Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/c71Dts5WhSG_wf8zyc402QYiWX0.roa
File: c71Dts5WhSG_wf8zyc402QYiWX0.roa (raw, json)
Hash identifier: fhxNELE227f6HXbzdhTgzVB6ecVSWyFgeOrdgt5YKXQ=
Subject key identifier: 73:BD:43:B6:CE:56:85:21:BF:C1:FF:33:C9:CE:34:D9:06:22:59:7D
Certificate issuer: /CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Certificate serial: 018CC2DAEA52C3B6305263EC13DED56FE89D
Authority key identifier: 03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/c71Dts5WhSG_wf8zyc402QYiWX0.roa
Signing time: Mon 01 Jan 2024 02:29:35 +0000
ROA not before: Mon 01 Jan 2024 02:29:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39543
IP address blocks: 194.150.85.0/24 maxlen: 24
194.150.84.0/22 maxlen: 22
194.150.84.0/23 maxlen: 23
194.150.84.0/24 maxlen: 24
194.150.86.0/24 maxlen: 24
194.150.86.0/23 maxlen: 23
194.150.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 04:03:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ea:52:c3:b6:30:52:63:ec:13:de:d5:6f:e8:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e85fa4be66942e5909fd3a1fd4a0c26e36a0d2
Validity
Not Before: Jan 1 02:29:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73bd43b6ce568521bfc1ff33c9ce34d90622597d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2d:30:f3:8e:8a:84:03:7e:b3:7a:06:98:77:
51:e2:67:c9:5a:9a:e9:01:c9:0e:f6:a8:7c:9a:6a:
d7:d8:4c:cd:08:23:ce:7d:43:55:ae:6e:14:77:45:
73:d2:2a:8e:d3:87:36:0c:c1:37:fd:d8:32:de:f0:
d2:5f:27:34:4b:5b:95:1c:28:c4:29:79:8c:1c:9e:
e0:e1:01:65:e1:99:da:91:d6:c5:4d:b5:28:10:19:
df:36:83:6c:d9:e2:5a:de:58:df:85:96:6a:a7:9a:
d1:03:8a:fa:a0:58:9f:a0:b0:00:e5:58:bb:f6:a0:
91:61:66:bb:26:65:8c:29:f4:3b:38:13:e5:c4:4c:
e0:b2:93:e8:e4:7e:17:23:80:d4:0e:c3:90:02:24:
bc:ed:4e:4d:88:88:f4:37:06:5e:55:dd:9f:a8:3f:
6e:2c:5c:93:30:78:fc:4d:8d:da:f3:39:33:17:f2:
49:6b:20:5c:52:44:48:fa:4e:cb:1c:7d:cf:a6:b2:
2d:be:4b:42:f6:df:f2:d5:43:80:04:59:fe:07:24:
9e:bc:5b:5d:c9:43:b3:ec:72:2a:5e:94:a9:62:fa:
bb:ad:b8:18:ff:be:64:63:73:12:ee:a0:99:ab:07:
05:3a:d1:65:f2:13:9a:95:26:ba:da:a1:05:63:a5:
31:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BD:43:B6:CE:56:85:21:BF:C1:FF:33:C9:CE:34:D9:06:22:59:7D
X509v3 Authority Key Identifier:
keyid:03:E8:5F:A4:BE:66:94:2E:59:09:FD:3A:1F:D4:A0:C2:6E:36:A0:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-hfpL5mlC5ZCf06H9Sgwm42oNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/c71Dts5WhSG_wf8zyc402QYiWX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a27329-3ecf-4885-a773-58e5b76bebb7/1/A-hfpL5mlC5ZCf06H9Sgwm42oNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.84.0/22
