Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/HSarMK5Sez3JwNhRT8ra4aFu9AU.roa
File: HSarMK5Sez3JwNhRT8ra4aFu9AU.roa (raw, json)
Hash identifier: 5MYxv8jr3iMgJlc1PVi2pv0Hy8op2xOA5B2B7NLBy+A=
Subject key identifier: 1D:26:AB:30:AE:52:7B:3D:C9:C0:D8:51:4F:CA:DA:E1:A1:6E:F4:05
Certificate issuer: /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial: 018D701D2BAEA79F349B0E3D363AF627C634
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/HSarMK5Sez3JwNhRT8ra4aFu9AU.roa
Signing time: Sat 03 Feb 2024 17:56:16 +0000
ROA not before: Sat 03 Feb 2024 17:56:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213081
IP address blocks: 185.155.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:70:1d:2b:ae:a7:9f:34:9b:0e:3d:36:3a:f6:27:c6:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Validity
Not Before: Feb 3 17:56:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d26ab30ae527b3dc9c0d8514fcadae1a16ef405
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9c:2d:61:d4:e3:33:7b:1c:17:ee:84:99:93:
02:e8:1c:2c:63:2f:90:84:9f:4c:06:35:e4:92:80:
7f:26:a3:2c:11:c8:98:86:cb:a7:89:70:fc:62:b1:
3a:7e:79:fc:7a:4d:31:5b:67:91:28:c5:59:8b:4c:
97:75:72:d9:d8:da:2e:7a:68:f3:98:37:44:2a:76:
e5:08:fd:1c:31:6d:d6:e3:ce:ed:71:00:b7:4a:db:
83:2c:d5:1f:71:64:83:3c:c8:05:f8:8a:d9:9c:e7:
f2:71:24:de:72:d5:f7:68:24:8b:ae:18:7c:84:eb:
bc:46:48:ca:8f:36:ae:d5:a0:58:7e:18:64:b1:8c:
4b:56:96:33:e3:b4:9e:b9:e7:c7:d8:a5:58:e2:d9:
76:90:31:c2:bb:3d:a6:9b:f9:37:2e:c1:d9:b7:02:
ae:c6:04:84:73:9f:19:e3:bd:63:d7:e4:85:64:92:
cf:46:a3:f9:03:51:02:b6:8c:44:bd:63:e9:96:db:
29:62:80:3f:bd:3b:ac:e9:57:5b:e2:29:d5:25:1b:
72:c2:ee:c7:c8:27:8a:61:e1:84:36:31:b3:8a:43:
4d:53:23:c4:8b:b0:04:97:5d:c4:a9:fa:16:ab:8a:
9c:40:ba:46:a9:08:31:29:3f:97:9c:92:58:b6:32:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:26:AB:30:AE:52:7B:3D:C9:C0:D8:51:4F:CA:DA:E1:A1:6E:F4:05
X509v3 Authority Key Identifier:
keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/HSarMK5Sez3JwNhRT8ra4aFu9AU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.29.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:f4:ea:b7:df:5b:1c:41:b2:9f:b4:4f:37:ee:61:1c:f6:9f:
1e:ff:06:d9:a9:70:5d:4d:52:02:f4:f4:c4:73:56:b0:71:69:
bc:38:a5:7b:50:3a:86:12:43:fc:3e:45:85:8f:cd:e0:6d:22:
c4:73:f9:fb:ed:3c:7f:6c:d8:aa:39:0d:f4:1d:df:73:ac:77:
3f:57:7d:d5:2f:de:ff:bb:6b:15:6c:09:5c:e1:de:9c:f7:d6:
cd:2a:0c:20:b4:ae:72:54:9e:63:cf:31:29:b3:88:3a:2d:bc:
d3:fe:f1:8d:94:39:a5:de:4c:7d:3c:f3:1c:65:e8:65:6b:40:
4c:f5:26:12:f9:83:70:b1:8f:1f:40:b3:cf:d1:20:de:2b:2b:
89:d3:aa:5b:d8:0c:ba:b0:30:ed:a1:e1:15:35:84:00:1b:4a:
b7:30:c0:fc:53:e8:05:74:5c:83:7f:5a:0d:37:dd:4e:64:da:
1e:be:0c:46:ed:08:2e:a9:d3:33:88:aa:d0:53:b2:94:28:51:
0f:80:84:34:a2:8c:20:54:91:45:03:e9:75:ce:2d:a8:9a:5b:
be:39:4b:59:5a:1d:8f:38:f8:68:a0:d0:af:b6:d8:ce:bc:93:
08:b8:2e:95:56:d8:29:ac:7b:6d:69:e3:fb:0d:ce:83:1b:c6:
1d:b5:a0:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1wHSuup580mw49Njr2J8Y0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTg5OGJmNDIwOTI0Zjk3NmI1YWU0NTExMDhiOWU2YTAx
ZmM3ZGMwHhcNMjQwMjAzMTc1NjE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDI2YWIzMGFlNTI3YjNkYzljMGQ4NTE0ZmNhZGFlMWExNmVmNDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpwtYdTjM3scF+6EmZMC6BwsYy+Q
hJ9MBjXkkoB/JqMsEciYhsuniXD8YrE6fnn8ek0xW2eRKMVZi0yXdXLZ2Nouemjz
mDdEKnblCP0cMW3W487tcQC3StuDLNUfcWSDPMgF+IrZnOfycSTectX3aCSLrhh8
hOu8RkjKjzau1aBYfhhksYxLVpYz47SeuefH2KVY4tl2kDHCuz2mm/k3LsHZtwKu
xgSEc58Z471j1+SFZJLPRqP5A1ECtoxEvWPpltspYoA/vTus6Vdb4inVJRtywu7H
yCeKYeGENjGzikNNUyPEi7AEl13EqfoWq4qcQLpGqQgxKT+XnJJYtjJgBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0mqzCuUns9ycDYUU/K2uGhbvQFMB8GA1UdIwQY
MBaAFFfomL9CCST5drWuRREIueagH8fcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1pWXYwSUpKUGwydGE1RkVRaTU1cUFmeDl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNTE0Y2QtNzk1NC00NGNlLWJkN2Yt
NzEzYjQxNjg4NzA2LzEvSFNhck1LNVNlejNKd05oUlQ4cmE0YUZ1OUFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNTE0Y2QtNzk1NC00NGNlLWJkN2YtNzEzYjQxNjg4NzA2
LzEvVi1pWXYwSUpKUGwydGE1RkVRaTU1cUFmeDl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZsdMA0G
CSqGSIb3DQEBCwUAA4IBAQB89Oq331scQbKftE837mEc9p8e/wbZqXBdTVIC9PTE
c1awcWm8OKV7UDqGEkP8PkWFj83gbSLEc/n77Tx/bNiqOQ30Hd9zrHc/V33VL97/
u2sVbAlc4d6c99bNKgwgtK5yVJ5jzzEps4g6LbzT/vGNlDml3kx9PPMcZehla0BM
9SYS+YNwsY8fQLPP0SDeKyuJ06pb2Ay6sDDtoeEVNYQAG0q3MMD8U+gFdFyDf1oN
N91OZNoevgxG7QguqdMziKrQU7KUKFEPgIQ0oowgVJFFA+l1zi2omlu+OUtZWh2P
OPhooNCvttjOvJMIuC6VVtgprHttaeP7Dc6DG8YdtaCy
-----END CERTIFICATE-----
Generated at Sat Nov 23 04:39:51 2024 by rpki-client on console-ams.rpki-client.org