Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/1v55-sthzRVwP8bOkJFlLx0xinc.roa
File: 1v55-sthzRVwP8bOkJFlLx0xinc.roa (raw, json)
Hash identifier: zFbUN47Ad2SREvrDRIYFVgCA9wik3R33YWjHV8Kko3g=
Subject key identifier: D6:FE:79:FA:CB:61:CD:15:70:3F:C6:CE:90:91:65:2F:1D:31:8A:77
Certificate issuer: /CN=bfac971076263bddb0eecf5bea6574a405b985de
Certificate serial: 0194B331175A13CF95FFB937688C5B873591
Authority key identifier: BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/1v55-sthzRVwP8bOkJFlLx0xinc.roa
Signing time: Wed 29 Jan 2025 17:52:06 +0000
ROA not before: Wed 29 Jan 2025 17:52:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213636
IP address blocks: 80.244.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:b3:31:17:5a:13:cf:95:ff:b9:37:68:8c:5b:87:35:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfac971076263bddb0eecf5bea6574a405b985de
Validity
Not Before: Jan 29 17:52:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6fe79facb61cd15703fc6ce9091652f1d318a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:69:3e:1b:69:ce:1f:ae:9f:79:e8:73:0f:91:
20:d8:b5:18:de:9e:e2:fa:18:79:56:3e:f9:4d:0f:
fb:20:1d:bb:c8:12:53:15:6a:51:72:17:3b:48:40:
04:ef:cb:25:87:ca:b4:29:64:9d:a5:f3:29:f6:83:
f4:e7:3d:b6:f9:c7:2d:c5:7e:2f:c9:c4:54:e1:10:
05:68:fd:e8:ee:ab:df:14:e4:df:39:ec:b7:9c:e2:
0b:0e:2d:6d:3c:ae:bc:5b:4d:4b:ec:dd:dd:7e:76:
9d:7d:df:a8:f7:37:84:34:91:f2:36:23:fd:14:32:
9f:2e:71:1e:56:de:f8:34:76:b6:11:1b:d3:03:dd:
4a:91:4d:bd:09:1b:a1:c6:83:98:98:16:4b:09:90:
1b:fa:a4:69:07:18:71:e3:db:a6:74:86:76:5f:fd:
c7:0c:ca:ae:6a:3b:26:d0:15:60:df:2d:a7:9e:71:
67:0c:72:a9:41:1b:f1:b3:42:ec:c5:6f:33:dc:db:
31:2e:14:2b:98:89:06:a6:a0:0d:4d:26:9a:ca:7f:
eb:ce:2b:74:85:63:1f:54:03:db:ae:24:9a:36:9d:
eb:cf:72:86:63:89:aa:5c:88:c5:6e:44:d3:99:ee:
2d:d2:dd:1c:39:bf:05:38:92:33:61:16:11:16:15:
5c:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:FE:79:FA:CB:61:CD:15:70:3F:C6:CE:90:91:65:2F:1D:31:8A:77
X509v3 Authority Key Identifier:
keyid:BF:AC:97:10:76:26:3B:DD:B0:EE:CF:5B:EA:65:74:A4:05:B9:85:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v6yXEHYmO92w7s9b6mV0pAW5hd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/1v55-sthzRVwP8bOkJFlLx0xinc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/067837-baa0-4085-aa23-8023d945497a/1/v6yXEHYmO92w7s9b6mV0pAW5hd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.13.0/24
Signature Algorithm: sha256WithRSAEncryption
