Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/CHA6WrB-cqAmqwnunAg4c1ECpBw.roa
File: CHA6WrB-cqAmqwnunAg4c1ECpBw.roa (raw, json)
Hash identifier: MMUdoJJ8QknCFE7ytjLP786S6D94qojoEAbjmIc+JWA=
Subject key identifier: 08:70:3A:5A:B0:7E:72:A0:26:AB:09:EE:9C:08:38:73:51:02:A4:1C
Certificate issuer: /CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Certificate serial: 018DCC498B9F53E4DAF4AD044AF90FFD0950
Authority key identifier: 9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/CHA6WrB-cqAmqwnunAg4c1ECpBw.roa
Signing time: Wed 21 Feb 2024 15:29:48 +0000
ROA not before: Wed 21 Feb 2024 15:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201777
IP address blocks: 185.179.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:cc:49:8b:9f:53:e4:da:f4:ad:04:4a:f9:0f:fd:09:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbc4239c9cb981f19a495e633d3bec889fcbe89
Validity
Not Before: Feb 21 15:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=08703a5ab07e72a026ab09ee9c0838735102a41c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:63:57:d3:42:21:cd:04:49:8a:57:93:59:b9:
3f:64:e2:a1:fa:a1:bb:6a:30:57:70:1f:19:b2:20:
01:4f:0b:ee:40:2c:2f:e3:15:c6:78:88:97:ba:01:
a8:1e:74:14:d4:37:bc:86:a0:1b:3b:a5:f4:ce:70:
1f:3e:70:71:76:52:be:1d:5d:e4:af:f7:c1:7e:fb:
6b:77:5d:85:96:70:13:db:13:db:6b:7b:6d:37:2b:
c3:6d:12:f3:9a:9e:2b:f5:33:dc:be:e5:9f:26:eb:
f4:d5:60:4d:aa:5e:26:38:cb:50:d9:0e:ff:29:8b:
64:79:8b:0a:41:8b:b9:2a:b3:79:21:6d:cb:eb:06:
4e:e3:7d:0b:c9:47:c7:9f:2c:d4:72:2b:4d:e0:6d:
ef:17:99:7b:42:f6:fa:7e:7b:a1:8b:27:a0:29:ce:
06:b7:f4:f7:4f:b8:5b:e1:2e:35:32:d5:12:2e:12:
43:bd:01:40:3b:f5:fa:d4:77:93:89:ec:5a:5d:10:
02:dd:6b:b2:e4:62:85:f5:45:93:c1:07:0a:ae:ce:
d9:cc:ce:c9:b3:76:d7:fe:25:39:be:28:5b:b3:03:
ac:12:8a:1e:e7:2c:d1:af:b1:8c:98:16:39:55:62:
f1:66:43:e5:4a:07:70:cb:60:28:ec:f5:ce:bd:5c:
58:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:70:3A:5A:B0:7E:72:A0:26:AB:09:EE:9C:08:38:73:51:02:A4:1C
X509v3 Authority Key Identifier:
keyid:9B:BC:42:39:C9:CB:98:1F:19:A4:95:E6:33:D3:BE:C8:89:FC:BE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7xCOcnLmB8ZpJXmM9O-yIn8vok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/CHA6WrB-cqAmqwnunAg4c1ECpBw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/c84a4d-9e57-4756-bdbb-01aa056b1f6f/1/m7xCOcnLmB8ZpJXmM9O-yIn8vok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.95.0/24
Signature Algorithm: sha256WithRSAEncryption
