Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/h1kPIf-2j6LWBCkiWp_9Uvv5rPg.roa
File: h1kPIf-2j6LWBCkiWp_9Uvv5rPg.roa (raw, json)
Hash identifier: P+4jjbDwla8FjcVg7y4IW0CT+gnKDj/80szJAhVTCPU=
Subject key identifier: 87:59:0F:21:FF:B6:8F:A2:D6:04:29:22:5A:9F:FD:52:FB:F9:AC:F8
Certificate issuer: /CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Certificate serial: 018CC64ADCA028F94786887609D237EE890E
Authority key identifier: 6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/h1kPIf-2j6LWBCkiWp_9Uvv5rPg.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211288
IP address blocks: 95.164.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:dc:a0:28:f9:47:86:88:76:09:d2:37:ee:89:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d743ed63e868ef50f6d84c0003a83483fc62a03
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87590f21ffb68fa2d60429225a9ffd52fbf9acf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1b:c8:5e:97:51:3d:18:56:1b:98:80:3c:2c:
50:ee:9c:2b:53:4e:cb:95:51:d2:30:95:93:69:4f:
0f:f3:fd:43:19:39:97:5c:2e:2e:8d:3b:43:0b:1c:
d5:67:73:dc:b5:42:88:0d:30:07:da:58:13:d5:4d:
43:d0:ff:fd:56:f2:a6:d5:86:c2:da:01:51:1f:ce:
f2:be:6e:e3:e4:d5:0b:13:9f:c2:c9:e2:59:4b:a5:
0d:be:b7:f8:90:44:26:c1:4b:a2:51:40:e9:9c:71:
34:1a:6b:23:ab:ba:89:45:38:ab:de:9c:3e:4a:9a:
cb:d3:6e:38:43:91:84:da:59:f4:0c:68:ac:f5:65:
58:e4:64:10:1c:db:fe:a3:65:a5:61:5e:af:9c:fa:
d0:28:a5:0f:4e:b0:f2:b7:4f:0f:2a:58:7e:96:28:
ef:7e:49:72:33:fb:1b:93:05:9d:5c:43:36:32:59:
39:12:54:98:d0:ba:38:11:70:db:5c:e4:53:ec:56:
50:7f:59:42:8e:b8:63:f1:93:f9:df:7a:fa:d6:fc:
36:7b:df:fc:24:2e:32:7b:7a:88:0e:b9:7f:02:b0:
1b:22:f8:2c:fe:01:4e:0d:e3:ba:3a:3b:96:8a:98:
2b:12:66:90:2a:7b:93:dc:b7:cd:b4:4f:cd:d1:d8:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:59:0F:21:FF:B6:8F:A2:D6:04:29:22:5A:9F:FD:52:FB:F9:AC:F8
X509v3 Authority Key Identifier:
keyid:6D:74:3E:D6:3E:86:8E:F5:0F:6D:84:C0:00:3A:83:48:3F:C6:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXQ-1j6GjvUPbYTAADqDSD_GKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/h1kPIf-2j6LWBCkiWp_9Uvv5rPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/e05352-f148-40a0-87a4-e9724a7a6bc8/1/bXQ-1j6GjvUPbYTAADqDSD_GKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.164.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:65:69:9b:b0:95:8a:52:10:d3:75:0f:50:50:34:f7:98:26:
94:22:91:e7:d8:df:4b:67:c3:08:de:1e:8c:c1:2c:93:9f:40:
25:9a:c3:43:cd:d3:2e:05:89:cd:15:18:8c:ce:ee:3c:d0:d6:
16:2f:18:e7:94:0c:54:a0:0f:c9:96:3a:53:7e:07:10:7f:0b:
00:d5:ea:b4:3a:07:1e:45:b2:4b:0a:85:95:8c:9e:a2:2b:ef:
63:c9:88:b7:41:db:3e:cd:17:ad:2e:80:d8:b7:89:04:6a:07:
8d:4a:a0:2b:1d:8c:f1:64:11:d5:eb:87:59:1d:b7:9b:a1:51:
06:0e:a9:29:27:5f:2d:d7:f9:ce:4e:b4:cf:e1:15:e4:9d:5d:
7b:ed:b4:0b:41:c5:86:61:e5:06:b2:10:a5:84:bb:04:24:3a:
bc:a3:2f:e5:59:84:ef:09:2a:37:ce:79:93:17:5b:07:8b:4b:
88:6a:4c:e3:ad:ed:e5:0d:d4:a6:73:be:a0:c9:66:36:20:f8:
7a:f1:f0:8f:50:b6:b6:9d:60:26:e0:60:6b:bf:c1:be:13:7a:
e1:11:4a:01:cc:b6:c5:ca:86:d6:f1:67:9a:30:5f:23:81:89:
d4:87:97:f4:34:63:23:c2:79:ef:e9:a1:cd:b1:3a:1f:bb:62:
db:f3:b0:38
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGStygKPlHhoh2CdI37okOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNzQzZWQ2M2U4NjhlZjUwZjZkODRjMDAwM2E4MzQ4M2Zj
NjJhMDMwHhcNMjQwMTAxMTgzMDQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NzU5MGYyMWZmYjY4ZmEyZDYwNDI5MjI1YTlmZmQ1MmZiZjlhY2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRvIXpdRPRhWG5iAPCxQ7pwrU07L
lVHSMJWTaU8P8/1DGTmXXC4ujTtDCxzVZ3PctUKIDTAH2lgT1U1D0P/9VvKm1YbC
2gFRH87yvm7j5NULE5/CyeJZS6UNvrf4kEQmwUuiUUDpnHE0Gmsjq7qJRTir3pw+
SprL0244Q5GE2ln0DGis9WVY5GQQHNv+o2WlYV6vnPrQKKUPTrDyt08PKlh+lijv
fklyM/sbkwWdXEM2Mlk5ElSY0Lo4EXDbXORT7FZQf1lCjrhj8ZP533r61vw2e9/8
JC4ye3qIDrl/ArAbIvgs/gFODeO6OjuWipgrEmaQKnuT3LfNtE/N0diSNQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIdZDyH/to+i1gQpIlqf/VL7+az4MB8GA1UdIwQY
MBaAFG10PtY+ho71D22EwAA6g0g/xioDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQt
ZTk3MjRhN2E2YmM4LzEvaDFrUElmLTJqNkxXQkNraVdwXzlVdnY1clBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lMDUzNTItZjE0OC00MGEwLTg3YTQtZTk3MjRhN2E2YmM4
LzEvYlhRLTFqNkdqdlVQYllUQUFEcURTRF9HS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAX6T6MA0G
CSqGSIb3DQEBCwUAA4IBAQBdZWmbsJWKUhDTdQ9QUDT3mCaUIpHn2N9LZ8MI3h6M
wSyTn0AlmsNDzdMuBYnNFRiMzu480NYWLxjnlAxUoA/JljpTfgcQfwsA1eq0Ogce
RbJLCoWVjJ6iK+9jyYi3Qds+zRetLoDYt4kEageNSqArHYzxZBHV64dZHbeboVEG
DqkpJ18t1/nOTrTP4RXknV177bQLQcWGYeUGshClhLsEJDq8oy/lWYTvCSo3znmT
F1sHi0uIakzjre3lDdSmc76gyWY2IPh68fCPULa2nWAm4GBrv8G+E3rhEUoBzLbF
yobW8WeaMF8jgYnUh5f0NGMjwnnv6aHNsTofu2Lb87A4
-----END CERTIFICATE-----
Generated at Tue Jun 18 11:11:34 2024 by rpki-client on console-ams.rpki-client.org