Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/bG9HolRQiN1R-o_g2lvBBGQux48.roa
File: bG9HolRQiN1R-o_g2lvBBGQux48.roa (raw, json)
Hash identifier: 1xF1JgJWsHsr7+f4I3tNp98z6Hi9HKj9Ceeae5x/HtA=
Subject key identifier: 6C:6F:47:A2:54:50:88:DD:51:FA:8F:E0:DA:5B:C1:04:64:2E:C7:8F
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 018E3482B71165AD4E4112566C3C4355CB57
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/bG9HolRQiN1R-o_g2lvBBGQux48.roa
Signing time: Tue 12 Mar 2024 21:12:45 +0000
ROA not before: Tue 12 Mar 2024 21:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 25400
IP address blocks: 79.174.16.0/24 maxlen: 24
194.146.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 May 2024 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:34:82:b7:11:65:ad:4e:41:12:56:6c:3c:43:55:cb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Mar 12 21:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6c6f47a2545088dd51fa8fe0da5bc104642ec78f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:6e:cb:1d:0c:bf:57:a5:bc:7c:45:48:9d:3a:
28:fd:14:f9:ec:f2:61:44:00:fb:1a:40:a6:b7:12:
12:3f:38:5d:91:10:9e:44:6a:28:46:8b:3d:fd:90:
c6:d0:01:0a:91:af:3d:ad:5d:75:6f:76:5e:ec:6a:
91:40:31:72:58:4a:31:be:c2:c3:37:7b:5b:2a:ef:
cb:24:f8:81:b8:dc:cb:3b:8e:d2:a9:87:d5:5b:61:
91:b3:03:fb:5a:44:97:70:83:70:9d:63:25:22:43:
43:69:0e:40:ee:9b:af:47:08:fa:03:b2:30:51:51:
15:00:c9:e1:06:88:d3:cf:75:58:cf:ee:0e:01:1b:
66:eb:38:7a:14:d9:a3:d8:47:ba:0a:f4:fa:d7:c5:
92:8d:00:e2:e3:2b:5b:7f:fe:84:ca:07:8c:f4:fc:
0c:37:95:47:9a:e2:6c:03:a4:f3:4c:d4:11:8a:8a:
f8:e8:ad:9b:44:2a:bd:21:54:34:64:6f:01:c5:22:
7e:dd:52:55:d1:13:e8:00:f4:b4:74:f7:11:cb:b5:
82:b2:ae:1f:d1:ca:ad:1c:08:7a:fa:05:83:72:91:
e3:39:a3:7a:81:08:2c:20:f0:60:6f:5e:50:25:dd:
fe:91:5c:9d:09:11:5e:55:a3:83:14:ae:24:89:6b:
85:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6F:47:A2:54:50:88:DD:51:FA:8F:E0:DA:5B:C1:04:64:2E:C7:8F
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/bG9HolRQiN1R-o_g2lvBBGQux48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.16.0/24
194.146.8.0/22
Signature Algorithm: sha256WithRSAEncryption
b7:57:34:4f:1e:e6:6e:d2:b6:96:2c:51:42:e4:b7:95:64:33:
98:ba:80:95:09:d8:60:18:41:68:f0:13:de:ed:58:95:dc:46:
2e:76:23:3e:d2:c3:00:56:13:89:05:be:a4:7e:29:ef:b1:7d:
d6:19:5a:fd:d1:cc:3f:e2:42:33:2a:24:d7:dc:db:c9:f5:7d:
52:b0:6d:85:0f:1f:ce:39:17:6e:72:f8:d3:46:81:9f:20:30:
b2:4d:68:75:02:1e:dd:17:73:d0:82:1d:a8:39:9f:a1:ae:93:
95:17:06:22:bc:47:46:8a:30:bf:48:34:f7:23:79:a8:bc:7c:
72:8b:c3:ad:e3:3f:2c:bb:9d:d3:d5:c0:ef:4a:e5:1c:d8:35:
f2:3a:bc:9c:b1:94:65:e2:62:73:c4:4d:0d:2b:de:88:97:ea:
d7:6a:c2:3a:e1:8f:20:5d:5a:6f:72:8d:88:d3:15:c4:bb:42:
0c:41:15:ae:02:8b:f8:57:c6:f8:a5:c6:f2:47:c8:5d:6d:dd:
9c:9e:14:88:ef:14:48:93:95:85:c4:4e:30:94:72:65:3f:de:
c9:4a:99:fa:d2:90:75:4e:6a:3b:bf:cb:fa:a8:63:94:9a:b3:
10:f1:c8:f3:a2:10:d7:fb:1a:e1:0e:4a:a9:2b:3a:8d:50:d6:
c2:5e:d6:ec
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAY40grcRZa1OQRJWbDxDVctXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NWZkYjBkZTQwNTEzNDdhMjFlOTYyOGFjNDE3MzY3MzRj
YjRmMmIwHhcNMjQwMzEyMjExMjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzZmNDdhMjU0NTA4OGRkNTFmYThmZTBkYTViYzEwNDY0MmVjNzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW7LHQy/V6W8fEVInToo/RT57PJh
RAD7GkCmtxISPzhdkRCeRGooRos9/ZDG0AEKka89rV11b3Ze7GqRQDFyWEoxvsLD
N3tbKu/LJPiBuNzLO47SqYfVW2GRswP7WkSXcINwnWMlIkNDaQ5A7puvRwj6A7Iw
UVEVAMnhBojTz3VYz+4OARtm6zh6FNmj2Ee6CvT618WSjQDi4ytbf/6EygeM9PwM
N5VHmuJsA6TzTNQRior46K2bRCq9IVQ0ZG8BxSJ+3VJV0RPoAPS0dPcRy7WCsq4f
0cqtHAh6+gWDcpHjOaN6gQgsIPBgb15QJd3+kVydCRFeVaODFK4kiWuFrwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGxvR6JUUIjdUfqP4NpbwQRkLsePMB8GA1UdIwQY
MBaAFAdf2w3kBRNHoh6WKKxBc2c0y08rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUt
Zjc1MzFhMmI2MjQ3LzEvYkc5SG9sUlFpTjFSLW9fZzJsdkJCR1F1eDQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8yZWYwZjEtNTA4Mi00OGRmLTk0ZmUtZjc1MzFhMmI2MjQ3
LzEvQjFfYkRlUUZFMGVpSHBZb3JFRnpaelRMVHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAT64QAwQC
wpIIMA0GCSqGSIb3DQEBCwUAA4IBAQC3VzRPHuZu0raWLFFC5LeVZDOYuoCVCdhg
GEFo8BPe7ViV3EYudiM+0sMAVhOJBb6kfinvsX3WGVr90cw/4kIzKiTX3NvJ9X1S
sG2FDx/OORducvjTRoGfIDCyTWh1Ah7dF3PQgh2oOZ+hrpOVFwYivEdGijC/SDT3
I3movHxyi8Ot4z8su53T1cDvSuUc2DXyOrycsZRl4mJzxE0NK96Il+rXasI64Y8g
XVpvco2I0xXEu0IMQRWuAov4V8b4pcbyR8hdbd2cnhSI7xRIk5WFxE4wlHJlP97J
Spn60pB1Tmo7v8v6qGOUmrMQ8cjzohDX+xrhDkqpKzqNUNbCXtbs
-----END CERTIFICATE-----
Generated at Wed May 8 18:02:54 2024 by rpki-client on console-ams.rpki-client.org