Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/HufB5FU1zY61RsGbuaIU_E6oY6o.roa
File: HufB5FU1zY61RsGbuaIU_E6oY6o.roa (raw, json)
Hash identifier: 50VzaYpgxiREuRQGzL0DS6Ylm9tNZqf1rjKkhbU/OPk=
Subject key identifier: 1E:E7:C1:E4:55:35:CD:8E:B5:46:C1:9B:B9:A2:14:FC:4E:A8:63:AA
Certificate issuer: /CN=3befe50a40fb1732541e8a97450ab5de774771d8
Certificate serial: 019197E1C9F5FD81C9F635A01B8DCE8B3D06
Authority key identifier: 3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/HufB5FU1zY61RsGbuaIU_E6oY6o.roa
Signing time: Wed 28 Aug 2024 07:27:22 +0000
ROA not before: Wed 28 Aug 2024 07:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214293
IP address blocks: 91.238.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:97:e1:c9:f5:fd:81:c9:f6:35:a0:1b:8d:ce:8b:3d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3befe50a40fb1732541e8a97450ab5de774771d8
Validity
Not Before: Aug 28 07:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ee7c1e45535cd8eb546c19bb9a214fc4ea863aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:2e:ba:a6:92:0f:0f:33:86:84:47:51:3c:
71:78:9b:e1:31:6c:62:ab:b8:f6:46:95:df:ed:1b:
4d:4a:8f:75:98:e2:18:ff:23:72:1c:67:bc:33:1e:
54:34:67:72:bf:ad:bb:e0:76:53:c4:03:4c:3f:6e:
58:ac:38:7e:5b:57:b3:a9:4f:01:24:79:19:68:81:
18:d7:e8:64:7c:9a:f2:3b:23:c0:fe:dd:67:8f:10:
70:9a:5a:2f:2e:ea:5e:5c:88:8f:6d:c2:26:24:2b:
36:6d:76:b6:21:9e:a4:d5:af:8f:91:8b:48:f4:ac:
2e:69:de:25:b6:54:09:16:b8:3e:5a:4f:81:bb:b6:
88:5d:ff:bc:dc:85:55:bf:49:34:a6:1f:6a:dd:58:
7f:ac:be:f7:2d:d2:85:c7:ee:a2:0e:40:80:98:1a:
61:9a:26:35:5e:57:b6:49:34:87:4e:5e:52:1e:6f:
87:15:44:2e:c1:19:59:9f:09:c3:67:8c:b8:83:d7:
22:de:7a:3a:93:04:de:b7:26:7a:fd:8b:a2:9d:ef:
76:88:1f:6d:48:ad:a8:20:4c:cd:4e:e1:89:b4:66:
00:1a:f3:6c:0b:64:b7:cb:7e:dd:e0:4a:c8:b7:6e:
9b:5b:9d:99:56:1b:94:3f:24:75:68:80:86:78:a2:
f1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E7:C1:E4:55:35:CD:8E:B5:46:C1:9B:B9:A2:14:FC:4E:A8:63:AA
X509v3 Authority Key Identifier:
keyid:3B:EF:E5:0A:40:FB:17:32:54:1E:8A:97:45:0A:B5:DE:77:47:71:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-_lCkD7FzJUHoqXRQq13ndHcdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/HufB5FU1zY61RsGbuaIU_E6oY6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/8ef740-1052-49ec-a409-e615493117d2/1/O-_lCkD7FzJUHoqXRQq13ndHcdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.194.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:36:c4:47:a6:43:be:1a:67:2e:3f:05:df:7e:9b:f0:f7:7c:
