Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/Hw1J05s5ba0K5LOkAVLqAatJ9H4.roa
File: Hw1J05s5ba0K5LOkAVLqAatJ9H4.roa (raw, json)
Hash identifier: I+4FSBi7jcLsp03i5sJvsnAEbfTJeAbYlnYSbeor5JY=
Subject key identifier: 1F:0D:49:D3:9B:39:6D:AD:0A:E4:B3:A4:01:52:EA:01:AB:49:F4:7E
Certificate issuer: /CN=32f047a34212872b0b1ff804ee022b02af75ffed
Certificate serial: 018EBCD5D6EF71016E17FC38A886CECE0D10
Authority key identifier: 32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/Hw1J05s5ba0K5LOkAVLqAatJ9H4.roa
Signing time: Mon 08 Apr 2024 08:31:54 +0000
ROA not before: Mon 08 Apr 2024 08:31:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15404
IP address blocks: 194.15.242.0/23 maxlen: 23
194.15.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bc:d5:d6:ef:71:01:6e:17:fc:38:a8:86:ce:ce:0d:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32f047a34212872b0b1ff804ee022b02af75ffed
Validity
Not Before: Apr 8 08:31:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f0d49d39b396dad0ae4b3a40152ea01ab49f47e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:b0:61:eb:99:d9:fd:aa:6a:6b:6f:01:77:
f4:1b:cc:42:3e:0d:5a:21:fb:e0:63:e2:51:77:f1:
83:b1:a0:b6:12:58:08:34:4d:7d:b6:65:ea:a9:e5:
22:a6:b3:dc:b5:8c:2d:ef:f4:26:46:b7:19:72:20:
dd:d0:11:fa:a0:85:20:f5:62:98:e3:48:de:9c:4a:
ca:ea:19:5f:fe:14:b1:ce:d2:c4:68:9a:4c:e6:31:
61:29:66:7f:3f:bc:86:9d:d5:6a:cb:42:4f:20:55:
d8:e0:23:c7:43:85:15:fd:09:ce:61:4c:cd:6c:99:
bf:7e:a1:de:68:24:7d:53:21:ca:7a:8f:19:e7:fb:
cb:73:7d:a8:fe:f5:99:31:4f:4c:2a:85:99:06:3b:
d6:0e:91:e5:4a:c2:0c:c5:09:0f:83:8b:32:c0:0c:
f3:51:21:5f:af:5b:01:e1:a4:97:b6:84:87:dd:9b:
bb:94:2e:76:af:13:8d:79:64:cb:6f:07:fb:75:04:
9b:5d:3a:39:73:9e:53:1d:51:7f:66:b7:77:fa:ec:
84:6b:32:74:61:54:5a:a8:03:d9:67:ac:09:94:f5:
e9:74:70:ab:2e:8b:89:11:23:a6:36:77:6f:f1:87:
c6:40:6f:be:87:ff:b6:ba:3d:8d:cf:20:ec:a8:ee:
39:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0D:49:D3:9B:39:6D:AD:0A:E4:B3:A4:01:52:EA:01:AB:49:F4:7E
X509v3 Authority Key Identifier:
keyid:32:F0:47:A3:42:12:87:2B:0B:1F:F8:04:EE:02:2B:02:AF:75:FF:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MvBHo0IShysLH_gE7gIrAq91_-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/Hw1J05s5ba0K5LOkAVLqAatJ9H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/dee7e1-cf51-43cb-ad36-7fae065b646a/1/MvBHo0IShysLH_gE7gIrAq91_-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.242.0-194.15.247.255
