Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/HQUposdBnung4PTT_9QLFp6qZL4.roa
File: HQUposdBnung4PTT_9QLFp6qZL4.roa (raw, json)
Hash identifier: DNg3XIfNrWtPfDe48qETwCMqP+kKArivAlhinoI4cVI=
Subject key identifier: 1D:05:29:A2:C7:41:9E:E9:E0:E0:F4:D3:FF:D4:0B:16:9E:AA:64:BE
Certificate issuer: /CN=96eab19bec222c705a1eb03a80df341539d97f14
Certificate serial: 018CC649BA83665918878A316FFD0CB5A2E2
Authority key identifier: 96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/HQUposdBnung4PTT_9QLFp6qZL4.roa
Signing time: Mon 01 Jan 2024 18:29:29 +0000
ROA not before: Mon 01 Jan 2024 18:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12306
IP address blocks: 193.202.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:ba:83:66:59:18:87:8a:31:6f:fd:0c:b5:a2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96eab19bec222c705a1eb03a80df341539d97f14
Validity
Not Before: Jan 1 18:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d0529a2c7419ee9e0e0f4d3ffd40b169eaa64be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0c:3f:78:7a:cc:c5:97:a9:9b:2d:b1:f2:65:
91:87:5b:4c:c5:07:f4:4b:69:a4:19:91:18:b8:d7:
8e:04:fc:9b:15:7b:58:6f:68:4b:75:ce:4e:8c:3b:
62:20:9d:e2:98:d6:dc:e8:87:45:cc:98:39:33:1f:
19:1c:31:04:8b:91:bb:a9:75:31:5f:58:ae:8b:7f:
ee:cc:64:11:87:0b:d3:fe:09:1c:38:36:13:27:db:
c4:c2:0c:57:a4:56:37:4b:d7:d2:47:f3:eb:e9:b4:
e2:7d:ed:80:75:be:f0:e4:a9:6a:16:d4:38:ac:e9:
b4:42:95:54:ad:f0:df:06:51:03:fc:47:23:ed:ce:
56:6b:f3:bc:fc:64:6b:e0:a7:d8:ca:a1:ca:26:26:
19:3d:43:67:0c:06:e9:57:2b:dd:24:71:58:59:bb:
10:e4:66:d4:74:8b:b6:0e:d6:01:31:cf:5d:98:35:
61:be:e9:03:15:6f:50:d5:cf:93:22:fd:02:93:ff:
6d:cb:6f:74:7b:8d:73:71:0d:a6:97:cf:8f:ae:fc:
87:ec:54:8d:0b:b1:80:71:99:45:de:e1:d0:4b:55:
b0:13:d7:b9:9e:d6:ad:8e:3e:5d:29:4c:03:da:45:
5c:0e:7b:76:e4:f9:35:1e:16:71:b5:4e:ce:bf:15:
19:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:05:29:A2:C7:41:9E:E9:E0:E0:F4:D3:FF:D4:0B:16:9E:AA:64:BE
X509v3 Authority Key Identifier:
keyid:96:EA:B1:9B:EC:22:2C:70:5A:1E:B0:3A:80:DF:34:15:39:D9:7F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luqxm-wiLHBaHrA6gN80FTnZfxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/HQUposdBnung4PTT_9QLFp6qZL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d77a60-1227-4de7-97bb-410061e3576a/1/luqxm-wiLHBaHrA6gN80FTnZfxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.202.119.0/24
Signature Algorithm: sha256WithRSAEncryption
