Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/BRRqHl2MEmaPR450tAXFu3VxbVE.roa
File: BRRqHl2MEmaPR450tAXFu3VxbVE.roa (raw, json)
Hash identifier: ll+0hv/0Y0JhE9FX7JHz9msvFfyu8LDaJ5as+mMvg9s=
Subject key identifier: 05:14:6A:1E:5D:8C:12:66:8F:47:8E:74:B4:05:C5:BB:75:71:6D:51
Certificate issuer: /CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Certificate serial: 018CC3B6F99E00877C55A9058B99AEE51C11
Authority key identifier: 0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/BRRqHl2MEmaPR450tAXFu3VxbVE.roa
Signing time: Mon 01 Jan 2024 06:29:57 +0000
ROA not before: Mon 01 Jan 2024 06:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58153
IP address blocks: 188.213.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.mft
rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f9:9e:00:87:7c:55:a9:05:8b:99:ae:e5:1c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0af61798dd18965c027afa7f93ae030ff5e1d76e
Validity
Not Before: Jan 1 06:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=05146a1e5d8c12668f478e74b405c5bb75716d51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:8d:d3:22:bc:dd:e6:5b:3c:bd:38:02:38:05:
47:f3:55:5c:6c:a8:de:9b:3d:f7:e7:f9:1f:4a:e4:
57:19:ea:7c:85:28:ce:b8:87:71:b5:88:8f:42:9e:
35:8f:99:63:63:03:5f:30:51:97:ce:1e:2d:5d:e3:
f4:bd:b5:e2:2e:c1:74:ae:ae:6b:9d:67:98:c6:ab:
0d:c5:ab:66:92:fd:02:37:3e:c8:26:d1:0e:33:8a:
38:2a:27:48:f9:92:6f:f5:a0:65:9d:2f:e8:a6:e0:
36:f9:f3:57:85:2e:90:6b:9b:22:ac:d5:51:77:7d:
2a:9d:ed:03:ac:22:b4:4d:b6:5a:5b:0b:6a:3f:02:
45:be:11:ee:ce:3a:5b:0e:0b:0a:d1:bc:37:c9:2f:
9f:07:83:87:21:a3:77:f1:de:48:3d:30:43:86:b3:
f7:65:26:68:c6:0e:81:bc:02:00:2a:c5:20:d2:5f:
fa:0f:0f:7a:5b:33:cd:65:b6:67:61:86:46:63:f7:
6e:dd:d5:f2:fd:61:5f:aa:f7:78:70:2f:5f:b3:89:
83:b5:9e:4e:19:1c:6b:b3:e1:52:58:6b:7e:6a:86:
fa:b1:9f:2e:bf:c1:9f:fa:06:98:ce:b8:7f:8b:c8:
2b:32:93:ec:8a:d4:ef:6e:0c:4e:a7:06:7b:8a:51:
92:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:14:6A:1E:5D:8C:12:66:8F:47:8E:74:B4:05:C5:BB:75:71:6D:51
X509v3 Authority Key Identifier:
keyid:0A:F6:17:98:DD:18:96:5C:02:7A:FA:7F:93:AE:03:0F:F5:E1:D7:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CvYXmN0YllwCevp_k64DD_Xh124.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/BRRqHl2MEmaPR450tAXFu3VxbVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/615164-6d96-488a-96ba-d6e1e347f9c7/1/CvYXmN0YllwCevp_k64DD_Xh124.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.213.17.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:be:31:2d:1d:e9:6a:4b:66:fa:22:2a:12:c4:30:7e:18:15:
87:0a:df:74:ab:f7:bc:05:8a:d9:c4:7e:66:8c:c7:f6:d7:25:
71:ab:f7:cb:d5:e2:24:10:bb:89:41:db:73:a4:8f:74:dd:0d:
f4:69:3f:07:d2:cd:ec:af:a9:20:b4:ac:18:e5:95:25:88:1b:
f8:51:51:c8:6c:b2:59:ae:80:97:e1:ba:00:a3:d9:10:8f:3e:
c2:7a:c0:7a:4c:fe:1f:c2:1b:c0:4a:c3:af:ef:e8:3c:eb:72:
84:f5:3e:f9:bf:c7:df:56:3c:c4:d5:b5:53:bc:c6:d3:1a:76:
66:14:e8:a5:a7:d5:d2:d2:80:b8:79:75:49:67:0c:2f:0f:1f:
6d:d7:8c:64:28:86:43:df:78:22:b1:2e:35:36:b0:de:3b:0d:
37:92:37:dc:72:fd:dd:5e:a7:3a:a0:87:81:6d:af:41:c8:ec:
42:34:53:e4:6b:29:7b:db:02:64:ef:c0:f7:9e:26:90:27:ce:
c7:29:11:9a:8d:6d:fb:a6:94:86:98:19:ef:dc:74:1d:ba:5f:
82:af:90:b5:c5:e5:f1:b5:8d:16:2b:02:d3:84:73:99:57:6a:
b1:f6:42:35:ea:b0:31:19:2f:7d:e8:a6:bc:64:cb:75:25:64:
d5:d6:6b:49
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtvmeAId8VakFi5mu5RwRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZjYxNzk4ZGQxODk2NWMwMjdhZmE3ZjkzYWUwMzBmZjVl
MWQ3NmUwHhcNMjQwMTAxMDYyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTE0NmExZTVkOGMxMjY2OGY0NzhlNzRiNDA1YzViYjc1NzE2ZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh43TIrzd5ls8vTgCOAVH81VcbKje
mz335/kfSuRXGep8hSjOuIdxtYiPQp41j5ljYwNfMFGXzh4tXeP0vbXiLsF0rq5r
nWeYxqsNxatmkv0CNz7IJtEOM4o4KidI+ZJv9aBlnS/opuA2+fNXhS6Qa5sirNVR
d30qne0DrCK0TbZaWwtqPwJFvhHuzjpbDgsK0bw3yS+fB4OHIaN38d5IPTBDhrP3
ZSZoxg6BvAIAKsUg0l/6Dw96WzPNZbZnYYZGY/du3dXy/WFfqvd4cC9fs4mDtZ5O
GRxrs+FSWGt+aob6sZ8uv8Gf+gaYzrh/i8grMpPsitTvbgxOpwZ7ilGSJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAUUah5djBJmj0eOdLQFxbt1cW1RMB8GA1UdIwQY
MBaAFAr2F5jdGJZcAnr6f5OuAw/14dduMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEt
ZDZlMWUzNDdmOWM3LzEvQlJScUhsMk1FbWFQUjQ1MHRBWEZ1M1Z4YlZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC82MTUxNjQtNmQ5Ni00ODhhLTk2YmEtZDZlMWUzNDdmOWM3
LzEvQ3ZZWG1OMFlsbHdDZXZwX2s2NEREX1hoMTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNURMA0G
CSqGSIb3DQEBCwUAA4IBAQB9vjEtHelqS2b6IioSxDB+GBWHCt90q/e8BYrZxH5m
jMf21yVxq/fL1eIkELuJQdtzpI903Q30aT8H0s3sr6kgtKwY5ZUliBv4UVHIbLJZ
roCX4boAo9kQjz7CesB6TP4fwhvASsOv7+g863KE9T75v8ffVjzE1bVTvMbTGnZm
FOilp9XS0oC4eXVJZwwvDx9t14xkKIZD33gisS41NrDeOw03kjfccv3dXqc6oIeB
ba9ByOxCNFPkayl72wJk78D3niaQJ87HKRGajW37ppSGmBnv3HQdul+Cr5C1xeXx
tY0WKwLThHOZV2qx9kI16rAxGS996Ka8ZMt1JWTV1mtJ
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:33 2024 by rpki-client on console-ams.rpki-client.org