Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/8Qtje6pvFtexvuCocSDF7cIQ5r4.roa
File: 8Qtje6pvFtexvuCocSDF7cIQ5r4.roa (raw, json)
Hash identifier: 499nbakt0w6Ww6ko3qJ887J1KumZdUqoWMuvps9aV/Q=
Subject key identifier: F1:0B:63:7B:AA:6F:16:D7:B1:BE:E0:A8:71:20:C5:ED:C2:10:E6:BE
Certificate issuer: /CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Certificate serial: 018CC94E62736CF5B2DD09706DCA2E2EF4C1
Authority key identifier: 12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/8Qtje6pvFtexvuCocSDF7cIQ5r4.roa
Signing time: Tue 02 Jan 2024 08:33:26 +0000
ROA not before: Tue 02 Jan 2024 08:33:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49043
IP address blocks: 86.117.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:62:73:6c:f5:b2:dd:09:70:6d:ca:2e:2e:f4:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1224e5eff1abc0e6d8bf029e4f732e0ab71bc16a
Validity
Not Before: Jan 2 08:33:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f10b637baa6f16d7b1bee0a87120c5edc210e6be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:db:bb:22:d1:8f:30:08:69:04:8e:b4:b6:0d:
23:67:f6:04:1e:af:d1:00:4c:a4:e8:03:af:e0:06:
0d:f7:96:45:57:07:26:c7:c8:07:21:be:12:bb:21:
3e:33:bd:92:9a:ec:ce:7f:4b:f8:75:5c:02:ab:1e:
c8:83:b3:f0:28:11:6a:f7:fc:2e:44:41:2e:0d:36:
89:a6:ab:e5:07:95:bc:23:08:ab:82:11:df:3b:c2:
40:18:d7:44:87:a3:54:43:0d:65:dd:87:a5:71:76:
a9:fa:98:45:da:c3:4d:41:a3:e9:87:2a:d1:fa:a0:
e4:cb:23:f9:5d:23:13:7d:d0:bf:e7:b8:f1:d5:8a:
e1:50:88:86:a1:82:e9:52:b8:9a:43:65:60:06:9c:
59:74:d2:0d:f2:a1:cb:36:04:82:17:34:34:b7:b7:
6b:bd:e4:30:09:9b:63:33:4f:b6:7a:1a:e7:7d:7d:
81:25:64:3d:63:aa:42:c2:cb:68:d3:09:42:c0:70:
f2:c3:99:3c:8d:30:30:4a:5c:33:d4:93:d4:bc:d3:
42:eb:ac:9e:0c:d8:b9:da:62:7e:40:8a:59:ec:b9:
90:6a:32:9d:a9:5e:8d:0f:84:f6:7c:65:77:e9:da:
e1:55:35:53:5a:1e:9f:bc:56:a3:e3:76:97:49:f9:
8b:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0B:63:7B:AA:6F:16:D7:B1:BE:E0:A8:71:20:C5:ED:C2:10:E6:BE
X509v3 Authority Key Identifier:
keyid:12:24:E5:EF:F1:AB:C0:E6:D8:BF:02:9E:4F:73:2E:0A:B7:1B:C1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiTl7_GrwObYvwKeT3MuCrcbwWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/8Qtje6pvFtexvuCocSDF7cIQ5r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/11be23-3be6-4881-a3d1-5386b1d963bc/1/EiTl7_GrwObYvwKeT3MuCrcbwWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.117.18.0/23
Signature Algorithm: sha256WithRSAEncryption
