Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/9QRW12AlJbJzZNLWibmUsSU1CH4.roa
File: 9QRW12AlJbJzZNLWibmUsSU1CH4.roa (raw, json)
Hash identifier: wmiQcwNpxbz23pFaazmn8bEHpiKpn3qmzW21xr9oG+g=
Subject key identifier: F5:04:56:D7:60:25:25:B2:73:64:D2:D6:89:B9:94:B1:25:35:08:7E
Certificate issuer: /CN=95b30111b0b720a209f788c8b90f60380b465c2e
Certificate serial: 018CC26CF7FEDA98C3FC50281AB800F2E0A4
Authority key identifier: 95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/9QRW12AlJbJzZNLWibmUsSU1CH4.roa
Signing time: Mon 01 Jan 2024 00:29:30 +0000
ROA not before: Mon 01 Jan 2024 00:29:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202754
IP address blocks: 185.153.16.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:f7:fe:da:98:c3:fc:50:28:1a:b8:00:f2:e0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95b30111b0b720a209f788c8b90f60380b465c2e
Validity
Not Before: Jan 1 00:29:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f50456d7602525b27364d2d689b994b12535087e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:9f:69:79:6a:57:fb:10:8e:20:a2:9e:93:
af:35:67:e0:24:7b:ec:2f:f4:04:95:3c:08:a4:22:
74:ae:7b:4d:b4:b5:8a:d0:14:2e:50:93:c3:18:f9:
40:7a:82:32:63:78:72:cd:90:b0:7b:c8:7b:d5:0d:
9b:6f:f7:92:e8:54:7c:60:41:96:06:44:56:eb:a5:
14:16:5b:00:a9:ba:7c:c1:1c:bb:75:e3:d0:39:bb:
61:02:6d:da:05:cc:d0:88:80:f8:40:64:e6:b8:1f:
13:83:2a:3b:e3:ab:f7:bd:5e:09:2e:15:cd:c2:05:
60:8d:4d:f6:8c:00:96:6a:e0:40:dd:fc:2d:6c:54:
8f:67:65:fc:1e:bb:5f:ad:41:dd:22:7f:4c:38:3e:
cc:06:6e:3b:f8:ed:70:54:54:f0:58:67:76:13:d9:
1c:e0:bc:a2:3a:4e:2a:ba:98:e1:61:1c:31:d6:f3:
41:f3:04:a9:e7:e4:02:b2:d0:0e:b6:cd:d9:c3:75:
c2:3a:e5:da:a7:0e:0f:82:54:7c:78:5a:94:39:cb:
96:13:15:e9:46:92:13:61:60:f8:4c:85:77:59:13:
67:ee:b8:80:f8:e9:72:fe:a0:b4:bc:d1:f1:12:d4:
66:3d:17:25:aa:de:3f:d7:96:e7:b1:54:d1:b4:cd:
17:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:04:56:D7:60:25:25:B2:73:64:D2:D6:89:B9:94:B1:25:35:08:7E
X509v3 Authority Key Identifier:
keyid:95:B3:01:11:B0:B7:20:A2:09:F7:88:C8:B9:0F:60:38:0B:46:5C:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/9QRW12AlJbJzZNLWibmUsSU1CH4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/03bf28-c55d-4c7a-91bb-91646bf0153d/1/lbMBEbC3IKIJ94jIuQ9gOAtGXC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.16.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:1c:97:11:4e:42:2b:94:34:72:e2:5f:e9:05:ba:02:8a:32:
ad:71:69:c9:52:f7:c5:53:b9:49:0f:db:5a:84:28:c8:69:65:
aa:2d:85:12:ce:16:5e:dd:82:36:eb:d4:6b:0a:93:bf:0f:75:
03:3d:0b:ff:dc:79:85:2c:62:f2:f4:65:47:d9:c1:29:b7:b5:
38:93:54:a9:24:33:d5:db:33:08:e0:6b:5a:68:90:bf:7a:08:
8b:60:bb:51:ef:27:da:7e:53:23:8c:23:08:66:d6:6a:ea:22:
4c:c0:ee:aa:fd:6c:bd:7f:e8:63:7d:51:3c:1c:91:f1:8c:d5:
b7:f4:c7:82:aa:34:f6:35:97:0e:a0:1f:6d:7e:de:6b:a6:a7:
ee:a5:cf:3e:17:aa:58:80:39:2c:5d:41:57:ae:96:ab:c4:95:
96:db:2d:e8:ce:2d:e5:42:38:c9:59:d7:2b:b9:71:90:39:e7:
74:7f:3d:15:a0:68:92:30:ef:63:fe:ab:79:57:6e:ab:7c:1a:
23:5a:a0:2f:80:8b:18:85:f3:1d:36:6c:d7:13:ee:cf:d7:1e:
81:34:34:28:d5:f9:f6:a6:df:69:c7:62:b5:b3:f7:02:64:d1:
0d:a4:c9:fd:b5:f8:32:5d:bc:4a:49:9b:94:5a:29:5c:a5:00:
cd:56:05:c2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbPf+2pjD/FAoGrgA8uCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1YjMwMTExYjBiNzIwYTIwOWY3ODhjOGI5MGY2MDM4MGI0
NjVjMmUwHhcNMjQwMTAxMDAyOTMwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTA0NTZkNzYwMjUyNWIyNzM2NGQyZDY4OWI5OTRiMTI1MzUwODdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcWfaXlqV/sQjiCinpOvNWfgJHvs
L/QElTwIpCJ0rntNtLWK0BQuUJPDGPlAeoIyY3hyzZCwe8h71Q2bb/eS6FR8YEGW
BkRW66UUFlsAqbp8wRy7dePQObthAm3aBczQiID4QGTmuB8Tgyo746v3vV4JLhXN
wgVgjU32jACWauBA3fwtbFSPZ2X8HrtfrUHdIn9MOD7MBm47+O1wVFTwWGd2E9kc
4LyiOk4qupjhYRwx1vNB8wSp5+QCstAOts3Zw3XCOuXapw4PglR8eFqUOcuWExXp
RpITYWD4TIV3WRNn7riA+Oly/qC0vNHxEtRmPRclqt4/15bnsVTRtM0XxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPUEVtdgJSWyc2TS1om5lLElNQh+MB8GA1UdIwQY
MBaAFJWzARGwtyCiCfeIyLkPYDgLRlwuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmIt
OTE2NDZiZjAxNTNkLzEvOVFSVzEyQWxKYkp6Wk5MV2libVVzU1UxQ0g0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8wM2JmMjgtYzU1ZC00YzdhLTkxYmItOTE2NDZiZjAxNTNk
LzEvbGJNQkViQzNJS0lKOTRqSXVROWdPQXRHWEM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZkQMA0G
CSqGSIb3DQEBCwUAA4IBAQC/HJcRTkIrlDRy4l/pBboCijKtcWnJUvfFU7lJD9ta
hCjIaWWqLYUSzhZe3YI269RrCpO/D3UDPQv/3HmFLGLy9GVH2cEpt7U4k1SpJDPV
2zMI4GtaaJC/egiLYLtR7yfaflMjjCMIZtZq6iJMwO6q/Wy9f+hjfVE8HJHxjNW3
9MeCqjT2NZcOoB9tft5rpqfupc8+F6pYgDksXUFXrparxJWW2y3ozi3lQjjJWdcr
uXGQOed0fz0VoGiSMO9j/qt5V26rfBojWqAvgIsYhfMdNmzXE+7P1x6BNDQo1fn2
pt9px2K1s/cCZNENpMn9tfgyXbxKSZuUWilcpQDNVgXC
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:24 2024 by rpki-client on console-fra.rpki-client.org