04:3e:ba:71:92:21:07:31:6b:70:e4:39:0a:49:a4:ae:09:9e:
4e:96:a4:1e:08:50:71:8a:1e:48:4e:cf:b1:0c:75:79:c9:e6:
de:d4:64:dc:c4:b3:fc:6f:00:4b:c9:35:ad:05:66:73:eb:ba:
18:46:6b:bb:d0:10:ba:29:47:e8:0d:fd:44:29:a0:42:f3:1d:
f3:b8:97:45:2a:0f:66:52:48:03:ee:6b:49:6d:b2:a1:29:88:
de:c0:d2:3b:98:b6:3e:c1:81:2b:ee:d4:95:b6:0b:cb:36:f6:
31:32:bd:ca:63:c9:44:c7:fc:c6:ff:fa:62:f4:29:7a:39:56:
26:11:45:bc:21:2a:62:ad:a8:c7:16:7a:d5:05:f5:bf:a3:ac:
69:f1:41:6a:18:5a:63:b5:e7:c1:d3:9b:38:f8:55:01:8d:40:
19:6a:93:59:4e:94:57:a9:cf:32:3c:5c:44:22:74:d7:c4:4e:
6d:71:75:32:4a:cc:c0:4d:80:c8:6a:72:23:48:2a:78:f0:34:
89:5e:62:d7:f2:8c:8b:70:23:7e:d5:a3:c1:13:a6:6b:3a:5b:
51:f5:89:53:94:f8:25:e3:2c:b5:5c:d5:e8:02:d4:57:a1:9a:
91:4d:47:17:9e:52:be:8c:73:27:5b:ce:0a:75:b6:a4:87:c2:
45:de:4d:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY3MSYufU+Ta9K0ESvkP/QlQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmM0MjM5YzljYjk4MWYxOWE0OTVlNjMzZDNiZWM4ODlm
Y2JlODkwHhcNMjQwMjIxMTUyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODcwM2E1YWIwN2U3MmEwMjZhYjA5ZWU5YzA4Mzg3MzUxMDJhNDFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGNX00IhzQRJileTWbk/ZOKh+qG7
ajBXcB8ZsiABTwvuQCwv4xXGeIiXugGoHnQU1De8hqAbO6X0znAfPnBxdlK+HV3k
r/fBfvtrd12FlnAT2xPba3ttNyvDbRLzmp4r9TPcvuWfJuv01WBNql4mOMtQ2Q7/
KYtkeYsKQYu5KrN5IW3L6wZO430LyUfHnyzUcitN4G3vF5l7Qvb6fnuhiyegKc4G
t/T3T7hb4S41MtUSLhJDvQFAO/X61HeTiexaXRAC3Wuy5GKF9UWTwQcKrs7ZzM7J
s3bX/iU5vihbswOsEooe5yzRr7GMmBY5VWLxZkPlSgdwy2Ao7PXOvVxYCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAhwOlqwfnKgJqsJ7pwIOHNRAqQcMB8GA1UdIwQY
MBaAFJu8QjnJy5gfGaSV5jPTvsiJ/L6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmIt
MDFhYTA1NmIxZjZmLzEvQ0hBNldyQi1jcUFtcXdudW5BZzRjMUVDcEJ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi9jODRhNGQtOWU1Ny00NzU2LWJkYmItMDFhYTA1NmIxZjZm
LzEvbTd4Q09jbkxtQjhacEpYbU05Ty15SW44dm9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubNfMA0G
CSqGSIb3DQEBCwUAA4IBAQAEPrpxkiEHMWtw5DkKSaSuCZ5OlqQeCFBxih5ITs+x
DHV5yebe1GTcxLP8bwBLyTWtBWZz67oYRmu70BC6KUfoDf1EKaBC8x3zuJdFKg9m
UkgD7mtJbbKhKYjewNI7mLY+wYEr7tSVtgvLNvYxMr3KY8lEx/zG//pi9Cl6OVYm
EUW8ISpirajHFnrVBfW/o6xp8UFqGFpjtefB05s4+FUBjUAZapNZTpRXqc8yPFxE
InTXxE5tcXUySszATYDIanIjSCp48DSJXmLX8oyLcCN+1aPBE6ZrOltR9YlTlPgl
4yy1XNXoAtRXoZqRTUcXnlK+jHMnW84Kdbakh8JF3k1K
-----END CERTIFICATE-----
Generated at Sat Jun 8 10:13:26 2024 by rpki-client on console-ams.rpki-client.org