22:da:08:f3:5c:de:b9:59:68:66:44:a0:2c:d3:3e:48:f1:fd:
80:96:a7:f0:43:24:a0:57:ba:86:89:ce:6d:c1:0c:5f:61:1b:
bd:9a:48:4c:50:d7:a3:4b:80:6f:51:b4:eb:ab:2d:fc:bf:dc:
70:47:81:5d:97:15:cf:14:f1:3a:bc:50:6c:4a:04:fa:dd:2e:
18:0f:80:9f:9a:56:46:df:5d:93:3d:8a:d2:db:7b:51:40:bf:
00:c2:0e:b7:31:30:d7:55:20:58:b2:fc:83:40:34:de:80:e3:
44:21:82:50:4c:d1:42:f4:76:32:a1:65:49:06:db:da:d8:84:
aa:89:75:c5:14:ec:db:e4:0d:a0:36:43:82:6f:ab:77:5c:65:
af:a5:92:24:a7:d6:f9:d8:54:12:52:f6:a6:42:8f:48:78:e1:
9f:03:e4:d1:b5:0d:dc:e8:ee:b4:f7:c1:32:27:24:e8:4e:ed:
45:f7:d7:f8:b2:32:88:73:f0:75:72:f1:14:2e:b5:d5:5f:f6:
9e:93:46:0a:13:ab:ac:03:3e:85:9e:81:a0:bc:f3:67:21:db:
3b:c8:68:8e:11:1f:74:f6:76:56:59:59:c3:b3:e3:52:58:be:
2c:91:f8:d4:07:6f:3d:f6:11:61:50:6c:0e:95:6b:83:bf:7b:
11:6b:25:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSzMRdaE8+V/7k3aIxbhzWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYWM5NzEwNzYyNjNiZGRiMGVlY2Y1YmVhNjU3NGE0MDVi
OTg1ZGUwHhcNMjUwMTI5MTc1MjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmZlNzlmYWNiNjFjZDE1NzAzZmM2Y2U5MDkxNjUyZjFkMzE4YTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Wk+G2nOH66feehzD5Eg2LUY3p7i
+hh5Vj75TQ/7IB27yBJTFWpRchc7SEAE78slh8q0KWSdpfMp9oP05z22+cctxX4v
ycRU4RAFaP3o7qvfFOTfOey3nOILDi1tPK68W01L7N3dfnadfd+o9zeENJHyNiP9
FDKfLnEeVt74NHa2ERvTA91KkU29CRuhxoOYmBZLCZAb+qRpBxhx49umdIZ2X/3H
DMquajsm0BVg3y2nnnFnDHKpQRvxs0LsxW8z3NsxLhQrmIkGpqANTSaayn/rzit0
hWMfVAPbriSaNp3rz3KGY4mqXIjFbkTTme4t0t0cOb8FOJIzYRYRFhVctQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNb+efrLYc0VcD/GzpCRZS8dMYp3MB8GA1UdIwQY
MBaAFL+slxB2JjvdsO7PW+pldKQFuYXeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjZ5WEVIWW1POTJ3N3M5YjZtVjBwQVc1aGQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNjc4MzctYmFhMC00MDg1LWFhMjMt
ODAyM2Q5NDU0OTdhLzEvMXY1NS1zdGh6UlZ3UDhiT2tKRmxMeDB4aW5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8wNjc4MzctYmFhMC00MDg1LWFhMjMtODAyM2Q5NDU0OTdh
LzEvdjZ5WEVIWW1POTJ3N3M5YjZtVjBwQVc1aGQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUPQNMA0G
CSqGSIb3DQEBCwUAA4IBAQAi2gjzXN65WWhmRKAs0z5I8f2AlqfwQySgV7qGic5t
wQxfYRu9mkhMUNejS4BvUbTrqy38v9xwR4FdlxXPFPE6vFBsSgT63S4YD4CfmlZG
312TPYrS23tRQL8Awg63MTDXVSBYsvyDQDTegONEIYJQTNFC9HYyoWVJBtva2ISq
iXXFFOzb5A2gNkOCb6t3XGWvpZIkp9b52FQSUvamQo9IeOGfA+TRtQ3c6O6098Ey
JyToTu1F99f4sjKIc/B1cvEULrXVX/aek0YKE6usAz6FnoGgvPNnIds7yGiOER90
9nZWWVnDs+NSWL4skfjUB2899hFhUGwOlWuDv3sRayXr
-----END CERTIFICATE-----
Generated at Sun Feb 2 09:57:51 2025 by rpki-client