Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/HVYyZcnF4FHi_7SAOJC9uSWFVo4.roa
File: HVYyZcnF4FHi_7SAOJC9uSWFVo4.roa (raw, json)
Hash identifier: SHWmq0L1vAhHYKHtI5ddRXua9UwLJJHIiDZrHj3FtDg=
Subject key identifier: 1D:56:32:65:C9:C5:E0:51:E2:FF:B4:80:38:90:BD:B9:25:85:56:8E
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 018CC8018570BEAF904633014F231713B670
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/HVYyZcnF4FHi_7SAOJC9uSWFVo4.roa
Signing time: Tue 02 Jan 2024 02:29:52 +0000
ROA not before: Tue 02 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41568
IP address blocks: 217.9.10.0/24 maxlen: 24
217.9.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 04:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:85:70:be:af:90:46:33:01:4f:23:17:13:b6:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 2 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d563265c9c5e051e2ffb4803890bdb92585568e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b9:bf:61:14:1e:2d:14:77:14:7a:37:a3:a1:
61:67:d1:df:69:f1:55:91:5c:7e:fd:89:87:83:11:
99:8b:a0:60:bf:6f:05:d0:3c:d5:f3:aa:2b:e1:9b:
57:04:b4:ad:3a:19:93:20:12:f6:df:3d:b3:fc:5a:
c4:ec:f2:06:4a:8f:21:05:1a:39:4b:b8:8d:e9:47:
8c:81:cb:c3:7d:d4:d8:4f:4b:a8:0e:11:c5:0c:b5:
99:fb:aa:78:6b:07:4f:bb:b9:0f:d0:60:7c:60:f6:
cd:03:21:d0:07:7a:2b:e0:33:61:8f:41:b5:ab:c5:
f8:c5:d8:4c:9e:fe:74:2d:93:81:0b:73:2a:08:63:
32:b4:30:f7:a1:2a:ff:4d:ad:27:4d:16:1d:3f:ff:
1c:d7:d7:60:c2:61:ac:e2:19:b6:fd:75:94:c4:e5:
1d:a0:36:91:fa:b9:1f:f1:b0:91:c5:94:3c:d1:6f:
22:c6:21:65:ef:f8:8f:cb:63:20:09:13:29:7b:2d:
6d:84:be:4f:60:33:46:30:8e:6d:63:2a:56:18:fd:
e1:d2:c7:f0:0c:07:c8:04:3d:88:0e:7c:dd:7d:d5:
ea:70:a2:82:5a:99:41:5e:84:4a:6d:01:ba:4b:f6:
07:14:81:ed:36:99:21:38:79:10:33:ed:a5:d6:2c:
fb:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:56:32:65:C9:C5:E0:51:E2:FF:B4:80:38:90:BD:B9:25:85:56:8E
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/HVYyZcnF4FHi_7SAOJC9uSWFVo4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.9.0-217.9.10.255
Signature Algorithm: sha256WithRSAEncryption
d5:1d:c8:98:8b:74:4e:e5:40:df:75:6b:d2:9a:98:8e:32:ce:
9d:ee:de:a6:49:7a:87:e9:69:be:16:ef:28:0c:75:14:d0:c2:
bc:8b:38:c8:dd:82:aa:cf:0a:fd:44:5a:86:fa:a8:d7:b7:26:
6b:0a:d7:3b:52:c0:e9:b3:f8:8b:d8:a5:b5:c3:45:df:e5:fe:
7f:8a:93:70:5d:40:82:a7:7f:28:4d:ea:cd:79:11:87:2b:92:
a3:36:58:e3:a0:f6:89:c5:fa:e6:00:52:67:01:90:db:3c:f8:
78:6a:2c:60:c0:77:b2:01:68:df:77:27:1b:89:7c:53:12:c3:
8f:86:78:97:e4:4f:59:ec:a6:ed:7c:56:ff:a2:f1:bf:28:ce:
74:3d:25:c1:23:79:e5:84:1d:7e:d6:74:89:1c:27:2c:e2:cb:
3e:e5:4c:ea:35:36:f2:7b:0c:31:4b:e3:6c:92:5a:0d:56:f9:
66:87:4f:51:e5:b0:47:eb:f7:65:53:c8:d4:6b:db:37:7e:24:
e7:d8:f8:92:5a:f5:42:23:26:bc:f0:a2:f4:46:a1:eb:3d:0d:
3d:b3:05:23:2c:ff:d8:57:ad:50:c0:7f:eb:92:ba:09:e3:f1:
5e:55:ba:a5:7e:2f:d4:ea:82:6a:43:ed:de:2a:4b:34:c2:49:
41:bb:36:8b
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYzIAYVwvq+QRjMBTyMXE7ZwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZWUxODJkOWM0M2E1Y2U3MDY4ZGZkOWJhN2FhOGVkOTBl
NWUwYmEwHhcNMjQwMTAyMDIyOTUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDU2MzI2NWM5YzVlMDUxZTJmZmI0ODAzODkwYmRiOTI1ODU1NjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbm/YRQeLRR3FHo3o6FhZ9HfafFV
kVx+/YmHgxGZi6Bgv28F0DzV86or4ZtXBLStOhmTIBL23z2z/FrE7PIGSo8hBRo5
S7iN6UeMgcvDfdTYT0uoDhHFDLWZ+6p4awdPu7kP0GB8YPbNAyHQB3or4DNhj0G1
q8X4xdhMnv50LZOBC3MqCGMytDD3oSr/Ta0nTRYdP/8c19dgwmGs4hm2/XWUxOUd
oDaR+rkf8bCRxZQ80W8ixiFl7/iPy2MgCRMpey1thL5PYDNGMI5tYypWGP3h0sfw
DAfIBD2IDnzdfdXqcKKCWplBXoRKbQG6S/YHFIHtNpkhOHkQM+2l1iz7eQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFB1WMmXJxeBR4v+0gDiQvbklhVaOMB8GA1UdIwQY
MBaAFKfuGC2cQ6XOcGjf2bp6qO2Q5eC6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDkt
NmI1ZjY4NTIyYTdkLzEvSFZZeVpjbkY0RkhpXzdTQU9KQzl1U1dGVm80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9kYWI0MjAtMGRlMy00MzIxLTljMDktNmI1ZjY4NTIyYTdk
LzEvcC00WUxaeERwYzV3YU5fWnVucW83WkRsNExvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADZCQkD
BADZCQowDQYJKoZIhvcNAQELBQADggEBANUdyJiLdE7lQN91a9KamI4yzp3u3qZJ
eofpab4W7ygMdRTQwryLOMjdgqrPCv1EWob6qNe3JmsK1ztSwOmz+IvYpbXDRd/l
/n+Kk3BdQIKnfyhN6s15EYcrkqM2WOOg9onF+uYAUmcBkNs8+HhqLGDAd7IBaN93
JxuJfFMSw4+GeJfkT1nspu18Vv+i8b8oznQ9JcEjeeWEHX7WdIkcJyziyz7lTOo1
NvJ7DDFL42ySWg1W+WaHT1HlsEfr92VTyNRr2zd+JOfY+JJa9UIjJrzwovRGoes9
DT2zBSMs/9hXrVDAf+uSugnj8V5VuqV+L9TqgmpD7d4qSzTCSUG7Nos=
-----END CERTIFICATE-----
Generated at Sat Jun 15 12:29:18 2024 by rpki-client on console-fra.rpki-client.org