Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/hRc0ddDLe98M1qjCPr6WEBki_JM.roa
File: hRc0ddDLe98M1qjCPr6WEBki_JM.roa (raw, json)
Hash identifier: Y32Ogwv3R1T1mmDuxcXlv//ase1/LcWP1/EtQFT+qyY=
Subject key identifier: 85:17:34:75:D0:CB:7B:DF:0C:D6:A8:C2:3E:BE:96:10:19:22:FC:93
Certificate issuer: /CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Certificate serial: 018CC87120A7EF47966230E3AC535906A454
Authority key identifier: B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/hRc0ddDLe98M1qjCPr6WEBki_JM.roa
Signing time: Tue 02 Jan 2024 04:31:46 +0000
ROA not before: Tue 02 Jan 2024 04:31:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62047
IP address blocks: 185.48.9.0/24 maxlen: 26
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:20:a7:ef:47:96:62:30:e3:ac:53:59:06:a4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9b87b3b09ccb69a6de20468e90ecbb18f5ecbb6
Validity
Not Before: Jan 2 04:31:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85173475d0cb7bdf0cd6a8c23ebe96101922fc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:19:c9:f1:88:d5:59:e0:23:aa:f9:f2:b7:01:
90:86:51:af:b2:c3:6d:33:50:81:2c:a2:72:33:b9:
98:fd:dd:5d:c7:28:1b:67:ad:c5:a9:ce:48:77:33:
f7:96:ba:4b:35:ee:92:a6:a5:19:5c:f7:ac:42:1c:
24:3d:b2:25:b1:7b:3e:4b:48:a1:c8:1a:51:ee:35:
47:d6:0a:bc:25:a0:ac:20:ea:d3:7b:72:f5:c1:ab:
ad:31:63:20:9f:19:67:22:e4:38:64:76:6d:48:43:
30:ac:a0:cf:2f:2e:1d:4f:7c:c8:5b:be:81:e2:66:
fd:4f:7d:f5:6b:aa:68:7b:a6:d4:69:fc:2a:58:25:
63:c9:45:68:5a:e1:14:57:4d:36:42:72:b4:0a:ce:
5a:84:26:23:aa:de:6e:49:3e:ad:f3:81:47:09:c1:
af:c6:1b:dd:11:ca:68:ca:b8:bb:9a:29:d2:ec:e6:
91:a6:e2:cb:28:37:cb:33:c0:db:ae:94:78:07:40:
75:67:b2:d9:80:8a:27:bf:f0:90:1c:73:f0:a6:0b:
78:78:ed:40:a4:e7:09:47:d9:1a:79:95:60:5c:a5:
50:f6:82:f2:98:35:44:41:88:a4:c4:bb:6c:c6:93:
b9:72:63:c5:c1:c0:0a:d8:f0:57:b3:41:d8:ac:89:
35:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:17:34:75:D0:CB:7B:DF:0C:D6:A8:C2:3E:BE:96:10:19:22:FC:93
X509v3 Authority Key Identifier:
keyid:B9:B8:7B:3B:09:CC:B6:9A:6D:E2:04:68:E9:0E:CB:B1:8F:5E:CB:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/hRc0ddDLe98M1qjCPr6WEBki_JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/00ddaf-3be5-420d-919f-3b4cb975a9bc/1/ubh7OwnMtppt4gRo6Q7LsY9ey7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.9.0/24
Signature Algorithm: sha256WithRSAEncryption