50:88:e4:d2:42:e1:73:66:6d:6b:06:52:22:eb:75:3d:31:c0:
9f:ff:3c:dc:fb:66:54:ee:a0:e4:4d:fd:3b:2a:fa:54:a9:0f:
0d:b7:02:49:05:db:59:dc:db:fe:e5:4c:5c:a4:a6:24:8f:06:
ad:90:00:e1:46:e2:25:ab:1e:e0:04:cc:17:bc:6c:a5:ac:90:
23:c8:ac:9f:ec:b6:5f:2f:41:c2:c5:98:ac:fb:d7:65:b4:fc:
05:fd:85:d6:6a:ea:15:2d:36:4e:3c:2b:ba:b1:a1:e2:5d:90:
c6:fc:fd:8b:1b:af:dd:9e:b4:bf:c2:e5:84:43:c3:a1:56:f0:
c1:aa:f0:ae:da:dc:d6:6f:02:c1:79:70:17:95:e7:d3:a5:29:
3b:df:aa:07:33:ae:85:4a:87:3d:2f:85:3b:31:d7:c4:a3:55:
6b:d6:4e:21:d1:f4:e9:93:b0:c1:32:8e:d5:3c:39:5f:4f:ca:
12:d8:77:18:63:c7:be:81:a9:56:f3:1b:81:0c:e1:45:9c:28:
40:bf:91:47:d2:8d:c7:95:27:7a:48:71:96:3e:a1:b0:3a:e2:
4e:02:fa:eb:ee:c6:4c:8e:fb:8a:84:78:1c:01:3d:75:6b:69:
1d:69:07:09:85:51:5b:c0:7c:2a:1b:aa:43:89:ee:e3:30:d0:
91:20:24:00
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzJTmJzbPWy3QlwbcouLvTBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMjRlNWVmZjFhYmMwZTZkOGJmMDI5ZTRmNzMyZTBhYjcx
YmMxNmEwHhcNMjQwMTAyMDgzMzI2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTBiNjM3YmFhNmYxNmQ3YjFiZWUwYTg3MTIwYzVlZGMyMTBlNmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9u7ItGPMAhpBI60tg0jZ/YEHq/R
AEyk6AOv4AYN95ZFVwcmx8gHIb4SuyE+M72SmuzOf0v4dVwCqx7Ig7PwKBFq9/wu
REEuDTaJpqvlB5W8IwirghHfO8JAGNdEh6NUQw1l3YelcXap+phF2sNNQaPphyrR
+qDkyyP5XSMTfdC/57jx1YrhUIiGoYLpUriaQ2VgBpxZdNIN8qHLNgSCFzQ0t7dr
veQwCZtjM0+2ehrnfX2BJWQ9Y6pCwsto0wlCwHDyw5k8jTAwSlwz1JPUvNNC66ye
DNi52mJ+QIpZ7LmQajKdqV6ND4T2fGV36drhVTVTWh6fvFaj43aXSfmL8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPELY3uqbxbXsb7gqHEgxe3CEOa+MB8GA1UdIwQY
MBaAFBIk5e/xq8Dm2L8Cnk9zLgq3G8FqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEt
NTM4NmIxZDk2M2JjLzEvOFF0amU2cHZGdGV4dnVDb2NTREY3Y0lRNXI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8xMWJlMjMtM2JlNi00ODgxLWEzZDEtNTM4NmIxZDk2M2Jj
LzEvRWlUbDdfR3J3T2JZdndLZVQzTXVDcmNid1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBVnUSMA0G
CSqGSIb3DQEBCwUAA4IBAQBQiOTSQuFzZm1rBlIi63U9McCf/zzc+2ZU7qDkTf07
KvpUqQ8NtwJJBdtZ3Nv+5UxcpKYkjwatkADhRuIlqx7gBMwXvGylrJAjyKyf7LZf
L0HCxZis+9dltPwF/YXWauoVLTZOPCu6saHiXZDG/P2LG6/dnrS/wuWEQ8OhVvDB
qvCu2tzWbwLBeXAXlefTpSk736oHM66FSoc9L4U7MdfEo1Vr1k4h0fTpk7DBMo7V
PDlfT8oS2HcYY8e+galW8xuBDOFFnChAv5FH0o3HlSd6SHGWPqGwOuJOAvrr7sZM
jvuKhHgcAT11a2kdaQcJhVFbwHwqG6pDie7jMNCRICQA
-----END CERTIFICATE-----
Generated at Sat Jun 1 12:31:43 2024 by rpki-client on console-ams.rpki-client.org