Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/H4x9wE2KWNt_ZQgqpD4f5kEjyIM.roa
File: H4x9wE2KWNt_ZQgqpD4f5kEjyIM.roa (raw, json)
Hash identifier: LqjO0CtlWtCZJVa2Mp7g6PentzBxIHR9wkv36vd+KdI=
Subject key identifier: 1F:8C:7D:C0:4D:8A:58:DB:7F:65:08:2A:A4:3E:1F:E6:41:23:C8:83
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA296BB728D0E0BDD6D46F769DAFFB57
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/H4x9wE2KWNt_ZQgqpD4f5kEjyIM.roa
Signing time: Tue 02 Jan 2024 12:32:41 +0000
ROA not before: Tue 02 Jan 2024 12:32:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212057
IP address blocks: 2a0e:8f02:f018::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:6b:b7:28:d0:e0:bd:d6:d4:6f:76:9d:af:fb:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f8c7dc04d8a58db7f65082aa43e1fe64123c883
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:aa:f5:54:e6:e8:11:ad:91:52:f0:c4:64:
6c:7b:9b:fc:f2:2a:18:b2:31:a5:10:2f:be:c4:25:
98:8c:06:26:8a:71:b8:14:f2:5a:47:ee:27:82:e3:
40:ad:de:f9:56:cd:b9:07:fe:11:a3:e5:d2:57:c0:
9c:76:0f:f7:9f:19:cf:7a:f5:1c:a5:12:1b:60:4e:
9c:d7:1d:e1:95:3b:d3:14:b4:41:61:33:0b:6a:cb:
2a:da:b1:c0:03:2f:ee:a1:d8:44:a7:c2:ba:bf:5d:
b5:54:ca:e2:02:30:f8:93:2e:dd:66:02:17:3f:d5:
4a:ad:e7:34:34:dd:21:d7:b4:bb:e7:c5:c8:69:f2:
b2:2d:8e:a9:57:e3:dc:2b:18:fb:15:49:61:92:e9:
7b:af:4a:3f:fd:c6:e0:a2:03:3b:5b:b3:4a:65:f8:
0e:26:71:21:16:f1:72:12:f6:95:a0:e4:45:73:de:
bc:8a:3e:ff:98:3e:2e:01:15:10:67:7a:9b:19:88:
55:17:ea:02:bf:ea:4c:8a:9d:9e:fb:0d:a0:df:66:
e8:20:4e:2d:11:37:0f:39:b3:13:e3:b4:6c:e2:8c:
2d:a7:ca:ae:a3:8c:78:f2:f3:98:02:a7:8c:7b:98:
0d:14:74:cb:a8:b4:f4:24:c2:69:3d:80:b3:47:79:
73:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8C:7D:C0:4D:8A:58:DB:7F:65:08:2A:A4:3E:1F:E6:41:23:C8:83
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/H4x9wE2KWNt_ZQgqpD4f5kEjyIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f018::/48
Signature Algorithm: sha256WithRSAEncryption
79:f2:e9:76:cb:d9:65:ad:69:f0:31:39:87:d8:b4:85:90:79:
6a:2b:fb:92:6a:8a:e9:c4:eb:fc:b6:03:06:79:74:92:57:07:
f2:d6:85:35:5f:38:c9:1e:96:a5:37:0b:1c:08:73:de:8f:05:
32:49:1c:08:0c:f7:20:ca:e8:38:d9:ad:9c:42:4d:9f:b8:39:
35:57:30:41:1a:7c:00:7d:d8:69:b4:48:68:92:b8:eb:07:f3:
06:bd:f7:c2:fe:d1:68:7b:b2:eb:43:ed:6d:85:5b:cf:1a:92:
24:79:3b:93:3a:da:3f:bb:d7:4f:a1:7d:bf:d4:f6:ab:3a:87:
b9:a3:3d:ea:b5:c3:7e:58:d4:d3:6b:1f:a0:e9:b9:51:a5:65:
90:a9:db:f3:e1:29:52:81:8b:07:ce:b6:b3:70:51:88:9f:59:
4e:66:8d:f4:cd:42:18:c2:42:6b:98:c8:e6:b1:d9:57:02:12:
df:3a:97:d7:07:49:71:e5:56:ce:6f:2a:06:0c:ce:32:cb:05:
7b:25:f4:57:26:35:cd:c2:50:11:32:27:28:c4:19:f2:0a:90:
21:76:56:5d:de:4e:55:dc:36:86:23:17:10:30:40:1b:27:6f:
5a:5b:63:0e:a0:fe:d1:29:be:22:9a:d2:83:a8:03:e0:62:f4:
3f:bf:e3:bb
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzKKWu3KNDgvdbUb3adr/tXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NmVmNDhlZDYxNTVkZDc4NDNlZWQzNjMyNDY5YWJhYTMx
MDBiZjMwHhcNMjQwMTAyMTIzMjQxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjhjN2RjMDRkOGE1OGRiN2Y2NTA4MmFhNDNlMWZlNjQxMjNjODgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMWq9VTm6BGtkVLwxGRse5v88ioY
sjGlEC++xCWYjAYminG4FPJaR+4nguNArd75Vs25B/4Ro+XSV8Ccdg/3nxnPevUc
pRIbYE6c1x3hlTvTFLRBYTMLassq2rHAAy/uodhEp8K6v121VMriAjD4ky7dZgIX
P9VKrec0NN0h17S758XIafKyLY6pV+PcKxj7FUlhkul7r0o//cbgogM7W7NKZfgO
JnEhFvFyEvaVoORFc968ij7/mD4uARUQZ3qbGYhVF+oCv+pMip2e+w2g32boIE4t
ETcPObMT47Rs4owtp8quo4x48vOYAqeMe5gNFHTLqLT0JMJpPYCzR3lzAQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFB+MfcBNiljbf2UIKqQ+H+ZBI8iDMB8GA1UdIwQY
MBaAFNVu9I7WFV3XhD7tNjJGmrqjEAvzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgt
ZDJkN2YyYmI2NGRmLzEvSDR4OXdFMktXTnRfWlFncXBENGY1a0VqeUlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81OGZmNTQtMzQxMC00ZTQyLWFhYjgtZDJkN2YyYmI2NGRm
LzEvMVc3MGp0WVZYZGVFUHUwMk1rYWF1cU1RQ19NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg6PAvAY
MA0GCSqGSIb3DQEBCwUAA4IBAQB58ul2y9llrWnwMTmH2LSFkHlqK/uSaorpxOv8
tgMGeXSSVwfy1oU1XzjJHpalNwscCHPejwUySRwIDPcgyug42a2cQk2fuDk1VzBB
GnwAfdhptEhokrjrB/MGvffC/tFoe7LrQ+1thVvPGpIkeTuTOto/u9dPoX2/1Par
Ooe5oz3qtcN+WNTTax+g6blRpWWQqdvz4SlSgYsHzrazcFGIn1lOZo30zUIYwkJr
mMjmsdlXAhLfOpfXB0lx5VbObyoGDM4yywV7JfRXJjXNwlARMicoxBnyCpAhdlZd
3k5V3DaGIxcQMEAbJ29aW2MOoP7RKb4imtKDqAPgYvQ/v+O7
-----END CERTIFICATE-----
Generated at Tue May 21 22:31:55 2024 by rpki-client on console-fra.rpki-client.org