Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/6q0LaC4YNYyQkaBfOhszq_qj3-o.roa
File: 6q0LaC4YNYyQkaBfOhszq_qj3-o.roa (raw, json)
Hash identifier: /4t/3GVjdjVQuW69c5azDmQDdtUxhDuphG30pEM9LG8=
Subject key identifier: EA:AD:0B:68:2E:18:35:8C:90:91:A0:5F:3A:1B:33:AB:FA:A3:DF:EA
Certificate issuer: /CN=866dee727e83997c0203c0f718d33b93d77d821d
Certificate serial: 018CC64A6C05818701D783B7149C31676002
Authority key identifier: 86:6D:EE:72:7E:83:99:7C:02:03:C0:F7:18:D3:3B:93:D7:7D:82:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hm3ucn6DmXwCA8D3GNM7k9d9gh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/6q0LaC4YNYyQkaBfOhszq_qj3-o.roa
Signing time: Mon 01 Jan 2024 18:30:15 +0000
ROA not before: Mon 01 Jan 2024 18:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 195.64.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/hm3ucn6DmXwCA8D3GNM7k9d9gh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/hm3ucn6DmXwCA8D3GNM7k9d9gh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hm3ucn6DmXwCA8D3GNM7k9d9gh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Apr 2024 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:6c:05:81:87:01:d7:83:b7:14:9c:31:67:60:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=866dee727e83997c0203c0f718d33b93d77d821d
Validity
Not Before: Jan 1 18:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaad0b682e18358c9091a05f3a1b33abfaa3dfea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:70:b5:e7:47:c1:e7:25:a7:99:fc:0c:f5:91:
9e:a2:0c:c7:68:59:ca:91:1b:4a:ae:70:95:f2:f0:
9a:31:dc:5e:9f:ae:19:85:a1:91:55:2f:f2:8b:cf:
89:c6:4c:c3:33:4d:29:fa:a2:59:9b:fc:7a:70:91:
97:a6:ad:3a:8b:5e:38:4a:86:b2:6b:df:69:71:bf:
04:9c:b3:5c:7b:0d:b5:70:44:29:dc:96:a9:67:2d:
66:81:01:5f:ec:50:b6:29:fc:96:ff:e4:90:f7:50:
2a:b6:63:38:e8:39:e2:ab:03:39:bd:00:89:ad:d2:
e6:23:aa:63:d7:a4:dd:b5:4e:04:3a:7e:d0:ac:cf:
e5:e5:ae:00:b9:be:09:f3:4b:e0:95:0b:ff:00:ca:
29:3f:77:92:49:27:3e:2a:29:40:5e:56:14:5a:5e:
cc:f3:4d:3a:64:a6:fc:1e:46:92:43:42:47:67:97:
60:a7:fc:5d:ee:3e:cd:e6:45:fd:ef:f0:82:e4:af:
6f:c7:4b:02:44:ec:b5:c8:af:a6:d7:ac:8e:e5:b2:
53:5d:9f:b9:27:53:e8:92:2f:74:9f:e3:09:3a:fd:
10:44:e3:52:ad:b1:90:51:49:70:15:a3:35:6b:de:
85:8e:f1:b0:42:c6:e8:2b:77:17:03:11:c5:b9:5c:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:AD:0B:68:2E:18:35:8C:90:91:A0:5F:3A:1B:33:AB:FA:A3:DF:EA
X509v3 Authority Key Identifier:
keyid:86:6D:EE:72:7E:83:99:7C:02:03:C0:F7:18:D3:3B:93:D7:7D:82:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hm3ucn6DmXwCA8D3GNM7k9d9gh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/6q0LaC4YNYyQkaBfOhszq_qj3-o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/b7e78d-67d5-45af-b448-175383e82ef2/1/hm3ucn6DmXwCA8D3GNM7k9d9gh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.64.123.0/24
