Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/XZ9sOonwRz8Yhx7XgQ556TgN-QQ.roa
File: XZ9sOonwRz8Yhx7XgQ556TgN-QQ.roa (raw, json)
Hash identifier: +MH+NB5/1dLMkJhmoG0j5J5Sf28zUkx8o+EaVwV44Sg=
Subject key identifier: 5D:9F:6C:3A:89:F0:47:3F:18:87:1E:D7:81:0E:79:E9:38:0D:F9:04
Certificate issuer: /CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
Certificate serial: 018CC86F7703722EBCD78E3D46E3F60879A7
Authority key identifier: 1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/XZ9sOonwRz8Yhx7XgQ556TgN-QQ.roa
Signing time: Tue 02 Jan 2024 04:29:57 +0000
ROA not before: Tue 02 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209743
IP address blocks: 62.3.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:77:03:72:2e:bc:d7:8e:3d:46:e3:f6:08:79:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1d571e2bdb4112ec5d6b3a64bb17bf0b280fe6e1
Validity
Not Before: Jan 2 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d9f6c3a89f0473f18871ed7810e79e9380df904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:af:71:ff:f4:7d:17:a7:0b:ce:0a:8d:22:fa:
7d:fd:4e:0e:cc:b7:a1:a7:d0:94:4b:d9:b8:67:b1:
44:cd:39:ee:0f:13:a5:f4:1f:5e:dc:2c:61:5d:95:
f4:7e:a1:68:ea:03:1b:a5:fb:a1:56:cd:58:96:19:
28:e7:34:91:6c:a0:84:8a:82:d2:cf:5d:28:e9:22:
c3:c7:df:f6:31:5b:33:55:56:64:c8:00:bf:6e:2f:
ef:0c:47:2d:8d:02:2b:ba:53:f7:6e:98:75:5b:c7:
53:0d:76:b8:da:8e:d9:8b:99:6e:37:4a:bf:04:0e:
ad:dd:72:60:fb:ec:b1:ca:d3:a5:d3:98:bb:55:64:
b5:04:ef:89:47:6b:88:be:ae:03:25:36:03:44:1f:
4a:bb:cd:0c:ab:26:59:4b:6d:3e:88:1b:b9:ad:6f:
86:28:63:9b:f5:7d:68:ca:8d:2c:46:f2:f0:05:61:
23:d6:c2:9a:a7:73:26:5a:54:c5:77:09:a6:ec:01:
a6:00:b7:69:21:a6:ca:5e:c7:41:ed:c5:b7:11:47:
5a:73:6a:42:87:60:8c:30:ba:b0:af:7b:6f:be:73:
52:c4:90:bc:8c:9e:12:65:86:84:24:96:e5:8f:3d:
89:a6:98:e3:9b:9f:32:80:5c:fc:4e:f1:a2:01:ab:
48:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9F:6C:3A:89:F0:47:3F:18:87:1E:D7:81:0E:79:E9:38:0D:F9:04
X509v3 Authority Key Identifier:
keyid:1D:57:1E:2B:DB:41:12:EC:5D:6B:3A:64:BB:17:BF:0B:28:0F:E6:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HVceK9tBEuxdazpkuxe_CygP5uE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/XZ9sOonwRz8Yhx7XgQ556TgN-QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/ac68ee-b590-46ac-b52e-db2572dacb45/1/HVceK9tBEuxdazpkuxe_CygP5uE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.30.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:3c:50:c4:b6:c2:fd:9e:fe:ef:5e:27:61:2d:60:4e:f2:9a:
3e:06:47:1f:31:61:25:11:66:bc:62:66:ac:bb:de:fc:f0:71:
22:76:59:ed:7d:aa:8a:53:d9:34:3f:26:6a:38:18:dd:f8:c0:
1e:63:8b:0f:9f:6f:45:23:b7:d3:dc:73:c9:15:d1:28:6e:1d:
7f:77:4d:e3:f4:6c:e3:91:a9:05:d3:83:36:97:21:71:ef:ef:
9d:0c:e4:37:06:1b:5d:55:ce:3e:7c:90:0b:ec:38:a6:90:2a:
4c:9c:9f:9d:d9:98:48:6c:37:d8:df:aa:60:57:c5:14:30:7f:
df:8f:f4:f3:2d:e5:b6:d4:7d:8b:47:fe:e7:ce:a3:1d:80:1d:
64:8e:09:cd:a6:40:e5:94:f1:9e:a4:9f:f1:b4:d1:3d:0c:92:
85:c3:f6:f0:9e:7c:25:e3:4f:92:eb:db:be:31:62:65:14:29:
de:36:0c:15:ec:c5:22:de:b8:58:98:b8:49:66:f9:9f:b3:cb:
23:eb:cf:52:93:9e:a6:bc:c1:80:47:5c:56:47:bf:90:49:83:
54:19:9c:e9:93:92:d7:a7:8f:1e:02:5a:3d:60:11:53:5a:c2:
fc:13:8d:c6:d1:bb:78:6a:64:61:76:87:50:54:a6:58:e2:5e:
fb:ac:f0:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIb3cDci681449RuP2CHmnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFkNTcxZTJiZGI0MTEyZWM1ZDZiM2E2NGJiMTdiZjBiMjgw
ZmU2ZTEwHhcNMjQwMTAyMDQyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDlmNmMzYTg5ZjA0NzNmMTg4NzFlZDc4MTBlNzllOTM4MGRmOTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh69x//R9F6cLzgqNIvp9/U4OzLeh
p9CUS9m4Z7FEzTnuDxOl9B9e3CxhXZX0fqFo6gMbpfuhVs1Ylhko5zSRbKCEioLS
z10o6SLDx9/2MVszVVZkyAC/bi/vDEctjQIrulP3bph1W8dTDXa42o7Zi5luN0q/
BA6t3XJg++yxytOl05i7VWS1BO+JR2uIvq4DJTYDRB9Ku80MqyZZS20+iBu5rW+G
KGOb9X1oyo0sRvLwBWEj1sKap3MmWlTFdwmm7AGmALdpIabKXsdB7cW3EUdac2pC
h2CMMLqwr3tvvnNSxJC8jJ4SZYaEJJbljz2Jppjjm58ygFz8TvGiAatInQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF2fbDqJ8Ec/GIce14EOeek4DfkEMB8GA1UdIwQY
MBaAFB1XHivbQRLsXWs6ZLsXvwsoD+bhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSFZjZUs5dEJFdXhkYXpwa3V4ZV9DeWdQNXVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9hYzY4ZWUtYjU5MC00NmFjLWI1MmUt
ZGIyNTcyZGFjYjQ1LzEvWFo5c09vbndSejhZaHg3WGdRNTU2VGdOLVFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9hYzY4ZWUtYjU5MC00NmFjLWI1MmUtZGIyNTcyZGFjYjQ1
LzEvSFZjZUs5dEJFdXhkYXpwa3V4ZV9DeWdQNXVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAPgMeMA0G
CSqGSIb3DQEBCwUAA4IBAQCiPFDEtsL9nv7vXidhLWBO8po+BkcfMWElEWa8Ymas
u9788HEidlntfaqKU9k0PyZqOBjd+MAeY4sPn29FI7fT3HPJFdEobh1/d03j9Gzj
kakF04M2lyFx7++dDOQ3BhtdVc4+fJAL7DimkCpMnJ+d2ZhIbDfY36pgV8UUMH/f
j/TzLeW21H2LR/7nzqMdgB1kjgnNpkDllPGepJ/xtNE9DJKFw/bwnnwl40+S69u+
MWJlFCneNgwV7MUi3rhYmLhJZvmfs8sj689Sk56mvMGAR1xWR7+QSYNUGZzpk5LX
p48eAlo9YBFTWsL8E43G0bt4amRhdodQVKZY4l77rPBz
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:38:55 2024 by rpki-client on console-ams.rpki-client.org