19:1d:49:18:b3:56:d3:09:d3:42:f4:98:c5:49:d6:e3:e7:fe:
9e:43:50:6e:9c:ec:63:04:76:e3:34:dd:20:be:a1:73:5d:4d:
d8:65:2d:1d:98:55:36:b4:03:a8:8a:3f:c7:90:b5:f9:6b:5e:
47:68:e5:fe:25:5e:33:2d:aa:77:db:b1:da:5a:cc:15:f0:27:
91:a9:f6:3b:0d:ce:5a:86:3b:af:0f:27:b3:9b:4a:81:ee:20:
95:83:0d:b2:31:7f:09:1a:55:bc:af:ae:da:81:fb:c3:41:af:
97:bc:8a:af:05:00:51:a6:b3:bd:63:77:e7:db:c9:4f:73:96:
54:f5:30:e5:71:a4:15:cf:02:3c:a1:4b:76:56:0c:34:c3:4b:
71:d2:50:19:36:63:04:36:da:6f:b8:b9:73:0f:4d:a0:d9:45:
89:20:ff:80:05:8b:bd:bb:98:39:3d:36:cc:30:8b:af:63:fc:
91:8c:d2:ff:5d:70:b8:6a:39:58:1f:a9:6a:fb:a6:0c:1f:30:
4c:75:96:d9:09:86:e9:1c:07:29:5b:7f:46:c4:d1:f7:2a:4b:
28:87:54:cd:f6:8f:03:15:e0:f4:b3:0f:86:a7:0b:05:eb:77:
a4:99:5c:7f:f9:89:16:ea:21:4f:7e:e1:18:e4:6a:d5:77:f6:
93:aa:7d:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIcSCn70eWYjDjrFNZBqRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Yjg3YjNiMDljY2I2OWE2ZGUyMDQ2OGU5MGVjYmIxOGY1
ZWNiYjYwHhcNMjQwMTAyMDQzMTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NTE3MzQ3NWQwY2I3YmRmMGNkNmE4YzIzZWJlOTYxMDE5MjJmYzkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshnJ8YjVWeAjqvnytwGQhlGvssNt
M1CBLKJyM7mY/d1dxygbZ63Fqc5IdzP3lrpLNe6SpqUZXPesQhwkPbIlsXs+S0ih
yBpR7jVH1gq8JaCsIOrTe3L1wautMWMgnxlnIuQ4ZHZtSEMwrKDPLy4dT3zIW76B
4mb9T331a6poe6bUafwqWCVjyUVoWuEUV002QnK0Cs5ahCYjqt5uST6t84FHCcGv
xhvdEcpoyri7minS7OaRpuLLKDfLM8DbrpR4B0B1Z7LZgIonv/CQHHPwpgt4eO1A
pOcJR9kaeZVgXKVQ9oLymDVEQYikxLtsxpO5cmPFwcAK2PBXs0HYrIk1awIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIUXNHXQy3vfDNaowj6+lhAZIvyTMB8GA1UdIwQY
MBaAFLm4ezsJzLaabeIEaOkOy7GPXsu2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYt
M2I0Y2I5NzVhOWJjLzEvaFJjMGRkRExlOThNMXFqQ1ByNldFQmtpX0pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wMGRkYWYtM2JlNS00MjBkLTkxOWYtM2I0Y2I5NzVhOWJj
LzEvdWJoN093bk10cHB0NGdSbzZRN0xzWTlleTdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuTAJMA0G
CSqGSIb3DQEBCwUAA4IBAQAZHUkYs1bTCdNC9JjFSdbj5/6eQ1BunOxjBHbjNN0g
vqFzXU3YZS0dmFU2tAOoij/HkLX5a15HaOX+JV4zLap327HaWswV8CeRqfY7Dc5a
hjuvDyezm0qB7iCVgw2yMX8JGlW8r67agfvDQa+XvIqvBQBRprO9Y3fn28lPc5ZU
9TDlcaQVzwI8oUt2Vgw0w0tx0lAZNmMENtpvuLlzD02g2UWJIP+ABYu9u5g5PTbM
MIuvY/yRjNL/XXC4ajlYH6lq+6YMHzBMdZbZCYbpHAcpW39GxNH3Kksoh1TN9o8D
FeD0sw+GpwsF63ekmVx/+YkW6iFPfuEY5GrVd/aTqn3o
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:31:01 2024 by rpki-client on console-ams.rpki-client.org