Signature Algorithm: sha256WithRSAEncryption
92:8a:75:48:f9:de:a6:93:f2:fd:d3:fb:39:35:9c:07:55:2c:
48:12:c5:63:6e:ea:a7:55:37:06:39:e8:a6:fe:86:6d:0f:1c:
61:08:2c:69:2c:4d:21:cb:a6:f4:3d:49:d9:c5:84:2f:2a:38:
6c:0b:34:be:fa:a7:16:f2:71:a1:33:fd:5f:e1:5d:b9:0b:b5:
a4:04:90:13:c8:82:2c:d1:83:71:87:10:4a:6e:0a:6e:bb:93:
a7:b8:3b:29:3d:40:58:07:ff:af:40:67:d1:22:48:23:ff:80:
e8:b4:12:dc:17:13:f1:fb:29:d9:a7:3e:a0:e9:b6:19:ee:a5:
89:f9:61:ee:8d:89:f6:16:54:9a:4b:a6:a4:1c:89:3b:c7:96:
b6:dc:a0:cd:e0:85:19:7a:3d:e5:28:82:e8:33:8f:d5:ce:0a:
ff:ef:2b:4a:00:bb:5f:89:d4:f8:f3:17:d6:ae:62:eb:fb:4f:
b2:81:6e:9c:49:e0:9d:b9:f7:03:66:13:a5:c3:8c:a4:bf:eb:
be:ad:93:22:6d:9a:43:bb:94:d0:b2:aa:d7:95:bf:15:97:de:
28:34:d3:7f:8e:5b:06:1a:f7:f9:f7:a9:e7:40:5e:09:6e:d1:
80:62:df:70:98:a1:58:d1:c8:ef:25:95:33:2f:ab:8e:eb:bd:
cb:c6:dc:41
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzC2upSw7YwUmPsE97Vb+idMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzZTg1ZmE0YmU2Njk0MmU1OTA5ZmQzYTFmZDRhMGMyNmUz
NmEwZDIwHhcNMjQwMTAxMDIyOTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3M2JkNDNiNmNlNTY4NTIxYmZjMWZmMzNjOWNlMzRkOTA2MjI1OTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi0w846KhAN+s3oGmHdR4mfJWprp
AckO9qh8mmrX2EzNCCPOfUNVrm4Ud0Vz0iqO04c2DME3/dgy3vDSXyc0S1uVHCjE
KXmMHJ7g4QFl4ZnakdbFTbUoEBnfNoNs2eJa3ljfhZZqp5rRA4r6oFifoLAA5Vi7
9qCRYWa7JmWMKfQ7OBPlxEzgspPo5H4XI4DUDsOQAiS87U5NiIj0NwZeVd2fqD9u
LFyTMHj8TY3a8zkzF/JJayBcUkRI+k7LHH3PprItvktC9t/y1UOABFn+BySevFtd
yUOz7HIqXpSpYvq7rbgY/75kY3MS7qCZqwcFOtFl8hOalSa62qEFY6UxIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHO9Q7bOVoUhv8H/M8nONNkGIll9MB8GA1UdIwQY
MBaAFAPoX6S+ZpQuWQn9Oh/UoMJuNqDSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMjczMjktM2VjZi00ODg1LWE3NzMt
NThlNWI3NmJlYmI3LzEvYzcxRHRzNVdoU0dfd2Y4enljNDAyUVlpV1gwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMjczMjktM2VjZi00ODg1LWE3NzMtNThlNWI3NmJlYmI3
LzEvQS1oZnBMNW1sQzVaQ2YwNkg5U2d3bTQyb05JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwpZUMA0G
CSqGSIb3DQEBCwUAA4IBAQCSinVI+d6mk/L90/s5NZwHVSxIEsVjbuqnVTcGOeim
/oZtDxxhCCxpLE0hy6b0PUnZxYQvKjhsCzS++qcW8nGhM/1f4V25C7WkBJATyIIs
0YNxhxBKbgpuu5OnuDspPUBYB/+vQGfRIkgj/4DotBLcFxPx+ynZpz6g6bYZ7qWJ
+WHujYn2FlSaS6akHIk7x5a23KDN4IUZej3lKILoM4/Vzgr/7ytKALtfidT48xfW
rmLr+0+ygW6cSeCdufcDZhOlw4ykv+u+rZMibZpDu5TQsqrXlb8Vl94oNNN/jlsG
Gvf596nnQF4JbtGAYt9wmKFY0cjvJZUzL6uO673LxtxB
-----END CERTIFICATE-----
Generated at Tue May 28 09:11:45 2024 by rpki-client on console-ams.rpki-client.org