Signature Algorithm: sha256WithRSAEncryption
61:39:b7:db:b4:d6:8f:d6:6b:35:e1:ff:fd:45:9c:3d:42:1a:
86:c6:65:10:de:ed:f7:94:e6:8d:2d:52:a0:25:ba:c6:8f:98:
e4:59:80:72:b1:47:40:8d:39:8b:1c:bb:13:6b:df:18:42:bf:
69:ca:a0:56:65:8e:55:fc:1f:72:c8:66:6e:db:f5:97:8c:0c:
ca:d5:22:e8:8e:d7:c6:78:ce:f2:0f:f9:0d:44:61:47:f8:0c:
4d:f3:34:ed:a4:17:3c:9d:3b:f9:a0:95:67:59:9a:f1:db:45:
83:ad:78:0b:f0:e3:af:e4:89:30:24:9f:a1:05:90:74:34:aa:
e1:8e:43:2b:f5:94:20:73:5d:f3:3d:12:c7:0f:88:6c:3d:15:
65:c3:1d:91:93:90:b1:f3:3c:d7:af:93:98:08:87:78:34:08:
2c:01:62:31:f0:69:ce:1a:5f:cb:90:e2:16:cd:70:ca:37:04:
4e:28:84:85:fe:01:c7:fe:02:10:9e:c5:46:9c:1c:7a:7f:22:
02:8e:97:6b:98:bf:a1:0c:1a:3b:25:b0:2a:aa:50:81:7a:c9:
ae:3f:86:8a:93:98:e4:de:87:27:0e:74:ef:4b:89:c4:77:04:
41:74:da:0b:a7:8a:f7:60:ed:45:26:d3:45:7a:8b:ab:60:8f:
19:13:18:ed
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY681dbvcQFuF/w4qIbOzg0QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZjA0N2EzNDIxMjg3MmIwYjFmZjgwNGVlMDIyYjAyYWY3
NWZmZWQwHhcNMjQwNDA4MDgzMTU0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjBkNDlkMzliMzk2ZGFkMGFlNGIzYTQwMTUyZWEwMWFiNDlmNDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq72wYeuZ2f2qamtvAXf0G8xCPg1a
IfvgY+JRd/GDsaC2ElgINE19tmXqqeUiprPctYwt7/QmRrcZciDd0BH6oIUg9WKY
40jenErK6hlf/hSxztLEaJpM5jFhKWZ/P7yGndVqy0JPIFXY4CPHQ4UV/QnOYUzN
bJm/fqHeaCR9UyHKeo8Z5/vLc32o/vWZMU9MKoWZBjvWDpHlSsIMxQkPg4sywAzz
USFfr1sB4aSXtoSH3Zu7lC52rxONeWTLbwf7dQSbXTo5c55THVF/Zrd3+uyEazJ0
YVRaqAPZZ6wJlPXpdHCrLouJESOmNndv8YfGQG++h/+2uj2NzyDsqO457QIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFB8NSdObOW2tCuSzpAFS6gGrSfR+MB8GA1UdIwQY
MBaAFDLwR6NCEocrCx/4BO4CKwKvdf/tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYt
N2ZhZTA2NWI2NDZhLzEvSHcxSjA1czViYTBLNUxPa0FWTHFBYXRKOUg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kZWU3ZTEtY2Y1MS00M2NiLWFkMzYtN2ZhZTA2NWI2NDZh
LzEvTXZCSG8wSVNoeXNMSF9nRTdnSXJBcTkxXy0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAHCD/ID
BAPCD/AwDQYJKoZIhvcNAQELBQADggEBAGE5t9u01o/WazXh//1FnD1CGobGZRDe
7feU5o0tUqAlusaPmORZgHKxR0CNOYscuxNr3xhCv2nKoFZljlX8H3LIZm7b9ZeM
DMrVIuiO18Z4zvIP+Q1EYUf4DE3zNO2kFzydO/mglWdZmvHbRYOteAvw46/kiTAk
n6EFkHQ0quGOQyv1lCBzXfM9EscPiGw9FWXDHZGTkLHzPNevk5gIh3g0CCwBYjHw
ac4aX8uQ4hbNcMo3BE4ohIX+Acf+AhCexUacHHp/IgKOl2uYv6EMGjslsCqqUIF6
ya4/hoqTmOTehycOdO9LicR3BEF02gunivdg7UUm00V6i6tgjxkTGO0=
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:18:11 2024 by rpki-client on console-ams.rpki-client.org