Signature Algorithm: sha256WithRSAEncryption
48:50:ed:64:a6:4a:ee:60:b5:44:b7:6f:0f:fa:97:3f:a7:fb:
6f:3f:da:15:5b:db:33:07:9c:60:26:03:ae:1f:7a:ad:f5:40:
ea:92:34:f0:02:44:54:22:42:b8:cc:a0:ec:99:ee:a3:5a:7e:
a1:a2:13:70:db:68:6b:a2:bb:db:0f:a9:40:f9:c3:75:a8:b0:
82:77:7c:7e:e2:74:ff:2c:17:2b:09:d9:48:66:24:1a:b8:d6:
db:80:c7:85:bc:bd:d6:62:1e:1f:59:27:0a:0b:16:91:53:f1:
59:77:25:9a:40:59:4e:1d:13:0b:7d:9f:e9:fa:11:f3:ab:3b:
86:5b:44:41:62:6e:26:f1:22:9c:10:0a:6a:d0:75:d0:32:fd:
d3:ae:87:bd:bc:4e:02:db:22:97:73:9b:cc:e9:6f:66:ae:3b:
a1:7f:9d:b3:e4:b8:93:ff:0b:20:52:df:75:59:d4:17:06:0c:
fa:e4:8b:86:4c:0e:08:5a:28:67:df:c6:87:77:ae:ba:fa:00:
9a:12:4f:22:56:7e:d9:b7:1c:8c:2b:fb:cb:94:05:be:d8:cc:
f8:bc:50:5d:89:c3:05:23:08:03:f9:d3:44:cd:97:c9:97:4c:
05:60:ab:dc:b5:4d:d2:b9:20:4f:6e:88:b8:84:37:1c:dd:0b:
34:44:4a:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzGSmwFgYcB14O3FJwxZ2ACMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2NmRlZTcyN2U4Mzk5N2MwMjAzYzBmNzE4ZDMzYjkzZDc3
ZDgyMWQwHhcNMjQwMTAxMTgzMDE1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYWFkMGI2ODJlMTgzNThjOTA5MWEwNWYzYTFiMzNhYmZhYTNkZmVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3C150fB5yWnmfwM9ZGeogzHaFnK
kRtKrnCV8vCaMdxen64ZhaGRVS/yi8+JxkzDM00p+qJZm/x6cJGXpq06i144Soay
a99pcb8EnLNcew21cEQp3JapZy1mgQFf7FC2KfyW/+SQ91AqtmM46DniqwM5vQCJ
rdLmI6pj16TdtU4EOn7QrM/l5a4Aub4J80vglQv/AMopP3eSSSc+KilAXlYUWl7M
8006ZKb8HkaSQ0JHZ5dgp/xd7j7N5kX97/CC5K9vx0sCROy1yK+m16yO5bJTXZ+5
J1Poki90n+MJOv0QRONSrbGQUUlwFaM1a96FjvGwQsboK3cXAxHFuVzX3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOqtC2guGDWMkJGgXzobM6v6o9/qMB8GA1UdIwQY
MBaAFIZt7nJ+g5l8AgPA9xjTO5PXfYIdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaG0zdWNuNkRtWHdDQThEM0dOTTdrOWQ5Z2gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9iN2U3OGQtNjdkNS00NWFmLWI0NDgt
MTc1MzgzZTgyZWYyLzEvNnEwTGFDNFlOWXlRa2FCZk9oc3pxX3FqMy1vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9iN2U3OGQtNjdkNS00NWFmLWI0NDgtMTc1MzgzZTgyZWYy
LzEvaG0zdWNuNkRtWHdDQThEM0dOTTdrOWQ5Z2gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAw0B7MA0G
CSqGSIb3DQEBCwUAA4IBAQBIUO1kpkruYLVEt28P+pc/p/tvP9oVW9szB5xgJgOu
H3qt9UDqkjTwAkRUIkK4zKDsme6jWn6hohNw22hrorvbD6lA+cN1qLCCd3x+4nT/
LBcrCdlIZiQauNbbgMeFvL3WYh4fWScKCxaRU/FZdyWaQFlOHRMLfZ/p+hHzqzuG
W0RBYm4m8SKcEApq0HXQMv3Troe9vE4C2yKXc5vM6W9mrjuhf52z5LiT/wsgUt91
WdQXBgz65IuGTA4IWihn38aHd666+gCaEk8iVn7ZtxyMK/vLlAW+2Mz4vFBdicMF
IwgD+dNEzZfJl0wFYKvctU3SuSBPboi4hDcc3Qs0REpK
-----END CERTIFICATE-----
Generated at Mon Apr 29 11:00:35 2024 by rpki-client on console-ams.rpki-client.org