFQ
9nyDa4FbB2dLWAuWks9N8jMGfok4+zI6RgfLE0KPiENC7q4jK0RpZrHX4sg86WGu
E5KK2ya+41bSX59cFBggLVwwKs/5CfBMABqzARM66IDZ
-----END CERTIFICATE-----
Generated at Mon May 6 12:49:48 2024 by rpki-client on console-ams.rpki-client.org