Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/6YT4HTz7ECbe-0eGL_tXbPe3XFQ.roa
File: 6YT4HTz7ECbe-0eGL_tXbPe3XFQ.roa (raw, json)
Hash identifier: NSHe6a7U/DchcS3u+gul922cYTgw3+z7D8bqByVBJrA=
Subject key identifier: E9:84:F8:1D:3C:FB:10:26:DE:FB:47:86:2F:FB:57:6C:F7:B7:5C:54
Certificate issuer: /CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Certificate serial: 018CC26D30A2FE692C5F58A9D8C3F220A11B
Authority key identifier: A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/6YT4HTz7ECbe-0eGL_tXbPe3XFQ.roa
Signing time: Mon 01 Jan 2024 00:29:44 +0000
ROA not before: Mon 01 Jan 2024 00:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12319
IP address blocks: 82.116.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:30:a2:fe:69:2c:5f:58:a9:d8:c3:f2:20:a1:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81b324ec026121ffe5dca77f0e94a6c087e70d2
Validity
Not Before: Jan 1 00:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e984f81d3cfb1026defb47862ffb576cf7b75c54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:24:7e:60:28:3a:86:25:df:30:f4:06:7b:d0:
e7:a0:f7:6a:75:39:d4:6d:98:99:cc:6c:f6:a0:10:
e3:3e:01:e7:df:aa:f0:1e:b0:11:7f:7b:e5:cb:25:
59:4e:4d:02:e7:6a:bf:b6:87:a9:4e:cf:e7:4f:76:
d8:9d:06:56:62:ef:78:1e:ba:90:2a:72:2e:09:57:
69:e6:bd:9e:fb:67:55:70:a3:d4:06:8a:4d:91:f9:
ad:0b:97:cb:81:d6:ed:08:d8:7e:3d:43:47:0d:69:
8e:c7:23:6b:e6:a5:dd:e7:a3:a4:de:ee:56:73:dd:
44:d8:21:f4:f3:33:00:e7:d7:4d:94:d3:7f:ef:26:
80:e8:57:46:80:bf:b3:28:09:53:98:dc:6a:b5:86:
7f:16:5e:09:85:c0:9d:1a:a6:3f:4f:d4:e9:b7:06:
9c:77:50:74:30:2f:aa:1e:25:e5:20:df:81:87:53:
60:a2:5c:2c:e0:2c:08:d8:ba:c6:d7:dc:67:78:45:
71:b7:27:74:b3:06:3d:97:06:b9:3e:5f:0d:06:58:
1d:bc:e5:40:4e:44:e3:d2:85:0a:c3:64:aa:99:df:
7a:04:fe:61:f9:59:cc:8a:37:26:ef:70:31:4b:f1:
50:d6:67:0e:07:02:29:41:4a:73:c3:3d:30:8a:e3:
49:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:84:F8:1D:3C:FB:10:26:DE:FB:47:86:2F:FB:57:6C:F7:B7:5C:54
X509v3 Authority Key Identifier:
keyid:A8:1B:32:4E:C0:26:12:1F:FE:5D:CA:77:F0:E9:4A:6C:08:7E:70:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBsyTsAmEh_-Xcp38OlKbAh-cNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/6YT4HTz7ECbe-0eGL_tXbPe3XFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/119b31-774c-4a40-87a0-758fba5a3951/1/qBsyTsAmEh_-Xcp38OlKbAh-cNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.116.160.0/19
Signature Algorithm: sha256WithRSAEncryption
0c:51:7f:c8:a4:7e:cf:03:56:5e:ba:be:0c:18:78:ad:c6:35:
58:65:d9:2e:1a:0f:7a:df:b9:f5:b0:2d:b9:1c:20:e3:c4:b1:
a6:4a:97:fa:bf:5d:ac:8d:dd:0e:b1:68:e1:7c:65:0e:63:9c:
52:c7:36:0b:dc:85:27:21:83:c6:09:81:a7:b2:d8:c1:1a:73:
72:ba:84:82:51:d2:fb:be:df:9a:d5:40:59:9f:fe:e4:8f:cd:
f8:fc:95:0f:03:c7:55:a9:f6:5c:dd:e2:06:a9:47:63:09:a0:
1c:70:8e:73:56:cb:02:d3:df:32:93:d1:17:38:02:37:81:3f:
e2:9d:16:dc:70:f4:a4:f8:1e:9c:34:bf:5c:9a:ae:6c:78:78:
48:05:05:ee:e9:fc:b8:98:a9:44:82:a9:14:b8:00:1d:25:5e:
6e:3e:cd:ae:d1:e0:ff:bb:5f:cf:c3:4c:7d:50:62:41:92:f9:
47:4d:ea:ed:f8:24:58:cc:c0:d6:dc:0b:62:dc:05:9a:5c:b3:
c8:28:e8:e3:cb:4d:df:a2:2d:7b:a9:fd:28:6f:1b:a7:02:37:
a4:a7:9e:91:57:9c:6f:e8:cb:56:a5:4c:05:d5:83:cb:ab:1f:
a4:db:ee:2d:07:0e:21:47:36:7c:bb:a6:ae:e3:a7:06:1f:79:
ae:fd:b6:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbTCi/mksX1ip2MPyIKEbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4MWIzMjRlYzAyNjEyMWZmZTVkY2E3N2YwZTk0YTZjMDg3
ZTcwZDIwHhcNMjQwMTAxMDAyOTQ0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlOTg0ZjgxZDNjZmIxMDI2ZGVmYjQ3ODYyZmZiNTc2Y2Y3Yjc1YzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CR+YCg6hiXfMPQGe9DnoPdqdTnU
bZiZzGz2oBDjPgHn36rwHrARf3vlyyVZTk0C52q/toepTs/nT3bYnQZWYu94HrqQ
KnIuCVdp5r2e+2dVcKPUBopNkfmtC5fLgdbtCNh+PUNHDWmOxyNr5qXd56Ok3u5W
c91E2CH08zMA59dNlNN/7yaA6FdGgL+zKAlTmNxqtYZ/Fl4JhcCdGqY/T9Tptwac
d1B0MC+qHiXlIN+Bh1Ngolws4CwI2LrG19xneEVxtyd0swY9lwa5Pl8NBlgdvOVA
TkTj0oUKw2Sqmd96BP5h+VnMijcm73AxS/FQ1mcOBwIpQUpzwz0wiuNJFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOmE+B08+xAm3vtHhi/7V2z3t1xUMB8GA1UdIwQY
MBaAFKgbMk7AJhIf/l3Kd/DpSmwIfnDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUJzeVRzQW1FaF8tWGNwMzhPbEtiQWgtY05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xMTliMzEtNzc0Yy00YTQwLTg3YTAt
NzU4ZmJhNWEzOTUxLzEvNllUNEhUejdFQ2JlLTBlR0xfdFhiUGUzWEZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xMTliMzEtNzc0Yy00YTQwLTg3YTAtNzU4ZmJhNWEzOTUx
LzEvcUJzeVRzQW1FaF8tWGNwMzhPbEtiQWgtY05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFUnSgMA0G
CSqGSIb3DQEBCwUAA4IBAQAMUX/IpH7PA1Zeur4MGHitxjVYZdkuGg9637n1sC25
HCDjxLGmSpf6v12sjd0OsWjhfGUOY5xSxzYL3IUnIYPGCYGnstjBGnNyuoSCUdL7
vt+a1UBZn/7kj834/JUPA8dVqfZc3eIGqUdjCaAccI5zVssC098yk9EXOAI3gT/i
nRbccPSk+B6cNL9cmq5seHhIBQXu6fy4mKlEgqkUuAAdJV5uPs2u0eD/u1/Pw0x9
UGJBkvlHTert+CRYzMDW3Ati3AWaXLPIKOjjy03foi17qf0obxunAjekp56RV5xv
6MtWpUwF1YPLqx+k2+4tBw4hRzZ8u6au46cGH3mu/baK
-----END CERTIFICATE-----
Generated at Fri Jun 7 22:34:19 2024 by rpki-client on console-ams.rpki-client.org