01:56:53:67:cc:f1:d5:81:99:db:5d:ae:b4:90:53:a2:ca:7a:
07:b1:96:23:d2:4b:0d:d6:85:38:c8:1a:e9:2e:a1:e0:19:e0:
0e:13:2c:bb:22:f9:28:a1:03:fc:73:69:47:12:45:60:06:5e:
40:a3:bc:9d:26:fb:fe:3b:23:0e:a8:d3:e7:57:cb:7d:4a:76:
43:29:28:2e:7c:fd:01:40:48:2f:f5:d5:e1:58:85:4e:62:8a:
8a:0a:8f:fe:9e:88:83:db:00:e0:e4:dc:f3:4b:96:d8:5f:89:
f2:ca:8b:9a:52:17:4f:94:57:66:1e:b6:c1:53:f1:bb:a6:bb:
a6:d0:3b:cb:08:24:7b:30:bd:de:dc:83:96:31:fc:10:15:b1:
9f:81:a4:e7:38:95:90:3e:a2:cf:31:81:8e:79:5b:d0:42:96:
f9:c7:a7:7f:08:13:eb:da:21:88:38:55:35:17:a2:c6:65:2f:
3f:7c:e8:68:49:ab:19:84:0a:e3:ab:d5:68:5c:54:a7:b8:fd:
c6:8f:54:f4:a8:a4:05:3a:4d:14:a8:9a:c4:97:e2:1a:78:c8:
db:20:e7:bd:32:30:ab:c8:e3:cc:cf:90:ca:b3:d6:85:73:e7:
49:7c:e7:7c:22:ba:f6:60:00:3b:09:64:c6:6e:95:f4:8d:e7:
ce:a7:3c:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSbqDZlkYh4oxb/0MtaLiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2ZWFiMTliZWMyMjJjNzA1YTFlYjAzYTgwZGYzNDE1Mzlk
OTdmMTQwHhcNMjQwMTAxMTgyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDA1MjlhMmM3NDE5ZWU5ZTBlMGY0ZDNmZmQ0MGIxNjllYWE2NGJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxgw/eHrMxZepmy2x8mWRh1tMxQf0
S2mkGZEYuNeOBPybFXtYb2hLdc5OjDtiIJ3imNbc6IdFzJg5Mx8ZHDEEi5G7qXUx
X1iui3/uzGQRhwvT/gkcODYTJ9vEwgxXpFY3S9fSR/Pr6bTife2Adb7w5KlqFtQ4
rOm0QpVUrfDfBlED/Ecj7c5Wa/O8/GRr4KfYyqHKJiYZPUNnDAbpVyvdJHFYWbsQ
5GbUdIu2DtYBMc9dmDVhvukDFW9Q1c+TIv0Ck/9ty290e41zcQ2ml8+PrvyH7FSN
C7GAcZlF3uHQS1WwE9e5ntatjj5dKUwD2kVcDnt25Pk1HhZxtU7OvxUZ+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB0FKaLHQZ7p4OD00//UCxaeqmS+MB8GA1UdIwQY
MBaAFJbqsZvsIixwWh6wOoDfNBU52X8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmIt
NDEwMDYxZTM1NzZhLzEvSFFVcG9zZEJudW5nNFBUVF85UUxGcDZxWkw0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kNzdhNjAtMTIyNy00ZGU3LTk3YmItNDEwMDYxZTM1NzZh
LzEvbHVxeG0td2lMSEJhSHJBNmdOODBGVG5aZnhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwcp3MA0G
CSqGSIb3DQEBCwUAA4IBAQABVlNnzPHVgZnbXa60kFOiynoHsZYj0ksN1oU4yBrp
LqHgGeAOEyy7IvkooQP8c2lHEkVgBl5Ao7ydJvv+OyMOqNPnV8t9SnZDKSgufP0B
QEgv9dXhWIVOYoqKCo/+noiD2wDg5NzzS5bYX4nyyouaUhdPlFdmHrbBU/G7prum
0DvLCCR7ML3e3IOWMfwQFbGfgaTnOJWQPqLPMYGOeVvQQpb5x6d/CBPr2iGIOFU1
F6LGZS8/fOhoSasZhArjq9VoXFSnuP3Gj1T0qKQFOk0UqJrEl+IaeMjbIOe9MjCr
yOPMz5DKs9aFc+dJfOd8Irr2YAA7CWTGbpX0jefOpzyg
-----END CERTIFICATE-----
Generated at Fri Jun 7 13:34:26 2024 by rpki-client on console-fra.rpki-client.org