cb:d5:1e:43:5a:6e:98:10:c0:77:d4:97:d6:d2:80:35:cb:e7:
5c:b2:7d:ea:03:d0:e4:7c:70:c4:6b:98:3d:fa:fb:c9:59:94:
9f:99:ec:2d:92:9b:ec:f9:50:f2:da:13:f6:9e:f5:b1:c1:50:
e6:52:1c:6f:53:57:4d:e1:62:88:12:c5:80:58:54:46:f2:81:
d0:15:4d:5e:c9:ac:e9:0e:e3:0f:f2:6b:4d:66:c9:d9:a2:90:
a7:44:8c:9f:7a:47:57:76:5c:b0:df:a9:4d:42:7d:eb:54:3a:
ef:24:fb:b8:6b:53:b4:47:35:d2:de:29:3a:64:9c:07:8b:51:
1e:63:f0:fd:fc:c4:7a:5c:6a:ce:b4:85:c6:ea:79:5b:12:b1:
8c:04:83:f0:71:ff:0a:75:98:b8:92:03:e3:14:96:8b:90:3e:
13:e7:8d:9c:85:9a:bd:a5:91:cf:b9:5a:0c:c7:02:ba:18:a2:
c1:3a:88:17:d4:15:16:d3:26:16:ad:f6:4a:46:df:b7:06:ef:
3f:b3:5e:02:90:2d:4c:28:f4:15:40:5d:9f:76:e1:5b:a8:f6:
2f:be:ce:9e:55:af:8e:e1:bd:be:ee:eb:d2:78:86:42:48:40:
25:e0:af:ce
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGX4cn1/YHJ9jWgG43Oiz0GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZWZlNTBhNDBmYjE3MzI1NDFlOGE5NzQ1MGFiNWRlNzc0
NzcxZDgwHhcNMjQwODI4MDcyNzIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWU3YzFlNDU1MzVjZDhlYjU0NmMxOWJiOWEyMTRmYzRlYTg2M2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAwuuqaSDw8zhoRHUTxxeJvhMWxi
q7j2RpXf7RtNSo91mOIY/yNyHGe8Mx5UNGdyv6274HZTxANMP25YrDh+W1ezqU8B
JHkZaIEY1+hkfJryOyPA/t1njxBwmlovLupeXIiPbcImJCs2bXa2IZ6k1a+PkYtI
9Kwuad4ltlQJFrg+Wk+Bu7aIXf+83IVVv0k0ph9q3Vh/rL73LdKFx+6iDkCAmBph
miY1Xle2STSHTl5SHm+HFUQuwRlZnwnDZ4y4g9ci3no6kwTetyZ6/Yuine92iB9t
SK2oIEzNTuGJtGYAGvNsC2S3y37d4ErIt26bW52ZVhuUPyR1aICGeKLxCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB7nweRVNc2OtUbBm7miFPxOqGOqMB8GA1UdIwQY
MBaAFDvv5QpA+xcyVB6Kl0UKtd53R3HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84ZWY3NDAtMTA1Mi00OWVjLWE0MDkt
ZTYxNTQ5MzExN2QyLzEvSHVmQjVGVTF6WTYxUnNHYnVhSVVfRTZvWTZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84ZWY3NDAtMTA1Mi00OWVjLWE0MDktZTYxNTQ5MzExN2Qy
LzEvTy1fbENrRDdGekpVSG9xWFJRcTEzbmRIY2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+7CMA0G
CSqGSIb3DQEBCwUAA4IBAQCMNsRHpkO+GmcuPwXffpvw93zL1R5DWm6YEMB31JfW
0oA1y+dcsn3qA9DkfHDEa5g9+vvJWZSfmewtkpvs+VDy2hP2nvWxwVDmUhxvU1dN
4WKIEsWAWFRG8oHQFU1eyazpDuMP8mtNZsnZopCnRIyfekdXdlyw36lNQn3rVDrv
JPu4a1O0RzXS3ik6ZJwHi1EeY/D9/MR6XGrOtIXG6nlbErGMBIPwcf8KdZi4kgPj
FJaLkD4T542chZq9pZHPuVoMxwK6GKLBOogX1BUW0yYWrfZKRt+3Bu8/s14CkC1M
KPQVQF2fduFbqPYvvs6eVa+O4b2+7uvSeIZCSEAl4K/O
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:58:29 2024 by rpki-client on console-ams.rpki-client.org